last executing test programs: 4m49.641087629s ago: executing program 4 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m48.962921446s ago: executing program 4 (id=433): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r2, 0xffffffffffffffff, 0x4, r0}, 0x10) 4m48.762276747s ago: executing program 4 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x3e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f74b60", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m47.808186399s ago: executing program 4 (id=445): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) 4m46.913830744s ago: executing program 4 (id=454): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 4m46.707040831s ago: executing program 4 (id=458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x138, 0x20240}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 4m31.606096716s ago: executing program 32 (id=458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x138, 0x20240}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 2m10.636721296s ago: executing program 5 (id=2116): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 2m10.298676761s ago: executing program 5 (id=2123): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x9eff, 0x100, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x3, 0x6, @mcast2, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @empty}}}, 0x108) 2m10.048840765s ago: executing program 5 (id=2126): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0xd, @remote, 0x7}, r1}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x9, {"fde328141f852b96b9618255a6066069"}, 0x3, 0x0, 0x8}}}, 0x90) 2m9.68454568s ago: executing program 5 (id=2130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 2m9.467749222s ago: executing program 5 (id=2134): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b003dd108000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000300050800800030002ac0f0011000100cabee339084eeef16f162471f40000000500090002000000050002"], 0x58}}, 0x0) 2m8.528236814s ago: executing program 5 (id=2142): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 2m7.88054016s ago: executing program 33 (id=2142): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 6.284959336s ago: executing program 2 (id=3301): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x2b, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES32=r0], 0x0) 4.81157228s ago: executing program 2 (id=3321): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 4.315976036s ago: executing program 3 (id=3327): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.278962758s ago: executing program 2 (id=3329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000001100000018110000", @ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4.007918672s ago: executing program 2 (id=3333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@remote, @in=@remote}, {@in=@empty, 0x0, 0x2b}, @in=@private, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 3.815415946s ago: executing program 2 (id=3336): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x40, 0x30, 0xc, "008000010a01000000000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x40, 0x6, 0x28, "42a8644c28e73063a3f65be48d0e3a13c71311db90aa392d163f8cb83ff041feae3c7e374bddce7c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x0, 0xe, 0x4, "6d517794"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.380140676s ago: executing program 0 (id=3339): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1}, 0x8) 2.377226088s ago: executing program 1 (id=3347): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) 2.369611498s ago: executing program 0 (id=3348): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f000000009cf8dc420f2b1e277fffffeb"}) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x82fb, 0x0, "1eb4d100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 2.300077349s ago: executing program 1 (id=3350): open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) 2.13403353s ago: executing program 0 (id=3351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000d004"]) 2.074679066s ago: executing program 3 (id=3352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) 1.940564784s ago: executing program 1 (id=3353): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8000001a) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 1.939643401s ago: executing program 3 (id=3354): socket$nl_generic(0x11, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) 1.900037355s ago: executing program 6 (id=3355): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000200a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0xf8}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.80311556s ago: executing program 0 (id=3356): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "1d58a2bb775c1287", "6c9717a624c87e58ae00c9baeb80270c", "bf1cefb3", "882ef1ccb4daf6cc"}, 0x28) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) 1.716103578s ago: executing program 1 (id=3357): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.615181469s ago: executing program 3 (id=3358): unshare(0x62040600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) 1.615046844s ago: executing program 6 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.508986568s ago: executing program 6 (id=3360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.38827729s ago: executing program 2 (id=3361): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.329484735s ago: executing program 6 (id=3362): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000005c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x200840b0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x2000, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000100)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40002c1, 0x2000a002, 0x0) 1.156113301s ago: executing program 6 (id=3363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003300004000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000ff0200000000000000000000000000010000000032"], 0x13c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1.027464267s ago: executing program 1 (id=3364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 958.647857ms ago: executing program 6 (id=3365): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7", 0x7}], 0x1}, 0x20048050) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047"], 0x232) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000050000106a05310300000000000109022400010000800009040002090300010009210000000122000509058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 620.290105ms ago: executing program 1 (id=3366): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 555.885997ms ago: executing program 3 (id=3367): sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x2000c001) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0xffffff3f, 0x316575}}) 443.947217ms ago: executing program 0 (id=3368): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0xffffff68, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x2400b735) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="9c30ef8699ab"}) 100.237632ms ago: executing program 0 (id=3369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000d70b024d564b"]) 0s ago: executing program 3 (id=3370): socket(0x2, 0x80805, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r0, 0x567, 0xfffffffd, 0x28, 0x0, 0x0) kernel console output (not intermixed with test programs): bcdDevice= 0.40 [ 288.464808][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.464826][ T10] usb 4-1: SerialNumber: syz [ 288.525546][ T10] usb 4-1: bad CDC descriptors [ 288.526766][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 288.551557][ T5931] usb 3-1: USB disconnect, device number 24 [ 288.552440][ T10] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 288.553687][ T10] scsi host1: usb-storage 4-1:1.0 [ 288.554331][ T5931] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 289.365566][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 289.365603][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 289.458963][ T1164] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.476370][ T1164] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.476416][ T1164] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.476446][ T1164] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.878036][ T5931] usb 4-1: USB disconnect, device number 16 [ 290.275581][T10913] hsr0: entered promiscuous mode [ 290.276033][T10913] macsec1: entered allmulticast mode [ 290.276047][T10913] hsr0: entered allmulticast mode [ 290.276057][T10913] hsr_slave_0: entered allmulticast mode [ 290.276077][T10913] hsr_slave_1: entered allmulticast mode [ 290.323104][T10913] hsr0: left allmulticast mode [ 290.323124][T10913] hsr_slave_0: left allmulticast mode [ 290.323144][T10913] hsr_slave_1: left allmulticast mode [ 290.330047][ T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 290.339812][ T5932] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 290.349865][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.479977][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 290.491286][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 290.491318][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 290.491337][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.495381][ T5932] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 290.495459][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.498694][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.498717][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.498734][ T45] usb 1-1: SerialNumber: syz [ 290.543602][ T5932] usb 3-1: config 0 descriptor?? [ 290.563056][T10898] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.842349][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 290.872395][ T45] usb 1-1: USB disconnect, device number 20 [ 291.190615][T10933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.412040][ T5932] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 291.412066][ T5932] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 291.429536][ T5932] asix 3-1:0.0: probe with driver asix failed with error -71 [ 291.441884][ T5932] usb 3-1: USB disconnect, device number 25 [ 292.270122][T10970] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 292.748685][ T5924] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 292.836252][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1976'. [ 292.898467][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 292.901300][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.921612][ T5924] usb 2-1: config 9 has an invalid interface number: 48 but max is 0 [ 292.921637][ T5924] usb 2-1: config 9 has no interface number 0 [ 292.921674][ T5924] usb 2-1: config 9 interface 48 has no altsetting 0 [ 292.924740][ T5924] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 292.924764][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.924781][ T5924] usb 2-1: Product: syz [ 292.924794][ T5924] usb 2-1: Manufacturer: syz [ 292.924807][ T5924] usb 2-1: SerialNumber: syz [ 293.234898][ T5924] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 293.300112][T11003] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 293.300612][T11003] macvtap1: entered allmulticast mode [ 293.300708][T11003] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 293.404573][T11003] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 293.406412][T11003] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 293.844016][ T5924] gspca_vc032x: reg_r err -71 [ 293.844045][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844055][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844063][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844071][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844080][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844088][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844095][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844104][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844111][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844119][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844127][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844135][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844143][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844151][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844158][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844166][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844173][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844181][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844189][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 293.844196][ T5924] gspca_vc032x: Unknown sensor... [ 293.844282][ T5924] vc032x 2-1:9.48: probe with driver vc032x failed with error -22 [ 293.970860][ T5924] usb 2-1: USB disconnect, device number 15 [ 294.517851][ T5891] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 294.677725][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 294.696381][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.705251][ T5891] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 294.705287][ T5891] usb 3-1: can't read configurations, error -71 [ 294.973361][ T5924] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 295.117393][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 295.120293][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.120373][ T5924] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 295.120396][ T5924] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.120431][ T5924] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.123508][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.123532][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.123548][ T5924] usb 1-1: Product: syz [ 295.123559][ T5924] usb 1-1: Manufacturer: syz [ 295.123571][ T5924] usb 1-1: SerialNumber: syz [ 295.153110][T11048] netlink: 'syz.3.2004': attribute type 11 has an invalid length. [ 295.439233][ T5924] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 295.439265][ T5924] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 295.439280][ T5924] usb 1-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 295.439338][ T5924] usb 1-1: 2:1 : invalid channels 0 [ 295.503607][ T5924] usb 1-1: USB disconnect, device number 21 [ 296.099516][ T5931] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 296.110905][ T5931] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 296.519882][T11083] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 297.737412][T11127] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2040'. [ 298.084284][ T5932] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 298.136205][ T5932] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 298.357262][T11147] loop7: detected capacity change from 0 to 7 [ 298.363342][T11147] Dev loop7: unable to read RDB block 7 [ 298.363386][T11147] loop7: AHDI p1 p2 [ 298.363415][T11147] loop7: partition table partially beyond EOD, truncated [ 298.363522][T11147] loop7: p1 start 1702000233 is beyond EOD, truncated [ 298.708375][ T5891] kernel write not supported for file /uhid (pid: 5891 comm: kworker/0:4) [ 299.129497][T11172] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2061'. [ 299.146287][ T5932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 299.210788][T11175] netlink: 'syz.3.2063': attribute type 2 has an invalid length. [ 299.210807][T11175] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2063'. [ 299.305395][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 299.308548][ T5932] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 299.311598][ T5932] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 299.311623][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.311641][ T5932] usb 6-1: Product: syz [ 299.311653][ T5932] usb 6-1: Manufacturer: syz [ 299.311666][ T5932] usb 6-1: SerialNumber: syz [ 299.367252][ T5932] usb 6-1: config 0 descriptor?? [ 299.372081][ T5932] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 299.372138][ T5932] usb 6-1: setting power ON [ 299.372157][ T5932] dvb-usb: bulk message failed: -22 (2/0) [ 299.404979][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.416452][ T5932] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 299.416503][ T5932] usb 6-1: media controller created [ 299.471354][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.506114][ T5932] usb 6-1: selecting invalid altsetting 6 [ 299.506135][ T5932] usb 6-1: digital interface selection failed (-22) [ 299.506149][ T5932] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 299.506978][ T5932] usb 6-1: setting power OFF [ 299.506996][ T5932] dvb-usb: bulk message failed: -22 (2/0) [ 299.507010][ T5932] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 299.507022][ T5932] (NULL device *): no alternate interface [ 299.586175][T11165] dvb-usb: bulk message failed: -22 (3/0) [ 299.586201][T11165] dvb-usb: bulk message failed: -22 (37/0) [ 299.586628][T11165] dvb-usb: bulk message failed: -22 (3/0) [ 299.586645][T11165] dvb-usb: bulk message failed: -22 (4/0) [ 299.586656][T11165] cxusb: i2c read failed [ 299.631409][ T5932] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 299.645245][ T5932] usb 6-1: USB disconnect, device number 6 [ 300.402661][T11211] ref_ctr_offset mismatch. inode: 0x3ac offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 301.825482][ T5924] IPVS: starting estimator thread 0... [ 301.944242][T11275] IPVS: using max 7 ests per chain, 16800 per kthread [ 302.163062][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 302.163079][ T37] audit: type=1326 audit(1756670543.121:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.5.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa72ebe9 code=0x7ffc0000 [ 302.163125][ T37] audit: type=1326 audit(1756670543.121:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.5.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa72ebe9 code=0x7ffc0000 [ 302.174137][ T37] audit: type=1326 audit(1756670543.141:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.5.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feefa72ebe9 code=0x7ffc0000 [ 302.174411][ T37] audit: type=1326 audit(1756670543.141:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.5.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa72ebe9 code=0x7ffc0000 [ 302.174828][ T37] audit: type=1326 audit(1756670543.141:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.5.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7feefa72ebe9 code=0x7ffc0000 [ 302.226914][ T37] audit: type=1326 audit(1756670543.191:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.5.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa72ebe9 code=0x7ffc0000 [ 302.524272][T11297] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 302.524293][T11297] netlink: 'syz.3.2121': attribute type 2 has an invalid length. [ 302.801203][T11309] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2125'. [ 303.051749][T11316] netlink: 'syz.1.2129': attribute type 83 has an invalid length. [ 305.139964][T11357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2148'. [ 305.178201][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.680231][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.702163][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.705735][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.708192][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.738224][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.749396][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.751327][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.835075][T11370] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 306.321879][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.652397][ T5931] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 306.796373][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.828659][ T5931] usb 3-1: config 0 has an invalid interface number: 104 but max is 0 [ 306.828685][ T5931] usb 3-1: config 0 has no interface number 0 [ 306.828716][ T5931] usb 3-1: config 0 interface 104 has no altsetting 0 [ 306.843813][ T5931] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 306.843840][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.843858][ T5931] usb 3-1: Product: syz [ 306.843869][ T5931] usb 3-1: Manufacturer: syz [ 306.843881][ T5931] usb 3-1: SerialNumber: syz [ 306.853962][ T5931] usb 3-1: config 0 descriptor?? [ 306.859255][ T5931] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 307.076820][ T5931] gspca_vc032x: reg_r err -71 [ 307.076833][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076838][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076843][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076847][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076851][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076855][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076859][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076864][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076867][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076871][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076875][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076879][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076883][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076887][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076891][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076895][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076899][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076903][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.076907][ T5931] gspca_vc032x: Unknown sensor... [ 307.076956][ T5931] vc032x 3-1:0.104: probe with driver vc032x failed with error -22 [ 307.114277][ T5931] usb 3-1: USB disconnect, device number 28 [ 307.682906][T11372] chnl_net:caif_netlink_parms(): no params data found [ 307.861106][ T59] Bluetooth: hci4: command tx timeout [ 308.023918][ T13] bridge_slave_1: left allmulticast mode [ 308.023954][ T13] bridge_slave_1: left promiscuous mode [ 308.024223][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.112628][ T13] bridge_slave_0: left allmulticast mode [ 308.112662][ T13] bridge_slave_0: left promiscuous mode [ 308.112950][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.961988][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.270514][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 309.428914][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 309.428943][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.433576][ T9] usb 3-1: config 0 descriptor?? [ 309.456068][ T9] cp210x 3-1:0.0: cp210x converter detected [ 309.787659][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.841172][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.861185][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 309.869050][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 309.894742][ T13] bond0 (unregistering): Released all slaves [ 309.940296][ T59] Bluetooth: hci4: command tx timeout [ 310.080384][ T9] usb 3-1: USB disconnect, device number 29 [ 310.109681][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 310.250314][ T9] cp210x 3-1:0.0: device disconnected [ 310.256731][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2190'. [ 310.732262][T11372] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.732849][T11372] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.733107][T11372] bridge_slave_0: entered allmulticast mode [ 310.740377][T11372] bridge_slave_0: entered promiscuous mode [ 310.759570][T11372] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.759718][T11372] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.759970][T11372] bridge_slave_1: entered allmulticast mode [ 310.777604][T11372] bridge_slave_1: entered promiscuous mode [ 311.543523][T11372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.547108][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2212'. [ 311.609854][T11372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.815871][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2214'. [ 311.891154][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 312.018920][ T59] Bluetooth: hci4: command tx timeout [ 312.039898][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 312.077343][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.333335][ T13] hsr_slave_0: left promiscuous mode [ 312.393253][ T13] hsr_slave_1: left promiscuous mode [ 312.394183][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.394210][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.444381][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.444415][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.662563][ T13] veth1_macvtap: left promiscuous mode [ 312.669776][ T13] veth0_macvtap: left promiscuous mode [ 312.670067][ T13] veth1_vlan: left promiscuous mode [ 312.670263][ T13] veth0_vlan: left promiscuous mode [ 313.008598][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 313.174914][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.174971][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 313.174996][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 313.175019][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 313.175039][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.183783][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 313.183811][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 313.183829][ T9] usb 4-1: Product: syz [ 313.183841][ T9] usb 4-1: Manufacturer: syz [ 313.183853][ T9] usb 4-1: SerialNumber: syz [ 313.205773][ T9] usb 4-1: config 0 descriptor?? [ 313.439413][ T9] radio-si470x 4-1:0.0: DeviceID=0xc8c8 ChipID=0xc500 [ 313.641012][ T9] radio-si470x 4-1:0.0: software version 200, hardware version 200 [ 313.848077][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 313.848133][ T9] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 313.848886][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 313.849203][ T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 313.873038][ T9] usb 4-1: USB disconnect, device number 17 [ 314.107925][ T59] Bluetooth: hci4: command tx timeout [ 315.848037][ T13] team0 (unregistering): Port device team_slave_1 removed [ 316.080409][ T13] team0 (unregistering): Port device team_slave_0 removed [ 317.227010][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227087][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.288108][T11372] team0: Port device team_slave_0 added [ 318.340669][T11549] bond0: entered promiscuous mode [ 318.340691][T11549] bond_slave_0: entered promiscuous mode [ 318.340926][T11549] bond_slave_1: entered promiscuous mode [ 318.375771][T11549] bond0: left promiscuous mode [ 318.375793][T11549] bond_slave_0: left promiscuous mode [ 318.376051][T11549] bond_slave_1: left promiscuous mode [ 318.470121][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.552557][T11372] team0: Port device team_slave_1 added [ 318.869870][T11372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.869884][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.869904][T11372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.872040][T11372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.872053][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.872076][T11372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.247834][T11372] hsr_slave_0: entered promiscuous mode [ 319.249131][T11372] hsr_slave_1: entered promiscuous mode [ 319.617580][T11607] dummy0: entered promiscuous mode [ 319.621411][T11607] dummy0: left promiscuous mode [ 320.005007][ T5931] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 320.154850][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 320.157461][ T5931] usb 4-1: config 1 has an invalid interface number: 220 but max is 1 [ 320.157485][ T5931] usb 4-1: config 1 has an invalid interface number: 76 but max is 1 [ 320.157502][ T5931] usb 4-1: config 1 has no interface number 0 [ 320.157516][ T5931] usb 4-1: config 1 has no interface number 1 [ 320.157560][ T5931] usb 4-1: config 1 interface 220 has no altsetting 0 [ 320.157576][ T5931] usb 4-1: config 1 interface 76 has no altsetting 0 [ 320.160585][ T5931] usb 4-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4 [ 320.160608][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.160626][ T5931] usb 4-1: Product: syz [ 320.160638][ T5931] usb 4-1: Manufacturer: syz [ 320.160650][ T5931] usb 4-1: SerialNumber: syz [ 320.491514][ T5931] usb 4-1: USB disconnect, device number 18 [ 321.068990][T11372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 321.112121][T11372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 321.139742][T11643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2272'. [ 321.160286][T11372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 321.201833][T11372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 321.294923][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 321.295112][ T5891] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 321.452753][ T9] usb 1-1: config 0 has an invalid interface number: 227 but max is 0 [ 321.452778][ T9] usb 1-1: config 0 has no interface number 0 [ 321.452893][ T9] usb 1-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 321.452919][ T9] usb 1-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 321.452942][ T9] usb 1-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 321.452962][ T9] usb 1-1: config 0 interface 227 has no altsetting 0 [ 321.454342][ T5891] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 321.454419][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.493285][ T5891] usb 3-1: config 0 descriptor?? [ 321.498047][ T9] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 321.498073][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.498091][ T9] usb 1-1: Product: syz [ 321.498111][ T9] usb 1-1: Manufacturer: syz [ 321.498123][ T9] usb 1-1: SerialNumber: syz [ 321.550578][ T9] usb 1-1: config 0 descriptor?? [ 321.552734][T11639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 321.598866][ T9] usbtouchscreen 1-1:0.227: probe with driver usbtouchscreen failed with error -90 [ 321.975722][T11372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.110573][T11372] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.134563][ T5891] usb 3-1: Cannot set autoneg [ 322.134832][ T5891] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 322.167859][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.169656][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.183946][ T5891] usb 3-1: USB disconnect, device number 30 [ 322.227613][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.227769][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.280192][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2276'. [ 322.292644][T11663] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2276'. [ 322.346689][T11663] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2276'. [ 322.828402][T11675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2279'. [ 322.883015][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 322.883137][T11681] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2280'. [ 323.150969][T11372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.176685][ T5931] usb 1-1: USB disconnect, device number 22 [ 323.608971][T11372] veth0_vlan: entered promiscuous mode [ 323.646722][T11372] veth1_vlan: entered promiscuous mode [ 323.739562][T11372] veth0_macvtap: entered promiscuous mode [ 323.826991][T11372] veth1_macvtap: entered promiscuous mode [ 323.962612][T11372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.994389][T11372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.067481][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.067997][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.068542][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.068802][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.592410][T11731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2300'. [ 324.611912][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.611931][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.672812][ T5932] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 324.759130][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.759150][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.832714][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 324.836881][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 324.839686][ T5932] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 324.839707][ T5932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.839724][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.886200][ T5932] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.886227][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.886246][ T5932] usb 4-1: Product: syz [ 324.886259][ T5932] usb 4-1: Manufacturer: syz [ 324.886271][ T5932] usb 4-1: SerialNumber: syz [ 325.178181][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.185252][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.215191][ T5932] usb 4-1: 0:2 : does not exist [ 325.249921][ T5932] usb 4-1: USB disconnect, device number 19 [ 325.664147][ T5891] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 325.717097][ T5932] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 325.839311][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.839340][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.839359][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.839397][ T5891] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.839418][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.857055][ T5891] usb 7-1: config 0 descriptor?? [ 325.914784][ T5932] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 325.914808][ T5932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.914824][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.918245][ T5932] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 325.918270][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.918286][ T5932] usb 4-1: Product: syz [ 325.918298][ T5932] usb 4-1: Manufacturer: syz [ 325.918311][ T5932] usb 4-1: SerialNumber: syz [ 326.227291][ T5932] usb 4-1: 0:2 : does not exist [ 326.384465][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384499][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384525][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384549][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384572][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384595][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384620][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384643][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384668][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.384691][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 326.426491][ T5891] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 326.494998][ T5932] usb 4-1: USB disconnect, device number 20 [ 326.588180][T11760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.726816][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 326.748665][ T5931] usb 7-1: USB disconnect, device number 2 [ 326.952307][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2318'. [ 326.986611][T11773] evm: overlay not supported [ 327.427572][ T37] audit: type=1804 audit(1756670568.394:1555): pid=11786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.2323" name=2F6E6577726F6F742F3233322F66696C65302FE91F7189591E9233614B dev="hugetlbfs" ino=32650 res=1 errno=0 [ 328.705058][T11814] tun0: tun_chr_ioctl cmd 1074025675 [ 328.705078][T11814] tun0: persist enabled [ 328.707105][T11814] tun0: tun_chr_ioctl cmd 1074025675 [ 328.707121][T11814] tun0: persist enabled [ 328.770787][ T5891] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 328.920455][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 328.923591][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.925197][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 328.925240][ T5891] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1048, setting to 1024 [ 328.925264][ T5891] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 328.925285][ T5891] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 328.992023][ T5891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.992052][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.992069][ T5891] usb 4-1: Product: syz [ 328.992081][ T5891] usb 4-1: Manufacturer: syz [ 328.992094][ T5891] usb 4-1: SerialNumber: syz [ 329.085484][T11822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.458862][T11810] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.458987][T11810] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.095007][ T5891] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 330.095498][ T5891] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 330.120537][ T5891] cdc_ncm 4-1:1.0: bind() failure [ 330.189300][ T5891] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 330.189345][ T5891] cdc_ncm 4-1:1.1: bind() failure [ 330.251933][ T5891] usb 4-1: USB disconnect, device number 21 [ 331.154103][ T37] audit: type=1326 audit(1756670572.126:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11853 comm="syz.0.2354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f789c3bebe9 code=0x0 [ 331.942289][ T37] audit: type=1800 audit(1756670572.896:1557): pid=11870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2361" name="memory.events" dev="tmpfs" ino=68 res=0 errno=0 [ 332.988642][T11891] loop7: detected capacity change from 0 to 7 [ 332.996900][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.997121][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 332.997484][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.997512][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 332.997694][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.997717][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 332.997895][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.997931][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 332.998155][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.998181][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.004052][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.004084][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.004298][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.004324][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.004409][T11891] ldm_validate_partition_table(): Disk read failed. [ 333.004603][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.004628][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.004856][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.004880][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.005106][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.005130][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.005406][T11891] Dev loop7: unable to read RDB block 0 [ 333.006440][T11891] loop7: unable to read partition table [ 333.006670][T11891] loop7: partition table beyond EOD, truncated [ 333.006687][T11891] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 333.408283][T11898] netlink: 'syz.6.2372': attribute type 3 has an invalid length. [ 333.408303][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2372'. [ 333.706231][T11886] input: syz0 as /devices/virtual/input/input21 [ 335.087358][ T5931] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 335.254461][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 335.254507][ T5931] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 335.254527][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.290956][ T5931] usb 7-1: config 0 descriptor?? [ 335.295273][T11940] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 335.779232][ T5931] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 335.942471][ T5932] usb 7-1: USB disconnect, device number 3 [ 336.257978][T11976] sctp: [Deprecated]: syz.0.2407 (pid 11976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.257978][T11976] Use struct sctp_sack_info instead [ 336.956641][ T5931] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 337.048783][ T5924] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 337.126488][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 337.133901][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.133956][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 337.133977][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.146779][ T5931] usb 2-1: config 0 descriptor?? [ 337.151941][ T5931] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 337.203646][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 337.204468][ T5924] usb 4-1: not running at top speed; connect to a high speed hub [ 337.223930][ T5924] usb 4-1: config 187 interface 0 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 337.223959][ T5924] usb 4-1: config 187 interface 0 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 337.223984][ T5924] usb 4-1: config 187 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 337.224007][ T5924] usb 4-1: config 187 interface 0 has no altsetting 0 [ 337.256280][ T5924] usb 4-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=e2.be [ 337.256313][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.256330][ T5924] usb 4-1: Product: syz [ 337.256341][ T5924] usb 4-1: Manufacturer: syz [ 337.256353][ T5924] usb 4-1: SerialNumber: syz [ 337.309318][T11997] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 337.309687][T11997] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 337.494855][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 337.542132][ T5924] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.677282][ T5924] usb 4-1: USB disconnect, device number 22 [ 337.846135][ T5858] Bluetooth: hci5: command 0x1003 tx timeout [ 337.856147][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 338.194714][ T5931] gspca_vc032x: reg_r err -71 [ 338.194807][ T5931] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 338.205361][ T5931] usb 2-1: USB disconnect, device number 16 [ 338.226417][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2424'. [ 338.226453][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2424'. [ 338.226466][T12013] netlink: 50 bytes leftover after parsing attributes in process `syz.6.2424'. [ 338.934569][T12029] team_slave_1: left promiscuous mode [ 339.150998][ T5932] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 339.335424][ T5932] usb 7-1: Using ep0 maxpacket: 32 [ 339.342909][ T5932] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 339.342936][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.357201][ T5932] usb 7-1: config 0 descriptor?? [ 339.625130][ T5932] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 339.636105][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.646365][ T5932] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 339.646419][ T5932] usb 7-1: media controller created [ 339.777343][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.841459][ T5932] az6027: usb out operation failed. (-71) [ 339.841884][ T5932] az6027: usb out operation failed. (-71) [ 339.841897][ T5932] stb0899_attach: Driver disabled by Kconfig [ 339.841906][ T5932] az6027: no front-end attached [ 339.841906][ T5932] [ 339.842329][ T5932] az6027: usb out operation failed. (-71) [ 339.842342][ T5932] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 339.845849][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 339.848506][ T5932] dvb-usb: schedule remote query interval to 400 msecs. [ 339.848524][ T5932] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 339.852111][ T5932] usb 7-1: USB disconnect, device number 4 [ 339.962287][T12056] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 339.962311][T12056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 339.962504][T12056] overlayfs: failed to get uuid (257/file1, err=-13); falling back to uuid=null. [ 339.983946][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.036429][ T5932] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 340.285983][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.729436][T12029] team0 (unregistering): Port device team_slave_0 removed [ 340.757654][T12029] team0 (unregistering): Port device team_slave_1 removed [ 342.263682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 342.955012][T12117] netlink: 'syz.0.2470': attribute type 9 has an invalid length. [ 343.403384][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 343.555820][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 343.555910][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.558060][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 343.558084][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 343.558102][ T10] usb 4-1: Manufacturer: syz [ 343.578802][ T10] usb 4-1: config 0 descriptor?? [ 343.683334][ T10] rc_core: IR keymap rc-hauppauge not found [ 343.683355][ T10] Registered IR keymap rc-empty [ 343.693669][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 343.696552][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 343.878415][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 343.948185][ T10] usb 4-1: USB disconnect, device number 23 [ 344.214627][ T5924] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 344.399636][ T5924] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 344.399668][ T5924] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 344.414807][ T5924] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 344.414841][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.414859][ T5924] usb 7-1: Product: syz [ 344.414870][ T5924] usb 7-1: Manufacturer: syz [ 344.414883][ T5924] usb 7-1: SerialNumber: syz [ 344.426278][ T5924] usb 7-1: config 0 descriptor?? [ 344.427080][T12153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 344.427197][T12153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 344.661219][T12153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 344.661339][T12153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 344.962630][ T1164] wlan1: Trigger new scan to find an IBSS to join [ 345.482550][T12187] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 345.482573][T12187] netlink: 'syz.1.2500': attribute type 2 has an invalid length. [ 345.518316][ T5924] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 345.611863][ T5924] dm9601 7-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 345.632341][T12193] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 345.656382][ T5924] usb 7-1: USB disconnect, device number 5 [ 345.676054][ T5924] dm9601 7-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 345.752023][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 345.818749][T12201] loop2: detected capacity change from 0 to 7 [ 345.849333][T12201] Dev loop2: unable to read RDB block 7 [ 345.852541][T12201] loop2: unable to read partition table [ 345.852794][T12201] loop2: partition table beyond EOD, truncated [ 345.852811][T12201] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 345.907508][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.907539][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.907574][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 345.907595][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.919067][ T10] usb 4-1: config 0 descriptor?? [ 346.382473][ T10] hid_parser_main: 28 callbacks suppressed [ 346.382497][ T10] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 346.382527][ T10] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 346.382552][ T10] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 346.382576][ T10] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 346.382599][ T10] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 346.404468][ T10] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 346.567030][ T10] playstation 0003:054C:0DF2.0012: Invalid byte count transferred, expected 20 got 0 [ 346.567068][ T10] playstation 0003:054C:0DF2.0012: Failed to retrieve DualSense pairing info: -22 [ 346.567117][ T10] playstation 0003:054C:0DF2.0012: Failed to get MAC address from DualSense [ 346.567133][ T10] playstation 0003:054C:0DF2.0012: Failed to create dualsense. [ 346.595686][ T10] playstation 0003:054C:0DF2.0012: probe with driver playstation failed with error -22 [ 346.628411][T12222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2518'. [ 346.802545][ T5924] usb 4-1: USB disconnect, device number 24 [ 347.081992][ T3201] Bluetooth: hci5: Frame reassembly failed (-84) [ 348.321170][ T5858] Bluetooth: hci4: command tx timeout [ 349.120531][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 349.238398][ T37] audit: type=1326 audit(1756670590.215:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.3.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737caeebe9 code=0x7fc00000 [ 349.280559][T12237] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 349.360472][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 349.365981][T12237] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 349.477187][T12274] fuse: Bad value for 'fd' [ 349.920269][ T1290] wlan1: Trigger new scan to find an IBSS to join [ 350.141943][T12237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.142078][T12237] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 350.219403][T12237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.219501][T12237] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 350.301062][T12237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 350.301153][T12237] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 350.408532][T12237] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.412759][T12237] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 350.489096][T12237] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 350.870448][ T1290] wlan1: Creating new IBSS network, BSSID 82:29:65:b5:42:58 [ 351.298669][T12306] random: crng reseeded on system resumption [ 351.439278][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 351.519256][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 351.609283][ T5924] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 351.761288][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 351.764248][ T5924] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 351.764273][ T5924] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 351.764292][ T5924] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 351.764311][ T5924] usb 7-1: config 1 has no interface number 0 [ 351.764352][ T5924] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.764373][ T5924] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 351.764410][ T5924] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 351.764431][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.792355][ T5924] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 351.819213][ T5847] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 351.978887][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 351.980835][ T5847] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 351.980856][ T5847] usb 4-1: config 0 has no interface number 0 [ 351.985380][ T5847] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 351.985406][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.985425][ T5847] usb 4-1: Product: syz [ 351.985439][ T5847] usb 4-1: Manufacturer: syz [ 351.985452][ T5847] usb 4-1: SerialNumber: syz [ 352.025068][ T5924] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 352.050890][ T5847] usb 4-1: config 0 descriptor?? [ 352.065434][ T5847] smsc95xx v2.0.0 [ 352.238926][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 352.318784][ T59] Bluetooth: hci1: command 0x0405 tx timeout [ 352.467172][ T9603] usb 7-1: USB disconnect, device number 6 [ 352.478755][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 352.483981][ T5847] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 352.484009][ T5847] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.490138][T12325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.521778][ T9603] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 352.890483][ T5847] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 352.890799][ T5847] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 352.938979][ T5847] usb 4-1: USB disconnect, device number 25 [ 353.608569][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 354.179477][T12364] netlink: 'syz.0.2571': attribute type 10 has an invalid length. [ 354.318442][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 354.326003][T12364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.354590][T12364] team0: Port device bond0 added [ 354.397854][ T59] Bluetooth: hci1: command 0x0405 tx timeout [ 354.557768][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 355.077557][T12384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2579'. [ 355.136683][T12384] bridge0: port 3(vlan0) entered blocking state [ 355.137099][T12384] bridge0: port 3(vlan0) entered disabled state [ 355.137539][T12384] vlan0: entered allmulticast mode [ 355.137558][T12384] dummy0: entered allmulticast mode [ 355.140308][T12384] vlan0: entered promiscuous mode [ 355.140324][T12384] dummy0: entered promiscuous mode [ 355.859398][T12403] input: syz0 as /devices/virtual/input/input24 [ 356.060773][T12407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'. [ 356.483698][ T37] audit: type=1326 audit(1756670597.468:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12418 comm="syz.3.2594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737caeebe9 code=0x0 [ 356.487047][ T5924] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 356.636805][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 356.640023][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.640051][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 356.640075][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.640098][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.640137][ T5924] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.640155][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.643816][ T5924] usb 3-1: config 0 descriptor?? [ 356.644629][T12413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.184609][ T5924] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 357.253815][ T5924] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 357.511766][ T45] usb 3-1: USB disconnect, device number 31 [ 359.302287][T12449] syz.2.2606 (12449): drop_caches: 2 [ 359.452502][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2616'. [ 359.801817][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 360.121159][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.247063][T12508] netlink: 'syz.2.2632': attribute type 10 has an invalid length. [ 360.379578][T12508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.382021][T12508] team0: Port device bond0 added [ 360.604880][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 360.754855][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 360.757336][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.757391][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.757416][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.757437][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 360.758923][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.758947][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 360.758965][ T45] usb 4-1: SerialNumber: syz [ 360.781798][ T45] hub 4-1:1.0: bad descriptor, ignoring hub [ 360.781835][ T45] hub 4-1:1.0: probe with driver hub failed with error -5 [ 360.793619][ T45] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 361.237280][T12502] raw-gadget.0 gadget.3: fail, usb_ep_set_wedge returned -11 [ 361.359221][ T5932] usb 4-1: USB disconnect, device number 26 [ 361.534826][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2646'. [ 361.564168][ T5924] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 361.714183][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 361.716957][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.718494][ T5924] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 361.718516][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.718533][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.721757][ T5924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.721781][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.721799][ T5924] usb 3-1: Product: syz [ 361.721813][ T5924] usb 3-1: Manufacturer: syz [ 361.721825][ T5924] usb 3-1: SerialNumber: syz [ 362.045184][T12535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.045587][T12535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.089209][ T5924] usb 3-1: 0:2 : does not exist [ 362.146807][ T5924] usb 3-1: USB disconnect, device number 32 [ 362.232894][ T37] audit: type=1326 audit(1756670603.221:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12550 comm="syz.3.2651" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737caeebe9 code=0x0 [ 362.353857][ T5932] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 362.504262][ T5932] usb 7-1: Using ep0 maxpacket: 32 [ 362.507057][ T5932] usb 7-1: unable to get BOS descriptor or descriptor too short [ 362.508573][ T5932] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 362.508621][ T5932] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1048, setting to 1024 [ 362.508644][ T5932] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 362.508666][ T5932] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 362.561964][ T5932] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.562071][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.562089][ T5932] usb 7-1: Product: syz [ 362.562101][ T5932] usb 7-1: Manufacturer: syz [ 362.562113][ T5932] usb 7-1: SerialNumber: syz [ 362.623631][ T5924] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 362.787994][ T5924] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 362.788019][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.788036][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.796942][ T5924] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 362.796970][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.796987][ T5924] usb 3-1: Product: syz [ 362.796999][ T5924] usb 3-1: Manufacturer: syz [ 362.797011][ T5924] usb 3-1: SerialNumber: syz [ 363.010387][T12549] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 363.010563][T12549] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 363.124886][ T5924] usb 3-1: 0:2 : does not exist [ 363.258411][ T5924] usb 3-1: USB disconnect, device number 33 [ 363.612333][T12569] 9pnet: p9_errstr2errno: server reported unknown error @íÎ‚Í [ 363.621989][ T5932] cdc_ncm 7-1:1.0: SET_CRC_MODE failed [ 363.622414][ T5932] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 363.641841][ T5932] cdc_ncm 7-1:1.0: bind() failure [ 363.653174][ T5891] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 363.661370][ T5932] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 363.661396][ T5932] cdc_ncm 7-1:1.1: bind() failure [ 363.667417][ T5932] usb 7-1: USB disconnect, device number 7 [ 363.805436][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 363.811020][ T5891] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 363.811046][ T5891] usb 1-1: config 0 has no interface number 0 [ 363.849844][ T5891] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 363.849871][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.849888][ T5891] usb 1-1: Product: syz [ 363.849900][ T5891] usb 1-1: Manufacturer: syz [ 363.849912][ T5891] usb 1-1: SerialNumber: syz [ 363.896315][ T5891] usb 1-1: config 0 descriptor?? [ 363.904227][ T5891] smsc95xx v2.0.0 [ 364.078748][T12581] random: crng reseeded on system resumption [ 364.741474][ T5891] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 364.939218][ T5891] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 364.939646][ T5891] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 364.978791][ T5891] usb 1-1: USB disconnect, device number 23 [ 365.123384][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 365.272772][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 365.275754][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 365.277381][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 365.277402][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.277420][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.280330][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.280353][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.280370][ T10] usb 7-1: Product: syz [ 365.280381][ T10] usb 7-1: Manufacturer: syz [ 365.280393][ T10] usb 7-1: SerialNumber: syz [ 365.282337][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 365.448799][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.448829][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.448905][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.448945][ T9] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 365.448966][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.509283][ T9] usb 3-1: config 0 descriptor?? [ 365.595065][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.595877][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.648171][ T10] usb 7-1: 0:2 : does not exist [ 365.695047][ T10] usb 7-1: USB disconnect, device number 8 [ 365.936165][ T9] razer 0003:1532:011B.0014: item fetching failed at offset 4/5 [ 365.937001][ T9] razer 0003:1532:011B.0014: probe with driver razer failed with error -22 [ 366.143028][ T5891] usb 3-1: USB disconnect, device number 34 [ 366.171974][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 366.242193][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 366.339533][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.339557][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.339580][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.372328][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 366.372364][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.372382][ T10] usb 7-1: Product: syz [ 366.372394][ T10] usb 7-1: Manufacturer: syz [ 366.372407][ T10] usb 7-1: SerialNumber: syz [ 366.411700][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 366.420773][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.420790][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.420801][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.420823][ T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 366.420834][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.488690][ T9] usb 1-1: config 0 descriptor?? [ 366.629719][ T10] usb 7-1: 0:2 : does not exist [ 366.957029][ T9] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 366.957064][ T9] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 366.957090][ T9] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 366.957115][ T9] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 366.957139][ T9] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 367.027082][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 367.069558][ T10] usb 7-1: USB disconnect, device number 9 [ 367.122262][T12624] netlink: 'syz.0.2684': attribute type 2 has an invalid length. [ 367.122283][T12624] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2684'. [ 367.159599][ T9] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 367.160127][ T9] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 367.219972][ T9] usb 1-1: USB disconnect, device number 24 [ 367.220581][ T992] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 367.220666][ T992] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 367.220736][ T992] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 367.266496][ T992] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 368.342417][T12671] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2704'. [ 368.586738][T12680] input: syz0 as /devices/virtual/input/input27 [ 369.708600][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'. [ 369.708641][T12705] nbd: couldn't find a device at index 65546 [ 370.449763][T12725] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 370.969953][ T5891] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 371.137919][ T5891] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 371.137947][ T5891] usb 4-1: config 0 has no interface number 0 [ 371.175519][ T5891] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 371.175548][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.175566][ T5891] usb 4-1: Product: syz [ 371.175578][ T5891] usb 4-1: Manufacturer: syz [ 371.175591][ T5891] usb 4-1: SerialNumber: syz [ 371.205691][ T5891] usb 4-1: config 0 descriptor?? [ 371.810909][ T37] audit: type=1326 audit(1756670612.806:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.1.2736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3b386ebe9 code=0x0 [ 372.136309][ T5891] asix 4-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 372.347452][ T5847] usb 4-1: USB disconnect, device number 27 [ 372.769427][T12766] input: syz1 as /devices/virtual/input/input29 [ 374.237891][ T5891] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 374.398717][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.398747][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.398767][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 374.398806][ T5891] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 374.398827][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.442989][ T5891] usb 3-1: config 0 descriptor?? [ 374.657732][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 374.807555][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 374.816911][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.817825][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.817865][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 374.817886][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.888905][ T10] usb 2-1: config 0 descriptor?? [ 374.931393][ T5891] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 375.007905][ T5891] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 375.239938][ T5932] usb 3-1: USB disconnect, device number 35 [ 375.372150][ T10] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 375.372185][ T10] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 375.372208][ T10] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 375.372232][ T10] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 375.372255][ T10] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 375.373274][ T10] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 375.488084][T12834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.596785][ T10] usb 2-1: USB disconnect, device number 17 [ 375.782209][T12834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.395428][ T10] hid-generic 0008:0006:0007.0018: unknown main item tag 0x0 [ 376.395461][ T10] hid-generic 0008:0006:0007.0018: unknown main item tag 0x0 [ 376.395485][ T10] hid-generic 0008:0006:0007.0018: unknown main item tag 0x0 [ 376.395509][ T10] hid-generic 0008:0006:0007.0018: unknown main item tag 0x0 [ 376.416983][ T10] hid-generic 0008:0006:0007.0018: hidraw0: HID v0.0b Device [syz1] on syz1 [ 377.348001][T12891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.095914][ T9603] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 378.192525][ T5847] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 378.192717][ T5932] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 378.261972][ T9603] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 378.262000][ T9603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.262014][ T9603] usb 3-1: Product: syz [ 378.262021][ T9603] usb 3-1: Manufacturer: syz [ 378.262027][ T9603] usb 3-1: SerialNumber: syz [ 378.303541][ T9603] usb 3-1: config 0 descriptor?? [ 378.319311][ T9603] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 378.342686][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.342791][ T5847] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 378.368706][ T5847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.369066][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.369085][ T5847] usb 2-1: Product: syz [ 378.369098][ T5847] usb 2-1: Manufacturer: syz [ 378.369239][ T5847] usb 2-1: SerialNumber: syz [ 378.369956][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.369976][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 378.370081][ T5932] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 378.370101][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.472575][ T5932] usb 1-1: config 0 descriptor?? [ 378.488281][ T5847] cdc_mbim 2-1:1.0: skipping garbage [ 378.492026][ T5932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 378.492073][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 378.532335][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 378.534395][ T5932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 378.534657][ T5932] usb 1-1: media controller created [ 378.568322][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.594641][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 378.597549][ T5932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 378.637958][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.638076][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.684972][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 378.688043][T12913] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 378.733945][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 378.733966][ T5932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 378.885480][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 378.885510][ T5932] dvb-usb: error while querying for an remote control event. [ 379.045346][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 379.045386][ T5931] dvb-usb: error while querying for an remote control event. [ 379.205276][ T9603] dvb-usb: bulk message failed: -22 (1/0) [ 379.205317][ T9603] dvb-usb: error while querying for an remote control event. [ 379.281445][ T9] usb 1-1: USB disconnect, device number 25 [ 379.291742][T12913] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 379.300776][ T5847] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 379.300799][ T5847] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 379.347598][ T10] usb 3-1: USB disconnect, device number 36 [ 379.464110][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 379.492804][ T5847] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 379.509426][ T5847] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 379.540955][ T5847] wwan wwan0: port wwan0mbim0 attached [ 379.562607][ T5847] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, fa:16:e5:4b:ad:a9 [ 379.582370][ T5847] usb 2-1: USB disconnect, device number 18 [ 379.584651][ T5847] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 379.699876][ T5847] wwan wwan0: port wwan0mbim0 disconnected [ 379.983238][ T5847] IPVS: starting estimator thread 0... [ 380.095200][T12947] IPVS: using max 10 ests per chain, 24000 per kthread [ 380.201471][T12956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2820'. [ 380.201504][T12956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2820'. [ 380.609400][T12967] netlink: 'syz.2.2825': attribute type 3 has an invalid length. [ 380.609421][T12967] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2825'. [ 380.892735][ T3635] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 381.175322][T12975] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.427927][T12986] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2834'. [ 382.179093][ T37] audit: type=1326 audit(1756670623.181:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.179143][ T37] audit: type=1326 audit(1756670623.181:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.204154][ T37] audit: type=1326 audit(1756670623.211:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.207124][ T37] audit: type=1326 audit(1756670623.211:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.207174][ T37] audit: type=1326 audit(1756670623.211:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.215563][ T37] audit: type=1326 audit(1756670623.211:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.215615][ T37] audit: type=1326 audit(1756670623.221:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.215655][ T37] audit: type=1326 audit(1756670623.221:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.224520][ T37] audit: type=1326 audit(1756670623.221:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.224565][ T37] audit: type=1326 audit(1756670623.231:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d20febe9 code=0x7ffc0000 [ 382.904602][T13021] netlink: 'syz.6.2849': attribute type 1 has an invalid length. [ 382.904659][T13021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.904709][T13021] IPv6: NLM_F_CREATE should be set when creating new route [ 382.904743][T13021] IPv6: NLM_F_CREATE should be set when creating new route [ 382.905751][T13021] netlink: 'syz.6.2849': attribute type 1 has an invalid length. [ 382.905802][T13021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.478266][T13089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.812376][T13100] tipc: Started in network mode [ 385.812480][T13100] tipc: Node identity ac1414aa, cluster identity 4711 [ 385.817352][T13100] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.817590][T13100] tipc: Enabled bearer , priority 10 [ 385.925876][ T59] Bluetooth: hci0: ACL packet too small [ 385.955501][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.092055][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.241815][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.381753][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.513258][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'. [ 386.521756][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.661519][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.771705][ T5847] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 386.801702][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.929053][ T5847] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.929079][ T5847] usb 2-1: config 0 has no interface number 0 [ 386.929125][ T5847] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.929149][ T5847] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.929186][ T5847] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 386.929206][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.988840][ T9603] tipc: Node number set to 2886997162 [ 387.007367][ T5847] usb 2-1: config 0 descriptor?? [ 387.091678][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.105570][T13135] block nbd0: server does not support multiple connections per device. [ 387.106567][T13135] block nbd0: shutting down sockets [ 387.361520][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.494169][ T5847] hid_parser_main: 49 callbacks suppressed [ 387.494193][ T5847] prodikeys 0003:041E:2801.0019: unknown main item tag 0x0 [ 387.494221][ T5847] prodikeys 0003:041E:2801.0019: unknown main item tag 0x0 [ 387.531965][ T5847] prodikeys 0003:041E:2801.0019: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 387.535764][ T5847] hid_prodikeys: hid-prodikeys: failed to find output report [ 387.535764][ T5847] [ 387.761217][ T5847] usb 2-1: USB disconnect, device number 19 [ 387.891015][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.940378][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.012072][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.603058][T13191] devpts: Invalid uid '0x00000000ffffffff' [ 389.979842][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.942729][T13244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.058931][ C1] net_ratelimit: 1 callbacks suppressed [ 392.058949][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.227720][T13244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.098578][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.178407][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 393.328295][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 393.331600][ T10] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 393.331634][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.331650][ T10] usb 3-1: config 0 has no interface number 0 [ 393.331697][ T10] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 393.331719][ T10] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 393.331738][ T10] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 393.333727][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 393.333742][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.333753][ T10] usb 3-1: Product: syz [ 393.333759][ T10] usb 3-1: Manufacturer: syz [ 393.333766][ T10] usb 3-1: SerialNumber: syz [ 393.336784][ T10] usb 3-1: config 0 descriptor?? [ 393.337332][T13269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 393.343370][ T10] ftdi_sio 3-1:0.151: FTDI USB Serial Device converter detected [ 393.345200][ T10] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 393.572061][ T5891] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 393.584941][ T10] usb 3-1: USB disconnect, device number 37 [ 393.602329][ T10] ftdi_sio 3-1:0.151: device disconnected [ 393.732240][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 393.734829][ T5891] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 393.734852][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.734870][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.791455][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.791483][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.791502][ T5891] usb 1-1: Product: syz [ 393.791513][ T5891] usb 1-1: Manufacturer: syz [ 393.791526][ T5891] usb 1-1: SerialNumber: syz [ 393.807968][ T5931] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 394.001692][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 394.006335][ T5931] usb 4-1: config 159 has too many interfaces: 198, using maximum allowed: 32 [ 394.006360][ T5931] usb 4-1: config 159 has an invalid descriptor of length 245, skipping remainder of the config [ 394.006377][ T5931] usb 4-1: config 159 has 0 interfaces, different from the descriptor's value: 198 [ 394.006412][ T5931] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 394.006431][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.138042][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.305195][ T5891] usb 1-1: 0:2 : does not exist [ 394.817848][ T5931] usb 4-1: string descriptor 0 read error: -71 [ 394.844096][ T5931] usb 4-1: USB disconnect, device number 28 [ 394.980142][ T5891] usb 1-1: USB disconnect, device number 26 [ 395.187339][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.216798][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.778726][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 396.778743][ T37] audit: type=1326 audit(1756670637.788:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13344 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737caeebe9 code=0x7ffc0000 [ 396.778788][ T37] audit: type=1326 audit(1756670637.788:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13344 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737caeebe9 code=0x7ffc0000 [ 396.937653][T13351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2993'. [ 396.937691][T13351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2993'. [ 397.255248][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'. [ 397.256297][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.522636][T13375] loop2: detected capacity change from 0 to 7 [ 397.531529][T13375] Dev loop2: unable to read RDB block 7 [ 397.531558][T13375] loop2: AHDI p1 p2 [ 397.531587][T13375] loop2: partition table partially beyond EOD, truncated [ 397.531692][T13375] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 397.936151][ T5847] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 398.106026][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 398.108378][ T5847] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.108407][ T5847] usb 3-1: config 0 interface 0 has no altsetting 0 [ 398.109687][ T5847] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 398.109711][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 398.109729][ T5847] usb 3-1: Product: syz [ 398.161422][T13399] input: syz0 as /devices/virtual/input/input31 [ 398.161455][T13399] input: failed to attach handler leds to device input31, error: -6 [ 398.237628][ T5847] usb 3-1: config 0 descriptor?? [ 398.295977][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.327258][ T37] audit: type=1326 audit(1756670639.339:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13405 comm="syz.6.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c85ebe9 code=0x7ffc0000 [ 398.330693][ T37] audit: type=1326 audit(1756670639.339:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13405 comm="syz.6.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c85ebe9 code=0x7ffc0000 [ 398.333292][ T37] audit: type=1326 audit(1756670639.339:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13405 comm="syz.6.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f9b2c85ebe9 code=0x7ffc0000 [ 398.335117][ T37] audit: type=1326 audit(1756670639.339:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13405 comm="syz.6.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c85ebe9 code=0x7ffc0000 [ 398.399300][ T37] audit: type=1326 audit(1756670639.339:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13405 comm="syz.6.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c85ebe9 code=0x7ffc0000 [ 398.399349][ T37] audit: type=1326 audit(1756670639.409:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13405 comm="syz.6.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b2c85ebe9 code=0x7ffc0000 [ 398.399390][ T37] audit: type=1326 audit(1756670639.409:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13405 comm="syz.6.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c85ebe9 code=0x7ffc0000 [ 398.400041][ T37] audit: type=1326 audit(1756670639.409:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13405 comm="syz.6.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b2c85ebe9 code=0x7ffc0000 [ 398.602232][T13413] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 398.602254][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3021'. [ 398.743129][ T5847] waterforce 0003:1044:7A4D.001A: unknown main item tag 0x0 [ 398.743166][ T5847] waterforce 0003:1044:7A4D.001A: unknown main item tag 0x0 [ 398.743191][ T5847] waterforce 0003:1044:7A4D.001A: unknown main item tag 0x0 [ 398.743215][ T5847] waterforce 0003:1044:7A4D.001A: unknown main item tag 0x0 [ 398.743239][ T5847] waterforce 0003:1044:7A4D.001A: unknown main item tag 0x0 [ 398.789954][ T5847] waterforce 0003:1044:7A4D.001A: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.2-1/input0 [ 398.868397][ T5847] waterforce 0003:1044:7A4D.001A: fw version request failed with -38 [ 398.958058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 398.959440][ T5891] usb 3-1: USB disconnect, device number 38 [ 399.335423][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.244845][ T5891] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 400.334371][T13430] syz.0.3028 (13430): drop_caches: 2 [ 400.374736][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.397177][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.397214][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.397308][ T5891] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 400.397329][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.416439][ T5891] usb 3-1: config 0 descriptor?? [ 400.851115][ T5891] hid-led 0003:0FC5:B080.001B: unknown main item tag 0x0 [ 400.851151][ T5891] hid-led 0003:0FC5:B080.001B: unknown main item tag 0x0 [ 400.851177][ T5891] hid-led 0003:0FC5:B080.001B: unknown main item tag 0x0 [ 401.098141][T13467] syzkaller1: entered promiscuous mode [ 401.098170][T13467] syzkaller1: entered allmulticast mode [ 401.414413][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.452779][ T5891] usb 3-1: USB disconnect, device number 39 [ 401.486768][T13479] netlink: 'syz.0.3049': attribute type 11 has an invalid length. [ 401.834899][T13491] vivid-002: disconnect [ 401.840795][T13491] vivid-002: reconnect [ 402.371441][T13508] netlink: 'syz.6.3060': attribute type 12 has an invalid length. [ 402.371462][T13508] netlink: 'syz.6.3060': attribute type 29 has an invalid length. [ 402.371475][T13508] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3060'. [ 402.371515][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3060'. [ 402.453776][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.594035][ T992] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 402.750438][ T992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 402.750494][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 402.750519][ T992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.750541][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 402.750563][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 402.752215][ T992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 402.752269][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 402.752293][ T992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.752316][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 402.752339][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 402.753988][ T992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 402.754061][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 402.754085][ T992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.754107][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 402.754130][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 402.758095][ T992] usb 2-1: string descriptor 0 read error: -22 [ 402.758232][ T992] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 402.758253][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.798859][ T992] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 402.879545][ T5891] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 403.044252][ T5891] usb 7-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 403.061061][ T5891] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 403.061090][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.061108][ T5891] usb 7-1: Product: syz [ 403.061120][ T5891] usb 7-1: Manufacturer: syz [ 403.061132][ T5891] usb 7-1: SerialNumber: syz [ 403.063513][ T10] usb 2-1: USB disconnect, device number 20 [ 403.085233][ T5891] usb 7-1: config 0 descriptor?? [ 403.282978][T13533] loop8: detected capacity change from 0 to 8 [ 403.308311][T13533] Dev loop8: unable to read RDB block 8 [ 403.308372][T13533] loop8: unable to read partition table [ 403.308600][T13533] loop8: partition table beyond EOD, truncated [ 403.308617][T13533] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 403.311997][ T5891] usb 7-1: bad CDC descriptors [ 403.320339][ T5891] usb 7-1: unsupported MDLM descriptors [ 403.340431][ T5891] usb 7-1: USB disconnect, device number 10 [ 403.383364][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 403.383381][ T37] audit: type=1326 audit(1756670644.392:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13527 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789c3bebe9 code=0x7fc00000 [ 403.493158][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.004749][ T37] audit: type=1326 audit(1756670645.022:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13527 comm="syz.0.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f789c3bebe9 code=0x7fc00000 [ 404.532640][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.332202][ T9603] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 405.422369][ T5847] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 405.484720][ T9603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.484752][ T9603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.484788][ T9603] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 405.484808][ T9603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.491889][ T9603] usb 1-1: config 0 descriptor?? [ 405.572111][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.635758][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.635788][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.636047][ T5847] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 405.636069][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.682454][ T5847] usb 2-1: config 0 descriptor?? [ 405.859785][T13606] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 406.002204][ T9603] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 406.002240][ T9603] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 406.002320][ T9603] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 406.002344][ T9603] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 406.002367][ T9603] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 406.054105][ T9603] playstation 0003:054C:0DF2.001C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 406.110995][ T5847] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x2 [ 406.111029][ T5847] pyra 0003:1E7D:2CF6.001D: unknown global tag 0xc [ 406.111043][ T5847] pyra 0003:1E7D:2CF6.001D: item 0 2 1 12 parsing failed [ 406.132854][ T5847] pyra 0003:1E7D:2CF6.001D: parse failed [ 406.132933][ T5847] pyra 0003:1E7D:2CF6.001D: probe with driver pyra failed with error -22 [ 406.337331][ T5891] usb 2-1: USB disconnect, device number 21 [ 406.501763][ T5931] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 406.596803][ T9603] playstation 0003:054C:0DF2.001C: Failed to retrieve feature with reportID 5: -71 [ 406.596828][ T9603] playstation 0003:054C:0DF2.001C: Failed to retrieve DualSense calibration info: -71 [ 406.596878][ T9603] playstation 0003:054C:0DF2.001C: Failed to get calibration data from DualSense [ 406.596895][ T9603] playstation 0003:054C:0DF2.001C: Failed to create dualsense. [ 406.599442][ T9603] playstation 0003:054C:0DF2.001C: probe with driver playstation failed with error -71 [ 406.621593][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.668305][ T9603] usb 1-1: USB disconnect, device number 27 [ 406.693185][ T5931] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 406.693214][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.693232][ T5931] usb 4-1: Product: syz [ 406.693244][ T5931] usb 4-1: Manufacturer: syz [ 406.693255][ T5931] usb 4-1: SerialNumber: syz [ 407.660997][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.765198][ T5931] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 407.765251][ T5931] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 407.795992][ T5931] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 407.828896][ T5931] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 407.856064][ T5931] usb 4-1: USB disconnect, device number 29 [ 408.700539][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.332350][ T37] audit: type=1326 audit(1756670650.345:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13673 comm="syz.3.3134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737caeebe9 code=0x0 [ 409.739944][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.804813][T13645] syz.1.3119 (13645): drop_caches: 2 [ 409.978662][T13695] syzkaller1: entered promiscuous mode [ 409.978692][T13695] syzkaller1: entered allmulticast mode [ 410.769578][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.062837][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.349192][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 411.510681][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 411.513217][ T10] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 411.513240][ T10] usb 4-1: config 0 has no interface number 0 [ 411.516369][ T10] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 411.516391][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.516407][ T10] usb 4-1: Product: syz [ 411.516419][ T10] usb 4-1: Manufacturer: syz [ 411.516432][ T10] usb 4-1: SerialNumber: syz [ 411.527263][ T10] usb 4-1: config 0 descriptor?? [ 411.809016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.863419][ T10] kaweth 4-1:0.235: Firmware present in device. [ 412.045909][ T10] kaweth 4-1:0.235: Statistics collection: 0 [ 412.045930][ T10] kaweth 4-1:0.235: Multicast filter limit: 0 [ 412.045943][ T10] kaweth 4-1:0.235: MTU: 0 [ 412.045955][ T10] kaweth 4-1:0.235: Read MAC address 00:00:00:00:00:00 [ 412.130944][T13739] input: syz0 as /devices/virtual/input/input32 [ 412.448709][ T10] kaweth 4-1:0.235: Error setting SOFS wait [ 412.448988][ T10] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 412.482838][ T10] usb 4-1: USB disconnect, device number 30 [ 412.797559][T13749] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3166'. [ 412.848531][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.175278][T13761] loop7: detected capacity change from 0 to 6 [ 413.191439][T13761] loop7: [POWERTEC] p1 [ 413.191565][T13761] loop7: p1 start 1680801792 is beyond EOD, truncated [ 413.348874][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3174'. [ 413.588042][ T9603] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 413.744641][ T9603] usb 3-1: Using ep0 maxpacket: 16 [ 413.758938][ T9603] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 413.758965][ T9603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.758982][ T9603] usb 3-1: Product: syz [ 413.758993][ T9603] usb 3-1: Manufacturer: syz [ 413.759005][ T9603] usb 3-1: SerialNumber: syz [ 413.799985][ T9603] usb 3-1: config 0 descriptor?? [ 413.824827][ T9603] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 413.887901][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.619397][ T9603] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 414.643858][ T9603] usb 3-1: USB disconnect, device number 40 [ 414.927383][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.987452][ T5931] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 415.140814][ T5931] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 415.140841][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 415.140891][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.140914][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.140954][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.140993][ T5931] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 415.141013][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.221942][ T5931] usb 1-1: config 0 descriptor?? [ 415.295201][T13820] TCP: TCP_TX_DELAY enabled [ 415.396716][ T9603] kernel read not supported for file /dsp (pid: 9603 comm: kworker/1:7) [ 415.677583][ T5931] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.001E/input/input33 [ 415.750902][ T5931] uclogic 0003:28BD:0909.001E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 415.787003][ T9603] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 415.940173][ T9603] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 415.940234][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.940258][ T9603] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.940279][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.940303][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.941458][ T9603] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 415.941508][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.941532][ T9603] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.941555][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.941578][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.942718][ T9603] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 415.942771][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.942796][ T9603] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.942818][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.942841][ T9603] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.966850][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.026946][ T9603] usb 3-1: string descriptor 0 read error: -22 [ 416.027103][ T9603] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 416.027124][ T9603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.151487][ T9603] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 416.250573][ T992] usb 1-1: USB disconnect, device number 28 [ 416.407342][ T10] usb 3-1: USB disconnect, device number 41 [ 417.006346][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.346227][ T992] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 417.502611][ T992] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.502642][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.502665][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.502683][ T992] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.502724][ T992] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.502743][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.514598][ T992] usb 7-1: config 0 descriptor?? [ 418.019848][T13875] trusted_key: syz.2.3224 sent an empty control message without MSG_MORE. [ 418.042601][ T992] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 418.045825][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.096517][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3223'. [ 418.136166][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 418.260451][ T10] usb 7-1: USB disconnect, device number 11 [ 419.055482][ T992] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 419.085344][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.206578][ T992] usb 4-1: Using ep0 maxpacket: 16 [ 419.210878][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.210907][ T992] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 419.210946][ T992] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 419.210966][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.224322][ T992] usb 4-1: config 0 descriptor?? [ 419.568717][ T5932] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 419.630673][T13894] raw-gadget.0 gadget.3: fail, usb_ep_set_halt returned -11 [ 419.639126][ T992] usbhid 4-1:0.0: can't add hid device: -71 [ 419.639248][ T992] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 419.658297][ T992] usb 4-1: USB disconnect, device number 31 [ 419.735806][ T5932] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 419.735833][ T5932] usb 2-1: config 0 has no interface number 0 [ 419.735879][ T5932] usb 2-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 419.735898][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.794383][ T5932] usb 2-1: config 0 descriptor?? [ 420.125064][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.644737][ T5932] asix 2-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.644766][ T5932] asix 2-1:0.102 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 420.645049][ T5932] asix 2-1:0.102: probe with driver asix failed with error -71 [ 420.665023][ T5932] usb 2-1: USB disconnect, device number 22 [ 421.164501][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.421458][T13929] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.201728][T13953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3258'. [ 422.203805][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.313101][T13929] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.698789][T13929] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.884891][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 422.962249][T13929] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.038535][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.038567][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.038587][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.038627][ T10] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 423.038654][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.054275][ T10] usb 2-1: config 0 descriptor?? [ 423.063527][ T9603] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 423.157038][T13971] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3266'. [ 423.253189][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.272107][ T9603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.272138][ T9603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.272172][ T9603] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 423.272192][ T9603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.322152][ T9603] usb 3-1: config 0 descriptor?? [ 423.580460][ T10] acrux 0003:1A34:0802.0020: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 423.580493][ T10] acrux 0003:1A34:0802.0020: no inputs found [ 423.580505][ T10] acrux 0003:1A34:0802.0020: Failed to enable force feedback support, error: -19 [ 423.639694][ T1290] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.757979][T13980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.758016][T13980] IPv6: NLM_F_CREATE should be set when creating new route [ 423.761231][T13980] IPv6: NLM_F_CREATE should be set when creating new route [ 423.802710][ T9603] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 423.860497][ T1290] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.861853][ T1290] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.921822][ T1290] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.282686][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.392757][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 424.550030][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.550056][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.552269][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.552293][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.552312][ T10] usb 1-1: SerialNumber: syz [ 424.713900][ T9603] hid-thrustmaster 0003:044F:B65D.0021: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 424.714123][ T9603] hid-thrustmaster 0003:044F:B65D.0021: Wrong number of endpoints? [ 424.725880][ C1] hid-thrustmaster 0003:044F:B65D.0021: URB to get model id failed with error -71 [ 424.764320][ T9603] usb 3-1: USB disconnect, device number 42 [ 424.771192][T13995] netlink: 'syz.6.3277': attribute type 1 has an invalid length. [ 424.771213][T13995] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3277'. [ 424.771228][T13995] netlink: 'syz.6.3277': attribute type 1 has an invalid length. [ 424.798286][ T10] usb 1-1: 0:2 : does not exist [ 424.907377][ T10] usb 1-1: USB disconnect, device number 29 [ 425.322215][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.618842][ T5891] usb 2-1: USB disconnect, device number 23 [ 425.693948][T14022] loop8: detected capacity change from 0 to 8 [ 425.694977][T14022] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 425.695104][T14022] loop8: p1 start 1953705584 is beyond EOD, truncated [ 425.695123][T14022] loop8: p2 start 700027685 is beyond EOD, truncated [ 425.695137][T14022] loop8: p3 start 31919608 is beyond EOD, truncated [ 425.695152][T14022] loop8: p4 start 4201384960 is beyond EOD, truncated [ 425.695165][T14022] loop8: p5 start 2842431134 is beyond EOD, truncated [ 425.695180][T14022] loop8: p6 start 1584160440 is beyond EOD, truncated [ 425.695194][T14022] loop8: p7 start 2589729944 is beyond EOD, truncated [ 425.695209][T14022] loop8: p8 start 1229243498 is beyond EOD, truncated [ 425.695223][T14022] loop8: p9 start 1043497832 is beyond EOD, truncated [ 425.695237][T14022] loop8: p10 start 883525942 is beyond EOD, truncated [ 425.695252][T14022] loop8: p11 start 2065041852 is beyond EOD, truncated [ 425.695266][T14022] loop8: p12 start 3320555364 is beyond EOD, truncated [ 426.173155][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.251447][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.361659][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.581719][ T5891] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 426.703681][ T5847] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 426.737469][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 426.737598][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 426.737640][ T5891] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 426.737660][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.750690][ T5891] usb 4-1: config 0 descriptor?? [ 426.884052][ T5847] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 426.884077][ T5847] usb 3-1: config 0 has no interface number 0 [ 426.884107][ T5847] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 426.884148][ T5847] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 426.884173][ T5847] usb 3-1: config 0 interface 255 has no altsetting 0 [ 426.884204][ T5847] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 426.884225][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.969437][ T5891] ath6kl: Failed to submit usb control message: -71 [ 426.969486][ T5891] ath6kl: unable to send the bmi data to the device: -71 [ 426.969855][ T5891] ath6kl: Unable to send get target info: -71 [ 426.992607][ T5847] usb 3-1: config 0 descriptor?? [ 427.007039][ T5891] ath6kl: Failed to init ath6kl core: -71 [ 427.008734][ T5891] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 427.032965][ T5847] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 427.059151][ T5891] usb 4-1: USB disconnect, device number 32 [ 427.223600][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.257278][ T5931] usb 3-1: USB disconnect, device number 43 [ 427.380793][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'. [ 427.380825][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'. [ 427.401163][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.468581][ T37] audit: type=1326 audit(1756670668.494:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.493464][ T37] audit: type=1326 audit(1756670668.514:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.495064][ T37] audit: type=1326 audit(1756670668.514:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.495112][ T37] audit: type=1326 audit(1756670668.514:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.495151][ T37] audit: type=1326 audit(1756670668.514:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.495401][ T37] audit: type=1326 audit(1756670668.514:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.499656][ T37] audit: type=1326 audit(1756670668.514:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.499968][ T37] audit: type=1326 audit(1756670668.514:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.500689][ T37] audit: type=1326 audit(1756670668.514:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.501879][ T37] audit: type=1326 audit(1756670668.514:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14084 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd3b386ebe9 code=0x7ffc0000 [ 427.875747][T14093] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 428.450684][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.760527][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 428.910457][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 428.913291][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 428.913316][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.954903][ T9] usb 4-1: config 0 descriptor?? [ 428.986267][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 429.420164][ T5931] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 429.481824][T14147] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3341'. [ 429.491765][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.580306][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 429.587518][ T5931] usb 3-1: config 0 interface 0 has no altsetting 0 [ 429.616600][ T5931] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 429.616627][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.616645][ T5931] usb 3-1: Product: syz [ 429.616656][ T5931] usb 3-1: Manufacturer: syz [ 429.616669][ T5931] usb 3-1: SerialNumber: syz [ 429.672496][ T5931] usb 3-1: config 0 descriptor?? [ 429.986734][ T9] gspca_sq930x: ucbus_write failed -71 [ 429.986828][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 429.996432][ T9] usb 4-1: USB disconnect, device number 33 [ 430.090644][ T5931] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 430.519567][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.689553][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.706710][ T5931] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 430.872834][T14179] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3355'. [ 431.005065][ T5931] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 431.024107][ T5931] usb 3-1: USB disconnect, device number 44 [ 431.159471][ T5932] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 431.311996][ T5932] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 431.312023][ T5932] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 431.312041][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.312057][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 431.312081][ T5932] usb 1-1: config 0 has no interface number 0 [ 431.312127][ T5932] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 431.312147][ T5932] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 431.312170][ T5932] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 431.312189][ T5932] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.312229][ T5932] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 431.312248][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.426261][ T5932] usb 1-1: config 0 descriptor?? [ 431.447664][ T5932] gspca_main: spca561-2.14.0 probing abcd:cdee [ 431.559069][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.669089][ T5891] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 431.669687][ T5932] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 431.671424][ T5932] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.678125][ T5932] usb 1-1: MIDIStreaming interface descriptor not found [ 431.768916][ T5932] usb 1-1: USB disconnect, device number 30 [ 431.819029][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 431.821686][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.821714][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.821753][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 431.821773][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.833775][ T5891] usb 3-1: config 0 descriptor?? [ 431.837766][ T5891] hub 3-1:0.0: USB hub found [ 431.971213][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'. [ 432.051726][ T5891] hub 3-1:0.0: 1 port detected [ 432.159097][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 432.263656][ T5891] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 432.263679][ T5891] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 432.308674][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 432.312975][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.313003][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.313023][ T9] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.313047][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 432.313078][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 432.313098][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.321375][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 432.321495][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 432.363062][ T9] usb 7-1: config 0 descriptor?? [ 432.413313][ T5891] usb 3-1: USB disconnect, device number 45 [ 432.598536][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.744905][T14207] [ 432.744918][T14207] ====================================================== [ 432.744925][T14207] WARNING: possible circular locking dependency detected [ 432.744940][T14207] syzkaller #0 Not tainted [ 432.744950][T14207] ------------------------------------------------------ [ 432.744957][T14207] syz.1.3366/14207 is trying to acquire lock: [ 432.744966][T14207] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.745018][T14207] [ 432.745018][T14207] but task is already holding lock: [ 432.745022][T14207] ffff88814cfcc150 (&group->lock#2){+.+.}-{3:3}, at: __snd_pcm_lib_xfer+0x386/0x1ce0 [ 432.745063][T14207] [ 432.745063][T14207] which lock already depends on the new lock. [ 432.745063][T14207] [ 432.745069][T14207] [ 432.745069][T14207] the existing dependency chain (in reverse order) is: [ 432.745076][T14207] [ 432.745076][T14207] -> #2 (&group->lock#2){+.+.}-{3:3}: [ 432.745103][T14207] lock_acquire+0x120/0x360 [ 432.745123][T14207] rt_spin_lock+0x88/0x2c0 [ 432.745137][T14207] _snd_pcm_stream_lock_irqsave+0x7c/0xa0 [ 432.745160][T14207] snd_pcm_period_elapsed+0x1e/0x80 [ 432.745178][T14207] dummy_hrtimer_callback+0x80/0x180 [ 432.745195][T14207] __hrtimer_run_queues+0x54f/0xd40 [ 432.745215][T14207] hrtimer_run_softirq+0x1a3/0x2e0 [ 432.745236][T14207] handle_softirqs+0x22c/0x710 [ 432.745252][T14207] run_ktimerd+0xcf/0x190 [ 432.745270][T14207] smpboot_thread_fn+0x542/0xa60 [ 432.745288][T14207] kthread+0x711/0x8a0 [ 432.745306][T14207] ret_from_fork+0x3f9/0x770 [ 432.745323][T14207] ret_from_fork_asm+0x1a/0x30 [ 432.745338][T14207] [ 432.745338][T14207] -> #1 (&base->softirq_expiry_lock){+...}-{3:3}: [ 432.745361][T14207] lock_acquire+0x120/0x360 [ 432.745377][T14207] rt_spin_lock+0x88/0x2c0 [ 432.745390][T14207] hrtimer_run_softirq+0x7c/0x2e0 [ 432.745411][T14207] handle_softirqs+0x22c/0x710 [ 432.745427][T14207] run_ktimerd+0xcf/0x190 [ 432.745445][T14207] smpboot_thread_fn+0x542/0xa60 [ 432.745461][T14207] kthread+0x711/0x8a0 [ 432.745479][T14207] ret_from_fork+0x3f9/0x770 [ 432.745495][T14207] ret_from_fork_asm+0x1a/0x30 [ 432.745509][T14207] [ 432.745509][T14207] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 432.745529][T14207] validate_chain+0xb9b/0x2140 [ 432.745549][T14207] __lock_acquire+0xab9/0xd20 [ 432.745566][T14207] reacquire_held_locks+0x127/0x1d0 [ 432.745585][T14207] lock_release+0x1b4/0x3e0 [ 432.745601][T14207] __local_bh_enable_ip+0x10c/0x270 [ 432.745617][T14207] hrtimer_cancel+0x39/0x60 [ 432.745634][T14207] dummy_hrtimer_stop+0xcf/0x100 [ 432.745651][T14207] snd_pcm_do_stop+0x12a/0x1c0 [ 432.745667][T14207] snd_pcm_action+0xe4/0x240 [ 432.745686][T14207] __snd_pcm_xrun+0x27f/0x7c0 [ 432.745709][T14207] snd_pcm_update_state+0x342/0x430 [ 432.745723][T14207] snd_pcm_update_hw_ptr0+0x10b2/0x1b00 [ 432.745739][T14207] __snd_pcm_lib_xfer+0x510/0x1ce0 [ 432.745757][T14207] snd_pcm_oss_write3+0x1bc/0x320 [ 432.745772][T14207] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 432.745791][T14207] snd_pcm_oss_write+0xba2/0x11a0 [ 432.745807][T14207] vfs_write+0x284/0xb40 [ 432.745824][T14207] ksys_write+0x14b/0x260 [ 432.745840][T14207] do_syscall_64+0xfa/0x3b0 [ 432.745860][T14207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.745877][T14207] [ 432.745877][T14207] other info that might help us debug this: [ 432.745877][T14207] [ 432.745884][T14207] Chain exists of: [ 432.745884][T14207] (softirq_ctrl.lock) --> &base->softirq_expiry_lock --> &group->lock#2 [ 432.745884][T14207] [ 432.745914][T14207] Possible unsafe locking scenario: [ 432.745914][T14207] [ 432.745920][T14207] CPU0 CPU1 [ 432.745925][T14207] ---- ---- [ 432.745931][T14207] lock(&group->lock#2); [ 432.745946][T14207] lock(&base->softirq_expiry_lock); [ 432.745961][T14207] lock(&group->lock#2); [ 432.745977][T14207] lock((softirq_ctrl.lock)); [ 432.745989][T14207] [ 432.745989][T14207] *** DEADLOCK *** [ 432.745989][T14207] [ 432.745995][T14207] 2 locks held by syz.1.3366/14207: [ 432.746005][T14207] #0: ffff88814cfcc150 (&group->lock#2){+.+.}-{3:3}, at: __snd_pcm_lib_xfer+0x386/0x1ce0 [ 432.746053][T14207] #1: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 432.746094][T14207] [ 432.746094][T14207] stack backtrace: [ 432.746120][T14207] CPU: 0 UID: 0 PID: 14207 Comm: syz.1.3366 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 432.746140][T14207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.746157][T14207] Call Trace: [ 432.746164][T14207] [ 432.746172][T14207] dump_stack_lvl+0x189/0x250 [ 432.746201][T14207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.746223][T14207] ? __pfx__printk+0x10/0x10 [ 432.746242][T14207] ? print_lock_name+0xde/0x100 [ 432.746260][T14207] print_circular_bug+0x2ee/0x310 [ 432.746277][T14207] check_noncircular+0x134/0x160 [ 432.746304][T14207] validate_chain+0xb9b/0x2140 [ 432.746331][T14207] ? preempt_schedule+0xae/0xc0 [ 432.746351][T14207] ? __pfx_preempt_schedule+0x10/0x10 [ 432.746374][T14207] __lock_acquire+0xab9/0xd20 [ 432.746397][T14207] reacquire_held_locks+0x127/0x1d0 [ 432.746418][T14207] ? __local_bh_disable_ip+0x264/0x400 [ 432.746440][T14207] lock_release+0x1b4/0x3e0 [ 432.746461][T14207] ? __local_bh_enable_ip+0x100/0x270 [ 432.746483][T14207] __local_bh_enable_ip+0x10c/0x270 [ 432.746502][T14207] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 432.746526][T14207] ? hrtimer_cancel_wait_running+0x142/0x180 [ 432.746551][T14207] hrtimer_cancel+0x39/0x60 [ 432.746572][T14207] dummy_hrtimer_stop+0xcf/0x100 [ 432.746592][T14207] snd_pcm_do_stop+0x12a/0x1c0 [ 432.746611][T14207] snd_pcm_action+0xe4/0x240 [ 432.746635][T14207] __snd_pcm_xrun+0x27f/0x7c0 [ 432.746651][T14207] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 432.746685][T14207] ? __pfx___snd_pcm_xrun+0x10/0x10 [ 432.746706][T14207] ? update_audio_tstamp+0x172/0x6a0 [ 432.746730][T14207] ? __pfx_update_audio_tstamp+0x10/0x10 [ 432.746752][T14207] snd_pcm_update_state+0x342/0x430 [ 432.746770][T14207] snd_pcm_update_hw_ptr0+0x10b2/0x1b00 [ 432.746793][T14207] ? migrate_disable+0xd5/0x190 [ 432.746812][T14207] ? __pfx_snd_pcm_update_hw_ptr0+0x10/0x10 [ 432.746829][T14207] ? rt_spin_lock+0x223/0x2c0 [ 432.746846][T14207] ? __pfx_rt_spin_lock+0x10/0x10 [ 432.746866][T14207] __snd_pcm_lib_xfer+0x510/0x1ce0 [ 432.746888][T14207] ? __pfx_interleaved_copy+0x10/0x10 [ 432.746906][T14207] ? __pfx_dummy_pcm_copy+0x10/0x10 [ 432.746923][T14207] ? mulaw_decode+0x7f5/0x880 [ 432.746945][T14207] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 432.746963][T14207] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 432.746980][T14207] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 432.747000][T14207] ? snd_pcm_oss_write3+0x1a2/0x320 [ 432.747020][T14207] snd_pcm_oss_write3+0x1bc/0x320 [ 432.747042][T14207] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 432.747067][T14207] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 432.747089][T14207] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 432.747116][T14207] snd_pcm_oss_write+0xba2/0x11a0 [ 432.747142][T14207] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 432.747163][T14207] ? rw_verify_area+0x25b/0x4e0 [ 432.747181][T14207] ? __lock_acquire+0xab9/0xd20 [ 432.747201][T14207] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 432.747221][T14207] vfs_write+0x284/0xb40 [ 432.747243][T14207] ? __pfx_vfs_write+0x10/0x10 [ 432.747263][T14207] ? __fget_files+0x2a/0x420 [ 432.747286][T14207] ? __fget_files+0x2a/0x420 [ 432.747307][T14207] ? __fget_files+0x3a6/0x420 [ 432.747328][T14207] ? __fget_files+0x2a/0x420 [ 432.747353][T14207] ksys_write+0x14b/0x260 [ 432.747373][T14207] ? __pfx_ksys_write+0x10/0x10 [ 432.747392][T14207] ? rcu_is_watching+0x15/0xb0 [ 432.747416][T14207] ? do_syscall_64+0xbe/0x3b0 [ 432.747439][T14207] do_syscall_64+0xfa/0x3b0 [ 432.747459][T14207] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.747480][T14207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.747497][T14207] ? clear_bhb_loop+0x60/0xb0 [ 432.747515][T14207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.747537][T14207] RIP: 0033:0x7fd3b386ebe9 [ 432.747552][T14207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.747567][T14207] RSP: 002b:00007fd3b1ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 432.747586][T14207] RAX: ffffffffffffffda RBX: 00007fd3b3aa5fa0 RCX: 00007fd3b386ebe9 [ 432.747599][T14207] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003 [ 432.747611][T14207] RBP: 00007fd3b38f1e19 R08: 0000000000000000 R09: 0000000000000000 [ 432.747622][T14207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.747632][T14207] R13: 00007fd3b3aa6038 R14: 00007fd3b3aa5fa0 R15: 00007fff56e9de78 [ 432.747651][T14207] [ 432.994815][ T9] usb 7-1: USB disconnect, device number 12 [ 432.998903][ T3201] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 433.637999][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.677504][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.716920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.756401][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.795884][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.835424][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.874928][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.037298][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.037347][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.914597][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.953838][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available