last executing test programs: 27m27.264107023s ago: executing program 3 (id=2488): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x2) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0xf7, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001300)="976c0180000000000000", 0x56}], 0x1}, 0x4004000) 27m27.17619122s ago: executing program 3 (id=2489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000440)=[{0x2, 0x10000022, {0x1, 0x0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0x1}, {0x0, 0x3, {0x0, 0x1}, {0x2, 0x1, 0x2}, 0x2, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xfff2}, {0x10, 0xffe0}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 27m26.960952096s ago: executing program 3 (id=2491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0xc00e805) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) 27m26.83155734s ago: executing program 3 (id=2493): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 27m26.695887435s ago: executing program 3 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) r8 = syz_clone(0x8401e011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) kcmp(0x0, r8, 0x5, r3, r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000bc00088080000080240002007b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf1080009800400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392224000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000300070000003800008024000100000000000000000000000000000000000000000000000000000000000000000006000500ff7f000004000980040009661400020077673000"/222], 0xe4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) 27m26.431077508s ago: executing program 3 (id=2497): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r0, 0xffffffffffffffff, 0x0) 27m26.036516187s ago: executing program 32 (id=2497): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r0, 0xffffffffffffffff, 0x0) 2m19.99045501s ago: executing program 4 (id=9935): request_key(0x0, 0x0, &(0x7f0000000080)='\x00', 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2m19.694490616s ago: executing program 4 (id=9939): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x5, [0x2, 0xffff133a, 0x2], [{0x0, 0x7}, {0x1, 0xffffffff}, {0x0, 0x400ffff}, {0x7, 0x651}, {0x1}, {0xcde5}, {0x1}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0xd, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2m19.561424761s ago: executing program 4 (id=9940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sndctrl(&(0x7f0000000240), 0x805, 0x88400) syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x40002) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) close_range(r0, 0xffffffffffffffff, 0x0) 2m17.161201474s ago: executing program 5 (id=9953): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup2(r1, r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) 2m16.45942692s ago: executing program 4 (id=9957): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m16.344999079s ago: executing program 4 (id=9960): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 2m16.156227934s ago: executing program 4 (id=9962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$FUSE(r4, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0xff, 0x6, '9P2000'}, 0x13) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314770026bd7000fbdbdf2509000200f3797a3200000000080041007369770014003300776c616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x48049}, 0x800) 2m15.304401339s ago: executing program 5 (id=9965): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) r1 = epoll_create(0x9b5c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 2m15.202713801s ago: executing program 1 (id=9966): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x5, [0x2, 0xffff133a, 0x2], [{0x0, 0x7}, {0x1, 0xffffffff}, {0x0, 0x400ffff}, {0x7, 0x651}, {0x1}, {0xcde5}, {0x1}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0xd, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2m15.151151109s ago: executing program 1 (id=9967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sndctrl(&(0x7f0000000240), 0x805, 0x88400) syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x40002) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.124251601s ago: executing program 5 (id=9968): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 2m14.238824195s ago: executing program 0 (id=9970): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) tgkill(0x0, r0, 0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r2, 0x25, 0x14, @void}, 0xfffffffffffffdf8) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) fanotify_init(0x8, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000680)) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x6, 0x1, 0x400, 0x7, "9ad7f18bee5970ebb85649ef55e24c", "1012e304", "6ef1fee9", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x3, 0x3, 0x13, 0x6, 0xf1e, 0x6, "991deb753abfea8f408844d477546aef", 0x2, 0x36, 0xe2, 0x7, 0xc, 0xad, 0xee}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2m14.124200458s ago: executing program 2 (id=9972): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x4080) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x480, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x4000, 0x0) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 2m13.575940532s ago: executing program 0 (id=9973): ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 2m13.545309087s ago: executing program 5 (id=9974): mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x2, 0x2) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) removexattr(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f00000009c0)={0x24000, &(0x7f0000000480), &(0x7f0000000780), &(0x7f00000007c0), {0xa}, &(0x7f0000000800)=""/75, 0x4b, 0x0, &(0x7f0000000740)}, 0x58) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r2 = syz_io_uring_setup(0x4d53, &(0x7f00000003c0)={0x0, 0xc858, 0x80, 0x0, 0xffffffff}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) r6 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f8cc0363acd136c4dbd36a0ea6d6660e2d77a4974c1b7556c8656cab273760edd5b1d9eff7ec4afda31f5a5674b3d52ed839274632a02f8a1a4a41d2a51dba9f6ee47d129c46b8d1d9ecdb9228299700b2f55e30cecbcd995ca49cb4cf00", 0x5e}], 0x1}, 0x4000080) ppoll(&(0x7f0000000100)=[{r0, 0x2600}, {0xffffffffffffffff, 0x2046}, {r6, 0x10}], 0x3, 0x0, 0x0, 0x0) 2m13.393808913s ago: executing program 0 (id=9975): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2m13.021934759s ago: executing program 0 (id=9976): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x115}, {&(0x7f00000003c0)}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e5", 0x64}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490", 0x53}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5", 0x6e}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 2m12.722558699s ago: executing program 2 (id=9977): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x860b81) ioctl$EVIOCGPROP(r1, 0x80404509, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x2) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) 2m12.128220351s ago: executing program 0 (id=9978): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x5, [0x2, 0xffff133a, 0x2], [{0x0, 0x7}, {0x1, 0xffffffff}, {0x0, 0x400ffff}, {0x7, 0x651}, {0x1}, {0xcde5}, {0x1}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0xd, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2m11.982672691s ago: executing program 1 (id=9979): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) socket$inet(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000680)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m11.414601067s ago: executing program 5 (id=9980): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) shmctl$SHM_LOCK(r2, 0xb) 2m11.297993001s ago: executing program 2 (id=9981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x0, 0x8, 0x0, 0xfa9a, 0x5, 0x3, 0x1, 0xffffe7cf}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="8000", 0x2, 0x40, 0x0, 0x0) 2m11.250810938s ago: executing program 0 (id=9982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r6, &(0x7f00000005c0)=[{0x2, 0x6, 0x7f, 0x1, @tick=0x3a63, {0x3a}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf8, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$FUSE(r6, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0xff, 0x6, '9P2000'}, 0x13) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314770026bd7000fbdbdf2509000200f3797a3200000000080041007369770014003300776c616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x48049}, 0x800) 2m11.108375405s ago: executing program 1 (id=9983): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(0x0, 0x0) 2m10.980127484s ago: executing program 5 (id=9984): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) pipe(&(0x7f0000000140)) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000200000000000a003d"], 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_io_uring_setup(0x892, &(0x7f0000000340)={0x0, 0x6994, 0x80, 0x0, 0xbfdffffc}, &(0x7f0000000300), 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2m10.90638674s ago: executing program 1 (id=9985): ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 2m10.795827284s ago: executing program 2 (id=9986): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m10.442680785s ago: executing program 1 (id=9987): flock(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x81, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023893) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2m10.22024695s ago: executing program 2 (id=9988): mq_open(0x0, 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) userfaultfd(0x801) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 2m9.689293652s ago: executing program 2 (id=9989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x115}, {&(0x7f00000003c0)}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e5", 0x64}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490", 0x53}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5", 0x6e}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 0s ago: executing program 33 (id=9962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$FUSE(r4, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0xff, 0x6, '9P2000'}, 0x13) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314770026bd7000fbdbdf2509000200f3797a3200000000080041007369770014003300776c616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x48049}, 0x800) kernel console output (not intermixed with test programs): t=1 ip=0xf706ef6c code=0x7ffc0000 [ 2065.477144][ T4681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2065.497413][ T4889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2065.509010][ T29] audit: type=1326 audit(1774937971.028:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 2065.530609][ T4681] 8021q: adding VLAN 0 to HW filter on device team0 [ 2065.542487][ T29] audit: type=1326 audit(1774937971.028:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 2065.551261][ T4889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2065.582942][ T29] audit: type=1326 audit(1774937971.028:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 2065.630908][T28472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.638065][T28472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2065.648417][ T5821] Bluetooth: hci5: command tx timeout [ 2065.659632][T28472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.662655][ T4929] netlink: 488 bytes leftover after parsing attributes in process `syz.4.9018'. [ 2065.666783][T28472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2065.683423][ T29] audit: type=1326 audit(1774937971.028:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 2065.707917][ T29] audit: type=1326 audit(1774937971.028:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 2065.732194][ T29] audit: type=1326 audit(1774937971.028:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 2065.769692][ T29] audit: type=1326 audit(1774937971.028:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 2065.821927][ T4456] usb 1-1: USB disconnect, device number 7 [ 2065.940252][ T4681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2066.047925][ T4681] veth0_vlan: entered promiscuous mode [ 2066.069479][ T4681] veth1_vlan: entered promiscuous mode [ 2066.087933][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9021'. [ 2066.125470][ T4681] veth0_macvtap: entered promiscuous mode [ 2066.141760][ T4681] veth1_macvtap: entered promiscuous mode [ 2066.183675][ T4681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2066.223300][ T4681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2066.255493][ T2281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.279881][ T2281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.310685][ T2281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.334328][ T2281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.527199][T28472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2066.547427][ T4963] fuse: Invalid uid '00000000000000000003' [ 2066.561220][T28472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2066.659156][ T7073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2066.679268][ T4967] syzkaller0: entered promiscuous mode [ 2066.687154][ T7073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2066.695626][ T4967] syzkaller0: entered allmulticast mode [ 2067.368529][T28859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2067.379136][T28859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2067.387794][T28859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2067.395696][T28859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2067.407132][T28859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2067.557738][ T5000] syzkaller0: entered promiscuous mode [ 2067.575925][ T5000] syzkaller0: entered allmulticast mode [ 2068.596925][ T5034] kvm: pic: level sensitive irq not supported [ 2068.596977][ T5034] kvm: pic: level sensitive irq not supported [ 2068.613382][ T5034] kvm: pic: level sensitive irq not supported [ 2068.619679][ T5034] kvm: pic: level sensitive irq not supported [ 2069.486803][ T5821] Bluetooth: hci3: command tx timeout [ 2070.454381][ T29] audit: type=1326 audit(1774937976.108:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.477717][ T29] audit: type=1326 audit(1774937976.108:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.502687][ T29] audit: type=1326 audit(1774937976.128:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.527198][ T29] audit: type=1326 audit(1774937976.128:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.550080][ T29] audit: type=1326 audit(1774937976.128:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.574264][ T29] audit: type=1326 audit(1774937976.138:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.601113][ T29] audit: type=1326 audit(1774937976.138:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.623591][ T29] audit: type=1326 audit(1774937976.138:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.646118][ T29] audit: type=1326 audit(1774937976.148:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2070.669091][ T29] audit: type=1326 audit(1774937976.148:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.5.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2071.055434][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9051'. [ 2071.061718][ T5077] syzkaller0: entered promiscuous mode [ 2071.070615][ T5077] syzkaller0: entered allmulticast mode [ 2071.092890][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2071.169784][ T5003] chnl_net:caif_netlink_parms(): no params data found [ 2071.282912][ T5003] bridge0: port 1(bridge_slave_0) entered blocking state [ 2071.296356][ T5003] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.306080][ T5003] bridge_slave_0: entered allmulticast mode [ 2071.557046][ T5821] Bluetooth: hci3: command tx timeout [ 2071.650410][ T5003] bridge_slave_0: entered promiscuous mode [ 2071.664326][ T5098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9055'. [ 2071.675058][ T5098] netlink: 'syz.5.9055': attribute type 2 has an invalid length. [ 2071.758148][ T5003] bridge0: port 2(bridge_slave_1) entered blocking state [ 2071.765643][ T5003] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.773391][ T5003] bridge_slave_1: entered allmulticast mode [ 2071.781667][ T5003] bridge_slave_1: entered promiscuous mode [ 2071.822516][ T5003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2071.835278][ T5003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2071.875058][ T5003] team0: Port device team_slave_0 added [ 2071.890450][ T5003] team0: Port device team_slave_1 added [ 2071.926357][ T5003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2071.933477][ T5003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.988910][ T5003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2072.018845][ T5003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2072.026091][ T5003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2072.053810][ T5003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2072.187837][ T5108] syzkaller0: entered promiscuous mode [ 2072.195229][ T5108] syzkaller0: entered allmulticast mode [ 2072.214358][ T5003] hsr_slave_0: entered promiscuous mode [ 2072.240732][ T5003] hsr_slave_1: entered promiscuous mode [ 2072.264825][ T5003] debugfs: 'hsr0' already exists in 'hsr' [ 2072.277840][ T5003] Cannot create hsr debugfs directory [ 2072.888517][ T5136] netlink: 'syz.0.9071': attribute type 12 has an invalid length. [ 2072.913992][ T5136] netlink: 'syz.0.9071': attribute type 29 has an invalid length. [ 2072.923111][ T5136] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9071'. [ 2072.923597][ T5138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9072'. [ 2072.944573][ T5136] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9071'. [ 2072.964480][ T5138] netlink: 'syz.5.9072': attribute type 2 has an invalid length. [ 2073.085705][ T5003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2073.102102][ T5003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2073.130783][ T5003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2073.170345][ T5003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2073.278645][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9078'. [ 2073.339820][ T5003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2073.357268][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9081'. [ 2073.464523][ T5003] 8021q: adding VLAN 0 to HW filter on device team0 [ 2073.477638][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.484820][T14304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2073.520552][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.527740][T14304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.640278][ T5821] Bluetooth: hci3: command tx timeout [ 2073.651247][ T5003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2073.712196][ T5003] veth0_vlan: entered promiscuous mode [ 2073.800810][ T5003] veth1_vlan: entered promiscuous mode [ 2073.849592][ T5003] veth0_macvtap: entered promiscuous mode [ 2073.860802][ T5003] veth1_macvtap: entered promiscuous mode [ 2073.894521][ T5003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2073.919401][ T5003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2073.928534][ T5195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9091'. [ 2073.949081][ T2281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.967615][ T2283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.013856][ T2283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.022874][ T2283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.154391][T14304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.180871][T14304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.222246][ T2283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.231113][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9096'. [ 2074.238224][ T2283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.332823][ T5211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2074.575013][ T5222] vlan2: entered allmulticast mode [ 2074.583646][ T5222] bond0: entered allmulticast mode [ 2074.600989][ T5222] bond_slave_0: entered allmulticast mode [ 2074.601838][ T5223] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9101'. [ 2074.625961][ T5222] bond_slave_1: entered allmulticast mode [ 2074.714886][ T5225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2074.747269][ T5225] netlink: 'syz.1.9103': attribute type 1 has an invalid length. [ 2074.778018][ T5223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2074.796720][ T5223] bond_slave_0: left allmulticast mode [ 2074.809684][ T5223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2074.821593][ T5223] bond_slave_1: left allmulticast mode [ 2074.841712][ T5223] bond0 (unregistering): Released all slaves [ 2074.890399][ T5225] vxlan0: entered promiscuous mode [ 2075.514439][ T5260] netlink: 'syz.4.9118': attribute type 1 has an invalid length. [ 2075.561744][ T5260] vxlan0: entered promiscuous mode [ 2075.726718][ T5821] Bluetooth: hci3: command tx timeout [ 2076.942575][ T5312] __nla_validate_parse: 7 callbacks suppressed [ 2076.942596][ T5312] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9138'. [ 2077.006093][ T5312] 0ªî{X¹¦: renamed from gretap0 [ 2077.154209][ T5312] 0ªî{X¹¦: entered allmulticast mode [ 2077.168412][ T5312] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 2077.587027][ T5327] sctp: [Deprecated]: syz.5.9145 (pid 5327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2077.587027][ T5327] Use struct sctp_sack_info instead [ 2077.744140][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9148'. [ 2077.763560][ T5334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2078.321082][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9153'. [ 2078.368811][ T5346] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9151'. [ 2078.438058][ T5334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2078.446753][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9153'. [ 2078.490706][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.553673][ T5348] bridge_slave_1 (unregistering): left allmulticast mode [ 2078.575867][ T5348] bridge_slave_1 (unregistering): left promiscuous mode [ 2078.589918][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.840194][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 2078.896422][ T5352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2079.048772][ T5363] netlink: 'syz.1.9160': attribute type 2 has an invalid length. [ 2079.233411][ T5369] netlink: 408 bytes leftover after parsing attributes in process `syz.0.9162'. [ 2079.247816][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9163'. [ 2079.511245][ T5378] syzkaller1: entered promiscuous mode [ 2079.546110][ T5378] syzkaller1: entered allmulticast mode [ 2079.551843][ T5376] kvm: apic: phys broadcast and lowest prio [ 2080.153990][ T5392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2080.197792][ T4456] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 2080.248646][ T5398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2080.260300][ T4456] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2080.309629][ T13] wlan1: authenticated [ 2080.324620][ T5392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2080.355051][ T13] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 2080.486568][ T2281] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 2080.597530][ T13] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 2080.735852][ T2281] wlan1: association with 08:02:11:00:00:00 timed out [ 2080.836025][T13612] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2080.969645][ T5414] syzkaller0: entered promiscuous mode [ 2080.981874][ T5414] syzkaller0: entered allmulticast mode [ 2081.106211][T13612] usb 3-1: Using ep0 maxpacket: 8 [ 2081.166805][T13612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2081.188390][T13612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2081.240008][T13612] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2081.286091][T13612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.355147][T13612] usb 3-1: config 0 descriptor?? [ 2081.590648][T13612] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2081.828044][T13612] usb 3-1: USB disconnect, device number 110 [ 2082.469988][ T5435] netlink: 79 bytes leftover after parsing attributes in process `syz.5.9191'. [ 2082.619262][ T5438] netlink: 'syz.2.9192': attribute type 2 has an invalid length. [ 2082.875537][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9196'. [ 2084.150474][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 2084.150487][ T29] audit: type=1326 audit(1774937989.808:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.4.9202" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705ef6c code=0x0 [ 2084.701354][ T5494] netlink: 'syz.5.9205': attribute type 10 has an invalid length. [ 2084.711374][ T5494] bridge_slave_0: left allmulticast mode [ 2084.717538][ T5494] bridge_slave_0: left promiscuous mode [ 2084.729760][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.741221][ T5494] bridge_slave_1: left allmulticast mode [ 2084.747308][ T5494] bridge_slave_1: left promiscuous mode [ 2084.753691][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.780429][ T5494] team0: Port device team_slave_0 removed [ 2084.791459][ T5494] team0: Port device team_slave_1 removed [ 2084.798224][ T5494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2084.806867][ T5494] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2084.845223][ T5500] netlink: 'syz.1.9208': attribute type 12 has an invalid length. [ 2084.861294][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2084.866267][ T5500] netlink: 'syz.1.9208': attribute type 29 has an invalid length. [ 2084.880467][ T5500] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9208'. [ 2084.891996][ T5500] netlink: 39 bytes leftover after parsing attributes in process `syz.1.9208'. [ 2085.015899][T13612] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2085.178417][T13612] usb 1-1: config 0 has no interfaces? [ 2085.185621][T13612] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2085.201472][T13612] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2085.210822][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9218'. [ 2085.221623][T13612] usb 1-1: Manufacturer: syz [ 2085.244167][T13612] usb 1-1: config 0 descriptor?? [ 2085.314191][ T5528] netlink: 'syz.4.9221': attribute type 12 has an invalid length. [ 2085.322472][ T5528] netlink: 'syz.4.9221': attribute type 29 has an invalid length. [ 2085.331526][ T5528] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9221'. [ 2085.341204][ T5528] netlink: 39 bytes leftover after parsing attributes in process `syz.4.9221'. [ 2085.484152][T13612] usb 1-1: USB disconnect, device number 8 [ 2085.737129][ T5548] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9230'. [ 2085.843202][ T5550] syzkaller0: entered promiscuous mode [ 2085.849314][ T5550] syzkaller0: entered allmulticast mode [ 2085.946152][ T4456] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2086.115851][ T4456] usb 3-1: Using ep0 maxpacket: 32 [ 2086.138034][ T4456] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2086.165169][ T4456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.173808][ T4456] usb 3-1: Product: syz [ 2086.178318][ T4456] usb 3-1: Manufacturer: syz [ 2086.183077][ T4456] usb 3-1: SerialNumber: syz [ 2086.192678][ T4456] usb 3-1: config 0 descriptor?? [ 2086.217527][ T4456] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2086.226191][ T4456] dvb-usb: bulk message failed: -22 (4/0) [ 2086.232030][ T4456] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2086.264934][ T4456] dvb-usb: bulk message failed: -22 (5/0) [ 2086.271244][ T4456] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2086.299371][ T4456] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2086.317287][ T4456] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2086.334424][ T4456] usb 3-1: media controller created [ 2086.382186][ T4456] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2086.442619][ T4456] usb 3-1: selecting invalid altsetting 3 [ 2086.458846][ T4456] ttusb2: set interface to alts=3 failed [ 2086.535624][ T4456] DVB: Unable to find symbol tda10086_attach() [ 2086.545222][ T4456] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2086.562700][ T4456] dvb-usb: bulk message failed: -22 (4/0) [ 2086.575829][ T4456] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2086.586466][ T4456] dvb-usb: bulk message failed: -22 (5/0) [ 2086.592209][ T4456] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2086.606289][ T4456] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2086.644056][ T4456] usb 3-1: USB disconnect, device number 111 [ 2086.654419][ T5582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2086.706533][ T4456] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2086.754599][ T5586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2086.777598][ T5582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2088.877460][ T5613] tipc: Started in network mode [ 2088.882369][ T5613] tipc: Node identity 080211000001, cluster identity 4711 [ 2088.890660][ T5613] tipc: Enabled bearer , priority 0 [ 2088.898809][ T5613] mac80211_hwsim hwsim266 syzkaller0: entered promiscuous mode [ 2088.907415][ T5613] mac80211_hwsim hwsim266 syzkaller0: entered allmulticast mode [ 2088.918985][ T5613] syzkaller0: mtu less than device minimum [ 2088.926364][ T5613] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.9252' sets config #1 [ 2089.018681][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9256'. [ 2089.126033][ T5630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9260'. [ 2089.176661][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2089.199891][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9260'. [ 2089.208971][ T5630] netlink: 'syz.5.9260': attribute type 1 has an invalid length. [ 2089.222522][ T5630] vxlan0: entered promiscuous mode [ 2089.278535][ T5638] syzkaller0: entered promiscuous mode [ 2089.284048][ T5638] syzkaller0: entered allmulticast mode [ 2089.425902][ T3772] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2089.591428][ T3772] usb 2-1: Using ep0 maxpacket: 8 [ 2089.598875][ T3772] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 2089.607821][ T3772] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.618794][ T3772] usb 2-1: config 162 has 1 interface, different from the descriptor's value: 3 [ 2089.640786][ T3772] usb 2-1: config 162 has no interface number 0 [ 2089.649982][ T3772] usb 2-1: config 162 interface 84 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2089.663669][ T3772] usb 2-1: config 162 interface 84 has no altsetting 0 [ 2089.673262][ T3772] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 2089.682797][ T3772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.690927][ T3772] usb 2-1: Product: syz [ 2089.695226][ T3772] usb 2-1: Manufacturer: syz [ 2089.700101][ T3772] usb 2-1: SerialNumber: syz [ 2089.906899][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058eccc00: rx timeout, send abort [ 2089.915874][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058eccc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2089.969046][T13612] usb 2-1: USB disconnect, device number 108 [ 2090.403105][ T5655] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.9266' sets config #1 [ 2091.380363][ T3772] tipc: Node number set to 134418688 [ 2091.418530][ T5650] tipc: Started in network mode [ 2091.426458][ T5650] tipc: Node identity 5a1cf549a6f6, cluster identity 4711 [ 2091.434435][ T5650] tipc: Enabled bearer , priority 0 [ 2091.442232][ T5651] syzkaller0: entered promiscuous mode [ 2091.458071][ T5651] syzkaller0: entered allmulticast mode [ 2091.469308][ T5667] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9271'. [ 2091.499477][ T5654] tipc: Resetting bearer [ 2091.569170][ T5646] tipc: Resetting bearer [ 2091.607133][ T5646] tipc: Disabling bearer [ 2092.077977][ T4455] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2092.256797][ T4455] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 2092.266731][ T5696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1650811951 (3301623902 ns) > initial count (1077952576 ns). Using initial count to start timer. [ 2092.285553][ T4455] usb 6-1: config index 0 descriptor too short (expected 72, got 36) [ 2092.306925][ T4455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2092.346735][ T4455] usb 6-1: config index 1 descriptor too short (expected 72, got 36) [ 2092.354993][ T4455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2092.379107][ T4455] usb 6-1: config index 2 descriptor too short (expected 72, got 36) [ 2092.389883][ T4455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2092.439787][ T4455] usb 6-1: config index 3 descriptor too short (expected 72, got 36) [ 2092.695856][ T4455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2092.710142][ T4455] usb 6-1: config index 4 descriptor too short (expected 72, got 36) [ 2092.725806][ T4455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2092.750961][ T4455] usb 6-1: config index 5 descriptor too short (expected 72, got 36) [ 2092.769801][ T4455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2092.814636][ T4455] usb 6-1: config index 6 descriptor too short (expected 72, got 36) [ 2092.823776][ T4455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2092.876548][ T4455] usb 6-1: config index 7 descriptor too short (expected 72, got 36) [ 2092.884685][ T4455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2092.928658][ T4455] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2092.957469][ T4455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.965575][ T4455] usb 6-1: Product: syz [ 2092.987926][ T4455] usb 6-1: Manufacturer: syz [ 2092.992552][ T4455] usb 6-1: SerialNumber: syz [ 2093.015056][ T4455] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 2093.114348][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9287'. [ 2093.146321][ T5706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2093.160563][ T5706] netlink: 'syz.2.9287': attribute type 4 has an invalid length. [ 2093.169228][ T5706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9287'. [ 2093.226584][T30035] usb 6-1: USB disconnect, device number 41 [ 2093.592604][ T5716] tipc: Enabled bearer , priority 0 [ 2093.606955][ T5716] syzkaller0: entered promiscuous mode [ 2093.612440][ T5716] syzkaller0: entered allmulticast mode [ 2093.653648][ T5716] tipc: Resetting bearer [ 2093.662461][ T5716] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.9291' sets config #1 [ 2093.673707][ T5715] tipc: Resetting bearer [ 2093.694663][ T5715] tipc: Disabling bearer [ 2094.599102][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805799fc00: rx timeout, send abort [ 2094.607760][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805799fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2094.764291][ T5733] 8021q: VLANs not supported on syzkaller0 [ 2094.778289][ T5733] mac80211_hwsim hwsim266 syzkaller0: left promiscuous mode [ 2094.795898][ T5733] mac80211_hwsim hwsim266 syzkaller0: left allmulticast mode [ 2094.814554][ T29] audit: type=1326 audit(1774938000.468:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.2.9295" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aef6c code=0x0 [ 2094.899779][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9299'. [ 2095.197156][ T5749] vlan0: entered allmulticast mode [ 2095.202308][ T5749] bond0: entered allmulticast mode [ 2095.329672][ T5756] random: crng reseeded on system resumption [ 2095.446754][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9308'. [ 2095.527630][ T5764] tipc: Enabling of bearer rejected, already enabled [ 2095.553283][ T5764] mac80211_hwsim hwsim266 syzkaller0: entered promiscuous mode [ 2095.571176][ T5764] mac80211_hwsim hwsim266 syzkaller0: entered allmulticast mode [ 2095.602047][ T5764] syzkaller0: mtu less than device minimum [ 2095.624156][ T5764] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.9309' sets config #1 [ 2096.298050][ T5791] vlan2: entered allmulticast mode [ 2096.303215][ T5791] bond0: entered allmulticast mode [ 2096.347529][ T5791] bond_slave_0: entered allmulticast mode [ 2096.366840][ T5791] bond_slave_1: entered allmulticast mode [ 2096.682734][ T5811] netlink: 'syz.1.9321': attribute type 12 has an invalid length. [ 2096.692808][ T5811] netlink: 'syz.1.9321': attribute type 29 has an invalid length. [ 2096.701073][ T5811] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9321'. [ 2096.912837][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9324'. [ 2097.170815][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9327'. [ 2097.278765][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2097.291647][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2097.300521][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2097.313346][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2097.328468][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2097.479128][ T5833] syzkaller0: entered promiscuous mode [ 2097.495291][ T5833] syzkaller0: entered allmulticast mode [ 2098.380509][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9336'. [ 2098.383259][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 2098.541339][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2098.557927][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2098.748291][ T2281] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.765841][ T2281] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.795200][ T2281] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.840500][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.849004][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.930151][ T2281] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2099.053283][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 2099.339915][ T5919] syzkaller0: entered promiscuous mode [ 2099.355675][ T5919] syzkaller0: entered allmulticast mode [ 2099.373950][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 2099.382125][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.398020][ T5821] Bluetooth: hci2: command tx timeout [ 2099.406122][ T5837] bridge_slave_0: entered allmulticast mode [ 2099.413814][ T5837] bridge_slave_0: entered promiscuous mode [ 2099.423968][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 2099.431635][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.438995][ T5837] bridge_slave_1: entered allmulticast mode [ 2099.446815][ T5837] bridge_slave_1: entered promiscuous mode [ 2099.559904][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2099.572987][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2099.759504][ T5837] team0: Port device team_slave_0 added [ 2099.770664][ T5837] team0: Port device team_slave_1 added [ 2099.800548][ T5925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9346'. [ 2099.834343][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.841900][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.871521][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2099.886280][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2099.893464][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.920036][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2100.000314][ T5837] hsr_slave_0: entered promiscuous mode [ 2100.007216][ T5837] hsr_slave_1: entered promiscuous mode [ 2100.013646][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 2100.022529][ T5837] Cannot create hsr debugfs directory [ 2100.069529][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9349'. [ 2100.627198][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2100.639303][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2100.667528][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2100.692808][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2100.917872][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2100.947968][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 2100.992203][ T2283] bridge0: port 1(bridge_slave_0) entered blocking state [ 2100.999394][ T2283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2101.030463][ T2283] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.037673][ T2283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2101.115209][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2101.135896][T30035] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2101.163939][ T5837] veth0_vlan: entered promiscuous mode [ 2101.180919][ T5837] veth1_vlan: entered promiscuous mode [ 2101.213868][ T5837] veth0_macvtap: entered promiscuous mode [ 2101.225013][ T5837] veth1_macvtap: entered promiscuous mode [ 2101.249013][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2101.264047][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2101.282105][ T7073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.292347][ T7073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.303190][ T7073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.310017][T30035] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2101.313636][ T7073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.332561][T30035] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2101.349573][T30035] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2101.363091][T30035] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.401721][T30035] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2101.414441][T30035] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2101.426264][T30035] usb 6-1: Product: syz [ 2101.430726][T30035] usb 6-1: Manufacturer: syz [ 2101.443840][T30035] cdc_wdm 6-1:1.0: skipping garbage [ 2101.450026][T30035] cdc_wdm 6-1:1.0: skipping garbage [ 2101.464924][T30035] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2101.471899][ T2283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2101.480156][ T5821] Bluetooth: hci2: command tx timeout [ 2101.486463][T30035] cdc_wdm 6-1:1.0: Unknown control protocol [ 2101.494806][ T2283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2101.552460][ T7073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2101.562774][ T7073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2101.651968][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807192f400: rx timeout, send abort [ 2101.660845][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807192f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2101.775103][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9360'. [ 2102.083719][ T5977] syzkaller0: entered promiscuous mode [ 2102.089891][ T5977] syzkaller0: entered allmulticast mode [ 2102.241690][ T5981] binder: 5980:5981 ioctl c0306201 0 returned -14 [ 2102.309959][ T5983] binder: 5980:5983 ioctl c0306201 0 returned -14 [ 2102.317438][ T5983] binder: 5980:5983 ioctl 40189206 0 returned -22 [ 2102.344508][ T29] audit: type=1326 audit(1774938007.998:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.9369" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705ef6c code=0x0 [ 2103.566557][ T5821] Bluetooth: hci2: command tx timeout [ 2103.831875][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880590cb000: rx timeout, send abort [ 2103.841841][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880590cb000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2103.867291][ T4456] usb 6-1: USB disconnect, device number 42 [ 2104.292274][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9378'. [ 2105.304568][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9389'. [ 2105.340211][ T6037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2105.353761][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9389'. [ 2105.366299][ T6037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9389'. [ 2105.395951][T13612] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2105.556207][T13612] usb 6-1: Using ep0 maxpacket: 16 [ 2105.569834][T13612] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2105.579068][T13612] usb 6-1: config 0 has no interface number 0 [ 2105.585190][T13612] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2105.599332][T13612] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2105.610405][T13612] usb 6-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 2105.619724][T13612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.636609][ T5821] Bluetooth: hci2: command tx timeout [ 2105.642626][T13612] usb 6-1: config 0 descriptor?? [ 2105.831532][ T6058] syzkaller0: entered promiscuous mode [ 2105.837106][ T6058] syzkaller0: entered allmulticast mode [ 2106.079475][T13612] holtek_mouse 0003:04D9:A081.0036: item fetching failed at offset 5/8 [ 2106.092196][T13612] holtek_mouse 0003:04D9:A081.0036: hid parse failed: -22 [ 2106.108951][T13612] holtek_mouse 0003:04D9:A081.0036: probe with driver holtek_mouse failed with error -22 [ 2106.285001][ T4455] usb 6-1: USB disconnect, device number 43 [ 2106.476704][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031b21c00: rx timeout, send abort [ 2106.485559][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031b21c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2106.677573][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9402'. [ 2106.742202][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9402'. [ 2106.751504][ T6070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9402'. [ 2106.957528][T13612] IPVS: starting estimator thread 0... [ 2107.065841][ T6076] IPVS: using max 30 ests per chain, 72000 per kthread [ 2107.825840][ T3770] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2108.007792][ T3770] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2108.016507][ T3770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2108.048139][ T3770] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2108.065030][ T3770] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2108.075757][ T3770] usb 6-1: Manufacturer: syz [ 2108.089868][ T3770] usb 6-1: config 0 descriptor?? [ 2108.175831][ T3770] rc_core: IR keymap rc-hauppauge not found [ 2108.182487][ T3770] Registered IR keymap rc-empty [ 2108.193837][ T3770] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2108.206928][ T3770] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input77 [ 2108.464647][ T6060] lo: entered allmulticast mode [ 2108.470050][ T6060] tunl0: entered allmulticast mode [ 2108.475323][ T6060] gre0: entered allmulticast mode [ 2108.483735][ T6060] erspan0: entered allmulticast mode [ 2108.489633][ T6060] ip_vti0: entered allmulticast mode [ 2108.495088][ T6060] ip6_vti0: entered allmulticast mode [ 2108.500986][ T6060] sit0: entered allmulticast mode [ 2108.526317][ T6060] ip6tnl0: entered allmulticast mode [ 2108.531769][ T6060] ip6gre0: entered allmulticast mode [ 2108.539072][ T6060] ip6gretap0: entered allmulticast mode [ 2108.544945][ T6060] bridge0: entered allmulticast mode [ 2108.551018][ T6060] vcan0: entered allmulticast mode [ 2108.556695][ T6060] team0: entered allmulticast mode [ 2108.561819][ T6060] team_slave_0: entered allmulticast mode [ 2108.569394][ T6060] team_slave_1: entered allmulticast mode [ 2108.575285][ T6060] dummy0: entered allmulticast mode [ 2108.581087][ T6060] nlmon0: entered allmulticast mode [ 2108.587353][ T6060] caif0: entered allmulticast mode [ 2108.592719][ T6060] batadv0: entered allmulticast mode [ 2108.598997][ T6060] vxcan0: entered allmulticast mode [ 2108.604421][ T6060] vxcan1: entered allmulticast mode [ 2108.617530][ T6060] veth0: entered allmulticast mode [ 2108.622823][ T6060] veth1: entered allmulticast mode [ 2108.628942][ T6060] wg0: entered allmulticast mode [ 2108.634048][ T6060] wg1: entered allmulticast mode [ 2108.639754][ T6060] wg2: entered allmulticast mode [ 2108.646184][ T6060] veth0_to_bridge: entered allmulticast mode [ 2108.656240][ T6060] veth1_to_bridge: entered allmulticast mode [ 2108.662822][ T6060] veth0_to_bond: entered allmulticast mode [ 2108.669971][ T6060] veth1_to_bond: entered allmulticast mode [ 2108.677640][ T6060] veth0_to_team: entered allmulticast mode [ 2108.683893][ T6060] veth1_to_team: entered allmulticast mode [ 2108.695623][ T6060] veth0_to_batadv: entered allmulticast mode [ 2108.702631][ T6060] batadv_slave_0: entered allmulticast mode [ 2108.708999][ T6060] veth1_to_batadv: entered allmulticast mode [ 2108.715317][ T6060] batadv_slave_1: entered allmulticast mode [ 2108.721675][ T6060] xfrm0: entered allmulticast mode [ 2108.727678][ T6060] veth0_to_hsr: entered allmulticast mode [ 2108.733714][ T6060] hsr_slave_0: entered allmulticast mode [ 2108.742817][ T6060] veth1_to_hsr: entered allmulticast mode [ 2108.750044][ T6060] hsr_slave_1: entered allmulticast mode [ 2108.756712][ T6060] hsr0: entered allmulticast mode [ 2108.762081][ T6060] veth1_virt_wifi: entered allmulticast mode [ 2108.770205][ T6060] veth0_virt_wifi: entered allmulticast mode [ 2108.777147][ T6060] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2108.784797][ T6060] veth1_vlan: entered allmulticast mode [ 2108.791610][ T6060] veth0_vlan: entered allmulticast mode [ 2108.800720][ T6060] vlan0: entered allmulticast mode [ 2108.806622][ T6060] vlan1: entered allmulticast mode [ 2108.811969][ T6060] macvlan0: entered allmulticast mode [ 2108.817610][ T6060] macvlan1: entered allmulticast mode [ 2108.823308][ T6060] ipvlan0: entered allmulticast mode [ 2108.828982][ T6060] ipvlan1: entered allmulticast mode [ 2108.834355][ T6060] veth1_macvtap: entered allmulticast mode [ 2108.841598][ T6060] veth0_macvtap: entered allmulticast mode [ 2108.849293][ T6060] macvtap0: entered allmulticast mode [ 2108.855504][ T6060] macsec0: entered allmulticast mode [ 2108.860987][ T6060] geneve0: entered allmulticast mode [ 2108.866632][ T6060] geneve1: entered allmulticast mode [ 2108.872027][ T6060] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2108.879631][ T6060] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 2108.887171][ T6060] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 2108.894657][ T6060] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 2108.902518][ T6060] mac80211_hwsim hwsim265 wlan0: entered allmulticast mode [ 2108.909959][ T6060] mac80211_hwsim hwsim266 wlan1: entered allmulticast mode [ 2108.919299][ T6060] bond1: entered allmulticast mode [ 2108.925062][ T6060] vxlan0: left promiscuous mode [ 2108.930035][ T6060] vxlan0: entered allmulticast mode [ 2108.935330][ T6060] ipip0: entered allmulticast mode [ 2108.940798][ T6060] tipc: Resetting bearer [ 2108.947437][ T6060] mac80211_hwsim hwsim266 syzkaller0: left promiscuous mode [ 2108.956102][ T6060] veth2: entered allmulticast mode [ 2108.961389][ T6060] veth3: entered allmulticast mode [ 2108.968024][ T6068] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2108.977029][ T4454] usb 6-1: USB disconnect, device number 44 [ 2109.026168][ T4456] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2109.178198][ T4456] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2109.187123][ T4456] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.197983][ T4456] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2109.215109][ T4456] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2109.229082][ T4456] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2109.241612][ T4456] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2109.249915][ T4456] usb 1-1: Product: syz [ 2109.254162][ T4456] usb 1-1: Manufacturer: syz [ 2109.301432][ T4456] cdc_wdm 1-1:1.0: skipping garbage [ 2109.323818][ T4456] cdc_wdm 1-1:1.0: skipping garbage [ 2109.340635][ T4456] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2109.354383][ T4456] cdc_wdm 1-1:1.0: Unknown control protocol [ 2109.528758][ T4454] usb 1-1: USB disconnect, device number 9 [ 2109.644842][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9418'. [ 2110.277991][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9425'. [ 2110.451706][ T6141] vlan2: entered allmulticast mode [ 2110.536485][ T6141] bond0: entered allmulticast mode [ 2110.541945][ T6141] bond_slave_0: entered allmulticast mode [ 2110.547849][ T6141] bond_slave_1: entered allmulticast mode [ 2110.975814][T13612] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2111.134191][ T6165] lo: entered allmulticast mode [ 2111.146046][T13612] usb 1-1: Using ep0 maxpacket: 32 [ 2111.150050][ T6165] dvmrp8: entered allmulticast mode [ 2111.152978][T13612] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2111.161976][ T6164] lo: left allmulticast mode [ 2111.169508][T13612] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2111.186979][T13612] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2111.198757][T13612] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2111.212051][ T4454] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2111.221017][T13612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2111.229984][T13612] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2111.243713][T13612] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2111.252374][T13612] usb 1-1: Product: syz [ 2111.257744][T13612] usb 1-1: Manufacturer: syz [ 2111.262346][T13612] usb 1-1: SerialNumber: syz [ 2111.273738][T13612] usb 1-1: config 0 descriptor?? [ 2111.297164][T13612] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2111.309433][T13612] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2111.368017][ T4454] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2111.376917][ T4454] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2111.387689][ T4454] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2111.418258][ T4454] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2111.447593][ T4454] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2111.463649][ T4454] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2111.472014][ T4454] usb 2-1: Product: syz [ 2111.481877][ T4454] usb 2-1: Manufacturer: syz [ 2111.493456][ T4454] cdc_wdm 2-1:1.0: skipping garbage [ 2111.498863][ T4454] cdc_wdm 2-1:1.0: skipping garbage [ 2111.506356][ T4454] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 2111.512400][ T4454] cdc_wdm 2-1:1.0: Unknown control protocol [ 2111.515780][T13612] usb 1-1: USB disconnect, device number 10 [ 2111.518326][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 2111.553408][T13612] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2111.702491][ T4455] usb 2-1: USB disconnect, device number 109 [ 2111.749629][ T6186] syzkaller0: entered promiscuous mode [ 2111.755156][ T6186] syzkaller0: entered allmulticast mode [ 2111.955178][ T6193] tipc: Enabled bearer , priority 0 [ 2111.969668][ T6193] syzkaller0: entered promiscuous mode [ 2111.975231][ T6193] syzkaller0: entered allmulticast mode [ 2112.000705][ T6193] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.9451' sets config #1 [ 2112.013231][ T6192] tipc: Resetting bearer [ 2112.033179][ T6192] tipc: Disabling bearer [ 2113.566977][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9465'. [ 2113.973530][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9476'. [ 2114.202159][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9481'. [ 2114.228876][ T6263] vlan2: entered allmulticast mode [ 2114.234195][ T6263] bond0: entered allmulticast mode [ 2114.240391][ T6263] bond_slave_0: entered allmulticast mode [ 2114.246570][ T6263] bond_slave_1: entered allmulticast mode [ 2114.937346][ T6284] tipc: Enabled bearer , priority 0 [ 2114.964008][ T6284] syzkaller0: entered promiscuous mode [ 2114.980175][ T6284] syzkaller0: entered allmulticast mode [ 2115.037668][ T6284] tipc: Resetting bearer [ 2115.047515][ T6282] tipc: Resetting bearer [ 2115.079747][ T6282] tipc: Disabling bearer [ 2115.091681][ T6296] netlink: 'syz.1.9498': attribute type 2 has an invalid length. [ 2115.099862][ T6296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9498'. [ 2115.167082][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9499'. [ 2115.215386][ T29] audit: type=1326 audit(1774938020.868:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2115.265967][ T29] audit: type=1326 audit(1774938020.898:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2115.312492][ T29] audit: type=1326 audit(1774938020.898:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2115.346429][ T29] audit: type=1326 audit(1774938020.898:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2115.835824][ T3770] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 2115.988405][ T6329] netlink: 'syz.4.9511': attribute type 2 has an invalid length. [ 2116.009851][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9511'. [ 2116.020574][ T3770] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2116.040680][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2116.077988][ T3770] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2116.104811][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2116.136937][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2116.184787][ T3770] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2116.210629][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2116.289498][ T3770] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2116.332479][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2116.405843][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2116.433175][ T6339] binder: 6338:6339 ioctl 4018620d 0 returned -22 [ 2116.447045][ T3770] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2116.471826][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2116.503206][ T3770] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2116.536669][ T6344] random: crng reseeded on system resumption [ 2116.552073][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2116.607859][ T3770] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2116.645533][ T3770] usb 2-1: string descriptor 0 read error: -22 [ 2116.659357][ T3770] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2116.701154][ T3770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.716835][ T6348] syzkaller0: entered promiscuous mode [ 2116.724038][ T6348] syzkaller0: entered allmulticast mode [ 2116.747672][ T3770] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2116.980891][ T6358] netlink: 'syz.4.9522': attribute type 2 has an invalid length. [ 2117.003452][ T6358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9522'. [ 2117.348690][ T6373] binder_alloc: 6372: binder_alloc_buf, no vma [ 2117.611516][ T3770] usb 2-1: USB disconnect, device number 110 [ 2118.042800][ T5821] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2118.051456][ T5821] Bluetooth: hci1: Injecting HCI hardware error event [ 2118.061299][ T5821] Bluetooth: hci1: hardware error 0x00 [ 2118.450114][ T6393] mac80211_hwsim hwsim266 syzkaller0: entered promiscuous mode [ 2119.256219][T13612] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2119.416865][T13612] usb 2-1: Using ep0 maxpacket: 32 [ 2119.427498][T13612] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2119.437603][T13612] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2119.444232][T13612] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2119.459979][ T6416] syzkaller0: entered promiscuous mode [ 2119.465682][ T6416] syzkaller0: entered allmulticast mode [ 2119.473888][T13612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.487010][T13612] usb 2-1: config 0 descriptor?? [ 2119.587559][ T3770] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2119.753238][ T3770] usb 1-1: Using ep0 maxpacket: 32 [ 2119.788828][ T3770] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2119.797223][ T3770] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2119.818131][ T3770] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2119.846194][ T3770] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2119.869251][ T3770] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2119.909852][ T3770] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2119.919062][ T3770] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2119.931790][T13612] hid_parser_main: 259 callbacks suppressed [ 2119.931810][T13612] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 2119.945331][ T3770] usb 1-1: Product: syz [ 2119.959543][ T3770] usb 1-1: Manufacturer: syz [ 2119.964228][ T3770] usb 1-1: SerialNumber: syz [ 2119.977626][T13612] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 2119.986846][T13612] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 2120.006681][ T3770] usb 1-1: config 0 descriptor?? [ 2120.015683][T13612] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 2120.023562][T13612] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 2120.034893][T13612] corsair-cpro 0003:1B1C:0C10.0037: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 2120.074903][ T3770] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2120.092519][ T3770] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2120.118094][ T5821] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2120.128783][T13612] corsair-cpro 0003:1B1C:0C10.0037: probe with driver corsair-cpro failed with error -38 [ 2120.173861][T13612] usb 2-1: USB disconnect, device number 111 [ 2120.243250][ T6423] fido_id[6423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2120.282605][ T4455] usb 1-1: USB disconnect, device number 11 [ 2120.291450][ T4455] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2120.680797][T13612] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2120.845877][T13612] usb 6-1: Using ep0 maxpacket: 32 [ 2120.883298][T13612] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2120.902551][T13612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.919406][T13612] usb 6-1: Product: syz [ 2120.923674][T13612] usb 6-1: Manufacturer: syz [ 2120.928586][T13612] usb 6-1: SerialNumber: syz [ 2120.945178][T13612] usb 6-1: config 0 descriptor?? [ 2121.199254][ T4456] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2121.358397][ T4456] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2121.367644][T13612] airspy 6-1:0.0: Board ID: 00 [ 2121.368067][ T4456] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.372433][T13612] airspy 6-1:0.0: Firmware version: [ 2121.383209][ T4456] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2121.397820][ T4456] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2121.410726][ T4456] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2121.420276][ T4456] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2121.428548][ T4456] usb 1-1: Product: syz [ 2121.432945][ T4456] usb 1-1: Manufacturer: syz [ 2121.449809][ T4456] cdc_wdm 1-1:1.0: skipping garbage [ 2121.458251][ T4456] cdc_wdm 1-1:1.0: skipping garbage [ 2121.467224][ T4456] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2121.473178][ T4456] cdc_wdm 1-1:1.0: Unknown control protocol [ 2121.612198][T13612] airspy 6-1:0.0: usb_control_msg() failed -71 request 11 [ 2121.628119][T13612] airspy 6-1:0.0: Registered as swradio24 [ 2121.633877][T13612] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2121.672107][T13612] usb 6-1: USB disconnect, device number 45 [ 2122.458217][ T6448] netlink: 'syz.1.9557': attribute type 2 has an invalid length. [ 2122.909478][ T6464] syzkaller0: entered promiscuous mode [ 2122.926983][ T6464] syzkaller0: entered allmulticast mode [ 2123.390672][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9568'. [ 2124.001034][ T4456] usb 1-1: USB disconnect, device number 12 [ 2124.152914][ T6488] netlink: 'syz.0.9571': attribute type 2 has an invalid length. [ 2125.318887][ T6498] syzkaller0: entered promiscuous mode [ 2125.324464][ T6498] syzkaller0: entered allmulticast mode [ 2125.775837][ T4455] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2125.937675][ T4455] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2125.949342][ T4455] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.968220][ T4455] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2125.997242][ T4455] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.069767][ T4455] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2126.085253][ T4455] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2126.103954][ T4455] usb 3-1: Product: syz [ 2126.485780][ T4455] usb 3-1: Manufacturer: syz [ 2126.499390][ T4455] cdc_wdm 3-1:1.0: skipping garbage [ 2126.504637][ T4455] cdc_wdm 3-1:1.0: skipping garbage [ 2126.517625][ T4455] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2126.523549][ T4455] cdc_wdm 3-1:1.0: Unknown control protocol [ 2126.798471][ T6535] syzkaller0: entered promiscuous mode [ 2126.811844][ T6535] syzkaller0: entered allmulticast mode [ 2126.916391][ T3770] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 2127.012089][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9593'. [ 2127.083814][ T3770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2127.097505][ T3770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2127.125869][ T3770] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2127.145301][ T3770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.182845][ T3770] usb 2-1: config 0 descriptor?? [ 2127.284805][ T6548] syzkaller0: entered promiscuous mode [ 2127.292133][ T6548] syzkaller0: entered allmulticast mode [ 2127.610878][ T3770] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 2127.630350][ T3770] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 2127.665177][ T3770] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 2127.682131][ T3770] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 2127.705888][ T3770] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 2127.743375][ T3770] elan 0003:04F3:0755.0038: failed to start in urb: -90 [ 2127.783971][ T3770] elan 0003:04F3:0755.0038: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 2127.822986][ T3772] usb 2-1: USB disconnect, device number 112 [ 2127.878427][ T4455] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2127.881725][ T6556] fido_id[6556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2127.892553][ T4455] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2128.534444][ T3772] usb 3-1: USB disconnect, device number 112 [ 2128.735943][ T3771] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2128.908879][ T3771] usb 2-1: Using ep0 maxpacket: 16 [ 2128.928279][ T3771] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.946868][ T3771] usb 2-1: config 0 has no interfaces? [ 2128.955355][ T3771] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2128.969455][ T3771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.977593][ T3771] usb 2-1: Product: syz [ 2128.981789][ T3771] usb 2-1: Manufacturer: syz [ 2128.987139][ T3771] usb 2-1: SerialNumber: syz [ 2128.995591][ T3771] usb 2-1: config 0 descriptor?? [ 2129.223289][ T3772] usb 2-1: USB disconnect, device number 113 [ 2129.722301][ T6568] syzkaller0: entered promiscuous mode [ 2129.733628][ T6568] syzkaller0: entered allmulticast mode [ 2129.803507][ T6579] netlink: 'syz.1.9610': attribute type 2 has an invalid length. [ 2130.063675][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9613'. [ 2130.325845][ T3771] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 2130.608537][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2130.620412][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2130.632569][ T3771] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2130.883349][ T3771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.924869][ T3771] usb 3-1: config 0 descriptor?? [ 2131.195841][ T4455] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2131.347955][ T3771] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 2131.355949][ T3771] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 2131.369759][ T3771] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 2131.456348][ T6615] netlink: 'syz.4.9624': attribute type 2 has an invalid length. [ 2131.459004][ T3771] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 2131.472257][ T3771] elan 0003:04F3:0755.003A: failed to start in urb: -90 [ 2131.507993][ T3771] elan 0003:04F3:0755.003A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 2131.519944][ T4455] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2131.531565][ T4455] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2131.557582][ T4455] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2131.586769][ T4455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.599692][ T3771] usb 3-1: USB disconnect, device number 113 [ 2131.640247][ T6613] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2131.653137][ T4455] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2131.961766][ T6633] netlink: 'syz.0.9632': attribute type 12 has an invalid length. [ 2131.975841][ T6633] netlink: 'syz.0.9632': attribute type 29 has an invalid length. [ 2131.983776][ T6633] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9632'. [ 2132.078967][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9634'. [ 2132.124475][ T6637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2132.226324][ T6643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9635'. [ 2132.235488][ T3771] IPVS: starting estimator thread 0... [ 2132.296606][ T4455] usb 2-1: USB disconnect, device number 114 [ 2132.369976][ T6645] IPVS: using max 32 ests per chain, 76800 per kthread [ 2132.488484][ T6649] syzkaller0: entered promiscuous mode [ 2132.494243][ T6649] syzkaller0: entered allmulticast mode [ 2133.387597][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9647'. [ 2133.791142][ T4454] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2133.973190][ T4454] usb 2-1: Using ep0 maxpacket: 16 [ 2134.003296][ T4454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.014375][ T4454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2134.024452][ T4454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2134.057259][ T4454] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2134.074930][ T4454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.095181][ T4454] usb 2-1: config 0 descriptor?? [ 2134.258029][ T6683] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2134.548520][ T4454] hid_parser_main: 1 callbacks suppressed [ 2134.548544][ T4454] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 2134.562888][ T4454] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 2134.570068][ T4454] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 2134.577220][ T4454] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 2134.584195][ T4454] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 2134.602450][ T4454] input: HID 0955:7214 Haptics as /devices/virtual/input/input78 [ 2134.631644][ T3771] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2134.768766][ T6680] random: crng reseeded on system resumption [ 2134.769889][ T4454] shield 0003:0955:7214.003B: Registered Thunderstrike controller [ 2134.789718][ T4454] shield 0003:0955:7214.003B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 2134.829810][ T3771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.841054][ T3771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2134.851253][ T3771] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2134.874304][ T3771] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2134.893842][ T3771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.927472][ T3771] usb 1-1: config 0 descriptor?? [ 2135.147713][ T3772] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2135.164491][ T4455] usb 2-1: USB disconnect, device number 115 [ 2135.184976][ T3772] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2135.209795][ T3772] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2135.352337][ T3771] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x3 [ 2135.360429][ T3771] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x4 [ 2135.377549][ T3771] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2135.598688][ T6674] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2135.601050][ T7073] veth0_to_bridge: left allmulticast mode [ 2135.615433][ T7073] veth0_to_bridge: left promiscuous mode [ 2135.622340][ T7073] bridge0: port 3(veth0_to_bridge) entered disabled state [ 2135.632673][ T7073] bridge_slave_1: left allmulticast mode [ 2135.640486][ T7073] bridge_slave_1: left promiscuous mode [ 2135.647249][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 2135.658519][ T7073] bridge_slave_0: left allmulticast mode [ 2135.664170][ T7073] bridge_slave_0: left promiscuous mode [ 2135.680172][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 2135.852700][ T7073] bond2 (unregistering): (slave erspan0): Releasing backup interface [ 2136.038120][ T7073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2136.049981][ T29] audit: type=1326 audit(1774938041.708:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.9660" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705ef6c code=0x0 [ 2136.076698][ T7073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2136.090345][ T7073] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2136.102157][ T7073] bond0 (unregistering): Released all slaves [ 2136.124615][ T7073] bond1 (unregistering): Released all slaves [ 2136.146995][ T7073] bond2 (unregistering): Released all slaves [ 2136.297349][ T7073] tipc: Left network mode [ 2136.433918][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9664'. [ 2136.549267][ T7073] hsr_slave_0: left promiscuous mode [ 2136.561071][ T7073] hsr_slave_1: left promiscuous mode [ 2136.576677][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2136.597866][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2136.619213][ T7073] pimreg (unregistering): left allmulticast mode [ 2136.676993][ T6687] usb 1-1: string descriptor 0 read error: -71 [ 2137.002945][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 2137.042617][ T7073] team0 (unregistering): Port device team_slave_0 removed [ 2137.438041][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9673'. [ 2137.517715][ T3770] usb 1-1: USB disconnect, device number 13 [ 2137.624265][ T7073] IPVS: stop unused estimator thread 0... [ 2137.699062][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9675'. [ 2137.733401][ T6745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2138.062239][ T29] audit: type=1326 audit(1774938043.718:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.5.9680" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 2138.578453][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807958fc00: rx timeout, send abort [ 2138.587108][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807958fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2139.019080][ T29] audit: type=1326 audit(1774938044.678:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2139.081769][ T29] audit: type=1326 audit(1774938044.678:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2139.115085][ T29] audit: type=1326 audit(1774938044.708:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2139.140376][ T29] audit: type=1326 audit(1774938044.708:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2139.163814][ T29] audit: type=1326 audit(1774938044.708:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2139.201257][ T29] audit: type=1326 audit(1774938044.708:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2139.224676][ T29] audit: type=1326 audit(1774938044.708:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2139.250341][ T29] audit: type=1326 audit(1774938044.708:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2139.850625][T14304] bridge_slave_1: left allmulticast mode [ 2139.856441][T14304] bridge_slave_1: left promiscuous mode [ 2139.862327][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.893005][T14304] bridge_slave_0: left allmulticast mode [ 2139.900931][T14304] bridge_slave_0: left promiscuous mode [ 2139.907972][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.920685][ T6772] binder: BINDER_SET_CONTEXT_MGR already set [ 2139.927003][ T6772] binder: 6770:6772 ioctl 4018620d 80000040 returned -16 [ 2139.954420][ T6716] Set syz1 is full, maxelem 65536 reached [ 2140.331623][T14304] bond1 (unregistering): Released all slaves [ 2140.354814][T14304] bond2 (unregistering): Released all slaves [ 2140.369223][ T6791] netlink: 'syz.4.9691': attribute type 12 has an invalid length. [ 2140.379242][ T6791] netlink: 'syz.4.9691': attribute type 29 has an invalid length. [ 2140.387190][ T6791] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9691'. [ 2140.437357][T14304] : left promiscuous mode [ 2140.532910][T14304] tipc: Left network mode [ 2140.585798][ T3772] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2140.698742][T14304] hsr_slave_0: left promiscuous mode [ 2140.704892][T14304] hsr_slave_1: left promiscuous mode [ 2140.712069][T14304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2140.736361][T14304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2140.750967][ T3772] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2140.761988][ T3772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.776075][ T3772] usb 3-1: config 0 descriptor?? [ 2140.934849][T14304] team0 (unregistering): Port device team_slave_1 removed [ 2140.963649][T14304] team0 (unregistering): Port device team_slave_0 removed [ 2141.035339][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9703'. [ 2141.200185][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9704'. [ 2141.881866][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 2141.947843][ T6831] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2141.954383][ T6831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2141.987876][ T6831] vhci_hcd vhci_hcd.0: Device attached [ 2142.206391][ T3771] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 2142.351063][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9715'. [ 2142.538336][ T6833] vhci_hcd: connection reset by peer [ 2142.548888][T28472] vhci_hcd vhci_hcd.0: stop threads [ 2142.561876][T28472] vhci_hcd vhci_hcd.0: release socket [ 2142.574377][T28472] vhci_hcd vhci_hcd.0: disconnect device [ 2142.631508][ T4455] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 2142.650871][ T4455] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2143.011598][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9721'. [ 2143.016212][ T3770] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2143.140829][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2143.140846][ T29] audit: type=1326 audit(1774938048.798:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.5.9724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2143.178570][ T29] audit: type=1326 audit(1774938048.838:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.5.9724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2143.179461][ T3770] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2143.200913][ T29] audit: type=1326 audit(1774938048.838:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.5.9724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2143.200984][ T29] audit: type=1326 audit(1774938048.838:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.5.9724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2143.201024][ T29] audit: type=1326 audit(1774938048.838:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.5.9724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2143.201062][ T29] audit: type=1326 audit(1774938048.838:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.5.9724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2143.304984][ T3770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.324964][ T3770] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2143.336318][ T3770] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2143.350590][ T3770] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2143.364026][ T3770] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2143.372373][ T3770] usb 2-1: Product: syz [ 2143.376868][ T3770] usb 2-1: Manufacturer: syz [ 2143.413676][ T3770] cdc_wdm 2-1:1.0: skipping garbage [ 2143.424329][ T3770] cdc_wdm 2-1:1.0: skipping garbage [ 2143.434595][ T3770] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2143.442153][ T3770] cdc_wdm 2-1:1.0: Unknown control protocol [ 2143.448644][ T3772] usb 3-1: Cannot read MAC address [ 2143.455408][ T3772] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2143.526830][ T3772] usb 3-1: USB disconnect, device number 114 [ 2143.945955][ T3772] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2144.117608][ T3772] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.396056][ T3772] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2144.409418][ T3772] usb 3-1: config 2 interface 0 has no altsetting 0 [ 2144.418184][ T3772] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 2144.427665][ T3772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.440811][ T3772] usb 3-1: Product: syz [ 2144.445011][ T3772] usb 3-1: Manufacturer: syz [ 2144.454071][ T3772] usb 3-1: SerialNumber: syz [ 2144.720019][ T3772] usb 3-1: USB disconnect, device number 115 [ 2145.793648][T30035] usb 2-1: USB disconnect, device number 116 [ 2146.115789][ T4454] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2146.136242][ T3772] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 2146.155840][ T3770] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2146.287749][ T4454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.307524][ T3770] usb 6-1: Using ep0 maxpacket: 32 [ 2146.312492][ T4454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2146.331041][ T3772] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 13977, setting to 64 [ 2146.342679][ T3772] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2146.342808][ T3770] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 2146.349432][ T4454] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2146.372596][ T3772] usb 1-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 2146.379703][ T3770] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2146.381740][ T3772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.391160][ T3770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.398895][ T4454] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2146.415799][ T3770] usb 6-1: Product: syz [ 2146.418593][ T3772] usb 1-1: config 0 descriptor?? [ 2146.426339][ T3770] usb 6-1: Manufacturer: syz [ 2146.426379][ T6917] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2146.438291][ T4454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.456179][ T3770] usb 6-1: SerialNumber: syz [ 2146.464595][ T4454] usb 3-1: config 0 descriptor?? [ 2146.482488][ T3770] usb 6-1: config 0 descriptor?? [ 2146.501906][ T6920] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2146.514534][ T3770] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2146.656257][ T6940] lo: entered allmulticast mode [ 2146.664441][ T6940] tunl0: entered allmulticast mode [ 2146.670542][ T6940] gre0: entered allmulticast mode [ 2146.680956][ T6940] gretap0: entered allmulticast mode [ 2146.686763][ T6940] erspan0: entered allmulticast mode [ 2146.692430][ T6940] ip_vti0: entered allmulticast mode [ 2146.698433][ T6940] ip6_vti0: entered allmulticast mode [ 2146.704085][ T6940] sit0: entered allmulticast mode [ 2146.709421][ T6940] ip6tnl0: entered allmulticast mode [ 2146.714951][ T6940] ip6gre0: entered allmulticast mode [ 2146.721692][ T6940] ip6gretap0: entered allmulticast mode [ 2146.727502][ T6940] bridge0: entered allmulticast mode [ 2146.733000][ T6940] vcan0: entered allmulticast mode [ 2146.738765][ T6940] team0: entered allmulticast mode [ 2146.743973][ T6940] team_slave_0: entered allmulticast mode [ 2146.749825][ T6940] team_slave_1: entered allmulticast mode [ 2146.757359][ T6940] dummy0: entered allmulticast mode [ 2146.762839][ T6940] nlmon0: entered allmulticast mode [ 2146.763806][T29482] usb 6-1: USB disconnect, device number 46 [ 2146.768868][ T6940] caif0: entered allmulticast mode [ 2146.791185][ T6940] batadv0: entered allmulticast mode [ 2146.802248][ T6940] vxcan0: entered allmulticast mode [ 2146.808592][ T6940] vxcan1: entered allmulticast mode [ 2146.818042][ T6940] veth0: entered allmulticast mode [ 2146.823385][ T6940] veth1: entered allmulticast mode [ 2146.828638][ T3770] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2146.835975][ T6940] wg0: entered allmulticast mode [ 2146.841655][ T6940] wg1: entered allmulticast mode [ 2146.849145][ T6940] wg2: entered allmulticast mode [ 2146.854312][ T6940] veth0_to_bridge: entered allmulticast mode [ 2146.860698][ T6940] veth0_to_bond: entered allmulticast mode [ 2146.868617][ T6940] veth1_to_bond: entered allmulticast mode [ 2146.869626][ T3772] hid (null): unknown global tag 0xd [ 2146.874779][ T6940] veth0_to_team: entered allmulticast mode [ 2146.883614][ T4454] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2146.893614][ T4454] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2146.894407][ T6940] veth1_to_team: entered allmulticast mode [ 2146.906893][ T4454] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2146.915338][ T6940] veth0_to_batadv: entered allmulticast mode [ 2146.916415][ T3772] apple 0003:05AC:0320.003F: unknown main item tag 0x0 [ 2146.921621][ T6940] batadv_slave_0: entered allmulticast mode [ 2146.928958][ T4454] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2146.934425][ T6940] veth1_to_batadv: entered allmulticast mode [ 2146.941746][ T3772] apple 0003:05AC:0320.003F: unknown main item tag 0x0 [ 2146.941777][ T3772] apple 0003:05AC:0320.003F: unknown main item tag 0x0 [ 2146.941806][ T3772] apple 0003:05AC:0320.003F: unknown main item tag 0x0 [ 2146.941833][ T3772] apple 0003:05AC:0320.003F: unknown main item tag 0x0 [ 2146.943296][ T3772] apple 0003:05AC:0320.003F: unknown global tag 0xd [ 2146.948555][ T6940] batadv_slave_1: entered allmulticast mode [ 2146.960314][ T4454] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2146.969387][ T6940] xfrm0: entered allmulticast mode [ 2146.989168][ T3772] apple 0003:05AC:0320.003F: item 0 1 1 13 parsing failed [ 2147.005176][ T3770] usb 2-1: Using ep0 maxpacket: 32 [ 2147.026456][ T3772] apple 0003:05AC:0320.003F: parse failed [ 2147.027326][ T6940] veth0_to_hsr: entered allmulticast mode [ 2147.032277][ T3772] apple 0003:05AC:0320.003F: probe with driver apple failed with error -22 [ 2147.039216][ T3770] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.057814][ T3770] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 2147.067284][ T6940] hsr_slave_0: entered allmulticast mode [ 2147.085905][ T6940] veth1_to_hsr: entered allmulticast mode [ 2147.091819][ T6940] hsr_slave_1: entered allmulticast mode [ 2147.098336][ T6940] hsr0: entered allmulticast mode [ 2147.105345][ T3770] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9a.c8 [ 2147.117586][ T3770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.126642][ T6940] veth1_virt_wifi: entered allmulticast mode [ 2147.139406][ T3770] usb 2-1: Product: syz [ 2147.149680][ T3770] usb 2-1: Manufacturer: syz [ 2147.152932][ T3772] usb 1-1: USB disconnect, device number 14 [ 2147.154625][ T6940] veth0_virt_wifi: entered allmulticast mode [ 2147.167458][ T3770] usb 2-1: SerialNumber: syz [ 2147.173607][ T6940] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2147.182144][ T6940] veth1_vlan: entered allmulticast mode [ 2147.188876][ T6940] veth0_vlan: entered allmulticast mode [ 2147.197837][ T6940] vlan0: entered allmulticast mode [ 2147.203123][ T6940] vlan1: entered allmulticast mode [ 2147.208700][ T6940] macvlan0: entered allmulticast mode [ 2147.214160][ T6940] macvlan1: entered allmulticast mode [ 2147.219042][ T4454] usb 3-1: USB disconnect, device number 116 [ 2147.225540][ T6940] ipvlan0: entered allmulticast mode [ 2147.234056][ T6940] ipvlan1: entered allmulticast mode [ 2147.245100][ T6940] veth1_macvtap: entered allmulticast mode [ 2147.254452][ T6940] veth0_macvtap: entered allmulticast mode [ 2147.260971][ T6940] macvtap0: entered allmulticast mode [ 2147.267499][ T6940] macsec0: entered allmulticast mode [ 2147.272882][ T6940] geneve0: entered allmulticast mode [ 2147.279073][ T6940] geneve1: entered allmulticast mode [ 2147.284472][ T6940] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2147.292284][ T6940] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 2147.299829][ T6940] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 2147.307364][ T3771] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2147.313989][ T6940] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 2147.321689][ T6940] mac80211_hwsim hwsim269 wlan0: entered allmulticast mode [ 2147.329236][ T6940] mac80211_hwsim hwsim270 wlan1: entered allmulticast mode [ 2147.338640][ T6940] vxlan0: left promiscuous mode [ 2147.343543][ T6940] vxlan0: entered allmulticast mode [ 2147.353711][ T6940] bond1: entered allmulticast mode [ 2147.361812][ T6940] bond2: entered allmulticast mode [ 2147.409535][ T3770] usb 2-1: USB disconnect, device number 117 [ 2147.625792][ T4454] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2147.728396][ T6950] syzkaller0: entered promiscuous mode [ 2147.733946][ T6950] syzkaller0: entered allmulticast mode [ 2147.790535][ T4454] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2147.801131][ T4454] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.812388][ T4454] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2147.830577][ T4454] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2147.843845][ T4454] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2147.853332][ T4454] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2147.863877][ T4454] usb 6-1: Product: syz [ 2147.879036][ T4454] usb 6-1: Manufacturer: syz [ 2147.894122][ T4454] cdc_wdm 6-1:1.0: skipping garbage [ 2147.901721][ T4454] cdc_wdm 6-1:1.0: skipping garbage [ 2147.909756][ T4454] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2147.915685][ T4454] cdc_wdm 6-1:1.0: Unknown control protocol [ 2148.040992][ T6958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2148.829257][ T6977] syzkaller0: entered promiscuous mode [ 2148.835445][ T6977] syzkaller0: entered allmulticast mode [ 2149.040304][ T6982] netlink: 'syz.2.9769': attribute type 12 has an invalid length. [ 2149.053832][ T6982] netlink: 'syz.2.9769': attribute type 29 has an invalid length. [ 2149.062872][ T6982] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9769'. [ 2149.085338][ T6981] syzkaller0: entered promiscuous mode [ 2149.091059][ T6981] syzkaller0: entered allmulticast mode [ 2149.162587][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9771'. [ 2149.173225][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9771'. [ 2149.304864][ T29] audit: type=1326 audit(1774938054.958:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.9775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 2149.329961][ T29] audit: type=1326 audit(1774938054.988:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.9775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 2149.358127][ T29] audit: type=1326 audit(1774938054.988:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.9775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 2149.413080][ T29] audit: type=1326 audit(1774938054.988:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.9775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 2149.461482][ T29] audit: type=1326 audit(1774938054.988:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.9775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 2149.506023][ T29] audit: type=1326 audit(1774938054.988:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.9775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 2150.316164][ T2281] bridge_slave_1: left allmulticast mode [ 2150.321983][ T2281] bridge_slave_1: left promiscuous mode [ 2150.336916][ T2281] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.545011][T29482] usb 6-1: USB disconnect, device number 47 [ 2150.555214][ T2281] bridge_slave_0: left allmulticast mode [ 2150.561042][ T2281] bridge_slave_0: left promiscuous mode [ 2150.598433][ T2281] bridge0: port 1(bridge_slave_0) entered disabled state [ 2150.750314][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9783'. [ 2151.491208][ T2281] team0: Port device bridge0 removed [ 2151.617221][ T2281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2151.758889][ T2281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2151.807947][ T2281] bond0 (unregistering): Released all slaves [ 2151.855389][ T2281] bond1 (unregistering): Released all slaves [ 2151.896986][ T2281] bond2 (unregistering): Released all slaves [ 2151.917148][ T7059] netlink: 'syz.2.9793': attribute type 12 has an invalid length. [ 2151.925866][ T7059] netlink: 'syz.2.9793': attribute type 29 has an invalid length. [ 2151.941192][ T7059] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9793'. [ 2152.044664][ T2281] tipc: Left network mode [ 2152.406721][ T2281] hsr_slave_0: left promiscuous mode [ 2152.417555][ T2281] hsr_slave_1: left promiscuous mode [ 2152.423567][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2152.446595][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2152.747173][ T2281] team0 (unregistering): Port device team_slave_1 removed [ 2152.780954][ T2281] team0 (unregistering): Port device team_slave_0 removed [ 2153.300481][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880346a2000: rx timeout, send abort [ 2153.309325][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880346a2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2153.502920][ T2281] IPVS: stop unused estimator thread 0... [ 2153.676659][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9811'. [ 2153.752105][ T7105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2153.768868][ T7110] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9811'. [ 2154.341422][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9819'. [ 2155.156220][T29482] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2155.316233][T29482] usb 2-1: Using ep0 maxpacket: 16 [ 2155.324310][T29482] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2155.336010][T29482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2155.344174][T29482] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2155.354118][T29482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.383011][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059581000: rx timeout, send abort [ 2155.391616][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059581000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2155.410225][T29482] usb 2-1: config 0 descriptor?? [ 2155.642269][ T7172] syzkaller0: entered promiscuous mode [ 2155.657424][ T7172] syzkaller0: entered allmulticast mode [ 2155.912202][T29482] hid_parser_main: 133 callbacks suppressed [ 2155.912227][T29482] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2155.927100][T29482] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2155.934524][T29482] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2155.946020][T29482] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2155.978569][T29482] nzxt-smart2 0003:1E71:2009.0040: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2158.099957][ T4454] usb 2-1: USB disconnect, device number 118 [ 2159.031709][ T7228] netlink: 'syz.1.9860': attribute type 12 has an invalid length. [ 2159.143463][ T7228] netlink: 'syz.1.9860': attribute type 29 has an invalid length. [ 2159.155994][ T7228] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9860'. [ 2159.716403][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9866'. [ 2160.195804][ T3771] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2160.306247][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.312627][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.400235][ T3771] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2160.439702][ T3771] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2160.458581][ T3771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2160.485753][ T3771] usb 6-1: Product: syz [ 2160.529413][ T3771] usb 6-1: Manufacturer: syz [ 2160.534046][ T3771] usb 6-1: SerialNumber: syz [ 2160.786166][ T3771] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2161.044708][ T3771] usb 6-1: USB disconnect, device number 48 [ 2161.071581][ T3771] usblp0: removed [ 2161.647848][T13612] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2161.693099][ T7280] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2161.817775][T13612] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2161.826846][T13612] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2161.839290][T13612] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2161.853911][T13612] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.881349][T13612] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2161.892205][T13612] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2161.900565][T13612] usb 2-1: Product: syz [ 2161.906962][T13612] usb 2-1: Manufacturer: syz [ 2161.927955][T13612] cdc_wdm 2-1:1.0: skipping garbage [ 2161.941916][T13612] cdc_wdm 2-1:1.0: skipping garbage [ 2161.954377][T13612] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2161.966894][T13612] cdc_wdm 2-1:1.0: Unknown control protocol [ 2162.955822][ T3770] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2163.163911][ T3770] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 2163.174602][ T3770] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.196039][ T3770] usb 6-1: config 171 has no interface number 0 [ 2163.212482][ T3770] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255 [ 2163.231674][ T3770] usb 6-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2163.248838][ T3770] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 2163.258760][ T3770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.267407][ T3770] usb 6-1: Product: syz [ 2163.271751][ T3770] usb 6-1: Manufacturer: syz [ 2163.276509][ T3770] usb 6-1: SerialNumber: syz [ 2163.293414][ T7288] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2163.520860][ T3770] ath6kl: Failed to submit usb control message: -71 [ 2163.528245][ T3770] ath6kl: unable to send the bmi data to the device: -71 [ 2163.536054][ T3770] ath6kl: Unable to send get target info: -71 [ 2163.603529][ T3770] ath6kl: Failed to init ath6kl core: -71 [ 2163.623403][ T3770] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 2163.656040][ T3770] usb 6-1: USB disconnect, device number 49 [ 2164.235844][ T3770] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2164.413087][ T3771] usb 2-1: USB disconnect, device number 119 [ 2164.436454][ T3770] usb 1-1: device descriptor read/64, error -71 [ 2164.675806][T13612] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2164.683663][ T3770] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2164.815928][ T3771] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2164.830778][ T3770] usb 1-1: device descriptor read/64, error -71 [ 2164.857320][T13612] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2164.866324][T13612] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.876813][T13612] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2164.886110][T13612] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2164.900763][T13612] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2164.910490][T13612] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2164.918534][T13612] usb 3-1: Product: syz [ 2164.922802][T13612] usb 3-1: Manufacturer: syz [ 2164.932808][T13612] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2164.946131][ T3770] usb usb1-port1: attempt power cycle [ 2164.987141][ T3771] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 2164.995329][ T3771] usb 2-1: config 1 has no interface number 0 [ 2165.001710][ T3771] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2165.015785][ T3771] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2165.036036][ T3771] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2165.054791][ T3771] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2165.064517][ T3771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.073483][ T3771] usb 2-1: Product: syz [ 2165.077958][ T3771] usb 2-1: Manufacturer: syz [ 2165.082549][ T3771] usb 2-1: SerialNumber: syz [ 2165.099695][ T3771] usb 2-1: Expected 3 endpoints, found: 0 [ 2165.136657][ T4454] usb 3-1: USB disconnect, device number 117 [ 2165.189409][ T7338] picdev_read: 26 callbacks suppressed [ 2165.189423][ T7338] kvm: pic: non byte read [ 2165.199534][ T7338] kvm: pic: non byte read [ 2165.203901][ T7338] kvm: pic: non byte read [ 2165.208472][ T7338] kvm: pic: non byte read [ 2165.212882][ T7338] kvm: pic: non byte read [ 2165.217501][ T7338] kvm: pic: non byte read [ 2165.221931][ T7338] kvm: pic: non byte read [ 2165.226363][ T7338] kvm: pic: non byte read [ 2165.230836][ T7338] kvm: pic: non byte read [ 2165.235194][ T7338] kvm: pic: non byte read [ 2165.305787][ T3770] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2165.326634][ T3770] usb 1-1: device descriptor read/8, error -71 [ 2165.519171][ T3771] usb 2-1: USB disconnect, device number 120 [ 2165.565803][ T3770] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2165.586236][ T3770] usb 1-1: device descriptor read/8, error -71 [ 2165.683762][ T7341] syzkaller0: entered promiscuous mode [ 2165.690265][ T7341] syzkaller0: entered allmulticast mode [ 2165.696204][ T3770] usb usb1-port1: unable to enumerate USB device [ 2165.952914][ T7350] netlink: 'syz.4.9905': attribute type 4 has an invalid length. [ 2166.104066][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9906'. [ 2166.495840][ T4454] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2166.657176][ T4454] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2166.665966][ T4454] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2166.676215][ T4454] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2166.694026][ T4454] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2166.730781][ T4454] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2166.740058][ T4454] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2166.748262][ T4454] usb 2-1: Product: syz [ 2166.752556][ T4454] usb 2-1: Manufacturer: syz [ 2166.765923][ T4454] cdc_wdm 2-1:1.0: skipping garbage [ 2166.771165][ T4454] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2166.814564][ T7370] kvm: emulating exchange as write [ 2167.036064][ T4454] usb 2-1: USB disconnect, device number 121 [ 2167.265815][ T3772] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2167.408478][ T3772] usb 3-1: device descriptor read/64, error -71 [ 2167.576401][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9919'. [ 2167.676090][ T3772] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2167.763543][ T7391] syzkaller1: entered promiscuous mode [ 2167.769078][ T7391] syzkaller1: entered allmulticast mode [ 2167.836237][ T3772] usb 3-1: device descriptor read/64, error -71 [ 2167.946137][ T3772] usb usb3-port1: attempt power cycle [ 2167.966387][ T4454] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2168.135776][ T4454] usb 6-1: Using ep0 maxpacket: 32 [ 2168.142105][ T4454] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 2168.150687][ T4454] usb 6-1: config 0 has no interface number 0 [ 2168.156938][ T4454] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2168.169219][ T4454] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2168.178388][ T4454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.186442][ T4454] usb 6-1: Product: syz [ 2168.190594][ T4454] usb 6-1: Manufacturer: syz [ 2168.195167][ T4454] usb 6-1: SerialNumber: syz [ 2168.202353][ T4454] usb 6-1: config 0 descriptor?? [ 2168.208013][ T7389] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2168.285826][ T3772] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2168.306270][ T3772] usb 3-1: device descriptor read/8, error -71 [ 2168.419421][ T7389] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2168.555889][ T3772] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2168.576369][ T3772] usb 3-1: device descriptor read/8, error -71 [ 2168.609356][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056013800: rx timeout, send abort [ 2168.617868][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056013800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2168.686203][ T3772] usb usb3-port1: unable to enumerate USB device [ 2168.925834][ T3772] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2169.075773][ T3772] usb 1-1: Using ep0 maxpacket: 32 [ 2169.086032][ T3772] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2169.097789][ T29] audit: type=1326 audit(1774938074.758:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.9927" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6f6c code=0x0 [ 2169.098165][ T3772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.128079][ T3772] usb 1-1: Product: syz [ 2169.132344][ T3772] usb 1-1: Manufacturer: syz [ 2169.137465][ T3772] usb 1-1: SerialNumber: syz [ 2169.168086][ T3772] usb 1-1: config 0 descriptor?? [ 2169.228379][ T3772] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2170.006013][ T3771] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2170.167833][ T3771] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2170.176637][ T3771] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.186786][ T3771] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2170.198685][ T3771] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2170.226591][ T3771] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2170.237712][ T3771] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2170.276349][ T3771] usb 2-1: Product: syz [ 2170.280532][ T3771] usb 2-1: Manufacturer: syz [ 2170.298349][ T7414] netlink: 'syz.2.9930': attribute type 1 has an invalid length. [ 2170.309062][ T3771] cdc_wdm 2-1:1.0: skipping garbage [ 2170.314294][ T3771] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2170.501067][ T7414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2170.540396][ T3771] usb 2-1: USB disconnect, device number 122 [ 2170.687621][ T7417] bond2: (slave geneve2): making interface the new active one [ 2170.708558][ T7417] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2170.963713][ T4454] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 2170.975860][ T3772] gspca_ov534_9: reg_w failed -71 [ 2170.981285][ T4454] asix 6-1:0.188: probe with driver asix failed with error -71 [ 2170.993268][ T4454] usb 6-1: USB disconnect, device number 50 [ 2171.215777][ T3772] gspca_ov534_9: Unknown sensor 0000 [ 2171.215870][ T3772] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 2171.239267][ T3772] usb 1-1: USB disconnect, device number 19 [ 2171.597313][ T7426] lo: entered allmulticast mode [ 2171.602361][ T7426] tunl0: entered allmulticast mode [ 2171.615935][ T7426] gre0: entered allmulticast mode [ 2171.621104][ T7426] gretap0: entered allmulticast mode [ 2171.629019][ T7426] erspan0: entered allmulticast mode [ 2171.635035][ T7426] ip_vti0: entered allmulticast mode [ 2171.647466][ T7426] ip6_vti0: entered allmulticast mode [ 2171.652971][ T7426] sit0: entered allmulticast mode [ 2171.681602][ T7426] ip6tnl0: entered allmulticast mode [ 2171.687685][ T7426] ip6gre0: entered allmulticast mode [ 2171.703357][ T7426] ip6gretap0: entered allmulticast mode [ 2171.716101][ T7426] bridge0: entered allmulticast mode [ 2171.734652][ T7426] vcan0: entered allmulticast mode [ 2171.741748][ T7426] team0: entered allmulticast mode [ 2171.747129][ T7426] dummy0: entered allmulticast mode [ 2171.752843][ T7426] nlmon0: entered allmulticast mode [ 2171.758524][ T7426] caif0: entered allmulticast mode [ 2171.763993][ T7426] batadv0: entered allmulticast mode [ 2171.769933][ T7426] vxcan0: entered allmulticast mode [ 2171.775657][ T7426] vxcan1: entered allmulticast mode [ 2171.800334][ T7426] veth0: entered allmulticast mode [ 2171.807758][ T7426] veth1: entered allmulticast mode [ 2171.813102][ T7426] wg0: entered allmulticast mode [ 2171.818821][ T7426] wg1: entered allmulticast mode [ 2171.823964][ T7426] wg2: entered allmulticast mode [ 2171.829690][ T7426] veth0_to_bridge: entered allmulticast mode [ 2171.836221][ T7426] bridge_slave_0: entered allmulticast mode [ 2171.844096][ T7426] veth1_to_bridge: entered allmulticast mode [ 2171.851086][ T7426] bridge_slave_1: entered allmulticast mode [ 2171.858097][ T7426] veth0_to_bond: entered allmulticast mode [ 2171.864202][ T7426] bond_slave_0: entered allmulticast mode [ 2171.870518][ T7426] veth1_to_bond: entered allmulticast mode [ 2171.885954][ T7426] bond_slave_1: entered allmulticast mode [ 2171.891994][ T7426] veth0_to_team: entered allmulticast mode [ 2171.902452][ T7426] team_slave_0: entered allmulticast mode [ 2171.912545][ T7426] veth1_to_team: entered allmulticast mode [ 2171.918754][ T3770] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2171.936353][ T7426] team_slave_1: entered allmulticast mode [ 2171.943232][ T7426] veth0_to_batadv: entered allmulticast mode [ 2171.951913][ T7426] batadv_slave_0: entered allmulticast mode [ 2171.958655][ T7426] xfrm0: entered allmulticast mode [ 2171.964281][ T7426] veth0_to_hsr: entered allmulticast mode [ 2171.971188][ T7426] hsr_slave_0: entered allmulticast mode [ 2171.977626][ T7426] veth1_to_hsr: entered allmulticast mode [ 2171.983926][ T7426] hsr_slave_1: entered allmulticast mode [ 2172.007544][ T7426] hsr0: entered allmulticast mode [ 2172.024157][ T7426] veth1_virt_wifi: entered allmulticast mode [ 2172.030655][ T7426] veth0_virt_wifi: entered allmulticast mode [ 2172.050002][ T7426] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2172.064074][ T7426] veth1_macvtap: entered allmulticast mode [ 2172.070693][ T7426] veth0_macvtap: entered allmulticast mode [ 2172.077789][ T7426] macsec0: entered allmulticast mode [ 2172.086893][ T7426] geneve0: entered allmulticast mode [ 2172.093098][ T3770] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 2172.101766][ T3770] usb 2-1: config 0 has an invalid descriptor of length 238, skipping remainder of the config [ 2172.112383][ T3770] usb 2-1: config 0 has no interface number 0 [ 2172.123479][ T3770] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 3791, setting to 1024 [ 2172.135261][ T7426] geneve1: entered allmulticast mode [ 2172.140918][ T7426] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 2172.145780][ T3772] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2172.148462][ T3770] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 2172.166502][ T7426] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 2172.174066][ T7426] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 2172.181735][ T3770] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2172.194982][ T7426] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 2172.203062][ T7426] mac80211_hwsim hwsim263 wlan1: entered allmulticast mode [ 2172.212088][ T3770] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2172.221445][ T3770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.229851][ T3770] usb 2-1: Product: syz [ 2172.240351][ T3770] usb 2-1: Manufacturer: syz [ 2172.245527][ T7426] vxlan0: left promiscuous mode [ 2172.250849][ T3770] usb 2-1: SerialNumber: syz [ 2172.255648][ T7426] vxlan0: entered allmulticast mode [ 2172.263683][ T3770] usb 2-1: config 0 descriptor?? [ 2172.269689][ T7428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2172.279332][ T3770] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2172.294600][ T3770] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 2172.309578][ T3772] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2172.318900][ T3770] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2172.319241][ T3772] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.346320][ T3772] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2172.355475][ T3772] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2172.369441][ T3772] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2172.379069][ T3772] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2172.395862][ T3772] usb 1-1: Product: syz [ 2172.400210][ T3772] usb 1-1: Manufacturer: syz [ 2172.426266][ T3772] cdc_wdm 1-1:1.0: skipping garbage [ 2172.433118][ T3772] cdc_wdm 1-1:1.0: skipping garbage [ 2172.464020][ T3772] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2172.476677][ T3772] cdc_wdm 1-1:1.0: Unknown control protocol [ 2172.674931][ T3772] usb 1-1: USB disconnect, device number 20 [ 2173.014124][ T3772] usb 2-1: USB disconnect, device number 123 [ 2173.036384][ T3772] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2173.054735][ T3772] cyberjack 2-1:0.69: device disconnected [ 2173.432732][ T29] audit: type=1326 audit(1774938079.088:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.5.9946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2173.460024][ T29] audit: type=1326 audit(1774938079.088:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.5.9946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2173.482791][ T29] audit: type=1326 audit(1774938079.088:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.5.9946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2173.483568][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9947'. [ 2173.504997][ T29] audit: type=1326 audit(1774938079.088:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.5.9946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2173.505044][ T29] audit: type=1326 audit(1774938079.088:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.5.9946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2173.514273][ T3772] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2173.537956][ T29] audit: type=1326 audit(1774938079.088:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.5.9946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2173.818486][ T3772] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2173.835810][ T3772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2173.846520][ T3772] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2173.855588][ T3772] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2173.870922][ T3772] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2173.880432][ T3772] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2173.889351][ T3772] usb 3-1: Product: syz [ 2173.893665][ T3772] usb 3-1: Manufacturer: syz [ 2173.908030][ T3772] cdc_wdm 3-1:1.0: skipping garbage [ 2173.918241][ T3772] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2174.033067][ T29] audit: type=1326 audit(1774938079.688:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 2174.073280][ T29] audit: type=1326 audit(1774938079.688:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 2174.096968][ T29] audit: type=1326 audit(1774938079.688:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7115cab code=0x7ffc0000 [ 2174.196808][ T29] audit: type=1326 audit(1774938079.688:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 2174.225428][T14181] usb 3-1: USB disconnect, device number 122 [ 2174.239886][ T29] audit: type=1326 audit(1774938079.688:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 2174.262899][ T29] audit: type=1326 audit(1774938079.708:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 2174.310202][ T29] audit: type=1326 audit(1774938079.718:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 2174.332703][ T29] audit: type=1326 audit(1774938079.718:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 2174.675944][T29482] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2175.070688][T29482] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2175.094082][T29482] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.150195][T29482] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2175.193264][T29482] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2175.247252][T29482] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2175.269540][T29482] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2175.293494][T29482] usb 6-1: Product: syz [ 2175.301680][T29482] usb 6-1: Manufacturer: syz [ 2175.325459][T29482] cdc_wdm 6-1:1.0: skipping garbage [ 2175.335450][T29482] cdc_wdm 6-1:1.0: skipping garbage [ 2175.361280][T29482] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2175.381241][T29482] cdc_wdm 6-1:1.0: Unknown control protocol [ 2175.551541][T29482] usb 6-1: USB disconnect, device number 51 [ 2176.835983][T29482] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2176.981557][T29482] usb 2-1: device descriptor read/64, error -71 [ 2177.244540][T29482] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2177.385808][T29482] usb 2-1: device descriptor read/64, error -71 [ 2177.640100][T29482] usb usb2-port1: attempt power cycle [ 2178.076618][T29482] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2178.096413][T29482] usb 2-1: device descriptor read/8, error -71 [ 2178.575813][T29482] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2178.709667][T29482] usb 2-1: device descriptor read/8, error -71 [ 2178.994584][T29482] usb usb2-port1: unable to enumerate USB device [ 2180.484920][ T7555] syzkaller0: entered promiscuous mode [ 2180.512369][ T7555] syzkaller0: entered allmulticast mode [ 2182.835892][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 2200.154485][ C0] sched: DL replenish lagged too much [ 2201.710895][T28859] Bluetooth: hci3: command tx timeout [ 2222.318775][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.332194][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2275.862665][ T7582] Bluetooth: hci2: command tx timeout [ 2283.259302][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.272787][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2323.915627][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2323.922602][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4520/1:b..l [ 2323.931136][ C1] rcu: (detected by 1, t=10503 jiffies, g=261825, q=1129 ncpus=2) [ 2323.939035][ C1] task:syz-executor state:R running task stack:21992 pid:4520 tgid:4520 ppid:4515 task_flags:0x400140 flags:0x08080000 [ 2323.953861][ C1] Call Trace: [ 2323.957149][ C1] [ 2323.960095][ C1] __schedule+0x15dd/0x52d0 [ 2323.964632][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2323.969584][ C1] ? __pfx___schedule+0x10/0x10 [ 2323.974451][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2323.979418][ C1] preempt_schedule_irq+0x4d/0xa0 [ 2323.984538][ C1] irqentry_exit+0x599/0x620 [ 2323.989136][ C1] ? trace_irq_disable+0x3b/0x150 [ 2323.994189][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2324.000179][ C1] RIP: 0010:unwind_next_frame+0x223/0x23c0 [ 2324.006000][ C1] Code: 86 78 04 00 00 44 89 f8 4c 8d 2c 85 9c ea 52 91 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 48 89 eb 0f 85 25 1c 00 00 45 8b 6d 00 <44> 89 f8 ff c0 48 8d 2c 85 9c ea 52 91 48 89 e8 48 c1 e8 03 0f b6 [ 2324.025619][ C1] RSP: 0018:ffffc90004e0efb8 EFLAGS: 00000246 [ 2324.031695][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000080000000 [ 2324.039672][ C1] RDX: 00000000000ab2fc RSI: ffffffff8c27d0e0 RDI: ffffffff8c27d0a0 [ 2324.047650][ C1] RBP: dffffc0000000000 R08: ffffffff81767e95 R09: ffffffff8e75e5e0 [ 2324.055636][ C1] R10: ffffc90004e0f0d8 R11: ffffffff81b0d030 R12: ffffffff82414593 [ 2324.063618][ C1] R13: 00000000000405bb R14: ffffc90004e0f088 R15: 0000000000014145 [ 2324.071595][ C1] ? do_dentry_open+0x383/0x14e0 [ 2324.076549][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2324.082712][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2324.087844][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 2324.092975][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2324.098105][ C1] ? do_dentry_open+0x384/0x14e0 [ 2324.103056][ C1] ? do_dentry_open+0x384/0x14e0 [ 2324.108005][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2324.114169][ C1] arch_stack_walk+0x11b/0x150 [ 2324.118952][ C1] ? do_dentry_open+0x384/0x14e0 [ 2324.123908][ C1] stack_trace_save+0xa9/0x100 [ 2324.128678][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2324.134062][ C1] save_stack+0x122/0x230 [ 2324.138399][ C1] ? __pfx_save_stack+0x10/0x10 [ 2324.143263][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 2324.148556][ C1] ? __slab_free+0x263/0x2b0 [ 2324.153149][ C1] ? qlist_free_all+0x97/0x100 [ 2324.157921][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 2324.163555][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 2324.168587][ C1] ? __kmalloc_noprof+0x316/0x760 [ 2324.173612][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2324.179334][ C1] ? tomoyo_check_open_permission+0x229/0x470 [ 2324.185410][ C1] ? security_file_open+0xa9/0x240 [ 2324.190527][ C1] ? do_dentry_open+0x384/0x14e0 [ 2324.195483][ C1] ? page_ext_put+0x97/0xc0 [ 2324.199993][ C1] __reset_page_owner+0x71/0x1f0 [ 2324.204941][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 2324.210063][ C1] __slab_free+0x263/0x2b0 [ 2324.214485][ C1] ? qlist_free_all+0x8c/0x100 [ 2324.219257][ C1] qlist_free_all+0x97/0x100 [ 2324.223854][ C1] kasan_quarantine_reduce+0x148/0x160 [ 2324.229316][ C1] __kasan_slab_alloc+0x22/0x80 [ 2324.234187][ C1] __kmalloc_noprof+0x316/0x760 [ 2324.239045][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2324.244766][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 2324.249800][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2324.255363][ C1] tomoyo_check_open_permission+0x229/0x470 [ 2324.261267][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 2324.267343][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2324.273805][ C1] security_file_open+0xa9/0x240 [ 2324.278758][ C1] do_dentry_open+0x384/0x14e0 [ 2324.283623][ C1] ? vfs_open+0x31/0x340 [ 2324.287877][ C1] vfs_open+0x3b/0x340 [ 2324.291951][ C1] ? path_openat+0x2df0/0x3860 [ 2324.296719][ C1] path_openat+0x2e08/0x3860 [ 2324.301329][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2324.306710][ C1] ? stack_depot_save_flags+0x33/0x810 [ 2324.312201][ C1] ? __pfx_path_openat+0x10/0x10 [ 2324.317147][ C1] ? __ia32_compat_sys_openat+0x131/0x160 [ 2324.322874][ C1] ? __do_fast_syscall_32+0x20d/0x640 [ 2324.328258][ C1] ? do_fast_syscall_32+0x33/0x70 [ 2324.333286][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2324.339803][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2324.344752][ C1] do_file_open+0x23e/0x4a0 [ 2324.349263][ C1] ? __pfx_do_file_open+0x10/0x10 [ 2324.354308][ C1] ? _raw_spin_unlock+0x28/0x50 [ 2324.359162][ C1] ? alloc_fd+0x64b/0x6c0 [ 2324.363513][ C1] do_sys_openat2+0x113/0x200 [ 2324.368202][ C1] ? __pfx_get_old_timespec32+0x10/0x10 [ 2324.373764][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 2324.378976][ C1] ? __se_sys_clock_nanosleep_time32+0x35d/0x3b0 [ 2324.385317][ C1] __ia32_compat_sys_openat+0x131/0x160 [ 2324.390884][ C1] __do_fast_syscall_32+0x20d/0x640 [ 2324.396101][ C1] ? do_fast_syscall_32+0x33/0x70 [ 2324.401145][ C1] ? asm_int80_emulation+0x1a/0x20 [ 2324.406255][ C1] ? do_int80_emulation+0x274/0x4d0 [ 2324.411461][ C1] ? trace_irq_disable+0x3b/0x150 [ 2324.416499][ C1] do_fast_syscall_32+0x33/0x70 [ 2324.421360][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2324.427698][ C1] RIP: 0023:0xf7fc6f6c [ 2324.431770][ C1] RSP: 002b:00000000f75afd50 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2324.440187][ C1] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f728f7f6 [ 2324.448165][ C1] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f7452ff4 [ 2324.456142][ C1] RBP: 000000000000025f R08: 0000000000000000 R09: 0000000000000000 [ 2324.464111][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2324.472086][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2324.480078][ C1]