last executing test programs: 50.004807418s ago: executing program 1 (id=2402): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 49.478779619s ago: executing program 1 (id=2408): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='.\x00') 48.423447675s ago: executing program 1 (id=2421): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882000596aaaa02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 47.919465503s ago: executing program 1 (id=2427): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 47.678374244s ago: executing program 1 (id=2430): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) 47.435147419s ago: executing program 1 (id=2433): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/33, 0x21}], 0x1}, 0x20003ff0}], 0x1, 0x1a0, 0x0) close(r1) 46.869997943s ago: executing program 32 (id=2433): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/33, 0x21}], 0x1}, 0x20003ff0}], 0x1, 0x1a0, 0x0) close(r1) 19.442183075s ago: executing program 4 (id=2674): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="202001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000008c0)={0x40, 0x12, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000440)={0x20, 0x17, 0x1, "c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.827982099s ago: executing program 4 (id=2697): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) r1 = syz_io_uring_setup(0x1e1a, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x225e, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8cff) 16.52491227s ago: executing program 4 (id=2700): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b3bf00", @ANYBLOB="20001d801c00008006000500c0"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 16.168351023s ago: executing program 4 (id=2702): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) futimesat(r0, 0x0, 0x0) 15.854317402s ago: executing program 4 (id=2704): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7fd, 0xdddd0000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x15000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff1000, 0x101000}) 15.192826375s ago: executing program 4 (id=2709): r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 12.1505593s ago: executing program 0 (id=2736): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 11.883191545s ago: executing program 0 (id=2739): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x7ff, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="2fae1b", 0x3}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 11.620791304s ago: executing program 0 (id=2742): creat(0x0, 0x140) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x32}, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "000004", 0x48, 0x11, 0xfe, @local, @mcast2, {[], {0x4e1a, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "18ab2a26ae60d2f5fa7b98ff63207354dad794fa3acea3bc", "0f751a39464bd910bbd086fa58e22292370ebbd46ca5f4e8d3db2e92976541b2"}}}}}}}, 0x0) 11.358882153s ago: executing program 0 (id=2744): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121081, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="5bff", 0x2}], 0x1) 10.995171578s ago: executing program 0 (id=2748): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r0, &(0x7f000000a200), 0x3ffffffffffff31, 0x60000800) connect$can_j1939(r0, &(0x7f0000000a40)={0x1d, r1, 0x1, {0x0, 0xf0, 0x1}, 0x2}, 0x18) 10.371697853s ago: executing program 0 (id=2752): syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.156251467s ago: executing program 2 (id=2789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0xc040) 3.995759601s ago: executing program 2 (id=2790): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x8040600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000900)={'#! ', '', [{0x20, '\'!--!!~\x00+\x10\xe4\xbd\x9a\xd7\x14\"\xf9\xf3iu\xbd\x02R\xc8\xd0ss\xad\x05\xf2\"t\x05\x1c\'\xb0\x7f\xc2\x8b\xc4\xa9Q\xd1:U\x80\rGZA4\xac0\xe3.\x88M\xdcH\x96\x15Y\xe5\xd8k\xa8Ic\n\x00\x00\x00)\xdd\x8fS-\x15\xc1\xd7\xe8\x17\x1fF\x816;\xea\x13j\x96\xa7\xe9\x11\x8fXh\b\xf3\xa4\x99\x948\x85\xa4\x9a\xa50k\a\xf0\xfd\xe72\x04\x00\xf4\xd7T\xe3\x03\x03\x9c\x12f\xb7\n\xe8+\xf7\x93\x030\x9c\xefW\x1d\r\x8dIr\x1f\xab\xb5B\xc2A\xe9\xabQ\x8e?7x\xa9,\xfe:\xfc$5\xc7C\x19\xae=<\x02\xe2\x14w\x9b+\xa7\x94\x88\xc4&KP\xc2F\x9a\xb4J\xf8\x8c\n\xa14\xc2\x8d\xf6\xb9\xd6\xc8Tu\x95\t\x80\x9f\x1f\x1b\xc953K\xd0\x01\x19\xf9\x19\xda\x06\xb2qK8v\xc6_N\x91;\xb7V?\xf8T\x9b\xc9F\xc4\x8a\xe9w\xaa\xe1\xe1)\x16\xd7\xa6Cry\xb8Y\x84\xa8\xe5\x8ca\x19A\n\xb1\x00\x10\xb1\xbe]\x8c\xc9N\x1c\xbd!W\xe6\xf8\xfa\xc5\x12\xbb\x9eE\x95\x17&o\x9c\x1c\xfes\x11\xdb\x13\xc6\b!%\x92\xc6\x93\xf3\x02\b\x87\xdb\x97\x96\xe2&\xee\xb8\x1e\x92\xa8m\x15Q.\xa6\xf1\x02cb4\x83\x94e\xd3\xeb7\xbd)\xff\x96\xcf\xc7\xfa\xa6\xdaGU\xe3\xfa\xc7\x14\xa3\x03\x9a\xaca\xac'}]}, 0x160) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000005, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 3.837619368s ago: executing program 2 (id=2791): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/81, 0x51}], 0x1}, 0x0) 3.566749823s ago: executing program 5 (id=2794): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a180000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.558097627s ago: executing program 2 (id=2795): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x530, 0x7, 0x3, 0x5}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0xf3, 0x6, 0x2, 0x0, 0x7e, 0x5, 0x3, 0x10, 0x1, 0x0, 0xe1, 0x8, 0x0, 0xe4e, 0xffffff54, 0x0, 0xc, 0x0, 0x7f, '\x00', 0x3}) 2.71283881s ago: executing program 5 (id=2797): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r2}, &(0x7f00000000c0)=0x8) 2.475273633s ago: executing program 3 (id=2798): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x1, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x40, 0x2, 0x20}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3}, 0x4, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 2.336794333s ago: executing program 3 (id=2799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500194003"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x4004cd4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc084) 2.063310325s ago: executing program 3 (id=2800): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0xd}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read(r0, &(0x7f0000000040)=""/44, 0x2c) 1.613172212s ago: executing program 5 (id=2801): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0x100, 0x8006, 0xb, 0x802, 0x0, 0x0, 0x80, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c6700002c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bd6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287eda920fe0f7cfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de132cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f5b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4786c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0xffffffff, 0x0, {0x5, 0x0, 0x7, 0x6, 0x8, 0xffffffffffffff0c, 0x9ef, 0xfffffffb, 0x9, 0x6000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.470205964s ago: executing program 3 (id=2802): r0 = socket(0x10, 0x80003, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 1.343919767s ago: executing program 5 (id=2803): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 1.261694929s ago: executing program 3 (id=2804): recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x45}], 0x1, 0x21, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.020421224s ago: executing program 3 (id=2805): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000240)={0x0, 0xe, 0x1, "c5"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="208402000000b0e0"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="201430"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 553.471119ms ago: executing program 5 (id=2806): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 187.305384ms ago: executing program 2 (id=2807): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) 120.945352ms ago: executing program 5 (id=2808): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 0s ago: executing program 2 (id=2809): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000003c0)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000300)=0x9) kernel console output (not intermixed with test programs): T24] elan 0003:04F3:0755.0030: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 300.592236][ T5925] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 300.676341][T10205] elan 0003:04F3:0755.0030: pid 10205 passed too short report [ 300.688529][ T24] usb 4-1: USB disconnect, device number 27 [ 300.756353][ T5957] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 300.764390][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 300.773544][ T5925] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 300.785030][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.794683][ T5925] usb 1-1: config 0 has no interface number 0 [ 300.802619][ T5957] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 300.810813][ T5957] usb 3-1: media controller created [ 300.822963][ T5925] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 300.832638][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.841293][ T5925] usb 1-1: Product: syz [ 300.861682][ T5925] usb 1-1: Manufacturer: syz [ 300.866606][ T5925] usb 1-1: SerialNumber: syz [ 300.873182][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.885303][ T5925] usb 1-1: config 0 descriptor?? [ 300.911209][ T5925] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 300.971814][ T5893] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 301.113613][ T5925] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 301.129877][ T5925] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 301.141744][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.153357][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.164940][ T5893] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 301.174540][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.186742][ T5893] usb 5-1: config 0 descriptor?? [ 301.453288][ T5957] zl10353_read_register: readreg error (reg=127, ret==0) [ 301.469622][ T5957] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 301.484033][ T5957] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 301.502530][ T5957] usb 3-1: USB disconnect, device number 32 [ 301.578064][ T5957] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 301.592444][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 301.604601][ T9] usb 1-1: USB disconnect, device number 23 [ 301.613946][ T5925] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 301.624356][ T5893] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 301.657833][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 301.691373][ T5893] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 301.715890][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 301.737289][ T5893] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0031/input/input37 [ 301.756154][ T9] quatech2 1-1:0.51: device disconnected [ 301.782386][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 301.795672][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 301.813842][ T5893] cm6533_jd 0003:0D8C:0022.0031: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 301.823515][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 301.871008][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.895040][ T5893] usb 5-1: USB disconnect, device number 28 [ 301.902382][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.951983][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.988189][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 302.001711][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 302.008337][T10251] fido_id[10251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 302.032579][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.064360][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.102944][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.125408][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 302.133413][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 302.146925][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.159348][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.171192][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.215449][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 302.222843][ T5925] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 302.252378][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.257488][T10257] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1747'. [ 302.291851][ T5925] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 302.686681][ T5893] usb 4-1: USB disconnect, device number 28 [ 303.036201][T10288] capability: warning: `syz.1.1760' uses 32-bit capabilities (legacy support in use) [ 303.352547][T10301] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 303.391345][T10301] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 303.571531][T10305] loop2: detected capacity change from 0 to 7 [ 303.605343][T10305] Dev loop2: unable to read RDB block 7 [ 303.611256][T10305] loop2: unable to read partition table [ 303.647748][T10305] loop2: partition table beyond EOD, truncated [ 303.677977][T10305] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 304.572229][ T5925] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 304.695803][T10334] input: syz1 as /devices/virtual/input/input38 [ 304.791771][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 304.813552][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 304.842704][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 304.881751][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.925977][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.961676][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.999862][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 305.021824][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 305.071746][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.116552][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 305.161772][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 305.190385][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 305.208233][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 305.235799][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.248390][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 305.261317][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 305.277846][ T5925] usb 5-1: string descriptor 0 read error: -22 [ 305.286007][ T5925] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 305.298884][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.338324][ T5925] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 305.461738][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 305.623851][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.645228][T10354] loop9: detected capacity change from 0 to 7 [ 305.656032][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.677530][ T24] usb 5-1: USB disconnect, device number 29 [ 305.682891][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 305.688769][ T5983] Buffer I/O error on dev loop9, logical block 0, async page read [ 305.722580][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.744636][ T5983] Buffer I/O error on dev loop9, logical block 0, async page read [ 305.760922][ T9] usb 3-1: config 0 descriptor?? [ 305.782357][ T5983] Buffer I/O error on dev loop9, logical block 0, async page read [ 305.791181][ T5983] Buffer I/O error on dev loop9, logical block 0, async page read [ 305.822534][ T5983] Buffer I/O error on dev loop9, logical block 0, async page read [ 306.212959][ T9] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 306.247243][ T9] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 306.407400][ T9] cp2112 0003:10C4:EA90.0032: Part Number: 0x82 Device Version: 0xFE [ 306.656572][T10376] loop5: detected capacity change from 0 to 7 [ 306.665445][T10376] Dev loop5: unable to read RDB block 7 [ 306.671387][T10376] loop5: unable to read partition table [ 306.680171][T10376] loop5: partition table beyond EOD, truncated [ 306.688109][T10376] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.810659][ T9] cp2112 0003:10C4:EA90.0032: error setting SMBus config [ 306.822681][ T9] cp2112 0003:10C4:EA90.0032: probe with driver cp2112 failed with error -71 [ 306.864334][ T9] usb 3-1: USB disconnect, device number 33 [ 307.658300][T10394] kvm: user requested TSC rate below hardware speed [ 307.973182][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 308.151768][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.154487][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 308.181089][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.200297][ T24] usb 5-1: Product: syz [ 308.205109][ T24] usb 5-1: Manufacturer: syz [ 308.210072][ T24] usb 5-1: SerialNumber: syz [ 308.233480][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 308.241715][ T5957] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 308.305392][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.337056][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 308.340455][ T5893] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 308.361901][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.390473][ T9] usb 2-1: config 0 descriptor?? [ 308.405997][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 308.419625][T10295] syz.0.1763 (10295): drop_caches: 3 [ 308.422200][ T5957] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 308.460377][ T5957] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 308.479120][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.501959][ T5957] usb 4-1: Product: syz [ 308.506301][ T5957] usb 4-1: Manufacturer: syz [ 308.521649][ T5957] usb 4-1: SerialNumber: syz [ 308.556003][ T5957] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 308.813379][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 308.823027][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 308.978315][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.996167][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.998674][ T5957] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 309.023840][ T5957] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 309.034747][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 309.054715][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 309.062318][ T5957] usb 4-1: media controller created [ 309.068131][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 309.082574][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 309.102132][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 309.110579][ T5923] usb 5-1: USB disconnect, device number 30 [ 309.116115][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.137226][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 309.148595][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 309.162292][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 309.190132][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 309.201559][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 309.210434][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 309.219293][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 309.227835][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 309.249853][ T9] pwc: Registered as video103. [ 309.261944][ T5925] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 309.270204][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 309.312209][ T9] usb 2-1: USB disconnect, device number 27 [ 309.448323][ T5925] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 309.464946][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.499115][ T5925] usb 1-1: config 0 descriptor?? [ 309.522279][ T5925] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 309.649122][ T5957] usb 4-1: USB disconnect, device number 29 [ 309.702198][ T5893] usb 5-1: Service connection timeout for: 256 [ 309.708782][ T5893] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 309.764453][ T5893] ath9k_htc: Failed to initialize the device [ 309.786961][ T5923] usb 5-1: ath9k_htc: USB layer deinitialized [ 309.947780][ T5925] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 310.349764][ T5925] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 310.592204][ T5925] usb 1-1: USB disconnect, device number 24 [ 311.103765][T10448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.111314][T10448] IPv6: NLM_F_CREATE should be set when creating new route [ 311.163435][T10451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1828'. [ 312.007710][ T5923] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 312.196797][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.207070][ T5923] usb 4-1: not running at top speed; connect to a high speed hub [ 312.229517][ T5923] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 312.250873][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.291740][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.323738][ T5923] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.351909][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.371378][ T5923] usb 4-1: Product: syz [ 312.389741][ T5923] usb 4-1: Manufacturer: syz [ 312.409813][ T5923] usb 4-1: SerialNumber: syz [ 312.887912][ T5923] usb 4-1: 0:2 : does not exist [ 312.960205][ T5923] usb 4-1: USB disconnect, device number 30 [ 313.045056][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.994695][ T5923] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 314.058671][T10527] syzkaller1: entered promiscuous mode [ 314.078186][T10527] syzkaller1: entered allmulticast mode [ 314.172242][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 314.193658][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.232574][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.259439][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.297792][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.342215][ T5923] usb 2-1: config 0 descriptor?? [ 314.385850][ T5923] hub 2-1:0.0: USB hub found [ 314.541831][ T911] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 314.580652][ T5923] hub 2-1:0.0: 1 port detected [ 314.713945][ T911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.747719][ T911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.765348][ T911] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 314.785775][ T5923] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 314.802822][ T911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.811156][ T5923] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 314.835994][ T911] usb 3-1: config 0 descriptor?? [ 314.846272][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 314.858506][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 314.925586][ T5923] usb 2-1: USB disconnect, device number 28 [ 315.281453][ T911] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 315.309728][ T911] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 315.352180][ T5923] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 315.360473][ T911] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0033/input/input40 [ 315.409226][ T911] cm6533_jd 0003:0D8C:0022.0033: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 315.529093][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.562042][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.599441][ T5957] usb 3-1: USB disconnect, device number 34 [ 315.613789][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.636692][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.888610][ T5923] usb 5-1: usb_control_msg returned -32 [ 315.894531][ T5923] usbtmc 5-1:16.0: can't read capabilities [ 315.935069][T10565] loop5: detected capacity change from 0 to 7 [ 315.950080][T10565] Dev loop5: unable to read RDB block 7 [ 315.957029][T10565] loop5: AHDI p3 [ 315.960909][T10565] loop5: partition table partially beyond EOD, truncated [ 316.052372][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 316.052391][ T30] audit: type=1326 audit(1765706259.119:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7fc00000 [ 316.287054][T10578] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 316.332244][ T5923] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 316.493859][ T5923] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.504132][ T5923] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.517873][ T5923] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.527338][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.692837][ T30] audit: type=1326 audit(1765706259.759:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f72539 code=0x7fc00000 [ 316.715815][ T24] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 316.747537][ T5923] usb 1-1: GET_CAPABILITIES returned 0 [ 316.754859][ T5923] usbtmc 1-1:16.0: can't read capabilities [ 316.843484][T10591] loop9: detected capacity change from 0 to 7 [ 316.850989][T10591] Dev loop9: unable to read RDB block 7 [ 316.858167][T10591] loop9: unable to read partition table [ 316.866397][T10591] loop9: partition table beyond EOD, truncated [ 316.876672][T10591] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 316.887362][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.901890][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.924448][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.939288][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.948378][ T24] usb 3-1: Product: syz [ 316.953664][ T24] usb 3-1: Manufacturer: syz [ 316.958477][ T24] usb 3-1: SerialNumber: syz [ 316.960642][ T5957] usb 1-1: USB disconnect, device number 25 [ 317.035306][T10594] loop2: detected capacity change from 0 to 7 [ 317.043862][T10594] Dev loop2: unable to read RDB block 7 [ 317.049897][T10594] loop2: unable to read partition table [ 317.056658][T10594] loop2: partition table beyond EOD, truncated [ 317.066094][T10594] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.193753][ T24] usb 3-1: 0:2 : does not exist [ 317.211508][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 317.271087][ T24] usb 3-1: USB disconnect, device number 35 [ 317.320813][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.456743][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465777][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.475293][T10602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1887'. [ 318.132018][ T24] usb 5-1: USB disconnect, device number 31 [ 318.681964][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 318.721745][ T5957] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 318.842900][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 318.858928][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.876168][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.876942][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 318.886932][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.902389][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.924996][ T5957] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.953075][ T24] usb 5-1: config 0 descriptor?? [ 318.964483][ T5957] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 318.965189][ T24] hub 5-1:0.0: USB hub found [ 318.992394][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.001211][ T5957] usb 2-1: Product: syz [ 319.031718][ T5957] usb 2-1: Manufacturer: syz [ 319.037354][ T5957] usb 2-1: SerialNumber: syz [ 319.054120][ T5957] usb 2-1: config 0 descriptor?? [ 319.190544][ T24] hub 5-1:0.0: 1 port detected [ 319.399486][ T24] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 319.431758][ T24] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 319.461873][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 319.468031][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.489393][ T5957] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 319.523490][ T24] usb 5-1: USB disconnect, device number 32 [ 319.791730][ T5923] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 319.972340][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.984407][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.998540][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.016171][ T5923] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.026343][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.040220][ T5923] usb 1-1: config 0 descriptor?? [ 320.179992][ T5957] usb 2-1: USB disconnect, device number 29 [ 320.223129][ T30] audit: type=1326 audit(1765706263.289:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7fc00000 [ 320.531563][ T5923] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 321.112302][ T5923] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 321.182404][ T5893] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 321.272522][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 321.281741][ T5923] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 321.306608][ T5923] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 321.333821][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.354052][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.373907][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 321.382931][ T5923] usb 4-1: Product: syz [ 321.387282][ T5923] usb 4-1: Manufacturer: syz [ 321.401756][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.411384][ T5923] usb 4-1: SerialNumber: syz [ 321.424143][ T5893] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 321.443940][ T5923] usb 4-1: config 0 descriptor?? [ 321.451048][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.466348][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 321.475927][ T5893] usb 3-1: Product: syz [ 321.480481][ T5923] usb 4-1: setting power ON [ 321.485656][ T5893] usb 3-1: Manufacturer: syz [ 321.490513][ T5893] usb 3-1: SerialNumber: syz [ 321.496823][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 321.512509][ T5893] usb 3-1: config 0 descriptor?? [ 321.519848][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.536744][ T5893] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 321.547780][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 321.560522][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 321.591448][ T5923] usb 4-1: media controller created [ 321.598928][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.609472][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.643244][ T24] usb 2-1: config 0 descriptor?? [ 321.662523][T10689] dvb-usb: bulk message failed: -22 (3/0) [ 321.663222][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.680099][T10689] dvb-usb: bulk message failed: -22 (3/0) [ 321.687469][ T5893] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 321.705223][T10689] dvb-usb: bulk message failed: -22 (3/0) [ 321.721779][ T5893] usb 3-1: media controller created [ 321.782402][ T5923] usb 4-1: selecting invalid altsetting 6 [ 321.788600][ T5923] usb 4-1: digital interface selection failed (-22) [ 321.835251][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.847395][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 321.868388][ T5923] usb 4-1: setting power OFF [ 321.877289][ T24] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 321.892201][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 321.908022][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 321.918575][ T5923] (NULL device *): no alternate interface [ 322.062094][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 322.090048][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 322.097730][ T5893] DVB: Unable to find symbol tda10046_attach() [ 322.121737][ T5893] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 322.151718][ T5923] usb 4-1: USB disconnect, device number 31 [ 322.160557][ T5893] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 322.180978][ T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 322.222778][ T24] [drm] Initialized udl on minor 2 [ 322.255997][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 322.302981][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 322.363911][ T5906] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 322.391533][ T24] usb 2-1: USB disconnect, device number 30 [ 322.435263][ T5906] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 322.599624][ T9] usb 1-1: USB disconnect, device number 26 [ 322.807843][ T5893] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 322.840546][ T5893] usb 3-1: USB disconnect, device number 36 [ 322.852931][ T5957] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 323.020746][T10745] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 323.058509][ T5957] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.089266][ T5957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.127329][ T5957] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.152087][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.183376][ T5957] usb 4-1: Product: syz [ 323.187615][ T5957] usb 4-1: Manufacturer: syz [ 323.228516][ T5957] usb 4-1: SerialNumber: syz [ 323.354396][T10752] loop8: detected capacity change from 0 to 8 [ 323.384910][T10752] Dev loop8: unable to read RDB block 8 [ 323.390791][T10752] loop8: unable to read partition table [ 323.416562][T10752] loop8: partition table beyond EOD, truncated [ 323.440638][T10752] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 323.478326][ T5957] usb 4-1: 0:2 : does not exist [ 323.507807][ T5957] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 323.634240][ T5957] usb 4-1: USB disconnect, device number 32 [ 323.774116][T10765] netlink: 212188 bytes leftover after parsing attributes in process `syz.0.1945'. [ 324.341721][ T5893] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 324.535063][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 324.563147][ T5893] usb 3-1: config 0 has no interfaces? [ 324.568808][ T5893] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 324.623851][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.655702][ T5893] usb 3-1: config 0 descriptor?? [ 324.874046][ T5957] usb 3-1: USB disconnect, device number 37 [ 326.703345][ T5957] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 326.908499][ T5957] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 326.921670][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.951698][ T5957] usb 3-1: Product: syz [ 326.955931][ T5957] usb 3-1: Manufacturer: syz [ 326.960740][ T5957] usb 3-1: SerialNumber: syz [ 327.212533][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 327.252177][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 327.282155][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 327.314566][ T5957] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 327.352161][ T5957] usb 3-1: USB disconnect, device number 38 [ 329.599658][T10910] syz.1.2003 (10910): drop_caches: 3 [ 329.832175][ T5957] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 330.012103][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 330.022714][ T5957] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.041650][ T5957] usb 3-1: config 0 has no interface number 0 [ 330.063617][ T5957] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 330.086647][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 330.094778][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.134017][ T5957] usb 3-1: Product: syz [ 330.139081][ T5957] usb 3-1: Manufacturer: syz [ 330.151665][ T5957] usb 3-1: SerialNumber: syz [ 330.163193][ T5957] usb 3-1: config 0 descriptor?? [ 330.190840][ T5957] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 330.200205][ T5957] usb 3-1: selecting invalid altsetting 1 [ 330.210786][ T5957] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 330.227456][ T5957] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 330.239392][ T5957] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 330.248754][ T5957] usb 3-1: media controller created [ 330.270641][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.433265][ T5957] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 330.457280][ T5957] zl10353_read_register: readreg error (reg=127, ret==-32) [ 330.571077][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2033'. [ 331.494380][T11005] netlink: 'syz.0.2050': attribute type 1 has an invalid length. [ 331.502559][T11005] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2050'. [ 331.532621][T10941] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 331.581697][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 331.611066][ T5957] usb 3-1: USB disconnect, device number 39 [ 331.653014][ T911] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 331.744016][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 331.751386][ T10] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 331.776737][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 331.794668][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.803839][ T10] usb 2-1: Product: syz [ 331.808333][ T10] usb 2-1: Manufacturer: syz [ 331.814020][ T10] usb 2-1: SerialNumber: syz [ 331.831978][ T911] usb 4-1: Using ep0 maxpacket: 8 [ 331.839134][ T911] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 331.843078][ T10] usb 2-1: config 0 descriptor?? [ 331.851760][ T911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.873061][ T911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.893558][ T911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.900536][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 331.911715][ T911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.932439][ T10] usb 2-1: setting power ON [ 331.937114][ T911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 331.937145][ T911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.999785][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 332.040508][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.061485][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 332.081360][ T10] usb 2-1: media controller created [ 332.111937][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.132943][T10997] dvb-usb: bulk message failed: -22 (3/0) [ 332.138897][T10997] dvb-usb: bulk message failed: -22 (3/0) [ 332.156647][ T911] usb 4-1: usb_control_msg returned -32 [ 332.164626][T10997] dvb-usb: bulk message failed: -22 (3/0) [ 332.178955][ T911] usbtmc 4-1:16.0: can't read capabilities [ 332.222820][ T10] usb 2-1: selecting invalid altsetting 6 [ 332.241733][ T10] usb 2-1: digital interface selection failed (-22) [ 332.278643][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 332.312439][ T10] usb 2-1: setting power OFF [ 332.317376][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 332.354086][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 332.371977][ T10] (NULL device *): no alternate interface [ 332.444550][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 332.498519][ T10] usb 2-1: USB disconnect, device number 31 [ 332.737840][ T24] usb 4-1: USB disconnect, device number 33 [ 332.821798][ T911] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 332.984246][ T911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.011203][ T911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.030854][ T911] usb 3-1: config 1 has no interface number 0 [ 333.046639][ T911] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.083313][ T911] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 333.114900][ T911] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.154439][ T911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.171725][ T911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.180057][ T911] usb 3-1: Product: syz [ 333.184573][ T911] usb 3-1: Manufacturer: syz [ 333.189196][ T911] usb 3-1: SerialNumber: syz [ 333.602248][ T30] audit: type=1326 audit(1765706276.669:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.1.2064" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd4539 code=0x0 [ 333.701780][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 333.871721][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 333.880067][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.891674][ T10] usb 4-1: config 0 has no interface number 0 [ 333.913801][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 333.923224][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.931351][ T10] usb 4-1: Product: syz [ 333.936279][ T10] usb 4-1: Manufacturer: syz [ 333.942091][ T10] usb 4-1: SerialNumber: syz [ 333.950428][ T10] usb 4-1: config 0 descriptor?? [ 333.966300][ T10] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 333.975340][ T10] usb 4-1: selecting invalid altsetting 1 [ 333.981099][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 334.004423][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 334.015835][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 334.025098][ T10] usb 4-1: media controller created [ 334.033295][ T911] cdc_ncm 3-1:1.1: bind() failure [ 334.060269][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.238498][ T10] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 334.246063][ T10] zl10353_read_register: readreg error (reg=127, ret==-32) [ 334.277586][ T5957] usb 3-1: USB disconnect, device number 40 [ 334.841742][ T911] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 335.011693][ T911] usb 1-1: Using ep0 maxpacket: 8 [ 335.020541][ T911] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 335.071751][ T911] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 335.097856][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.125463][ T911] usb 1-1: Product: syz [ 335.129890][ T911] usb 1-1: Manufacturer: syz [ 335.170363][ T911] usb 1-1: SerialNumber: syz [ 335.209004][ T911] usb 1-1: config 0 descriptor?? [ 335.255958][ T911] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 335.282381][ T911] usb 1-1: setting power ON [ 335.300136][ T911] dvb-usb: bulk message failed: -22 (2/0) [ 335.306090][T11039] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 335.333026][ T911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 335.334317][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 335.364773][ T911] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 335.391703][ T911] usb 1-1: media controller created [ 335.502202][T11047] syz.4.2066 (11047): drop_caches: 3 [ 335.512331][T11057] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 335.515372][ T911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.552109][T11057] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 335.627508][ T911] usb 1-1: selecting invalid altsetting 6 [ 335.653553][ T10] usb 4-1: USB disconnect, device number 34 [ 335.665238][ T911] usb 1-1: digital interface selection failed (-22) [ 335.701702][ T911] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 335.745635][ T911] usb 1-1: setting power OFF [ 335.750309][ T911] dvb-usb: bulk message failed: -22 (2/0) [ 335.801696][ T911] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 335.833025][ T911] (NULL device *): no alternate interface [ 335.937662][ T911] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 335.965697][ T911] usb 1-1: USB disconnect, device number 27 [ 336.011842][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 336.059106][ T30] audit: type=1326 audit(1765706279.119:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 336.082427][ T30] audit: type=1326 audit(1765706279.119:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 336.141703][ T30] audit: type=1326 audit(1765706279.119:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 336.171883][ T30] audit: type=1326 audit(1765706279.119:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 336.201843][ T30] audit: type=1326 audit(1765706279.119:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 336.226824][ T30] audit: type=1326 audit(1765706279.119:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 336.250062][ T30] audit: type=1326 audit(1765706279.119:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 336.273301][ T24] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 336.285226][ T24] usb 3-1: config 0 has no interface number 0 [ 336.306871][ T24] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 336.323784][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.341751][ T30] audit: type=1326 audit(1765706279.119:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 336.373913][ T24] usb 3-1: Product: syz [ 336.383977][ T24] usb 3-1: Manufacturer: syz [ 336.388690][ T24] usb 3-1: SerialNumber: syz [ 336.405929][ T24] usb 3-1: config 0 descriptor?? [ 336.430443][ T30] audit: type=1326 audit(1765706279.119:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 336.462812][ T24] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 336.482507][ T24] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 336.541777][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 336.645176][ T24] usb 3-1: USB disconnect, device number 41 [ 336.753991][ T9] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 336.770603][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 336.793335][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 336.804811][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.814541][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 336.847190][ T9] usb 5-1: Product: syz [ 336.851513][ T9] usb 5-1: Manufacturer: syz [ 336.859286][ T9] usb 5-1: SerialNumber: syz [ 336.877985][ T9] usb 5-1: config 0 descriptor?? [ 336.891270][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 336.898941][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 336.910958][ T9] usb 5-1: selecting invalid altsetting 0 [ 337.529800][T11110] Set syz1 is full, maxelem 65536 reached [ 337.568067][T11078] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 337.614501][T11078] usb 5-1: device reset changed ep0 maxpacket size! [ 337.655177][ T24] usb 5-1: USB disconnect, device number 33 [ 337.891743][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 338.038848][T11123] syz.1.2098 (11123): drop_caches: 4 [ 338.071783][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 338.084109][ T24] usb 5-1: config 0 has no interfaces? [ 338.102873][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 338.121993][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.136742][ T24] usb 5-1: Product: syz [ 338.143992][ T24] usb 5-1: Manufacturer: syz [ 338.148830][ T24] usb 5-1: SerialNumber: syz [ 338.153911][ T5906] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 338.172802][ T24] usb 5-1: config 0 descriptor?? [ 338.311680][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 338.318868][ T5906] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 338.337015][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 338.361679][ T5906] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.381893][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.411734][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 338.433323][ T5906] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 338.442204][ T24] usb 5-1: USB disconnect, device number 34 [ 338.459079][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 338.481033][ T5906] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.505892][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.517635][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 338.532603][ T5906] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 338.561736][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 338.583558][ T5906] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.615939][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.659117][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 338.685422][ T5906] usb 3-1: string descriptor 0 read error: -22 [ 338.692619][ T5906] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 338.712372][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.742054][ T5906] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 338.970014][ T5906] usb 3-1: USB disconnect, device number 42 [ 339.046154][T11143] syzkaller1: entered promiscuous mode [ 339.072522][T11143] syzkaller1: entered allmulticast mode [ 339.181969][T11118] adutux: No device or device unplugged -19 [ 339.352287][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 339.523470][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 339.534726][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.546179][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.557764][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.565516][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.574797][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.586581][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.594438][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.603707][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.615445][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.624059][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.633265][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.644251][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.652523][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.662131][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.673693][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.682474][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.691554][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.703451][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.711467][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.721230][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.732502][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.743216][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.752751][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.779878][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.807338][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 339.836883][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 339.846288][ T9] usb 5-1: Product: syz [ 339.850558][ T9] usb 5-1: Manufacturer: syz [ 339.857625][ T9] usb 5-1: SerialNumber: syz [ 339.889581][ T9] usb 5-1: config 0 descriptor?? [ 339.915042][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 340.007080][T11175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2121'. [ 340.018000][T11175] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2121'. [ 340.027189][T11175] netlink: 'syz.1.2121': attribute type 6 has an invalid length. [ 340.036106][T11175] netlink: 'syz.1.2121': attribute type 5 has an invalid length. [ 340.044326][T11175] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2121'. [ 340.051885][ T5906] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 340.179372][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2124'. [ 340.188871][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2124'. [ 340.222115][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 340.233623][ T5906] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 340.247759][ T5906] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 340.268591][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.291786][ T5906] usb 3-1: Product: syz [ 340.296166][ T5906] usb 3-1: Manufacturer: syz [ 340.301054][ T5906] usb 3-1: SerialNumber: syz [ 340.302802][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 340.315929][ T9] usb 5-1: USB disconnect, device number 35 [ 340.328394][ T5906] usb 3-1: config 0 descriptor?? [ 340.334779][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 340.363319][ T5906] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 340.375968][ T5906] usb 3-1: setting power ON [ 340.380720][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 340.397750][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.408997][ T5906] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 340.418142][ T5906] usb 3-1: media controller created [ 340.448929][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.478162][ T5906] usb 3-1: selecting invalid altsetting 6 [ 340.489305][ T5906] usb 3-1: digital interface selection failed (-22) [ 340.521816][ T5906] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 340.531759][ T5906] usb 3-1: setting power OFF [ 340.536962][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 340.551949][ T5906] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 340.587591][T11169] dvb-usb: bulk message failed: -22 (3/0) [ 340.593701][ T5906] (NULL device *): no alternate interface [ 340.622797][T11169] dvb-usb: bulk message failed: -22 (3/0) [ 340.647354][T11169] dvb-usb: bulk message failed: -22 (3/0) [ 340.705896][ T5906] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 340.742653][ T5906] usb 3-1: USB disconnect, device number 43 [ 341.494717][T11208] input: syz1 as /devices/virtual/input/input41 [ 341.992200][ T5906] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 342.163914][ T5906] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 342.195387][ T5906] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 342.228845][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 342.259951][ T5906] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 342.311664][ T5906] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 342.343413][ T5906] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.368921][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 342.391642][ T5906] usb 4-1: Product: syz [ 342.396058][ T5906] usb 4-1: Manufacturer: syz [ 342.453150][ T5906] cdc_wdm 4-1:1.0: skipping garbage [ 342.458603][ T5906] cdc_wdm 4-1:1.0: skipping garbage [ 342.512477][ T5906] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 342.538376][ T5906] cdc_wdm 4-1:1.0: Unknown control protocol [ 343.334095][ T10] usb 4-1: USB disconnect, device number 35 [ 344.872567][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'. [ 345.215187][T11309] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2179'. [ 345.894530][ T5906] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 346.092489][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 346.128766][ T5906] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 346.157095][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.193576][ T5906] usb 5-1: Product: syz [ 346.220052][ T5906] usb 5-1: Manufacturer: syz [ 346.244062][ T5906] usb 5-1: SerialNumber: syz [ 346.271279][ T5906] usb 5-1: config 0 descriptor?? [ 346.283239][T11331] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 346.289694][T11331] syzkaller1: Refused to change device type [ 346.324864][ T5906] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 347.242269][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 347.411681][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 347.425915][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 347.441364][ T9] usb 1-1: config 0 has no interface number 0 [ 347.482011][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.503313][ T10] usb 5-1: USB disconnect, device number 36 [ 347.524709][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 347.540769][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 347.554179][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.564057][ T9] usb 1-1: Product: syz [ 347.568565][ T9] usb 1-1: Manufacturer: syz [ 347.588419][ T9] usb 1-1: SerialNumber: syz [ 347.605111][ T9] usb 1-1: config 0 descriptor?? [ 347.913469][ T5906] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 348.091777][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 348.099883][ T5906] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 348.108849][ T5906] usb 2-1: config 0 has no interface number 0 [ 348.123247][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 348.129528][ T5906] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 348.141543][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.151089][ T5906] usb 2-1: Product: syz [ 348.155972][ T5906] usb 2-1: Manufacturer: syz [ 348.161212][ T5906] usb 2-1: SerialNumber: syz [ 348.180149][ T5906] usb 2-1: config 0 descriptor?? [ 348.200032][ T5906] smsc95xx v2.0.0 [ 348.252965][ T9] appletouch 1-1:0.85: Geyser mode initialized. [ 348.272724][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input42 [ 348.302057][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 348.310507][ T10] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 348.342118][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.363003][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.384294][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.410735][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.433340][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.447110][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.479155][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.504104][ T9] usb 1-1: USB disconnect, device number 28 [ 348.518520][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.534432][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 348.546855][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 348.558861][ T9] appletouch 1-1:0.85: input: appletouch disconnected [ 348.568375][ T10] usb 3-1: SerialNumber: syz [ 348.580938][ T10] usb 3-1: config 0 descriptor?? [ 348.607969][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 348.619470][ T5906] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 348.641722][ T5906] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 348.823369][ T5187] bcm5974 3-1:0.0: could not read from device [ 348.856083][ T5187] bcm5974 3-1:0.0: could not read from device [ 348.869963][ T10] usb 3-1: USB disconnect, device number 44 [ 349.274461][ T5906] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 349.303787][ T5906] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 349.333821][ T5906] usb 2-1: USB disconnect, device number 32 [ 349.401885][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 349.518545][T11418] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 349.571885][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 349.579256][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 349.587940][ T24] usb 4-1: config 0 has no interface number 0 [ 349.594745][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 349.607903][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 349.618182][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.626586][ T24] usb 4-1: Product: syz [ 349.631327][ T24] usb 4-1: Manufacturer: syz [ 349.636118][ T24] usb 4-1: SerialNumber: syz [ 349.645681][T11418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.668016][ T24] usb 4-1: config 0 descriptor?? [ 349.683015][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 349.693309][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 349.717727][T11420] bond1: (slave ip6erspan0): making interface the new active one [ 349.730619][T11420] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 350.101772][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 350.252256][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 350.252278][ T30] audit: type=1326 audit(1765706293.319:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7fc00000 [ 350.281710][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 350.443581][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 350.474660][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 350.494300][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 350.513109][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 350.521531][ T9] usb 1-1: Product: syz [ 350.525943][ T9] usb 1-1: Manufacturer: syz [ 350.530841][ T9] usb 1-1: SerialNumber: syz [ 350.545020][ T9] usb 1-1: config 0 descriptor?? [ 350.556752][T11432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.819560][ T5893] usb 1-1: USB disconnect, device number 29 [ 350.923030][ T30] audit: type=1326 audit(1765706293.989:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7fc00000 [ 351.222688][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 351.246068][ T24] em28xx 4-1:0.132: board has no eeprom [ 351.253141][T11408] em28xx 4-1:0.132: failed to trigger write to i2c address 0x0 (error=-5) [ 351.321679][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 351.336390][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 351.350254][ T5906] em28xx 4-1:0.132: Registering V4L2 extension [ 351.377367][ T24] usb 4-1: USB disconnect, device number 36 [ 351.414342][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 351.621080][ T5906] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 351.633562][ T5906] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 351.650799][ T5906] em28xx 4-1:0.132: No AC97 audio processor [ 351.679703][ T5906] usb 4-1: Decoder not found [ 351.685082][ T5906] em28xx 4-1:0.132: failed to create media graph [ 351.702828][ T5906] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 351.717589][ T5906] em28xx 4-1:0.132: Remote control support is not available for this card. [ 351.739794][ T24] em28xx 4-1:0.132: Closing input extension [ 351.765523][T11472] vivid-000: disconnect [ 351.784414][ T24] em28xx 4-1:0.132: Freeing device [ 351.792889][T11472] vivid-000: reconnect [ 352.242098][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 352.379093][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2249'. [ 352.427528][ T24] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 352.450020][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.484264][ T24] usb 3-1: Product: syz [ 352.495637][ T24] usb 3-1: Manufacturer: syz [ 352.515943][ T24] usb 3-1: SerialNumber: syz [ 352.553334][ T24] usb 3-1: config 0 descriptor?? [ 352.645445][T11503] syzkaller1: entered promiscuous mode [ 352.651770][T11503] syzkaller1: entered allmulticast mode [ 352.791918][ T24] usb 3-1: USB disconnect, device number 45 [ 353.162036][T11525] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 353.181019][T11525] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2262'. [ 353.202069][T11525] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.514971][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 353.693304][T11543] netlink: 'syz.4.2270': attribute type 11 has an invalid length. [ 354.322142][ T30] audit: type=1326 audit(1765706297.379:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 354.428718][ T30] audit: type=1326 audit(1765706297.379:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 354.519551][ T30] audit: type=1326 audit(1765706297.379:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 354.648052][ T30] audit: type=1326 audit(1765706297.379:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 354.720471][ T30] audit: type=1326 audit(1765706297.379:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 354.798909][ T30] audit: type=1326 audit(1765706297.839:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.4.2284" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87539 code=0x0 [ 354.851786][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 354.874824][T11576] loop6: detected capacity change from 0 to 2640 [ 354.929021][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.942021][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.950981][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.959638][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.977309][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.991148][T11578] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.005707][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.016087][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 355.026059][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.036837][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.046195][ T9] usb 1-1: Product: syz [ 355.055164][ T9] usb 1-1: Manufacturer: syz [ 355.066897][ T9] usb 1-1: SerialNumber: syz [ 355.075809][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.087478][ T9] usb 1-1: config 0 descriptor?? [ 355.099434][T11578] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.119093][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 355.148305][ T5998] ldm_validate_partition_table(): Disk read failed. [ 355.178176][ T5998] Dev loop6: unable to read RDB block 0 [ 355.188655][ T5998] loop6: unable to read partition table [ 355.288493][T11576] ldm_validate_partition_table(): Disk read failed. [ 355.351982][T11576] Dev loop6: unable to read RDB block 0 [ 355.365913][T11576] loop6: unable to read partition table [ 355.380201][T11576] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 356.031759][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 356.115841][ T5202] ldm_validate_partition_table(): Disk read failed. [ 356.124829][ T5202] Dev loop6: unable to read RDB block 0 [ 356.130966][ T5202] loop6: unable to read partition table [ 356.153629][ T9] gspca_sunplus: reg_r err -71 [ 356.158544][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 356.196897][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 356.208471][ T9] usb 1-1: USB disconnect, device number 30 [ 356.225697][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.251687][ T24] usb 3-1: Product: syz [ 356.301913][ T24] usb 3-1: Manufacturer: syz [ 356.306693][ T24] usb 3-1: SerialNumber: syz [ 356.333011][ T24] usb 3-1: config 0 descriptor?? [ 356.562433][ T24] usb 3-1: ignoring: probably an ADSL modem [ 356.669793][T11612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2302'. [ 356.968382][ T24] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 357.185470][ T5906] usb 3-1: USB disconnect, device number 46 [ 357.354527][T11627] random: crng reseeded on system resumption [ 357.414670][T11627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2307'. [ 357.453144][T11627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2307'. [ 357.482363][T11627] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 357.641688][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 357.733125][T11629] netlink: 'syz.3.2308': attribute type 10 has an invalid length. [ 357.792097][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 357.827555][ T24] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 357.840556][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.864538][ T24] usb 1-1: Product: syz [ 357.883333][ T24] usb 1-1: Manufacturer: syz [ 357.919755][ T24] usb 1-1: SerialNumber: syz [ 357.935817][ T24] usb 1-1: config 0 descriptor?? [ 358.174635][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'. [ 358.200326][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 359.221972][ T24] gspca_sunplus: reg_w_riv err -71 [ 359.227360][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 359.252126][ T24] usb 1-1: USB disconnect, device number 31 [ 360.173227][T11687] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 360.184794][T11690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.201366][T11687] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 360.220637][T11687] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 360.228727][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 360.271544][T11690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.830492][T11730] netlink: 'syz.3.2353': attribute type 9 has an invalid length. [ 361.889802][T11730] netlink: 'syz.3.2353': attribute type 11 has an invalid length. [ 361.916755][T11730] netlink: 'syz.3.2353': attribute type 12 has an invalid length. [ 361.957416][T11730] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2353'. [ 361.989987][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'. [ 362.956957][ T30] audit: type=1326 audit(1765706306.019:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.4.2363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7fc00000 [ 363.231694][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 363.407367][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 363.442072][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.450250][ T24] usb 1-1: Product: syz [ 363.471264][ T24] usb 1-1: Manufacturer: syz [ 363.481715][ T24] usb 1-1: SerialNumber: syz [ 363.502534][ T24] usb 1-1: config 0 descriptor?? [ 363.663779][ T5957] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 363.673856][ T30] audit: type=1326 audit(1765706306.739:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.4.2363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f87539 code=0x7fc00000 [ 363.783153][ T9] usb 1-1: USB disconnect, device number 32 [ 363.851759][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 363.860385][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.886460][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.899868][ T5957] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 363.920923][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.945933][ T5957] usb 2-1: config 0 descriptor?? [ 364.031784][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 364.096483][T11788] random: crng reseeded on system resumption [ 364.136694][T11788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2378'. [ 364.146664][T11788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2378'. [ 364.167008][T11788] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 364.211725][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 364.219206][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.241682][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.270793][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.302433][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 364.315355][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.332492][ T24] usb 4-1: config 0 descriptor?? [ 364.380885][ T5957] savu 0003:1E7D:2D5A.0035: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 364.723769][ T5893] usb 2-1: USB disconnect, device number 33 [ 364.846133][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0036/input/input44 [ 364.900128][ T24] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 365.196931][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 365.219737][T11803] netlink: 'syz.4.2382': attribute type 15 has an invalid length. [ 365.240975][T11803] netlink: 'syz.4.2382': attribute type 18 has an invalid length. [ 365.314684][T11803] vxlan0: entered promiscuous mode [ 365.338728][ T1036] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.381921][ T1036] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.398553][ T1036] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.420936][ T1036] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.468547][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 365.481223][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 365.556389][T11807] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 365.892892][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2391'. [ 365.927232][T11818] netlink: 'syz.2.2391': attribute type 7 has an invalid length. [ 365.941805][T11818] netlink: 'syz.2.2391': attribute type 8 has an invalid length. [ 365.951329][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 366.052025][ T5957] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 366.245131][ T5957] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 366.255089][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.264087][ T5957] usb 1-1: Product: syz [ 366.268740][ T5957] usb 1-1: Manufacturer: syz [ 366.283445][ T5957] usb 1-1: SerialNumber: syz [ 366.305276][ T5957] usb 1-1: config 0 descriptor?? [ 366.324877][ T5957] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 033 [ 366.447887][T11830] netlink: 'syz.2.2395': attribute type 10 has an invalid length. [ 366.762391][ T5925] usb 4-1: USB disconnect, device number 37 [ 366.770999][ T5957] (null): failure reading functionality [ 366.799626][ T5957] i2c i2c-1: connected i2c-tiny-usb device [ 367.030626][ T5925] usb 1-1: USB disconnect, device number 33 [ 367.920403][T11870] trusted_key: syz.3.2411 sent an empty control message without MSG_MORE. [ 368.231265][T11878] loop8: detected capacity change from 0 to 79 [ 368.374401][T11878] loop8: detected capacity change from 79 to 78 [ 368.638123][T11887] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 368.751965][T11891] netlink: 'syz.1.2421': attribute type 9 has an invalid length. [ 368.776864][T11891] netlink: 'syz.1.2421': attribute type 11 has an invalid length. [ 368.807746][T11891] netlink: 'syz.1.2421': attribute type 12 has an invalid length. [ 368.851775][T11891] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2421'. [ 368.893978][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2421'. [ 369.797400][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.942247][ T5893] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 369.997417][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.114825][ T5893] usb 1-1: config 1 interface 0 has no altsetting 0 [ 370.127190][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 370.142829][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 370.163858][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.179565][ T5893] usb 1-1: Product: syz [ 370.198283][ T5893] usb 1-1: Manufacturer: syz [ 370.209263][ T5893] usb 1-1: SerialNumber: syz [ 370.216683][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.349631][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.360376][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.379437][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.392213][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.404642][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.435135][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.482242][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.490208][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.499781][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.508457][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.518064][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.772550][ T5893] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 371.103377][ T5893] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 371.272161][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 371.314215][ T5893] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 371.323046][ T5893] usb 3-1: config 0 has no interface number 0 [ 371.349642][ T5893] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 371.376644][ T5893] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 371.395225][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.431625][ T5893] usb 3-1: Product: syz [ 371.440255][ T5893] usb 3-1: Manufacturer: syz [ 371.450791][ T5893] usb 3-1: SerialNumber: syz [ 371.484942][ T5893] usb 3-1: config 0 descriptor?? [ 371.506614][ T5893] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 371.542744][ T5893] em28xx 3-1:0.132: Video interface 132 found: [ 371.838186][ T36] bond0 (unregistering): Released all slaves [ 371.909604][ T5893] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 372.569250][T11930] chnl_net:caif_netlink_parms(): no params data found [ 372.586290][ T5846] Bluetooth: hci0: command tx timeout [ 372.643557][ T36] hsr_slave_0: left promiscuous mode [ 372.660742][ T36] hsr_slave_1: left promiscuous mode [ 372.715712][ T36] veth1_macvtap: left promiscuous mode [ 372.741474][ T36] veth0_macvtap: left promiscuous mode [ 372.751081][ T5925] usb 1-1: USB disconnect, device number 34 [ 372.780958][ T5925] usblp0: removed [ 372.795920][ T36] veth1_vlan: left promiscuous mode [ 372.818986][ T36] veth0_vlan: left promiscuous mode [ 373.058351][ T5893] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 373.081357][T11934] em28xx 3-1:0.132: failed to trigger write to i2c address 0x0 (error=-5) [ 373.091347][ T5893] em28xx 3-1:0.132: board has no eeprom [ 373.166250][ T5893] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 373.202811][ T5893] em28xx 3-1:0.132: analog set to bulk mode. [ 373.219726][ T5923] em28xx 3-1:0.132: Registering V4L2 extension [ 373.256404][ T5893] usb 3-1: USB disconnect, device number 47 [ 373.300182][ T5893] em28xx 3-1:0.132: Disconnecting em28xx [ 373.547513][ T5923] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 373.558237][ T5923] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 373.578509][ T5923] em28xx 3-1:0.132: No AC97 audio processor [ 373.590564][ T5923] usb 3-1: Decoder not found [ 373.608944][ T5923] em28xx 3-1:0.132: failed to create media graph [ 373.619119][ T5923] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 373.637720][ T5923] em28xx 3-1:0.132: Remote control support is not available for this card. [ 373.657930][ T5893] em28xx 3-1:0.132: Closing input extension [ 373.674996][ T5893] em28xx 3-1:0.132: Freeing device [ 373.774299][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 373.837765][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2459'. [ 373.868287][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2459'. [ 373.958186][ T5925] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.969858][ T5925] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.980394][ T5925] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.992048][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.029012][T11990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.047414][ T5925] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.285172][ T5893] usb 5-1: USB disconnect, device number 37 [ 374.661832][ T5846] Bluetooth: hci0: command tx timeout [ 375.014312][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.023497][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.031131][T11930] bridge_slave_0: entered allmulticast mode [ 375.039736][T11930] bridge_slave_0: entered promiscuous mode [ 375.055021][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.063051][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.070391][T11930] bridge_slave_1: entered allmulticast mode [ 375.095727][T11930] bridge_slave_1: entered promiscuous mode [ 375.286434][T12007] netlink: 'syz.4.2460': attribute type 10 has an invalid length. [ 375.287368][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.595389][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.829736][T11930] team0: Port device team_slave_0 added [ 375.858139][T11930] team0: Port device team_slave_1 added [ 376.212573][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.219922][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.314670][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.415536][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.441872][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.541717][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.752457][ T5846] Bluetooth: hci0: command tx timeout [ 376.980053][T11930] hsr_slave_0: entered promiscuous mode [ 377.015934][T11930] hsr_slave_1: entered promiscuous mode [ 377.043433][T11930] debugfs: 'hsr0' already exists in 'hsr' [ 377.049392][T11930] Cannot create hsr debugfs directory [ 377.131800][ T5893] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 377.302880][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 377.338360][ T5893] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 377.363896][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.392895][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.431636][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.464227][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.502508][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.528177][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.782548][ T5893] usb 3-1: GET_CAPABILITIES returned 0 [ 377.808778][T11930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 377.821739][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 377.867659][T11930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 377.917150][T11930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 377.956162][T11930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 378.150322][ T5957] usb 3-1: USB disconnect, device number 48 [ 378.158729][T12057] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 378.178644][T12083] usb 3-1: usbtmc_ioctl_clear_in_halt returned -19 [ 378.394102][T11930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.468782][T11930] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.487928][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.495481][ T3075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.548884][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.556246][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.813641][ T5846] Bluetooth: hci0: command tx timeout [ 378.816168][T11930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.896837][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905073][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.067455][T11930] veth0_vlan: entered promiscuous mode [ 379.148047][T11930] veth1_vlan: entered promiscuous mode [ 379.342950][T11930] veth0_macvtap: entered promiscuous mode [ 379.389979][T11930] veth1_macvtap: entered promiscuous mode [ 379.531003][T11930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.613680][T11930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.667483][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.714286][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.762684][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.809276][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.043437][ T6297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.077894][ T6297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.238925][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.276422][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.770551][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2501'. [ 380.804689][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2501'. [ 380.848763][T12145] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2501'. [ 380.889788][T12145] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2501'. [ 380.959187][ T5923] hid-generic 0000:0003:0001.0037: unknown main item tag 0x0 [ 380.979627][ T5923] hid-generic 0000:0003:0001.0037: unknown main item tag 0x0 [ 381.014363][ T5923] hid-generic 0000:0003:0001.0037: hidraw0: HID v0.03 Device [syz0] on syz1 [ 381.240200][T12152] fido_id[12152]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 381.780507][T12173] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 382.493155][T12196] input: syz1 as /devices/virtual/input/input45 [ 382.744368][T12210] input: syz0 as /devices/virtual/input/input46 [ 383.169002][T12224] netlink: 'syz.5.2529': attribute type 10 has an invalid length. [ 383.820342][ T5893] hid-generic 0000:0003:0001.0038: unknown main item tag 0x0 [ 383.848127][ T5893] hid-generic 0000:0003:0001.0038: unknown main item tag 0x0 [ 383.878591][ T5893] hid-generic 0000:0003:0001.0038: hidraw0: HID v0.03 Device [syz0] on syz1 [ 383.932613][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 384.023069][T12246] fido_id[12246]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 384.093296][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 384.107070][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.147695][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.178535][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.207986][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 384.225069][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.245109][ T10] usb 5-1: config 0 descriptor?? [ 384.431855][ T5957] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 384.591755][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 384.599708][ T5957] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 384.609777][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.624316][ T5957] usb 1-1: config 0 descriptor?? [ 384.642632][ T5957] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 384.691868][ T5893] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 384.714866][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 384.726125][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0039/input/input47 [ 384.794902][ T10] microsoft 0003:045E:07DA.0039: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 384.866890][ T5893] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 384.888901][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 384.945148][ T5893] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.991728][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.020107][ T10] usb 5-1: USB disconnect, device number 38 [ 385.055100][T12271] fido_id[12271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 385.055196][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.113249][ T5893] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 385.121232][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 385.151730][ T5893] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.174474][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.201633][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.215601][ T5893] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 385.223434][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 385.234967][ T5893] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.247869][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.259905][ T5893] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.277196][ T5893] usb 6-1: string descriptor 0 read error: -22 [ 385.284244][ T5893] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 385.302147][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.334115][ T5893] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 385.735813][ T10] usb 6-1: USB disconnect, device number 2 [ 385.745232][T12290] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 385.858119][ T5957] gspca_vc032x: reg_w err -71 [ 385.880746][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.895234][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.901046][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.908381][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.917435][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.923388][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.929689][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.936432][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.943439][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.949106][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.955276][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.960598][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.966131][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.971531][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.977259][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.982864][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.989237][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.994755][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.000313][ T5957] gspca_vc032x: Unknown sensor... [ 386.008047][ T5957] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 386.027166][ T5957] usb 1-1: USB disconnect, device number 35 [ 386.118898][T12300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2557'. [ 386.371897][ T5893] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 386.540403][ T30] audit: type=1326 audit(1765706329.599:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.0.2565" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54539 code=0x0 [ 386.573350][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 386.591115][ T5893] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 386.621959][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.651978][ T5893] usb 5-1: config 0 has no interface number 0 [ 386.658150][ T5893] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 386.682049][ T5893] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 386.693847][ T5893] usb 5-1: config 0 interface 98 has no altsetting 0 [ 386.704839][ T5893] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 386.726145][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.751725][ T5893] usb 5-1: Product: syz [ 386.761926][ T5893] usb 5-1: Manufacturer: syz [ 386.770372][ T5893] usb 5-1: SerialNumber: syz [ 386.793040][ T5893] usb 5-1: config 0 descriptor?? [ 386.804985][T12302] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.832052][T12302] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 387.077653][T12302] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 387.095221][T12302] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 387.646440][T12355] netlink: 'syz.2.2579': attribute type 12 has an invalid length. [ 387.976608][T12363] syzkaller1: entered promiscuous mode [ 387.983061][T12363] syzkaller1: entered allmulticast mode [ 387.993413][T12363] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 388.141595][ T5893] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 388.165085][ T5893] asix 5-1:0.98: probe with driver asix failed with error -71 [ 388.202212][ T5893] usb 5-1: USB disconnect, device number 39 [ 388.489240][ T10] IPVS: starting estimator thread 0... [ 388.604505][T12376] IPVS: using max 26 ests per chain, 62400 per kthread [ 389.236561][ T5893] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 389.262423][ T5893] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.782007][ T5923] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 389.786786][T12421] netlink: 'syz.4.2608': attribute type 10 has an invalid length. [ 389.942701][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 389.964478][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.987464][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.998006][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.012814][ T5923] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.022322][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.052196][ T5923] usb 1-1: config 0 descriptor?? [ 390.191799][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 390.344661][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 390.362882][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.382915][ T10] usb 6-1: config 0 descriptor?? [ 390.411416][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 390.491095][ T5923] HID 045e:07da: Invalid code 65791 type 1 [ 390.532940][ T5923] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003B/input/input48 [ 390.586701][ T5923] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 390.616018][ T10] gspca_spca508: reg_read err -32 [ 390.643179][ T10] gspca_spca508: reg_read err -32 [ 390.664033][ T10] gspca_spca508: reg_read err -32 [ 390.682929][ T10] gspca_spca508: reg_read err -32 [ 390.774395][ T5957] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 390.796868][ T9] usb 1-1: USB disconnect, device number 36 [ 390.906512][ T10] gspca_spca508: reg write: error -71 [ 390.926380][ T10] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 390.948114][ T10] usb 6-1: USB disconnect, device number 3 [ 390.954743][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 390.984307][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 391.005863][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 391.021975][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.062202][ T5957] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.082380][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.116658][ T5957] usb 4-1: config 0 descriptor?? [ 391.287110][T12442] "syz.4.2618" (12442) uses obsolete ecb(arc4) skcipher [ 391.589143][ T5957] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 391.956567][T12460] bridge0: port 3(vlan2) entered blocking state [ 391.981979][T12460] bridge0: port 3(vlan2) entered disabled state [ 391.988739][T12460] vlan2: entered allmulticast mode [ 392.017711][T12460] vlan2: entered promiscuous mode [ 392.546870][T12476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.584565][T12476] team0: Port device bond0 added [ 393.023800][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'. [ 393.046745][T12497] input: syz1 as /devices/virtual/input/input50 [ 393.568061][ T5923] usb 4-1: USB disconnect, device number 38 [ 395.374993][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2651'. [ 395.450669][T12570] vxlan0: entered promiscuous mode [ 395.473943][ T1140] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.516659][ T1140] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.551883][ T1140] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.585303][ T1140] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.908564][T12583] pim6reg1: entered promiscuous mode [ 395.959194][T12583] pim6reg1: entered allmulticast mode [ 396.020533][ T30] audit: type=1326 audit(1765706339.079:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.084020][ T30] audit: type=1326 audit(1765706339.079:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.160194][ T30] audit: type=1326 audit(1765706339.079:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.264514][ T30] audit: type=1326 audit(1765706339.109:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.360677][ T30] audit: type=1326 audit(1765706339.129:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.410928][ T30] audit: type=1326 audit(1765706339.129:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.439519][ T30] audit: type=1326 audit(1765706339.129:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.470121][ T30] audit: type=1326 audit(1765706339.129:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.521724][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 396.550646][ T30] audit: type=1326 audit(1765706339.129:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.613122][ T30] audit: type=1326 audit(1765706339.139:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12586 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 396.689243][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 396.715670][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.742594][ T9] usb 1-1: config 0 descriptor?? [ 397.199457][T12620] pim6reg1: entered promiscuous mode [ 397.226645][T12620] pim6reg1: entered allmulticast mode [ 397.631685][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 397.831719][ T5957] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 397.833640][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.878782][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.900067][ T5893] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 397.920393][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 397.939279][ T5893] usb 6-1: SerialNumber: syz [ 398.007394][ T9] usb 1-1: Cannot set autoneg [ 398.024458][ T5957] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 398.053033][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 398.067762][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.093376][ T9] usb 1-1: USB disconnect, device number 37 [ 398.108610][ T5957] usb 5-1: Product: syz [ 398.126526][ T5957] usb 5-1: Manufacturer: syz [ 398.131448][ T5957] usb 5-1: SerialNumber: syz [ 398.173790][ T5893] usb 6-1: 0:2 : does not exist [ 398.179501][ T5957] usb 5-1: config 0 descriptor?? [ 398.244515][ T5893] usb 6-1: USB disconnect, device number 4 [ 398.373589][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.674811][T12660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2682'. [ 398.908932][T12666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2684'. [ 399.231979][ T5893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 399.393279][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 399.414267][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.433951][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.451343][ T5957] usb 5-1: f81604_read: reg: 100e failed: -EPROTO [ 399.467205][ T5893] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 399.496678][ T5957] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 399.515820][ T5957] usb 5-1: USB disconnect, device number 40 [ 399.520871][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.553443][ T5893] usb 6-1: config 0 descriptor?? [ 399.570770][ T5957] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 399.662169][ T5497] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 399.685200][ T5957] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 400.031391][ T5893] koneplus 0003:1E7D:2D51.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 400.301909][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 400.474025][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.505972][ T5957] usb 6-1: USB disconnect, device number 5 [ 400.537315][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.596457][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 400.633584][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.680094][ T24] usb 3-1: config 0 descriptor?? [ 401.137892][ T24] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 401.161042][ T24] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 401.189525][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.003E/input/input52 [ 401.278054][ T24] cm6533_jd 0003:0D8C:0022.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 401.355599][ T24] usb 3-1: USB disconnect, device number 49 [ 401.635818][T12729] fido_id[12729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 403.017916][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.021171][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 403.030674][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.057400][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.066024][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.092360][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.077016][T12765] chnl_net:caif_netlink_parms(): no params data found [ 404.348414][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.366873][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.390904][T12765] bridge_slave_0: entered allmulticast mode [ 404.423983][T12765] bridge_slave_0: entered promiscuous mode [ 404.443831][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.451384][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.463016][T12765] bridge_slave_1: entered allmulticast mode [ 404.470411][T12765] bridge_slave_1: entered promiscuous mode [ 404.508838][T12811] bridge_slave_0: entered promiscuous mode [ 404.564834][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.583352][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.700370][T12765] team0: Port device team_slave_0 added [ 404.727473][T12765] team0: Port device team_slave_1 added [ 404.888464][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.901156][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.960551][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.010548][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.034814][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.104761][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.131946][ T5841] Bluetooth: hci3: command tx timeout [ 405.475694][T12765] hsr_slave_0: entered promiscuous mode [ 405.493087][T12765] hsr_slave_1: entered promiscuous mode [ 405.517155][T12765] debugfs: 'hsr0' already exists in 'hsr' [ 405.552284][T12765] Cannot create hsr debugfs directory [ 406.651812][ T5925] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 406.842268][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 406.880540][ T5925] usb 6-1: config 150 has an invalid interface number: 204 but max is 0 [ 406.909892][ T5925] usb 6-1: config 150 has no interface number 0 [ 406.917551][ T5925] usb 6-1: config 150 interface 204 has no altsetting 0 [ 406.928556][ T5925] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 406.938544][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.947458][ T5925] usb 6-1: Product: syz [ 406.952064][ T5925] usb 6-1: Manufacturer: syz [ 406.956685][ T5925] usb 6-1: SerialNumber: syz [ 406.978712][ T1036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.212758][ T5841] Bluetooth: hci3: command tx timeout [ 407.240565][ T1036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.429536][ T5925] usb 6-1: USB disconnect, device number 6 [ 407.470071][T12765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.520289][T12765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.636108][T12857] kvm: Disabled LAPIC found during irq injection [ 407.655101][ T1036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.751416][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.770092][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.779116][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.794925][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.808287][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.884474][T12765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.929085][T12765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.180939][ T1036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.297010][T12765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.321719][T12765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.391773][ T5957] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 408.493468][T12765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.504517][T12765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.565439][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.592813][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 408.620091][ T5957] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 408.629851][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.650576][ T5957] usb 6-1: config 0 descriptor?? [ 408.934679][ T1036] bridge_slave_1: left allmulticast mode [ 408.940491][ T1036] bridge_slave_1: left promiscuous mode [ 408.956744][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.976118][ T1036] bridge_slave_0: left allmulticast mode [ 408.985161][ T1036] bridge_slave_0: left promiscuous mode [ 408.991151][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.095851][ T5957] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 409.109081][ T5957] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 409.117209][ T5957] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 409.128651][ T5957] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 409.129943][ T1036] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 409.168729][ T5957] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 409.200831][ T5957] kovaplus 0003:1E7D:2D50.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 409.298024][ T5841] Bluetooth: hci3: command tx timeout [ 409.663080][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.687473][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.725481][ T5957] kovaplus 0003:1E7D:2D50.003F: couldn't init struct kovaplus_device [ 409.726201][ T1036] bond0 (unregistering): Released all slaves [ 409.754506][ T5957] kovaplus 0003:1E7D:2D50.003F: couldn't install mouse [ 409.765126][ T5957] kovaplus 0003:1E7D:2D50.003F: probe with driver kovaplus failed with error -71 [ 409.812151][ T5957] usb 6-1: USB disconnect, device number 7 [ 409.851996][ T5841] Bluetooth: hci2: command tx timeout [ 410.119325][ T1036] bond1 (unregistering): Released all slaves [ 410.376464][ T1036] tipc: Disabling bearer [ 410.456082][ T1036] tipc: Left network mode [ 410.753120][T12765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.865481][T12765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.908860][T12862] chnl_net:caif_netlink_parms(): no params data found [ 410.947315][T12765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.028576][T12765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.079496][ T1036] hsr_slave_0: left promiscuous mode [ 411.087276][ T1036] hsr_slave_1: left promiscuous mode [ 411.096505][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.104886][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.133437][ T1036] veth1_vlan: left promiscuous mode [ 411.138916][ T1036] veth0_vlan: left promiscuous mode [ 411.376975][ T5841] Bluetooth: hci3: command tx timeout [ 411.884086][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 411.931680][ T5841] Bluetooth: hci2: command tx timeout [ 411.954696][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 413.347060][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.357846][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2792'. [ 413.401878][T12862] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.409529][T12862] bridge_slave_0: entered allmulticast mode [ 413.419727][T12862] bridge_slave_0: entered promiscuous mode [ 413.486329][T12862] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.502267][T12862] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.515306][T12862] bridge_slave_1: entered allmulticast mode [ 413.539287][T12862] bridge_slave_1: entered promiscuous mode [ 413.702071][T12862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.728256][T12862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.772501][ T5923] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 413.956570][T12862] team0: Port device team_slave_0 added [ 414.003314][T12862] team0: Port device team_slave_1 added [ 414.012349][ T5841] Bluetooth: hci2: command tx timeout [ 414.073771][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.093021][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 414.116117][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 414.137260][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.176770][ T5923] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.192105][T12862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.207720][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.209940][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.265433][T12862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.312173][T12862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.329883][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.358397][ T5923] usb 3-1: config 0 descriptor?? [ 414.404958][T12862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.547992][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2798'. [ 414.593616][T12862] hsr_slave_0: entered promiscuous mode [ 414.601214][T12862] hsr_slave_1: entered promiscuous mode [ 414.618433][T12862] debugfs: 'hsr0' already exists in 'hsr' [ 414.637672][T12862] Cannot create hsr debugfs directory [ 414.799070][ T5923] plantronics 0003:047F:FFFF.0040: ignoring exceeding usage max [ 414.862511][ T5923] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 415.037120][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.198041][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.222839][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.230095][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.358335][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.365612][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.858221][T12765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.092788][ T5841] Bluetooth: hci2: command tx timeout [ 416.113670][T12862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.140025][T12862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.177259][T12862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.215663][T12862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.240824][T12765] veth0_vlan: entered promiscuous mode [ 416.291843][ T5925] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 416.343209][T12765] veth1_vlan: entered promiscuous mode [ 416.455279][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 416.477159][ T5925] usb 4-1: not running at top speed; connect to a high speed hub [ 416.487876][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.500267][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.505948][T13046] netlink: 'syz.5.2806': attribute type 1 has an invalid length. [ 416.517523][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 416.528087][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.531593][T12765] veth0_macvtap: entered promiscuous mode [ 416.544620][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.568752][ T5925] usb 4-1: 0:2 : does not exist [ 416.631472][T13048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.641051][T13048] bond1: (slave bond2): making interface the new active one [ 416.650385][T13048] bond1: (slave bond2): Enslaving as an active interface with an up link [ 416.669453][T12765] veth1_macvtap: entered promiscuous mode [ 416.744100][T12765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.863469][T12765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.913936][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.952698][T12862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.970888][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.972161][ T9] usb 3-1: USB disconnect, device number 50 [ 417.037052][T13055] [ 417.039522][T13055] ===================================================== [ 417.046996][T13055] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 417.054739][T13055] syzkaller #0 Tainted: G L [ 417.061000][T13055] ----------------------------------------------------- [ 417.068046][T13055] syz.5.2808/13055 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 417.075814][T13055] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 417.084707][T13055] [ 417.084707][T13055] and this task is already holding: [ 417.092096][T13055] ffff888031fdd6a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 417.100924][T13055] which would create a new lock dependency: [ 417.106907][T13055] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 417.114499][T13055] [ 417.114499][T13055] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 417.124129][T13055] (&client->buffer_lock){..-.}-{3:3} [ 417.124158][T13055] [ 417.124158][T13055] ... which became SOFTIRQ-irq-safe at: [ 417.137321][T13055] lock_acquire+0x117/0x340 [ 417.142013][T13055] _raw_spin_lock+0x2e/0x40 [ 417.146618][T13055] evdev_pass_values+0xb9/0xbd0 [ 417.151564][T13055] evdev_events+0x1e6/0x340 [ 417.156176][T13055] input_pass_values+0x288/0x890 [ 417.161206][T13055] input_event_dispose+0x3e5/0x6b0 [ 417.166503][T13055] input_event+0x89/0xe0 [ 417.170841][T13055] hidinput_hid_event+0x145e/0x1e50 [ 417.176133][T13055] hid_process_event+0x4be/0x620 [ 417.181259][T13055] hid_report_raw_event+0xe91/0x1720 [ 417.186635][T13055] hid_input_report+0x44b/0x580 [ 417.191585][T13055] hid_irq_in+0x47e/0x6d0 [ 417.196010][T13055] __usb_hcd_giveback_urb+0x376/0x540 [ 417.201566][T13055] dummy_timer+0x85f/0x45b0 [ 417.206169][T13055] __hrtimer_run_queues+0x51c/0xc30 [ 417.211469][T13055] hrtimer_run_softirq+0x187/0x2b0 [ 417.216766][T13055] handle_softirqs+0x27d/0x850 [ 417.221803][T13055] __irq_exit_rcu+0xca/0x1f0 [ 417.226763][T13055] irq_exit_rcu+0x9/0x30 [ 417.231095][T13055] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 417.236933][T13055] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.243096][T13055] mas_wr_store_type+0x2e1/0x19d0 [ 417.248412][T13055] mas_preallocate+0x25e/0x670 [ 417.253296][T13055] __split_vma+0x2fa/0xa00 [ 417.257919][T13055] vms_gather_munmap_vmas+0x4c6/0x12f0 [ 417.263490][T13055] mmap_region+0x72b/0x1d10 [ 417.268091][T13055] do_mmap+0xc45/0x10d0 [ 417.272343][T13055] vm_mmap_pgoff+0x2a6/0x4d0 [ 417.277111][T13055] ksys_mmap_pgoff+0x51f/0x760 [ 417.282061][T13055] do_syscall_64+0xfa/0xf80 [ 417.286658][T13055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.292644][T13055] [ 417.292644][T13055] to a SOFTIRQ-irq-unsafe lock: [ 417.299939][T13055] (tasklist_lock){.+.+}-{3:3} [ 417.299965][T13055] [ 417.299965][T13055] ... which became SOFTIRQ-irq-unsafe at: [ 417.312801][T13055] ... [ 417.312809][T13055] lock_acquire+0x117/0x340 [ 417.320291][T13055] _raw_read_lock+0x36/0x50 [ 417.325003][T13055] __do_wait+0xde/0x740 [ 417.329271][T13055] do_wait+0x1e8/0x4f0 [ 417.333432][T13055] kernel_wait+0xab/0x170 [ 417.337951][T13055] call_usermodehelper_exec_work+0xbe/0x230 [ 417.344028][T13055] process_scheduled_works+0xad1/0x1770 [ 417.349950][T13055] worker_thread+0x8a0/0xda0 [ 417.354725][T13055] kthread+0x711/0x8a0 [ 417.358977][T13055] ret_from_fork+0x599/0xb30 [ 417.363657][T13055] ret_from_fork_asm+0x1a/0x30 [ 417.368520][T13055] [ 417.368520][T13055] other info that might help us debug this: [ 417.368520][T13055] [ 417.378934][T13055] Chain exists of: [ 417.378934][T13055] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 417.378934][T13055] [ 417.392596][T13055] Possible interrupt unsafe locking scenario: [ 417.392596][T13055] [ 417.401093][T13055] CPU0 CPU1 [ 417.406461][T13055] ---- ---- [ 417.412102][T13055] lock(tasklist_lock); [ 417.416442][T13055] local_irq_disable(); [ 417.423282][T13055] lock(&client->buffer_lock); [ 417.430837][T13055] lock(&f_owner->lock); [ 417.437959][T13055] [ 417.441503][T13055] lock(&client->buffer_lock); [ 417.446532][T13055] [ 417.446532][T13055] *** DEADLOCK *** [ 417.446532][T13055] [ 417.454848][T13055] 2 locks held by syz.5.2808/13055: [ 417.460152][T13055] #0: ffff8880799c5e60 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 417.468996][T13055] #1: ffff888031fdd6a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 417.478252][T13055] [ 417.478252][T13055] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 417.488666][T13055] -> (&client->buffer_lock){..-.}-{3:3} { [ 417.494855][T13055] IN-SOFTIRQ-W at: [ 417.499030][T13055] lock_acquire+0x117/0x340 [ 417.505547][T13055] _raw_spin_lock+0x2e/0x40 [ 417.512407][T13055] evdev_pass_values+0xb9/0xbd0 [ 417.519267][T13055] evdev_events+0x1e6/0x340 [ 417.525965][T13055] input_pass_values+0x288/0x890 [ 417.533168][T13055] input_event_dispose+0x3e5/0x6b0 [ 417.540374][T13055] input_event+0x89/0xe0 [ 417.546622][T13055] hidinput_hid_event+0x145e/0x1e50 [ 417.553918][T13055] hid_process_event+0x4be/0x620 [ 417.560865][T13055] hid_report_raw_event+0xe91/0x1720 [ 417.568370][T13055] hid_input_report+0x44b/0x580 [ 417.575338][T13055] hid_irq_in+0x47e/0x6d0 [ 417.581869][T13055] __usb_hcd_giveback_urb+0x376/0x540 [ 417.589260][T13055] dummy_timer+0x85f/0x45b0 [ 417.596080][T13055] __hrtimer_run_queues+0x51c/0xc30 [ 417.603549][T13055] hrtimer_run_softirq+0x187/0x2b0 [ 417.610844][T13055] handle_softirqs+0x27d/0x850 [ 417.617879][T13055] __irq_exit_rcu+0xca/0x1f0 [ 417.624652][T13055] irq_exit_rcu+0x9/0x30 [ 417.630907][T13055] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 417.638627][T13055] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.646625][T13055] mas_wr_store_type+0x2e1/0x19d0 [ 417.654103][T13055] mas_preallocate+0x25e/0x670 [ 417.661052][T13055] __split_vma+0x2fa/0xa00 [ 417.667659][T13055] vms_gather_munmap_vmas+0x4c6/0x12f0 [ 417.675648][T13055] mmap_region+0x72b/0x1d10 [ 417.682420][T13055] do_mmap+0xc45/0x10d0 [ 417.688763][T13055] vm_mmap_pgoff+0x2a6/0x4d0 [ 417.695620][T13055] ksys_mmap_pgoff+0x51f/0x760 [ 417.702393][T13055] do_syscall_64+0xfa/0xf80 [ 417.709080][T13055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.717321][T13055] INITIAL USE at: [ 417.721631][T13055] lock_acquire+0x117/0x340 [ 417.728151][T13055] _raw_spin_lock+0x2e/0x40 [ 417.734634][T13055] evdev_pass_values+0xb9/0xbd0 [ 417.741663][T13055] evdev_events+0x1e6/0x340 [ 417.748169][T13055] input_pass_values+0x288/0x890 [ 417.755105][T13055] input_event_dispose+0x330/0x6b0 [ 417.762141][T13055] input_inject_event+0x1dd/0x340 [ 417.769173][T13055] evdev_write+0x2fc/0x480 [ 417.776025][T13055] vfs_write+0x27e/0xb30 [ 417.782377][T13055] ksys_write+0x145/0x250 [ 417.788780][T13055] __do_fast_syscall_32+0x1f7/0x590 [ 417.795908][T13055] do_fast_syscall_32+0x34/0x80 [ 417.802893][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.811857][T13055] } [ 417.814536][T13055] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 417.823152][T13055] -> (&new->fa_lock){....}-{3:3} { [ 417.828480][T13055] INITIAL USE at: [ 417.832669][T13055] lock_acquire+0x117/0x340 [ 417.839009][T13055] _raw_write_lock_irq+0xa2/0xf0 [ 417.845690][T13055] fasync_remove_entry+0xf1/0x1c0 [ 417.852765][T13055] pipe_fasync+0xa9/0x1e0 [ 417.859017][T13055] __fput+0x8a2/0xa70 [ 417.864833][T13055] task_work_run+0x1d4/0x260 [ 417.871169][T13055] exit_to_user_mode_loop+0xff/0x4f0 [ 417.878296][T13055] __do_fast_syscall_32+0x3b4/0x590 [ 417.885237][T13055] do_fast_syscall_32+0x34/0x80 [ 417.892098][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.900343][T13055] INITIAL READ USE at: [ 417.904762][T13055] lock_acquire+0x117/0x340 [ 417.911795][T13055] _raw_read_lock_irqsave+0xaf/0x100 [ 417.919987][T13055] kill_fasync+0x199/0x4d0 [ 417.926682][T13055] do_splice+0xeee/0x1660 [ 417.933368][T13055] __se_sys_splice+0x2e1/0x460 [ 417.940484][T13055] __do_fast_syscall_32+0x1f7/0x590 [ 417.947955][T13055] do_fast_syscall_32+0x34/0x80 [ 417.955069][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.963753][T13055] } [ 417.966374][T13055] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 417.975383][T13055] ... acquired at: [ 417.979368][T13055] _raw_read_lock_irqsave+0xaf/0x100 [ 417.984957][T13055] kill_fasync+0x199/0x4d0 [ 417.989916][T13055] evdev_pass_values+0x627/0xbd0 [ 417.995124][T13055] evdev_events+0x1e6/0x340 [ 417.999821][T13055] input_pass_values+0x288/0x890 [ 418.004937][T13055] input_event_dispose+0x330/0x6b0 [ 418.010568][T13055] input_inject_event+0x1dd/0x340 [ 418.015803][T13055] evdev_write+0x2fc/0x480 [ 418.020798][T13055] vfs_write+0x27e/0xb30 [ 418.025401][T13055] ksys_write+0x145/0x250 [ 418.029929][T13055] __do_fast_syscall_32+0x1f7/0x590 [ 418.035412][T13055] do_fast_syscall_32+0x34/0x80 [ 418.040452][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.046964][T13055] [ 418.049302][T13055] -> (&f_owner->lock){....}-{3:3} { [ 418.054703][T13055] INITIAL USE at: [ 418.058701][T13055] lock_acquire+0x117/0x340 [ 418.064870][T13055] _raw_write_lock_irq+0xa2/0xf0 [ 418.071460][T13055] __f_setown+0x67/0x370 [ 418.077278][T13055] generic_setlease+0xe1e/0x1280 [ 418.084095][T13055] do_fcntl_add_lease+0x34d/0x460 [ 418.090783][T13055] fcntl_setlease+0x123/0x180 [ 418.097206][T13055] do_fcntl+0x867/0x1a50 [ 418.103023][T13055] do_compat_fcntl64+0x477/0x720 [ 418.109791][T13055] __do_fast_syscall_32+0x1f7/0x590 [ 418.116648][T13055] do_fast_syscall_32+0x34/0x80 [ 418.123243][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.131513][T13055] INITIAL READ USE at: [ 418.136169][T13055] lock_acquire+0x117/0x340 [ 418.142888][T13055] _raw_read_lock_irqsave+0xaf/0x100 [ 418.150211][T13055] send_sigio+0x38/0x370 [ 418.156648][T13055] dnotify_handle_event+0x169/0x440 [ 418.164030][T13055] fsnotify+0x180b/0x1ab0 [ 418.170369][T13055] fsnotify_mkdir+0x122/0x180 [ 418.177226][T13055] vfs_mkdir+0x54e/0x5b0 [ 418.183749][T13055] do_mkdirat+0x276/0x4b0 [ 418.190080][T13055] __ia32_sys_mkdirat+0x87/0xa0 [ 418.197636][T13055] __do_fast_syscall_32+0x1f7/0x590 [ 418.204843][T13055] do_fast_syscall_32+0x34/0x80 [ 418.211700][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.220481][T13055] } [ 418.222979][T13055] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 418.231929][T13055] ... acquired at: [ 418.235820][T13055] _raw_read_lock_irqsave+0xaf/0x100 [ 418.241299][T13055] send_sigio+0x38/0x370 [ 418.245746][T13055] kill_fasync+0x24d/0x4d0 [ 418.250432][T13055] lease_break_callback+0x26/0x30 [ 418.255780][T13055] __break_lease+0x730/0x1620 [ 418.260726][T13055] do_dentry_open+0x73a/0x1420 [ 418.265791][T13055] vfs_open+0x3b/0x340 [ 418.270126][T13055] path_openat+0x340e/0x3dd0 [ 418.274901][T13055] do_filp_open+0x1fa/0x410 [ 418.279610][T13055] do_sys_openat2+0x121/0x200 [ 418.284638][T13055] __ia32_compat_sys_openat+0x131/0x160 [ 418.290377][T13055] __do_fast_syscall_32+0x1f7/0x590 [ 418.295932][T13055] do_fast_syscall_32+0x34/0x80 [ 418.301025][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.307624][T13055] [ 418.310038][T13055] [ 418.310038][T13055] the dependencies between the lock to be acquired [ 418.310049][T13055] and SOFTIRQ-irq-unsafe lock: [ 418.323567][T13055] -> (tasklist_lock){.+.+}-{3:3} { [ 418.328804][T13055] HARDIRQ-ON-R at: [ 418.332793][T13055] lock_acquire+0x117/0x340 [ 418.339381][T13055] _raw_read_lock+0x36/0x50 [ 418.345549][T13055] __do_wait+0xde/0x740 [ 418.351476][T13055] do_wait+0x1e8/0x4f0 [ 418.357291][T13055] kernel_wait+0xab/0x170 [ 418.363286][T13055] call_usermodehelper_exec_work+0xbe/0x230 [ 418.370924][T13055] process_scheduled_works+0xad1/0x1770 [ 418.378211][T13055] worker_thread+0x8a0/0xda0 [ 418.384493][T13055] kthread+0x711/0x8a0 [ 418.390501][T13055] ret_from_fork+0x599/0xb30 [ 418.396951][T13055] ret_from_fork_asm+0x1a/0x30 [ 418.403597][T13055] SOFTIRQ-ON-R at: [ 418.407845][T13055] lock_acquire+0x117/0x340 [ 418.414442][T13055] _raw_read_lock+0x36/0x50 [ 418.420777][T13055] __do_wait+0xde/0x740 [ 418.426817][T13055] do_wait+0x1e8/0x4f0 [ 418.432890][T13055] kernel_wait+0xab/0x170 [ 418.438979][T13055] call_usermodehelper_exec_work+0xbe/0x230 [ 418.446616][T13055] process_scheduled_works+0xad1/0x1770 [ 418.453899][T13055] worker_thread+0x8a0/0xda0 [ 418.460232][T13055] kthread+0x711/0x8a0 [ 418.465959][T13055] ret_from_fork+0x599/0xb30 [ 418.472391][T13055] ret_from_fork_asm+0x1a/0x30 [ 418.478819][T13055] INITIAL USE at: [ 418.482716][T13055] lock_acquire+0x117/0x340 [ 418.488793][T13055] _raw_write_lock_irq+0xa2/0xf0 [ 418.495385][T13055] copy_process+0x2185/0x3950 [ 418.501809][T13055] kernel_clone+0x21e/0x820 [ 418.508145][T13055] user_mode_thread+0xdd/0x140 [ 418.514998][T13055] rest_init+0x23/0x300 [ 418.521077][T13055] start_kernel+0x3a7/0x400 [ 418.527591][T13055] x86_64_start_reservations+0x24/0x30 [ 418.534622][T13055] x86_64_start_kernel+0x143/0x1c0 [ 418.541411][T13055] common_startup_64+0x13e/0x147 [ 418.548877][T13055] INITIAL READ USE at: [ 418.553384][T13055] lock_acquire+0x117/0x340 [ 418.559890][T13055] _raw_read_lock+0x36/0x50 [ 418.566582][T13055] __do_wait+0xde/0x740 [ 418.572776][T13055] do_wait+0x1e8/0x4f0 [ 418.578939][T13055] kernel_wait+0xab/0x170 [ 418.585458][T13055] call_usermodehelper_exec_work+0xbe/0x230 [ 418.593359][T13055] process_scheduled_works+0xad1/0x1770 [ 418.601700][T13055] worker_thread+0x8a0/0xda0 [ 418.608901][T13055] kthread+0x711/0x8a0 [ 418.615147][T13055] ret_from_fork+0x599/0xb30 [ 418.622017][T13055] ret_from_fork_asm+0x1a/0x30 [ 418.628976][T13055] } [ 418.631491][T13055] ... key at: [] tasklist_lock+0x18/0x40 [ 418.639484][T13055] ... acquired at: [ 418.643466][T13055] _raw_read_lock+0x36/0x50 [ 418.648253][T13055] send_sigurg+0x12b/0x420 [ 418.652850][T13055] sk_send_sigurg+0x6c/0x2e0 [ 418.657800][T13055] queue_oob+0x420/0x4f0 [ 418.662220][T13055] unix_stream_sendmsg+0xc32/0xde0 [ 418.667593][T13055] __sock_sendmsg+0x21c/0x270 [ 418.672625][T13055] ____sys_sendmsg+0x52d/0x820 [ 418.677666][T13055] ___sys_sendmsg+0x21f/0x2a0 [ 418.682530][T13055] __sys_sendmmsg+0x28e/0x430 [ 418.687483][T13055] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 418.693303][T13055] __do_fast_syscall_32+0x1f7/0x590 [ 418.698703][T13055] do_fast_syscall_32+0x34/0x80 [ 418.703851][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.710794][T13055] [ 418.713126][T13055] [ 418.713126][T13055] stack backtrace: [ 418.719021][T13055] CPU: 1 UID: 0 PID: 13055 Comm: syz.5.2808 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.719045][T13055] Tainted: [L]=SOFTLOCKUP [ 418.719051][T13055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.719061][T13055] Call Trace: [ 418.719070][T13055] [ 418.719077][T13055] dump_stack_lvl+0x189/0x250 [ 418.719102][T13055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.719124][T13055] ? __pfx__printk+0x10/0x10 [ 418.719150][T13055] __lock_acquire+0x2a95/0x2cf0 [ 418.719174][T13055] ? send_sigurg+0x12b/0x420 [ 418.719196][T13055] lock_acquire+0x117/0x340 [ 418.719210][T13055] ? send_sigurg+0x12b/0x420 [ 418.719232][T13055] ? _raw_read_lock_irqsave+0xbb/0x100 [ 418.719263][T13055] _raw_read_lock+0x36/0x50 [ 418.719286][T13055] ? send_sigurg+0x12b/0x420 [ 418.719306][T13055] send_sigurg+0x12b/0x420 [ 418.719329][T13055] sk_send_sigurg+0x6c/0x2e0 [ 418.719353][T13055] queue_oob+0x420/0x4f0 [ 418.719370][T13055] ? __pfx_queue_oob+0x10/0x10 [ 418.719389][T13055] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 418.719409][T13055] unix_stream_sendmsg+0xc32/0xde0 [ 418.719427][T13055] ? trace_sched_exit_tp+0x36/0xf0 [ 418.719450][T13055] ? __schedule+0x14d2/0x5000 [ 418.719474][T13055] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 418.719489][T13055] ? __asan_memset+0x22/0x50 [ 418.719513][T13055] ? __import_iovec+0x5d4/0x7f0 [ 418.719534][T13055] ? aa_sock_msg_perm+0xda/0x1b0 [ 418.719555][T13055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.719570][T13055] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 418.719584][T13055] __sock_sendmsg+0x21c/0x270 [ 418.719607][T13055] ____sys_sendmsg+0x52d/0x820 [ 418.719627][T13055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.719647][T13055] ? futex_unqueue+0x22/0x240 [ 418.719661][T13055] ? futex_unqueue+0x22/0x240 [ 418.719680][T13055] ___sys_sendmsg+0x21f/0x2a0 [ 418.719700][T13055] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.719719][T13055] ? __pfx___futex_wait+0x10/0x10 [ 418.719748][T13055] ? __fget_files+0x2a/0x420 [ 418.719767][T13055] ? __fget_files+0x3a0/0x420 [ 418.719789][T13055] __sys_sendmmsg+0x28e/0x430 [ 418.719811][T13055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 418.719833][T13055] ? __pfx_do_futex+0x10/0x10 [ 418.719858][T13055] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 418.719879][T13055] __do_fast_syscall_32+0x1f7/0x590 [ 418.719897][T13055] ? rcu_is_watching+0x15/0xb0 [ 418.719915][T13055] ? do_fast_syscall_32+0x34/0x80 [ 418.719942][T13055] do_fast_syscall_32+0x34/0x80 [ 418.719962][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.719981][T13055] RIP: 0023:0xf708d539 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 418.719996][T13055] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 418.720010][T13055] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 418.720028][T13055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006c40 [ 418.720040][T13055] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 418.720050][T13055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.720059][T13055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 418.720069][T13055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.720085][T13055] [ 418.764082][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.171073][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.808686][ T1140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.991939][ T5925] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 420.005286][ T5925] usb 4-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 420.024399][ T5925] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/-8016 [ 420.025474][ T1140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.055339][ T5925] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 420.074959][ T5925] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 420.101202][ T1140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.125048][ T5925] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 420.174597][ T1140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.189464][ T5925] usb 4-1: USB disconnect, device number 39 [ 420.303302][ T1140] bridge_slave_1: left allmulticast mode [ 420.309771][ T1140] bridge_slave_1: left promiscuous mode [ 420.317052][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.326780][ T1140] bridge_slave_0: left allmulticast mode [ 420.333381][ T1140] bridge_slave_0: left promiscuous mode [ 420.339156][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.530985][ T1140] dvmrp8 (unregistering): left allmulticast mode [ 420.741434][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.754507][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.765045][ T1140] bond0 (unregistering): Released all slaves [ 421.019671][ T1140] hsr_slave_0: left promiscuous mode [ 421.026943][ T1140] hsr_slave_1: left promiscuous mode [ 421.036576][ T1140] veth1_vlan: left promiscuous mode [ 421.042149][ T1140] veth0_vlan: left promiscuous mode [ 421.234933][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 421.280003][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 421.849688][ T1140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.898656][ T1140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.939245][ T1140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.979489][ T1140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.282318][ T1140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.293548][ T1140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.339538][ T1140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.354762][ T1140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.428244][ T1140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.442605][ T1140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.498689][ T1140] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.509497][ T1140] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.626011][ T1140] bridge_slave_1: left allmulticast mode [ 422.633315][ T1140] bridge_slave_1: left promiscuous mode [ 422.639169][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.649529][ T1140] bridge_slave_0: left allmulticast mode [ 422.655857][ T1140] bridge_slave_0: left promiscuous mode [ 422.662817][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.673008][ T1140] bridge_slave_1: left allmulticast mode [ 422.679343][ T1140] bridge_slave_1: left promiscuous mode [ 422.686550][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.698126][ T1140] bridge_slave_0: left allmulticast mode [ 422.704629][ T1140] bridge_slave_0: left promiscuous mode [ 422.710455][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.720681][ T1140] vlan2: left allmulticast mode [ 422.726165][ T1140] vlan2: left promiscuous mode [ 422.731227][ T1140] bridge0: port 3(vlan2) entered disabled state [ 422.740560][ T1140] bridge_slave_1: left allmulticast mode [ 422.746505][ T1140] bridge_slave_1: left promiscuous mode [ 422.753408][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.763015][ T1140] bridge_slave_0: left allmulticast mode [ 422.769075][ T1140] bridge_slave_0: left promiscuous mode [ 422.775938][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.920590][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.931271][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.941087][ T1140] bond0 (unregistering): Released all slaves [ 423.009536][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.019671][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.029703][ T1140] bond0 (unregistering): Released all slaves [ 423.098268][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.108468][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.118628][ T1140] bond0 (unregistering): Released all slaves [ 423.127732][ T1140] bond1 (unregistering): (slave bond2): Releasing backup interface [ 423.136428][ T1140] bond1 (unregistering): Released all slaves [ 423.249481][ T1140] bond2 (unregistering): Released all slaves [ 423.481476][ T1140] hsr_slave_0: left promiscuous mode [ 423.487778][ T1140] hsr_slave_1: left promiscuous mode [ 423.498565][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.506607][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.516526][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.525078][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.539119][ T1140] hsr_slave_0: left promiscuous mode [ 423.545884][ T1140] hsr_slave_1: left promiscuous mode [ 423.554907][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.563787][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.574657][ T1140] hsr_slave_0: left promiscuous mode [ 423.580579][ T1140] hsr_slave_1: left promiscuous mode [ 423.587148][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.595567][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.605252][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.613113][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.625034][ T1140] veth1_macvtap: left promiscuous mode [ 423.630861][ T1140] veth0_macvtap: left promiscuous mode [ 423.636908][ T1140] veth1_vlan: left promiscuous mode [ 423.642679][ T1140] veth0_vlan: left promiscuous mode [ 423.648580][ T1140] veth1_vlan: left promiscuous mode [ 423.654364][ T1140] veth0_vlan: left promiscuous mode [ 423.835968][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 423.862833][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 424.035050][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 424.062880][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 424.204150][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 424.230738][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 424.876958][ T1140] IPVS: stop unused estimator thread 0...