last executing test programs: 29.761764554s ago: executing program 4 (id=9817): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) 27.773543662s ago: executing program 4 (id=9837): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x400) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5452, &(0x7f00000001c0)) 25.932170807s ago: executing program 4 (id=9849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0xfffff001, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}]}}]}, 0x45c}}, 0x40) 25.793304038s ago: executing program 4 (id=9851): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 25.005134174s ago: executing program 4 (id=9854): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) 21.874704546s ago: executing program 4 (id=9876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6.80540891s ago: executing program 32 (id=9876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6.112744423s ago: executing program 2 (id=9944): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xbaca}, {{0x0, 0x0, 0x0}, 0x14}], 0x2, 0x10120, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 5.812100359s ago: executing program 2 (id=9945): write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000800)={0xc, {0x3b8, "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"}}, 0x3be) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000780)=ANY=[]) 4.153491169s ago: executing program 0 (id=9962): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x115, 0x1) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 3.180098568s ago: executing program 0 (id=9974): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xe7, 0x11cfa, 0x0, 0x8000008, 0x3, 0x0, 0x80000000, 0x0, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x55a}) 3.049173463s ago: executing program 0 (id=9977): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0xfffffffd) 2.995551822s ago: executing program 0 (id=9978): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.826638033s ago: executing program 0 (id=9981): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)="b6b06897370bc199d3", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.632395482s ago: executing program 0 (id=9983): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000500)) 2.632152996s ago: executing program 2 (id=9984): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) ioctl$EVIOCGSW(r1, 0x80811501, 0x0) 2.397651562s ago: executing program 2 (id=9986): unshare(0x22020600) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000050) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000003c0001000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xfffffffffffffef4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.285598143s ago: executing program 2 (id=9987): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1]}, @NL80211_ATTR_FRAME={0x2c, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x5, 0x3}, @value=@ver_80211n={0x0, 0x120, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x204, 0x9, @broadcast, {}, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.66419414s ago: executing program 1 (id=9990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x4, 0x0, [{0x0, 0x5}, {0x1}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x1b5d, 0x6, 0x1, 0x3, 0x5, 0xfffffff9}]}) 1.463518218s ago: executing program 1 (id=9991): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, &(0x7f0000000000)=@in, 0x0, 0x80000) 1.366729934s ago: executing program 1 (id=9992): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2}}, 0x20) unshare(0x2c020400) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18) 1.250299782s ago: executing program 1 (id=9993): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0xfffc, 0xc, @loopback, 0x6}}) io_uring_enter(r0, 0x4a89, 0x138b, 0xc, 0x0, 0x0) 1.093434664s ago: executing program 1 (id=9994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000002340)={0x65, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) 1.021584005s ago: executing program 1 (id=9995): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/117, 0x75}, {0x0}], 0x2, 0x10007, 0xfffffe01) 922.603348ms ago: executing program 2 (id=9996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0}, 0x0) 717.067468ms ago: executing program 3 (id=9998): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) 602.206ms ago: executing program 3 (id=9999): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000001200)={0x1000, ""/4096}) 438.798744ms ago: executing program 3 (id=10000): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x4, 0x4, "fdcb7b70"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) 288.874881ms ago: executing program 3 (id=10001): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e80080007006f100000080005005b00000008000600"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) 122.305143ms ago: executing program 3 (id=10002): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7f}, 0x1c) 0s ago: executing program 3 (id=10003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) kernel console output (not intermixed with test programs): e="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 651.625758][ T30] audit: type=1326 audit(1744871367.951:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.1.7484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 651.648199][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.702321][ T30] audit: type=1326 audit(1744871367.951:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.1.7484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 651.760636][ T30] audit: type=1326 audit(1744871367.951:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.1.7484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 651.783196][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.882780][T22131] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7477'. [ 651.934650][ T9] usb 4-1: USB disconnect, device number 84 [ 653.253696][ T30] audit: type=1326 audit(1744871369.991:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22217 comm="syz.1.7517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cadf8e169 code=0x0 [ 653.406970][ T5890] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 653.586070][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 653.595887][T22216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 653.620386][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 653.636941][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 653.644679][ T5890] usb 5-1: can't read configurations, error -71 [ 653.944451][T22237] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 653.974230][T22239] ALSA: mixer_oss: invalid OSS volume '' [ 654.269724][T22252] program syz.4.7533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.309666][T22253] dummy0: entered promiscuous mode [ 654.327138][T22253] macsec0: entered allmulticast mode [ 654.346402][T22253] dummy0: entered allmulticast mode [ 654.374759][T22253] dummy0: left allmulticast mode [ 654.387584][T22253] dummy0: left promiscuous mode [ 654.631901][T22261] netlink: 'syz.4.7537': attribute type 1 has an invalid length. [ 654.773874][T22267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7540'. [ 655.754031][T22313] sctp: [Deprecated]: syz.4.7559 (pid 22313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.754031][T22313] Use struct sctp_sack_info instead [ 655.960732][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7564'. [ 656.469245][T22345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7577'. [ 656.569262][ T30] audit: type=1326 audit(1744871373.311:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22349 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 656.598819][ T30] audit: type=1326 audit(1744871373.311:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22349 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 656.705331][ T30] audit: type=1326 audit(1744871373.311:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22349 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 656.739623][ T30] audit: type=1326 audit(1744871373.311:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22349 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 656.793162][ T30] audit: type=1326 audit(1744871373.311:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22349 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 656.939169][T22366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.705221][T22398] netlink: 'syz.3.7600': attribute type 1 has an invalid length. [ 658.266267][ T5890] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 658.436100][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 658.466316][ T5890] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 658.491391][ T5890] usb 4-1: config 0 has no interface number 0 [ 658.504357][ T5890] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 658.527570][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.556638][ T5890] usb 4-1: Product: syz [ 658.566069][ T5890] usb 4-1: Manufacturer: syz [ 658.576058][ T5890] usb 4-1: SerialNumber: syz [ 658.589305][ T5890] usb 4-1: config 0 descriptor?? [ 658.845580][ T5890] kaweth 4-1:0.235: Firmware present in device. [ 659.062951][ T5890] kaweth 4-1:0.235: Statistics collection: 0 [ 659.070813][ T5890] kaweth 4-1:0.235: Multicast filter limit: 0 [ 659.083216][ T5890] kaweth 4-1:0.235: MTU: 0 [ 659.091567][ T5890] kaweth 4-1:0.235: Read MAC address 00:00:00:00:00:00 [ 659.117122][T22444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.437967][T22451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7624'. [ 659.561662][ T5890] kaweth 4-1:0.235: Error setting SOFS wait [ 659.568010][ T5890] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 659.596543][ T5890] usb 4-1: USB disconnect, device number 85 [ 660.371323][T22474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7636'. [ 663.567149][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7690'. [ 663.624835][T22595] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7691'. [ 664.075781][T22608] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 664.170357][T22610] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 664.180688][T22610] syzkaller1: linktype set to 512 [ 666.021023][T22660] vxcan1: tx address claim with dlc 0 [ 666.236564][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 666.406079][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 666.435807][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 666.469056][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 666.486116][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 666.494451][ T9] usb 5-1: Product: syz [ 666.515999][ T9] usb 5-1: Manufacturer: syz [ 666.527081][ T9] usb 5-1: SerialNumber: syz [ 666.549023][ T9] usb 5-1: config 0 descriptor?? [ 666.555726][T22658] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 666.785164][ T5890] usb 5-1: USB disconnect, device number 85 [ 666.856469][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 666.892303][T22694] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 667.016515][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 667.037306][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 667.052902][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 667.066774][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 667.077550][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.090924][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 667.100099][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.343285][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 667.349275][ T9] usbtmc 4-1:16.0: can't read capabilities [ 667.556616][ T9] usb 4-1: USB disconnect, device number 86 [ 667.670169][ T30] audit: type=1326 audit(1744871384.411:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.4.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 667.688029][T22715] ptrace attach of "./syz-executor exec"[5852] was attempted by " ÿ À ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  ûü [ 667.699656][ T30] audit: type=1326 audit(1744871384.411:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.4.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 667.843636][ T30] audit: type=1326 audit(1744871384.431:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.4.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 667.866658][ T30] audit: type=1326 audit(1744871384.431:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.4.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 667.907144][ T30] audit: type=1326 audit(1744871384.431:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.4.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 667.929524][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.055689][T22725] input: syz0 as /devices/virtual/input/input53 [ 671.422497][T22848] ip6gre1: entered allmulticast mode [ 671.709765][T22854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7811'. [ 672.982149][T22881] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7823'. [ 673.839769][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7829'. [ 673.909249][T22894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7829'. [ 674.637133][T22913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.645428][T22913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.710897][T22913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.063055][T22928] netlink: 'syz.1.7844': attribute type 13 has an invalid length. [ 675.648184][T22943] loop8: detected capacity change from 0 to 1 [ 675.677760][T22943] Dev loop8: unable to read RDB block 1 [ 675.683420][T22943] loop8: unable to read partition table [ 675.702713][T22943] loop8: partition table beyond EOD, truncated [ 675.724158][T22943] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 675.776617][ T5212] Dev loop8: unable to read RDB block 1 [ 675.782298][ T5212] loop8: unable to read partition table [ 675.793984][ T5212] loop8: partition table beyond EOD, truncated [ 676.906082][T22992] Invalid logical block size (4) [ 677.426219][ T5890] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 677.589257][ T5890] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 677.604540][ T5890] usb 2-1: config 0 has no interface number 0 [ 677.611507][ T5890] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 677.635164][ T5890] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 677.651034][ T5890] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 677.662284][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.684442][ T5890] usb 2-1: config 0 descriptor?? [ 677.695553][T23001] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 677.711309][ T5890] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 677.816131][ T5887] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 677.928458][ T5890] usb 2-1: USB disconnect, device number 77 [ 677.978711][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.990068][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.005680][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.011368][T23027] netlink: 'syz.4.7890': attribute type 4 has an invalid length. [ 678.016119][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.031554][ T5887] usb 4-1: Product: syz [ 678.035773][ T5887] usb 4-1: Manufacturer: syz [ 678.041490][ T5887] usb 4-1: SerialNumber: syz [ 678.264898][ T5887] usb 4-1: 0:2 : does not exist [ 678.288479][ T5887] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 678.323435][ T5887] usb 4-1: USB disconnect, device number 87 [ 678.345627][T23037] input: syz0 as /devices/virtual/input/input55 [ 678.517886][T21693] udevd[21693]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.706057][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 678.861993][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 678.873891][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 678.897707][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 678.917926][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 678.934941][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 678.961857][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 678.974067][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 678.996853][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 679.007462][ T9] usb 5-1: Product: syz [ 679.011703][ T9] usb 5-1: Manufacturer: syz [ 679.017405][ T9] usb 5-1: SerialNumber: syz [ 679.030532][ T9] usb 5-1: config 0 descriptor?? [ 679.053802][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 679.071586][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 679.145068][T23056] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 679.164281][T23056] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 679.666538][T23076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7912'. [ 679.859523][ T9] usb 5-1: USB disconnect, device number 86 [ 679.874500][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 680.403169][T23099] netlink: 'syz.1.7924': attribute type 14 has an invalid length. [ 680.591655][T23105] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 682.426483][ T5890] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 682.596118][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 682.603944][ T5890] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 682.612223][ T5890] usb 4-1: config 0 has no interface number 0 [ 682.622030][ T5890] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 682.626194][ T5887] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 682.631412][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.647039][ T5890] usb 4-1: Product: syz [ 682.651227][ T5890] usb 4-1: Manufacturer: syz [ 682.655819][ T5890] usb 4-1: SerialNumber: syz [ 682.663405][ T5890] usb 4-1: config 0 descriptor?? [ 682.671013][ T5890] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 682.796159][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 682.804254][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.816292][ T5887] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 682.825414][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.837882][ T5887] usb 5-1: config 0 descriptor?? [ 682.878939][ T5890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 682.901039][ T5890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 683.255267][ T5887] mcp2221 0003:04D8:00DD.0095: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 683.283715][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 683.284344][ T9] usb 4-1: USB disconnect, device number 88 [ 683.305821][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 683.326595][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 683.358501][ T9] quatech2 4-1:0.51: device disconnected [ 683.657079][ T5890] usb 5-1: USB disconnect, device number 87 [ 684.438487][T23198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7970'. [ 684.639671][T23207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7975'. [ 685.774188][T23253] usb usb8: usbfs: process 23253 (syz.0.7997) did not claim interface 0 before use [ 685.891596][T23255] netlink: 'syz.2.7998': attribute type 9 has an invalid length. [ 686.082331][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.089118][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.483259][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8010'. [ 686.491756][T23283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8009'. [ 686.501617][T23283] netlink: 'syz.3.8009': attribute type 21 has an invalid length. [ 686.502963][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8010'. [ 686.774402][T23294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.361935][T23317] netlink: 'syz.1.8025': attribute type 9 has an invalid length. [ 687.369980][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 687.388801][T23317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8025'. [ 687.553273][T23323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8027'. [ 687.566264][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 687.589821][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 687.606043][ T9] usb 4-1: config 0 has no interface number 0 [ 687.624746][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 687.652112][ T9] usb 4-1: config 0 has no interface number 0 [ 687.660465][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 687.681548][ T9] usb 4-1: config 0 has no interface number 0 [ 687.691272][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 687.703059][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.716259][ T9] usb 4-1: Product: syz [ 687.720524][ T9] usb 4-1: Manufacturer: syz [ 687.725187][ T9] usb 4-1: SerialNumber: syz [ 687.741086][ T9] usb 4-1: config 0 descriptor?? [ 687.752421][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 688.044258][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 688.086114][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 688.520304][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 688.530672][ T9] usb 4-1: USB disconnect, device number 89 [ 688.547789][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 688.593738][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 688.617995][ T9] quatech2 4-1:0.51: device disconnected [ 691.552602][T23454] vivid-000: disconnect [ 691.571983][T23454] vivid-000: reconnect [ 691.896025][ T5887] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 692.072147][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.099863][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 692.114959][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.125411][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.133910][ T5887] usb 4-1: Product: syz [ 692.139312][ T5887] usb 4-1: Manufacturer: syz [ 692.143982][ T5887] usb 4-1: SerialNumber: syz [ 692.266183][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 692.417274][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 692.437596][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.447921][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.470799][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.488248][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.498031][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.526159][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.547975][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.562955][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.574808][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.587276][ T5887] usb 4-1: 0:2 : does not exist [ 692.594620][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.613560][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.630669][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.642512][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.656548][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.668532][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.678147][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.694351][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.712409][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.724077][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.742169][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.753889][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.769071][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.783641][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.814883][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.843868][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 692.854177][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 692.862968][ T9] usb 2-1: Product: syz [ 692.872649][ T9] usb 2-1: Manufacturer: syz [ 692.877957][ T9] usb 2-1: SerialNumber: syz [ 692.919166][ T9] usb 2-1: config 0 descriptor?? [ 692.944048][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 693.024016][ T9] usb 4-1: USB disconnect, device number 90 [ 693.157922][ T5887] usb 2-1: USB disconnect, device number 78 [ 693.182205][ T5887] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 694.016332][ T5888] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 694.176048][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 694.188308][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 694.228805][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 694.263088][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 694.277947][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.287141][ T5888] usb 4-1: Product: syz [ 694.293230][ T5888] usb 4-1: Manufacturer: syz [ 694.298730][ T5888] usb 4-1: SerialNumber: syz [ 694.325651][ T5888] usb 4-1: config 0 descriptor?? [ 694.356794][ T5888] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 694.365430][T23504] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8110'. [ 694.376363][ T5888] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 694.973597][ T5888] em28xx 4-1:0.0: unknown em28xx chip ID (89) [ 695.174157][ T5888] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 695.194388][ T5888] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 695.212998][ T5888] em28xx 4-1:0.0: No AC97 audio processor [ 695.237665][ T5888] usb 4-1: USB disconnect, device number 91 [ 695.272885][ T5888] em28xx 4-1:0.0: Disconnecting em28xx [ 695.298479][ T5888] em28xx 4-1:0.0: Freeing device [ 695.591896][T23537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8125'. [ 695.738717][T23543] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 695.758996][T23545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8129'. [ 695.773149][T23543] usb usb1: Process 23543 (syz.0.8128) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 696.309165][T23566] netlink: 18 bytes leftover after parsing attributes in process `syz.1.8138'. [ 696.976137][ T5888] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 696.988629][ T5890] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 697.128299][ T5888] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 697.137771][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.152788][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 697.161775][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 697.167016][ T5890] usb 2-1: config 1 interface 0 has no altsetting 0 [ 697.170842][ T5888] usb 4-1: config 1 has no interface number 0 [ 697.181809][ T5888] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 697.184036][ T5890] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 697.192795][ T5888] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 697.195503][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.236623][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.241018][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.246316][ T5888] usb 4-1: Product: syz [ 697.266309][ T5888] usb 4-1: Manufacturer: syz [ 697.271074][ T5888] usb 4-1: SerialNumber: syz [ 697.278326][ T5890] usb 2-1: Product: syz [ 697.296069][ T5890] usb 2-1: Manufacturer: syz [ 697.309122][ T5890] usb 2-1: SerialNumber: syz [ 697.588388][ T5890] usbhid 2-1:1.0: can't add hid device: -71 [ 697.594581][ T5890] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 697.621591][ T5890] usb 2-1: USB disconnect, device number 79 [ 697.756045][ T5888] usb 4-1: USB disconnect, device number 92 [ 697.829412][T23602] sctp: [Deprecated]: syz.4.8154 (pid 23602) Use of int in maxseg socket option. [ 697.829412][T23602] Use struct sctp_assoc_value instead [ 699.599975][T23651] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8177'. [ 699.976223][ T5887] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 700.076377][ T5888] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 700.139327][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.154372][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 700.172796][ T5887] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 700.182906][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 700.192348][ T5887] usb 2-1: SerialNumber: syz [ 700.246356][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 700.259270][ T5888] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 700.274234][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.309600][ T5888] usb 4-1: config 0 descriptor?? [ 700.418761][ T5887] usb 2-1: 0:2 : does not exist [ 700.532300][ T5887] usb 2-1: USB disconnect, device number 80 [ 700.549090][ T5888] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 700.614424][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 700.648798][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 700.656747][ T5888] usb 4-1: media controller created [ 700.700780][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.819065][T21693] udevd[21693]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.044110][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8186'. [ 701.161505][ T5888] az6027: usb out operation failed. (-71) [ 701.175997][ T5888] stb0899_attach: Driver disabled by Kconfig [ 701.189623][ T5888] az6027: no front-end attached [ 701.189623][ T5888] [ 701.206899][ T5888] az6027: usb out operation failed. (-71) [ 701.216517][ T5888] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 701.234778][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59 [ 701.262514][ T5888] dvb-usb: schedule remote query interval to 400 msecs. [ 701.280380][ T5888] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 701.298510][ T5888] usb 4-1: USB disconnect, device number 93 [ 701.442370][ T5888] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 702.186303][T23697] netlink: 'syz.3.8197': attribute type 2 has an invalid length. [ 702.312993][T23699] macvlan3: entered allmulticast mode [ 702.341427][T23699] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 702.365502][T23699] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 703.500832][T23753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8224'. [ 704.545101][T23794] ALSA: mixer_oss: invalid index 40000 [ 704.635461][T23796] loop2: detected capacity change from 0 to 7 [ 704.668725][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.678346][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.693974][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.703319][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.722700][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.732036][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.745948][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.755218][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.771889][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.781146][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.789476][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.798735][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.814821][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.824135][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.833017][T23796] ldm_validate_partition_table(): Disk read failed. [ 704.847939][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.857225][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.869006][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.878270][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.891177][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.900483][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 704.911802][T23796] Dev loop2: unable to read RDB block 0 [ 704.919327][T23796] loop2: unable to read partition table [ 704.925375][T23796] loop2: partition table beyond EOD, truncated [ 704.932435][T23796] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 705.126632][ T5888] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 705.276598][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 705.288389][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 705.307274][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 705.321924][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 705.331355][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.342162][ T5888] usb 5-1: Product: syz [ 705.346563][ T5888] usb 5-1: Manufacturer: syz [ 705.351186][ T5888] usb 5-1: SerialNumber: syz [ 705.359961][ T5888] usb 5-1: config 0 descriptor?? [ 705.368936][ T5888] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 705.378528][ T5888] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 705.986436][ T5888] em28xx 5-1:0.0: chip ID is em28174 [ 706.225159][ T5888] usb 5-1: USB disconnect, device number 88 [ 706.250436][ T5888] em28xx 5-1:0.0: Disconnecting em28xx [ 706.257874][T23832] Failed to get privilege flags for destination (handle=0x2:0x8) [ 706.270238][ T5888] em28xx 5-1:0.0: Freeing device [ 706.556867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.891933][T21609] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 709.109284][T23915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8292'. [ 709.124860][T23915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8292'. [ 710.075812][T23943] netlink: 'syz.1.8304': attribute type 15 has an invalid length. [ 711.329503][T23983] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 711.672962][ T30] audit: type=1326 audit(1744871428.411:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 711.778147][ T30] audit: type=1326 audit(1744871428.441:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 711.844630][ T30] audit: type=1326 audit(1744871428.441:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 711.929594][ T30] audit: type=1326 audit(1744871428.441:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 712.004798][ T30] audit: type=1326 audit(1744871428.441:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 712.027258][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.049746][ T30] audit: type=1326 audit(1744871428.441:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 712.099973][ T30] audit: type=1326 audit(1744871428.441:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 712.122376][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.136590][ T30] audit: type=1326 audit(1744871428.441:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 712.158975][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.199994][ T30] audit: type=1326 audit(1744871428.441:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 712.232773][ T30] audit: type=1326 audit(1744871428.441:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23993 comm="syz.3.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x7ffc0000 [ 712.306834][T24016] usb usb8: usbfs: process 24016 (syz.4.8336) did not claim interface 0 before use [ 712.491028][ C0] hrtimer: interrupt took 57407 ns [ 712.565538][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8342'. [ 713.448513][ T5888] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 713.607948][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.624831][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.646105][ T5888] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 713.655542][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.688640][ T5888] usb 4-1: config 0 descriptor?? [ 713.871466][T24056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8354'. [ 714.142420][ T5888] hid-steam 0003:28DE:1142.0096: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 714.229067][ T5888] hid-steam 0003:28DE:1142.0096: Steam wireless receiver connected [ 714.259234][ T5888] hid-steam 0003:28DE:1142.0097: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 714.360729][ T5888] usb 4-1: USB disconnect, device number 94 [ 714.389055][ T5888] hid-steam 0003:28DE:1142.0096: Steam wireless receiver disconnected [ 714.881372][T24095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.027824][T24099] netlink: 312 bytes leftover after parsing attributes in process `syz.3.8375'. [ 715.846642][ T5888] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 716.046342][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 716.061747][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.099794][ T5888] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 716.133691][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.172261][ T5888] usb 2-1: config 0 descriptor?? [ 716.395002][ T5888] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 716.600295][ T5890] usb 2-1: USB disconnect, device number 81 [ 716.985645][T24173] openvswitch: netlink: Multiple metadata blocks provided [ 718.282930][T24225] xt_CT: No such helper "snmp" [ 719.347901][T24262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8448'. [ 719.365998][T24262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8448'. [ 719.467016][ T5890] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 719.656171][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 719.664078][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.687493][ T5890] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 719.715981][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.742599][ T5890] usb 2-1: config 0 descriptor?? [ 719.890391][T24276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8454'. [ 719.954244][T24276] netlink: 'syz.4.8454': attribute type 1 has an invalid length. [ 719.984407][T24276] netlink: 'syz.4.8454': attribute type 2 has an invalid length. [ 720.022732][T24280] sch_fq: defrate 0 ignored. [ 720.189020][ T5890] mcp2221 0003:04D8:00DD.0098: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 720.505256][T24289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8460'. [ 720.514949][T24289] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8460'. [ 720.603099][ T5890] usb 2-1: USB disconnect, device number 82 [ 720.938324][ T5888] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 721.099263][ T5888] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 721.115172][ T5888] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 721.127292][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 721.138640][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 721.154461][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 721.169227][ T5888] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 721.186131][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 721.205728][ T5888] usb 5-1: Product: syz [ 721.210593][ T5888] usb 5-1: Manufacturer: syz [ 721.227330][ T5888] cdc_wdm 5-1:1.0: skipping garbage [ 721.233259][ T5888] cdc_wdm 5-1:1.0: skipping garbage [ 721.248180][ T5888] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 721.255016][ T5888] cdc_wdm 5-1:1.0: Unknown control protocol [ 721.426250][ T2155] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 721.471576][ T5887] usb 5-1: USB disconnect, device number 89 [ 721.599037][ T2155] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.610362][T24324] vlan6: entered allmulticast mode [ 721.618940][ T2155] usb 2-1: config 0 interface 0 has no altsetting 0 [ 721.663045][ T2155] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 721.676670][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.690866][ T2155] usb 2-1: Product: syz [ 721.695571][ T2155] usb 2-1: Manufacturer: syz [ 721.703151][ T2155] usb 2-1: SerialNumber: syz [ 721.714814][ T2155] usb 2-1: config 0 descriptor?? [ 721.728301][ T2155] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 721.749362][ T2155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.781167][ T2155] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 721.805623][ T2155] usb 2-1: media controller created [ 721.885226][ T2155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 722.022822][ T2155] DVB: Unable to find symbol tda10046_attach() [ 722.036022][ T2155] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 722.044836][ T2155] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 722.476869][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 722.476893][ T30] audit: type=1400 audit(1744871439.211:381): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A20202031303736206B420A52737346696C653A092020203232363932206B420A52737353686D656D3A092020202020202030206B420A566D446174613A092020203336353834206B420A566D53746B3A092020202020313332206B420A566D4578653A092020202031363732206B420A566D4C69623A092020202020202038206B420A566D5054453A092020202020313332206B420A566D537761703A092020202020202030206B420A48756765746C6250616765733A092020202020202030206B420A436F726544756D70696E673A09300A5448505F656E61626C65643A09310A756E7461675F6D61736B3A pid=24351 comm="syz.2.8489" [ 722.544187][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.687031][T24356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8490'. [ 722.742829][ T2155] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 722.785588][ T2155] usb 2-1: USB disconnect, device number 83 [ 723.107868][T24366] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 723.296504][ T5891] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 723.487847][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 723.508091][ T5891] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 723.526668][ T5891] usb 5-1: config 0 has no interface number 0 [ 723.532860][ T5891] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.573142][ T5891] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 723.603613][ T5891] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 723.617906][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 723.646161][ T5891] usb 5-1: Product: syz [ 723.650520][ T5891] usb 5-1: SerialNumber: syz [ 723.664807][ T5891] usb 5-1: config 0 descriptor?? [ 723.690787][ T5891] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 723.708699][ T5891] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input60 [ 723.876236][ T5888] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 723.899613][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.908542][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.916599][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.925172][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.933192][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.940758][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.948563][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.956060][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.963276][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.971762][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.979319][ T5891] usb 5-1: USB disconnect, device number 90 [ 723.979389][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 724.008980][ T5891] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 724.049966][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 724.081812][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 724.096387][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 724.140350][ T5888] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 724.160177][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.173316][ T5888] usb 4-1: config 0 descriptor?? [ 724.179881][T24385] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 724.395783][T24385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8504'. [ 724.473852][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 724.508327][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 724.566184][ T5888] usb 4-1: USB disconnect, device number 95 [ 725.506326][ T5888] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 725.686504][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 725.714125][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.739615][ T5888] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.795548][ T5888] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.860952][ T5888] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 725.922878][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 725.950588][ T5888] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 725.998016][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.064218][ T5888] usb 5-1: config 0 descriptor?? [ 726.075788][T24437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8527'. [ 726.608651][ T5888] hid-thrustmaster 0003:044F:B65D.0099: unknown main item tag 0x0 [ 726.632090][ T5888] hid-thrustmaster 0003:044F:B65D.0099: unknown main item tag 0x0 [ 726.698363][ T5888] hid-thrustmaster 0003:044F:B65D.0099: item fetching failed at offset 2/5 [ 726.797194][ T5888] hid-thrustmaster 0003:044F:B65D.0099: parse failed with error -22 [ 726.856731][ T5888] hid-thrustmaster 0003:044F:B65D.0099: probe with driver hid-thrustmaster failed with error -22 [ 726.894868][ T5888] usb 5-1: USB disconnect, device number 91 [ 732.559631][ T30] audit: type=1326 audit(1744871449.301:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb8e169 code=0x7ffc0000 [ 732.688261][ T30] audit: type=1326 audit(1744871449.321:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb8e169 code=0x7ffc0000 [ 732.824657][ T30] audit: type=1326 audit(1744871449.321:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f413fb8e169 code=0x7ffc0000 [ 733.006337][ T5888] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 733.014671][ T30] audit: type=1326 audit(1744871449.321:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb8e169 code=0x7ffc0000 [ 733.091721][ T30] audit: type=1326 audit(1744871449.321:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb8e169 code=0x7ffc0000 [ 733.186224][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 733.206283][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.233931][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.273805][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 733.284100][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 733.299864][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.327379][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.337076][ T5888] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.345160][ T5888] usb 4-1: Manufacturer: syz [ 733.365420][ T5888] usb 4-1: config 0 descriptor?? [ 733.696903][ T5888] rc_core: IR keymap rc-hauppauge not found [ 733.703181][ T5888] Registered IR keymap rc-empty [ 733.708022][T24552] macvtap1: entered promiscuous mode [ 733.713782][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.732699][T24552] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 733.746243][T24552] macvtap1: entered allmulticast mode [ 733.754189][T24552] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 733.761702][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.772952][T24552] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 733.784904][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 733.787091][T24552] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 733.805531][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61 [ 733.833132][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.856530][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.876671][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.896171][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.936296][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.956079][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 733.995691][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.038822][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.076356][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.103543][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.148891][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 734.191391][ T5888] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 734.208873][ T5888] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 734.232210][ T5888] usb 4-1: USB disconnect, device number 96 [ 735.226480][ T5888] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 735.396052][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 735.415232][ T5888] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 735.432066][ T5888] usb 4-1: config 0 has no interface number 0 [ 735.456952][ T5888] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 735.483758][ T5888] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 735.517298][ T5888] usb 4-1: config 0 interface 126 has no altsetting 0 [ 735.539586][ T5888] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 735.552946][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.581679][ T5888] usb 4-1: Product: syz [ 735.592078][ T5888] usb 4-1: Manufacturer: syz [ 735.625454][ T5888] usb 4-1: SerialNumber: syz [ 735.641225][ T5888] usb 4-1: config 0 descriptor?? [ 735.654811][T24582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 735.664986][T24582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 735.978587][T24557] syz.4.8580 (24557): drop_caches: 2 [ 736.105108][ T5888] ir_usb 4-1:0.126: IR Dongle converter detected [ 736.219884][T24608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.325556][ T5888] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 736.536922][ T9] usb 4-1: USB disconnect, device number 97 [ 736.562371][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 736.575815][ T9] ir_usb 4-1:0.126: device disconnected [ 736.746149][ T5888] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 736.756105][ T5891] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 736.808151][ T30] audit: type=1800 audit(1744871453.551:387): pid=24621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8609" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 736.908334][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.926130][ T5888] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 736.926145][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 736.932416][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 736.935220][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.958091][ T5888] usb 5-1: config 0 descriptor?? [ 736.972338][ T5891] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 736.986295][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.994450][ T5891] usb 2-1: Product: syz [ 737.003250][ T5891] usb 2-1: Manufacturer: syz [ 737.008941][ T5891] usb 2-1: SerialNumber: syz [ 737.024569][ T5891] usb 2-1: config 0 descriptor?? [ 737.399419][ T5888] keytouch 0003:0926:3333.009A: fixing up Keytouch IEC report descriptor [ 737.425336][ T5888] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.009A/input/input62 [ 737.445612][ T5891] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 737.517045][ T5888] keytouch 0003:0926:3333.009A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 737.654126][ T5891] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 737.722084][ T5891] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 737.878294][ T5891] usb 2-1: USB disconnect, device number 84 [ 737.918719][ T5888] usb 5-1: USB disconnect, device number 92 [ 739.276591][ T5891] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 739.466362][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 739.473720][ T5891] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 739.492326][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 739.525229][ T5891] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 739.538841][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 739.566366][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 739.598912][ T5891] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 739.607165][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 739.631056][ T5891] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 739.651006][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 739.662827][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 739.663916][T24681] netlink: 'syz.0.8634': attribute type 1 has an invalid length. [ 739.704563][T24681] netlink: 'syz.0.8634': attribute type 2 has an invalid length. [ 739.715148][ T5891] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 739.722612][T24681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8634'. [ 739.730076][T24684] netlink: 'syz.0.8634': attribute type 1 has an invalid length. [ 739.739364][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 739.747940][T24684] netlink: 'syz.0.8634': attribute type 2 has an invalid length. [ 739.759430][T24684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8634'. [ 739.774034][ T5891] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 739.786534][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 739.798399][ T5891] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 739.816377][ T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 739.825659][ T5891] usb 4-1: string descriptor 0 read error: -22 [ 739.843604][ T5891] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 739.855400][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.900341][ T5891] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 740.162468][ T5891] usb 4-1: USB disconnect, device number 98 [ 740.235271][T24700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8643'. [ 740.286589][T24698] tap0: tun_chr_ioctl cmd 1074025681 [ 740.375472][T24663] adutux: No device or device unplugged -19 [ 741.030632][T24734] tipc: New replicast peer: 255.255.255.255 [ 741.039452][T24734] tipc: Enabled bearer , priority 0 [ 741.099302][T24738] input: syz0 as /devices/virtual/input/input63 [ 741.276617][ T5888] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 741.450867][ T5888] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 741.465314][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.474511][ T5888] usb 5-1: Product: syz [ 741.479347][ T5888] usb 5-1: Manufacturer: syz [ 741.484101][ T5888] usb 5-1: SerialNumber: syz [ 741.494751][ T5888] usb 5-1: config 0 descriptor?? [ 742.276109][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 742.353857][ T5888] usb 5-1: Firmware version (0.0) predates our first public release. [ 742.368819][ T5888] usb 5-1: Please update to version 0.2 or newer [ 742.451677][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 742.478200][ T5888] usb 5-1: USB disconnect, device number 93 [ 742.496015][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 742.558803][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 742.584878][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.620931][T24762] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 742.639826][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 742.994076][ T9] usb 4-1: USB disconnect, device number 99 [ 743.762621][T24832] delete_channel: no stack [ 743.777225][T24830] delete_channel: no stack [ 744.890812][T24876] xt_hashlimit: size too large, truncated to 1048576 [ 744.950455][T24877] xt_HMARK: proto mask must be zero with L3 mode [ 745.277041][ T5837] Bluetooth: hci3: adv larger than maximum supported [ 745.277110][ T5837] Bluetooth: hci3: Malformed LE Event: 0x0d [ 745.635999][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 745.888529][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 745.913755][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.940706][ T9] usb 2-1: config 0 descriptor?? [ 745.967418][ T9] cp210x 2-1:0.0: cp210x converter detected [ 746.363431][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 746.396682][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 746.590279][ T5890] usb 2-1: USB disconnect, device number 85 [ 746.618466][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 746.668812][ T5890] cp210x 2-1:0.0: device disconnected [ 747.522484][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.535650][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.662687][T25025] netlink: 136 bytes leftover after parsing attributes in process `syz.3.8788'. [ 749.791835][T25062] bridge: RTM_NEWNEIGH with unconfigured vlan 5 on bridge_slave_0 [ 750.469853][T25086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8813'. [ 750.592348][T25086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8813'. [ 750.606401][T25086] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.657748][T25086] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.665048][T25086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.310925][T25107] program syz.1.8822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.320691][ T30] audit: type=1326 audit(1744871468.051:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.3.8821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fe5d8e169 code=0x0 [ 751.686161][ T5888] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 751.846382][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 751.857485][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 751.881847][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 751.910631][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 751.930124][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.958309][ T5888] usb 5-1: config 0 descriptor?? [ 752.295989][ T5890] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 752.352187][T25138] dummy0: entered promiscuous mode [ 752.397997][ T5888] kovaplus 0003:1E7D:2D50.009B: unknown main item tag 0x0 [ 752.409163][ T5888] kovaplus 0003:1E7D:2D50.009B: unknown main item tag 0x0 [ 752.420111][ T5888] kovaplus 0003:1E7D:2D50.009B: unknown main item tag 0x0 [ 752.438783][ T5888] kovaplus 0003:1E7D:2D50.009B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 752.457820][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 752.465139][ T5890] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.478618][ T5890] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.489470][ T5890] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.505921][ T5890] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.520315][ T5890] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 752.530902][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.757555][ T5890] usb 2-1: GET_CAPABILITIES returned 0 [ 752.770342][ T5890] usbtmc 2-1:16.0: can't read capabilities [ 752.799819][ T5888] kovaplus 0003:1E7D:2D50.009B: couldn't init struct kovaplus_device [ 752.818807][ T5888] kovaplus 0003:1E7D:2D50.009B: couldn't install mouse [ 752.842239][ T5888] kovaplus 0003:1E7D:2D50.009B: probe with driver kovaplus failed with error -71 [ 752.863497][ T5888] usb 5-1: USB disconnect, device number 94 [ 752.975462][ T9] usb 2-1: USB disconnect, device number 86 [ 753.840098][ T5891] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 753.996096][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 754.014057][ T5891] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 754.025919][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.051812][ T5891] usb 5-1: config 0 descriptor?? [ 754.302343][ T5891] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 754.327315][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 754.351991][ T5891] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 754.385331][ T5891] usb 5-1: media controller created [ 754.441313][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 754.936640][ T5891] az6027: usb out operation failed. (-71) [ 754.942542][ T5891] stb0899_attach: Driver disabled by Kconfig [ 754.965396][ T5891] az6027: no front-end attached [ 754.965396][ T5891] [ 754.989966][ T5891] az6027: usb out operation failed. (-71) [ 755.003436][ T5891] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 755.028165][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 755.069846][ T5891] dvb-usb: schedule remote query interval to 400 msecs. [ 755.088831][ T5891] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 755.112752][ T5891] usb 5-1: USB disconnect, device number 95 [ 755.268970][ T5891] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 756.380746][T25263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8892'. [ 756.460992][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8892'. [ 756.520891][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8892'. [ 756.846143][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 757.006433][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 757.019565][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 757.066411][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 757.096316][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.122931][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 757.133791][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 757.143906][ T9] usb 4-1: Product: syz [ 757.154054][ T9] usb 4-1: Manufacturer: syz [ 757.159568][ T9] usb 4-1: SerialNumber: syz [ 757.201799][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input65 [ 757.307406][T25259] syz.2.8891 (25259): drop_caches: 2 [ 757.501468][ T9] usb 4-1: USB disconnect, device number 100 [ 757.557949][ T9] appletouch 4-1:1.0: input: appletouch disconnected [ 757.836237][ T5891] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 758.021812][ T5891] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 758.038142][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.077753][ T5891] usb 2-1: Product: syz [ 758.081994][ T5891] usb 2-1: Manufacturer: syz [ 758.110711][T25299] lo: entered allmulticast mode [ 758.118386][ T5891] usb 2-1: SerialNumber: syz [ 758.120946][T25298] lo: left allmulticast mode [ 758.137594][ T5891] usb 2-1: config 0 descriptor?? [ 758.571718][ T5891] airspy 2-1:0.0: Board ID: 00 [ 758.578053][ T5891] airspy 2-1:0.0: Firmware version: [ 758.746230][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 758.906217][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 758.931985][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 758.941366][ T9] usb 4-1: no configurations [ 758.956891][ T9] usb 4-1: can't read configurations, error -22 [ 758.981935][ T5891] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 758.993566][T25329] kvm: user requested TSC rate below hardware speed [ 759.003925][ T5891] airspy 2-1:0.0: Registered as swradio24 [ 759.021146][ T5891] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 759.044808][ T5891] usb 2-1: USB disconnect, device number 87 [ 759.799229][ T9] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 760.008588][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.021981][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 760.042230][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.061145][ T9] usb 4-1: Product: syz [ 760.065426][ T9] usb 4-1: Manufacturer: syz [ 760.080681][ T9] usb 4-1: SerialNumber: syz [ 760.913425][ T9] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 760.925597][ T9] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 760.959666][ T9] cdc_ncm 4-1:1.0: bind() failure [ 760.986322][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 761.006857][ T9] cdc_ncm 4-1:1.1: bind() failure [ 761.028720][ T9] usb 4-1: USB disconnect, device number 102 [ 761.290392][T25387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8944'. [ 762.936128][ T5888] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 763.126465][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 763.160398][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.190827][ T5888] usb 5-1: Product: syz [ 763.195084][ T5888] usb 5-1: Manufacturer: syz [ 763.231752][ T5888] usb 5-1: SerialNumber: syz [ 763.268980][ T5888] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 763.316626][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 764.082887][T25460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8976'. [ 764.144978][T25462] input: syz0 as /devices/virtual/input/input66 [ 764.223737][T25458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.276415][T25458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.401111][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 764.423784][T25468] blkio.reset_stats is deprecated [ 764.431627][ T9] ath9k_htc: Failed to initialize the device [ 764.509424][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 764.558633][ T5888] usb 5-1: USB disconnect, device number 96 [ 765.784824][T25520] openvswitch: netlink: IPv4 tunnel dst address is zero [ 766.547092][ T5890] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 766.738294][ T5890] usb 5-1: config 4 has an invalid interface number: 4 but max is 0 [ 766.752400][ T5890] usb 5-1: config 4 has no interface number 0 [ 766.771299][ T5890] usb 5-1: config 4 interface 4 has no altsetting 0 [ 766.802663][ T5890] usb 5-1: New USB device found, idVendor=1435, idProduct=0326, bcdDevice=ea.c7 [ 766.816830][T25565] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 766.840216][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.850078][ T5890] usb 5-1: Product: syz [ 766.865294][ T5890] usb 5-1: Manufacturer: syz [ 766.874931][ T5890] usb 5-1: SerialNumber: syz [ 766.995262][T25576] tmpfs: Unknown parameter 'twMõ™>.–J•šá»Ô' [ 767.026022][ T5890] usb 5-1: reset full-speed USB device number 97 using dummy_hcd [ 767.499727][T25597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9040'. [ 767.756012][ T5890] usb 5-1: device descriptor read/64, error -71 [ 767.946318][ T5891] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 768.009736][ T5890] usb 5-1: reset full-speed USB device number 97 using dummy_hcd [ 768.089144][ T30] audit: type=1326 audit(1744871484.831:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25624 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 768.116349][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 768.132553][ T5891] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 768.140996][ T30] audit: type=1326 audit(1744871484.831:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25624 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 768.141051][ T30] audit: type=1326 audit(1744871484.851:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25624 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 768.141095][ T30] audit: type=1326 audit(1744871484.851:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25624 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 768.141138][ T30] audit: type=1326 audit(1744871484.851:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25624 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 768.168115][ T5891] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 768.192272][ T30] audit: type=1326 audit(1744871484.861:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25624 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 768.275452][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 768.279040][ T30] audit: type=1326 audit(1744871484.861:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25624 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cadf8e169 code=0x7ffc0000 [ 768.288635][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 768.334253][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 768.344226][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 768.362632][ T5891] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 768.372134][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.394891][ T5891] usb 4-1: config 0 descriptor?? [ 768.614861][ T5891] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 768.710192][ T5891] usb 5-1: USB disconnect, device number 97 [ 768.776029][ T5888] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 768.830361][ T9] usb 4-1: USB disconnect, device number 103 [ 768.841706][ T9] usblp0: removed [ 768.926065][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 768.933238][ T5888] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 768.945066][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 768.955337][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.965574][ T5888] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.986388][ T5888] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 768.995506][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.226605][ T5888] usb 2-1: GET_CAPABILITIES returned 0 [ 769.245546][ T5888] usbtmc 2-1:16.0: can't read capabilities [ 769.421204][ T30] audit: type=1326 audit(1744871486.161:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25649 comm="syz.0.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb8e169 code=0x7ffc0000 [ 769.472000][ T30] audit: type=1326 audit(1744871486.161:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25649 comm="syz.0.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb8e169 code=0x7ffc0000 [ 769.474079][ T5891] usb 2-1: USB disconnect, device number 88 [ 769.509229][ T30] audit: type=1326 audit(1744871486.241:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25649 comm="syz.0.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f413fb8e169 code=0x7ffc0000 [ 769.734700][T25662] bridge: RTM_NEWNEIGH with invalid ether address [ 770.740278][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 771.165307][T25709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9090'. [ 771.184903][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9090'. [ 771.670001][T25722] netlink: 'syz.0.9097': attribute type 10 has an invalid length. [ 771.688414][T25722] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9097'. [ 772.886215][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 773.046073][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 773.059273][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.074773][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.090678][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.106131][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 773.115654][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.131340][ T9] usb 4-1: config 0 descriptor?? [ 773.578532][ T9] koneplus 0003:1E7D:2E22.009C: unknown main item tag 0x0 [ 773.595001][ T9] koneplus 0003:1E7D:2E22.009C: unknown main item tag 0x0 [ 773.628845][ T9] koneplus 0003:1E7D:2E22.009C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 773.978059][ T30] kauditd_printk_skb: 405 callbacks suppressed [ 773.978080][ T30] audit: type=1326 audit(1744871490.721:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25778 comm="syz.4.9119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 774.008959][ T5890] usb 4-1: USB disconnect, device number 104 [ 774.039151][ T30] audit: type=1326 audit(1744871490.751:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25778 comm="syz.4.9119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 774.079653][ T30] audit: type=1326 audit(1744871490.751:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25778 comm="syz.4.9119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 774.989968][T25796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.468402][ T5888] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 775.636085][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 775.648276][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 775.662413][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 775.677684][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 775.688744][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.700291][ T5888] usb 4-1: Product: syz [ 775.720140][ T5888] usb 4-1: Manufacturer: syz [ 775.730247][ T5888] usb 4-1: SerialNumber: syz [ 775.750093][ T5888] usb 4-1: config 0 descriptor?? [ 775.769499][ T5888] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 775.790102][ T5888] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 776.373805][ T5888] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 776.580897][ T5888] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 776.594736][ T5888] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 776.602132][ T5888] em28xx 4-1:0.0: No AC97 audio processor [ 776.613148][ T5888] usb 4-1: USB disconnect, device number 105 [ 776.621575][ T5888] em28xx 4-1:0.0: Disconnecting em28xx [ 776.631070][ T5888] em28xx 4-1:0.0: Freeing device [ 777.145107][T25870] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 777.363839][ T5891] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 777.383139][T25878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9165'. [ 777.409611][T25878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9165'. [ 777.473708][T25878] gretap0: entered promiscuous mode [ 777.489092][T25878] batadv_slave_1: entered promiscuous mode [ 777.501046][T25878] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 777.509121][T25878] Cannot create hsr debugfs directory [ 777.534460][ T30] audit: type=1326 audit(1744871494.271:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25883 comm="syz.3.9168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fe5d8e169 code=0x0 [ 777.576201][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 777.588567][ T5891] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 777.610176][ T5891] usb 2-1: config 0 has no interface number 0 [ 777.620315][ T5891] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 777.637740][ T5891] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 777.651321][ T5891] usb 2-1: config 0 interface 126 has no altsetting 0 [ 777.661782][ T5891] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 777.671806][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.687065][ T5891] usb 2-1: Product: syz [ 777.691478][ T5891] usb 2-1: Manufacturer: syz [ 777.698752][ T5891] usb 2-1: SerialNumber: syz [ 777.716812][ T5891] usb 2-1: config 0 descriptor?? [ 777.722689][T25868] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 777.733840][T25868] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 778.160626][ T5891] ir_usb 2-1:0.126: IR Dongle converter detected [ 778.362048][ T5891] usb 2-1: IRDA class descriptor not found, device not bound [ 778.584761][ T5888] usb 2-1: USB disconnect, device number 89 [ 779.306283][ T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 779.491675][T25948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9197'. [ 779.504687][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 779.538550][ T9] usb 4-1: config 0 has no interfaces? [ 779.557878][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 779.576276][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.600920][ T9] usb 4-1: Product: syz [ 779.605180][ T9] usb 4-1: Manufacturer: syz [ 779.620016][ T9] usb 4-1: SerialNumber: syz [ 779.644181][ T9] usb 4-1: config 0 descriptor?? [ 779.898884][ T9] usb 4-1: USB disconnect, device number 106 [ 780.301209][ T30] audit: type=1800 audit(1744871497.041:808): pid=25978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9211" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 781.066355][ T9] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 781.086062][ T2155] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 781.244331][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 781.262495][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.288622][ T2155] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 781.294741][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 781.327611][ T2155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 781.345101][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.364708][ T2155] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 781.386216][ T9] usb 4-1: config 0 descriptor?? [ 781.392670][ T2155] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 781.421397][ T2155] usb 5-1: Product: syz [ 781.424278][T26017] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9229'. [ 781.425607][ T2155] usb 5-1: Manufacturer: syz [ 781.425629][ T2155] usb 5-1: SerialNumber: syz [ 781.464566][ T2155] usb 5-1: config 0 descriptor?? [ 781.511717][ T2155] usb 5-1: selecting invalid altsetting 0 [ 781.822648][ T9] hid-thrustmaster 0003:044F:B65D.009D: unknown main item tag 0x0 [ 781.847160][ T9] hid-thrustmaster 0003:044F:B65D.009D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 781.858613][ T2155] usb 5-1: USB disconnect, device number 98 [ 781.880869][ T9] hid-thrustmaster 0003:044F:B65D.009D: Wrong number of endpoints? [ 782.067229][ C0] hid-thrustmaster 0003:044F:B65D.009D: Unknown packet type 0x0, unable to proceed further with wheel init [ 782.285086][ T2155] usb 4-1: USB disconnect, device number 107 [ 782.646806][T26048] ALSA: mixer_oss: invalid OSS volume 'M' [ 784.891694][T26150] trusted_key: syz.0.9291 sent an empty control message without MSG_MORE. [ 787.345969][T21315] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 787.505915][T21315] usb 5-1: Using ep0 maxpacket: 8 [ 787.520790][T21315] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 787.531089][T21315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.562593][T21315] usb 5-1: config 0 descriptor?? [ 787.824581][T21315] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 788.441106][T21315] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 788.476197][T21315] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 788.566565][T21315] asix 5-1:0.0: probe with driver asix failed with error -71 [ 788.597143][T21315] usb 5-1: USB disconnect, device number 99 [ 789.654658][T26280] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 790.432726][T26317] ALSA: mixer_oss: invalid OSS volume '' [ 790.632010][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9369'. [ 791.314608][T26347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.926103][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 793.088664][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.099874][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 793.127660][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 793.140374][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.156359][ T9] usb 5-1: Product: syz [ 793.166625][ T9] usb 5-1: Manufacturer: syz [ 793.177185][ T9] usb 5-1: SerialNumber: syz [ 793.404381][T26387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.426373][T26387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.467558][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 793.492806][ T9] usb 5-1: USB disconnect, device number 100 [ 793.966277][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 794.116870][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 794.132872][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 794.156419][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 794.177445][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.203962][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 794.227229][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 794.250483][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.280684][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.306718][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 794.325264][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.360582][T26414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9409'. [ 794.580294][ T9] usb 5-1: usb_control_msg returned -71 [ 794.599630][ T9] usbtmc 5-1:16.0: can't read capabilities [ 794.605573][ T9] usbtmc 5-1:16.0: Failed to submit iin_urb [ 794.656677][ T9] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -90 [ 794.693762][ T9] usb 5-1: USB disconnect, device number 101 [ 795.735403][T26440] pim6reg: tun_chr_ioctl cmd 35108 [ 796.808614][T26476] input: syz0 as /devices/virtual/input/input67 [ 798.849828][T26542] netlink: 87 bytes leftover after parsing attributes in process `syz.4.9468'. [ 799.972990][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9482'. [ 800.265991][ T5891] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 800.426350][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 800.447043][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 800.470806][ T5891] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 800.495603][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.511969][ T5891] usb 4-1: Product: syz [ 800.516982][ T5891] usb 4-1: Manufacturer: syz [ 800.521637][ T5891] usb 4-1: SerialNumber: syz [ 800.535173][ T5891] usb 4-1: config 0 descriptor?? [ 800.546819][T26579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 800.566338][ T5891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 800.839040][T21315] usb 4-1: USB disconnect, device number 108 [ 801.356035][ T5891] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 801.526032][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 801.539835][T26632] bond0: entered promiscuous mode [ 801.551886][ T5891] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 801.555039][T26632] bond_slave_0: entered promiscuous mode [ 801.565263][ T5891] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 801.578594][T26632] bond_slave_1: entered promiscuous mode [ 801.584937][T26632] batadv0: entered promiscuous mode [ 801.604321][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 801.613804][T26632] bond0: left promiscuous mode [ 801.616353][ T5891] usb 2-1: config 1 has no interface number 0 [ 801.625586][ T5891] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.633651][T26632] bond_slave_0: left promiscuous mode [ 801.638798][ T5891] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 801.654590][T26632] bond_slave_1: left promiscuous mode [ 801.657540][ T5891] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 801.672724][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.687996][T26632] batadv0: left promiscuous mode [ 801.713288][ T5891] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 801.768560][ T62] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 801.924067][ T5891] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 801.983344][T26640] pimreg: entered allmulticast mode [ 802.013915][T26640] pimreg: left allmulticast mode [ 802.392339][T21315] usb 2-1: USB disconnect, device number 90 [ 802.403515][T21315] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 802.583422][T26654] loop8: detected capacity change from 0 to 1 [ 802.621986][T26654] Dev loop8: unable to read RDB block 1 [ 802.632897][T26654] loop8: unable to read partition table [ 802.660203][T26654] loop8: partition table beyond EOD, truncated [ 802.668637][T26654] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 802.795756][ T30] audit: type=1326 audit(1744871519.531:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26660 comm="syz.2.9522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338e169 code=0x0 [ 804.346197][ T2155] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 804.505959][ T2155] usb 2-1: Using ep0 maxpacket: 8 [ 804.527931][ T2155] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.561946][ T2155] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 804.585314][ T2155] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.604989][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.615118][ T2155] usb 2-1: Product: syz [ 804.631469][ T2155] usb 2-1: Manufacturer: syz [ 804.645914][ T2155] usb 2-1: SerialNumber: syz [ 804.900623][ T2155] cdc_ncm 2-1:1.0: bind() failure [ 804.934484][ T2155] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 804.962521][ T2155] cdc_ncm 2-1:1.1: bind() failure [ 804.981116][ T2155] usb 2-1: USB disconnect, device number 91 [ 805.464649][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 806.356829][T21315] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 806.526362][T21315] usb 2-1: Using ep0 maxpacket: 16 [ 806.542136][T21315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.570280][T21315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.586938][T21315] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 806.602224][T21315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.622935][T21315] usb 2-1: config 0 descriptor?? [ 806.646182][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 806.802033][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.822230][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.825913][ T30] audit: type=1326 audit(1744871523.561:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 806.839611][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 806.873715][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.877683][ T30] audit: type=1326 audit(1744871523.611:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 806.966870][ T9] usb 4-1: config 0 descriptor?? [ 806.973883][ T30] audit: type=1326 audit(1744871523.621:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 807.006897][ T30] audit: type=1326 audit(1744871523.621:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 807.034970][ T30] audit: type=1326 audit(1744871523.621:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 807.058852][ T30] audit: type=1326 audit(1744871523.621:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 807.082858][T21315] playstation 0003:054C:05C4.009E: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 807.096180][ T30] audit: type=1326 audit(1744871523.641:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f408772a359 code=0x7ffc0000 [ 807.119280][ T30] audit: type=1326 audit(1744871523.641:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f408772a359 code=0x7ffc0000 [ 807.141862][ T30] audit: type=1326 audit(1744871523.641:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26793 comm="syz.4.9582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f408772a359 code=0x7ffc0000 [ 807.241136][T21315] playstation 0003:054C:05C4.009E: Invalid reportID received, expected 18 got 0 [ 807.250921][T21315] playstation 0003:054C:05C4.009E: Failed to retrieve DualShock4 pairing info: -22 [ 807.260481][T21315] playstation 0003:054C:05C4.009E: Failed to get MAC address from DualShock4 [ 807.273925][T21315] playstation 0003:054C:05C4.009E: Failed to create dualshock4. [ 807.296334][T21315] playstation 0003:054C:05C4.009E: probe with driver playstation failed with error -22 [ 807.407343][ T9] playstation 0003:054C:0DF2.009F: unknown main item tag 0x0 [ 807.414863][ T9] playstation 0003:054C:0DF2.009F: unknown main item tag 0x0 [ 807.422531][ T9] playstation 0003:054C:0DF2.009F: unknown main item tag 0x0 [ 807.430386][ T9] playstation 0003:054C:0DF2.009F: unknown main item tag 0x0 [ 807.438146][ T9] playstation 0003:054C:0DF2.009F: unknown main item tag 0x0 [ 807.461228][T21315] usb 2-1: USB disconnect, device number 92 [ 807.477270][ T9] playstation 0003:054C:0DF2.009F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 807.518881][ T2155] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 807.682121][ T2155] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 807.692247][ T2155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 807.701793][ T2155] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 807.711560][ T2155] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 807.719853][ T2155] usb 5-1: Product: syz [ 807.724039][ T2155] usb 5-1: Manufacturer: syz [ 807.729685][ T2155] usb 5-1: SerialNumber: syz [ 807.739212][ T2155] usb 5-1: config 0 descriptor?? [ 807.749108][ T2155] usb 5-1: selecting invalid altsetting 0 [ 807.838455][ T9] playstation 0003:054C:0DF2.009F: Failed to retrieve feature with reportID 32: -71 [ 807.868679][ T9] playstation 0003:054C:0DF2.009F: Failed to retrieve DualSense firmware info: -71 [ 807.896369][ T9] playstation 0003:054C:0DF2.009F: Failed to get firmware info from DualSense [ 807.905395][ T9] playstation 0003:054C:0DF2.009F: Failed to create dualsense. [ 807.932500][ T9] playstation 0003:054C:0DF2.009F: probe with driver playstation failed with error -71 [ 807.962762][ T9] usb 4-1: USB disconnect, device number 109 [ 807.971875][ T2155] usb 5-1: USB disconnect, device number 102 [ 808.364923][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9592'. [ 808.964406][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.970988][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.356912][T26865] tap0: tun_chr_ioctl cmd 1074812118 [ 810.964206][T26934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9647'. [ 811.557749][T26959] tap0: tun_chr_ioctl cmd 1074025677 [ 811.563511][T26959] tap0: linktype set to 778 [ 811.585965][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 811.702947][T26965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9660'. [ 811.766100][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 811.773625][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 811.792181][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 811.828426][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 811.876495][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 811.916380][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 811.938291][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 811.950782][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 811.971125][ T9] usb 4-1: Product: syz [ 811.975643][ T9] usb 4-1: Manufacturer: syz [ 811.991770][ T9] usb 4-1: SerialNumber: syz [ 812.023859][ T9] usb 4-1: config 0 descriptor?? [ 812.033013][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 812.078192][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 812.268502][ T9] usb 4-1: USB disconnect, device number 110 [ 812.285181][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 813.026262][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 813.026284][ T30] audit: type=1326 audit(1744871529.761:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.061045][ T30] audit: type=1326 audit(1744871529.761:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.096778][ T30] audit: type=1326 audit(1744871529.771:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.156030][ T30] audit: type=1326 audit(1744871529.771:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.225747][ T30] audit: type=1326 audit(1744871529.771:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.284840][ T30] audit: type=1326 audit(1744871529.771:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.313512][ T30] audit: type=1326 audit(1744871529.771:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.347830][ T30] audit: type=1326 audit(1744871529.771:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.378930][ T30] audit: type=1326 audit(1744871529.771:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f408778e169 code=0x7ffc0000 [ 813.443684][ T30] audit: type=1326 audit(1744871529.771:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.4.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 813.780534][T27052] vlan3: entered allmulticast mode [ 813.794632][T27052] vlan0: entered allmulticast mode [ 813.800198][T27052] veth0_vlan: entered allmulticast mode [ 814.064726][T27069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9708'. [ 814.197758][T27072] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 814.486133][ T5891] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 814.643792][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 814.656020][T21315] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 814.665213][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 814.684062][ T5891] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 814.703637][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.724757][ T5891] usb 5-1: config 0 descriptor?? [ 814.731243][T27075] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 814.806051][T21315] usb 4-1: Using ep0 maxpacket: 32 [ 814.817715][T21315] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 814.826140][T21315] usb 4-1: config 0 has no interface number 0 [ 814.832286][T21315] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 814.866027][T21315] usb 4-1: config 0 interface 85 has no altsetting 0 [ 814.876912][T21315] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 814.886793][T21315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.894866][T21315] usb 4-1: Product: syz [ 814.917281][T21315] usb 4-1: Manufacturer: syz [ 814.921955][T21315] usb 4-1: SerialNumber: syz [ 814.944148][T21315] usb 4-1: config 0 descriptor?? [ 815.164389][ T5891] hid (null): global environment stack underflow [ 815.178687][ T5891] hid (null): global environment stack underflow [ 815.190055][ T5891] hid (null): report_id 0 is invalid [ 815.195629][ T5891] hid (null): global environment stack underflow [ 815.203425][ T5891] hid (null): report_id 0 is invalid [ 815.209490][ T5891] hid (null): report_id 0 is invalid [ 815.215268][ T5891] hid (null): global environment stack underflow [ 815.230046][ T5891] uclogic 0003:28BD:0078.00A0: interface is invalid, ignoring [ 815.399830][ T5888] usb 5-1: USB disconnect, device number 103 [ 815.596318][T21315] appletouch 4-1:0.85: Geyser mode initialized. [ 815.604235][T21315] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input70 [ 815.812225][ T5890] usb 4-1: USB disconnect, device number 111 [ 815.847855][ T5890] appletouch 4-1:0.85: input: appletouch disconnected [ 817.117939][T27163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9747'. [ 817.556825][ T5891] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 817.726161][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.754575][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 817.778082][ T5891] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 817.796388][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 817.815016][ T5891] usb 2-1: SerialNumber: syz [ 818.064654][ T5891] usb 2-1: 0:2 : does not exist [ 818.104660][ T5891] usb 2-1: USB disconnect, device number 93 [ 818.316974][T24524] udevd[24524]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.508010][ T2155] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 818.668256][ T2155] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 818.686035][ T2155] usb 5-1: config 0 has no interface number 0 [ 818.696318][ T2155] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 818.711450][ T2155] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 818.761509][ T2155] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 818.788190][ T2155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.815367][ T2155] usb 5-1: config 0 descriptor?? [ 818.830394][T27215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9770'. [ 818.842637][T27199] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 818.851657][T27215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9770'. [ 818.867251][ T2155] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 819.252959][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 819.369622][ T2155] usb 5-1: USB disconnect, device number 104 [ 822.056447][ T5890] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 822.246134][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 822.275003][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.330072][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.355014][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 822.415978][ T5890] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 822.443654][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.484765][ T5890] usb 2-1: config 0 descriptor?? [ 823.028196][ T5890] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00A1/input/input71 [ 823.144223][ T5890] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00A1/input/input72 [ 823.222248][ T5890] kye 0003:0458:5011.00A1: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 823.313571][ T5890] usb 2-1: USB disconnect, device number 94 [ 824.619605][T27295] bond0: entered promiscuous mode [ 824.624726][T27295] bond_slave_0: entered promiscuous mode [ 824.723677][T27295] bond_slave_1: entered promiscuous mode [ 824.758287][T27294] bond0: left promiscuous mode [ 824.763141][T27294] bond_slave_0: left promiscuous mode [ 824.833334][T27294] bond_slave_1: left promiscuous mode [ 826.156785][T27323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9816'. [ 826.596386][ T5890] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 826.756051][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 826.763531][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 826.791629][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 826.841145][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 826.869443][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.953874][ T5890] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 827.013294][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.314569][ T5890] usb 5-1: GET_CAPABILITIES returned 0 [ 827.341081][ T5890] usbtmc 5-1:16.0: can't read capabilities [ 827.564135][ T5890] usb 5-1: USB disconnect, device number 105 [ 827.997131][T27363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9835'. [ 828.010727][T27363] netlink: 'syz.3.9835': attribute type 20 has an invalid length. [ 828.020260][T27363] netlink: 'syz.3.9835': attribute type 21 has an invalid length. [ 828.675306][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 828.675327][ T30] audit: type=1326 audit(1744871545.411:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 828.778946][ T30] audit: type=1326 audit(1744871545.411:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 828.858057][ T30] audit: type=1326 audit(1744871545.411:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 829.014536][ T30] audit: type=1326 audit(1744871545.421:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 829.057956][ T30] audit: type=1326 audit(1744871545.421:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 829.108818][ T30] audit: type=1326 audit(1744871545.421:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 829.165193][ T30] audit: type=1326 audit(1744871545.421:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 829.253181][ T30] audit: type=1326 audit(1744871545.421:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 829.345980][ T30] audit: type=1326 audit(1744871545.421:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 829.433238][ T30] audit: type=1326 audit(1744871545.421:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.2.9841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0d3338e169 code=0x7ffc0000 [ 830.041641][T27394] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 832.794667][ T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 833.011194][T27437] input: syz0 as /devices/virtual/input/input74 [ 834.541289][ T2155] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 834.745983][ T2155] usb 2-1: Using ep0 maxpacket: 16 [ 834.796856][ T2155] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 834.817470][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 834.843440][ T2155] usb 2-1: Product: syz [ 834.855981][ T2155] usb 2-1: Manufacturer: syz [ 834.862985][ T2155] usb 2-1: SerialNumber: syz [ 834.894154][ T2155] usb 2-1: config 0 descriptor?? [ 835.170334][ T2155] usb 2-1: USB disconnect, device number 95 [ 836.127051][T27465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9881'. [ 837.198823][T27480] tap1: tun_chr_ioctl cmd 1074025678 [ 837.220837][T27480] tap1: group set to 0 [ 843.360778][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 843.360800][ T30] audit: type=1326 audit(1744871560.101:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.0.9908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f413fb8e169 code=0x0 [ 844.013100][T27534] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 844.051158][T27534] bridge0: port 4(dummy0) entered disabled state [ 844.058732][T27534] bridge0: port 3(team0) entered disabled state [ 844.065733][T27534] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.074795][T27534] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.408264][T27545] netem: incorrect ge model size [ 845.421604][T27545] netem: change failed [ 845.465457][ T30] audit: type=1400 audit(1744871562.201:947): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A5B0A868099E9E4714992EA56D3D33D9F22BA3B8953050E6B92D3D79CE8CEB6266B185B6C6BE92FCF07FAF29141F525F2E0B7531E2063B7A6345C67A555F26BF2EF0FBC7006A89C01A5517E64A10B791358670701B411733C3A pid=27546 comm="syz.1.9916" [ 845.500585][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.244206][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 850.262062][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 850.278304][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 850.297117][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 850.310540][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 850.938156][T27455] Set syz1 is full, maxelem 65536 reached [ 851.044089][T27625] chnl_net:caif_netlink_parms(): no params data found [ 851.438493][T27659] netlink: 'syz.0.9957': attribute type 3 has an invalid length. [ 851.458564][T27625] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.468883][T27625] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.476462][T27625] bridge_slave_0: entered allmulticast mode [ 851.484716][T27625] bridge_slave_0: entered promiscuous mode [ 851.496501][T27625] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.508189][T27625] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.515563][T27625] bridge_slave_1: entered allmulticast mode [ 851.524059][T27625] bridge_slave_1: entered promiscuous mode [ 851.608005][T27625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.695374][T27625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.827345][T27625] team0: Port device team_slave_0 added [ 851.858153][T27625] team0: Port device team_slave_1 added [ 851.994079][T27625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.014627][T27625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.040674][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.052669][T27625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.065433][T27625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.072761][T27625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.099797][T27625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.302663][T27625] hsr_slave_0: entered promiscuous mode [ 852.317952][T27625] hsr_slave_1: entered promiscuous mode [ 852.332893][T27625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.349356][T27625] Cannot create hsr debugfs directory [ 852.399428][T27683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 852.400482][ T5837] Bluetooth: hci5: command tx timeout [ 852.427526][ T142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.561754][ T142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.732158][ T142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.859557][ T142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.266060][ T30] audit: type=1326 audit(1744871569.991:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27711 comm="syz.1.9982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cadf8e169 code=0x0 [ 853.464623][ T142] bridge_slave_1: left allmulticast mode [ 853.494110][ T142] bridge_slave_1: left promiscuous mode [ 853.508996][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.538001][ T142] bridge_slave_0: left allmulticast mode [ 853.543878][ T142] bridge_slave_0: left promiscuous mode [ 853.557047][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.054911][ T142] gretap0 (unregistering): left promiscuous mode [ 854.245048][T27742] tmpfs: Unknown parameter '' [ 854.478904][ T5837] Bluetooth: hci5: command tx timeout [ 854.502682][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.520015][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.532339][ T142] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 854.549845][ T142] bond0 (unregistering): Released all slaves [ 854.574359][ T142] bond1 (unregistering): Released all slaves [ 854.593869][ T142] bond2 (unregistering): Released all slaves [ 854.622380][T27625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 854.655183][T27625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 854.923547][T27722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.940783][T27722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.953311][T27722] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 854.973244][T27722] bond0 (unregistering): Released all slaves [ 855.055388][ T142] k›*·]‘: left promiscuous mode [ 855.109832][T27625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 855.152764][T27625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 855.172356][ T142] tipc: Disabling bearer [ 855.182748][ T142] tipc: Left network mode [ 855.196797][ T2155] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 855.373731][ T2155] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 855.389721][ T2155] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 855.413548][ T2155] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.472147][ T2155] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 855.484040][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.496146][ T2155] usb 2-1: Product: syz [ 855.500428][ T2155] usb 2-1: Manufacturer: syz [ 855.505066][ T2155] usb 2-1: SerialNumber: syz [ 855.721557][T27625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.760751][ T2155] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 855.790351][ T142] batadv_slave_1: left promiscuous mode [ 855.873427][ T142] hsr_slave_0: left promiscuous mode [ 855.897831][ T142] hsr_slave_1: left promiscuous mode [ 855.914761][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.924065][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.952461][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.965334][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.982862][ T142] [ 855.983057][ T2155] usb 2-1: USB disconnect, device number 96 [ 855.985244][ T142] ====================================================== [ 855.998193][ T142] WARNING: possible circular locking dependency detected [ 856.004712][ T2155] usblp0: removed [ 856.005217][ T142] 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 Not tainted [ 856.015989][ T142] ------------------------------------------------------ [ 856.023302][ T142] kworker/u8:5/142 is trying to acquire lock: [ 856.029419][ T142] ffff888027be4768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 856.040111][ T142] [ 856.040111][ T142] but task is already holding lock: [ 856.047482][ T142] ffff888035d0cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 856.059166][ T142] [ 856.059166][ T142] which lock already depends on the new lock. [ 856.059166][ T142] [ 856.069582][ T142] [ 856.069582][ T142] the existing dependency chain (in reverse order) is: [ 856.079289][ T142] [ 856.079289][ T142] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 856.087735][ T142] lock_acquire+0x116/0x2f0 [ 856.092766][ T142] __mutex_lock+0x1a5/0x10c0 [ 856.097896][ T142] xsk_bind+0x2fd/0xfb0 [ 856.102578][ T142] __sys_bind+0x1de/0x290 [ 856.107435][ T142] __x64_sys_bind+0x7a/0x90 [ 856.112466][ T142] do_syscall_64+0xf3/0x230 [ 856.117499][ T142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.123918][ T142] [ 856.123918][ T142] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 856.131140][ T142] lock_acquire+0x116/0x2f0 [ 856.136194][ T142] __mutex_lock+0x1a5/0x10c0 [ 856.141313][ T142] xsk_diag_dump+0x5be/0x19d0 [ 856.146535][ T142] netlink_dump+0x678/0xeb0 [ 856.151564][ T142] __netlink_dump_start+0x5a2/0x790 [ 856.157288][ T142] xsk_diag_handler_dump+0x1de/0x270 [ 856.163098][ T142] sock_diag_rcv_msg+0x3dc/0x5f0 [ 856.168562][ T142] netlink_rcv_skb+0x208/0x480 [ 856.173860][ T142] netlink_unicast+0x7f8/0x9a0 [ 856.179150][ T142] netlink_sendmsg+0x8c3/0xcd0 [ 856.184448][ T142] __sock_sendmsg+0x221/0x270 [ 856.189655][ T142] sock_write_iter+0x2d9/0x3f0 [ 856.194947][ T142] do_iter_readv_writev+0x71f/0x9d0 [ 856.200673][ T142] vfs_writev+0x38d/0xbc0 [ 856.205540][ T142] do_writev+0x1b8/0x360 [ 856.210307][ T142] do_syscall_64+0xf3/0x230 [ 856.215421][ T142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.221838][ T142] [ 856.221838][ T142] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 856.229402][ T142] lock_acquire+0x116/0x2f0 [ 856.234432][ T142] __mutex_lock+0x1a5/0x10c0 [ 856.239596][ T142] xsk_notifier+0x8b/0x230 [ 856.244554][ T142] notifier_call_chain+0x1a5/0x3f0 [ 856.250204][ T142] unregister_netdevice_many_notify+0x1572/0x2510 [ 856.257236][ T142] unregister_netdevice_queue+0x383/0x400 [ 856.263490][ T142] _cfg80211_unregister_wdev+0x163/0x590 [ 856.269653][ T142] ieee80211_if_remove+0x25d/0x320 [ 856.275376][ T142] ieee80211_del_iface+0x19/0x30 [ 856.280837][ T142] cfg80211_remove_virtual_intf+0x23f/0x410 [ 856.287257][ T142] genl_rcv_msg+0xb38/0xf00 [ 856.292287][ T142] netlink_rcv_skb+0x208/0x480 [ 856.297580][ T142] genl_rcv+0x28/0x40 [ 856.302104][ T142] netlink_unicast+0x7f8/0x9a0 [ 856.307392][ T142] netlink_sendmsg+0x8c3/0xcd0 [ 856.312693][ T142] __sock_sendmsg+0x221/0x270 [ 856.317898][ T142] ____sys_sendmsg+0x523/0x860 [ 856.323184][ T142] __sys_sendmsg+0x271/0x360 [ 856.328309][ T142] do_syscall_64+0xf3/0x230 [ 856.333339][ T142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.339773][ T142] [ 856.339773][ T142] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 856.347540][ T142] validate_chain+0xa69/0x24e0 [ 856.352844][ T142] __lock_acquire+0xad5/0xd80 [ 856.358142][ T142] lock_acquire+0x116/0x2f0 [ 856.363172][ T142] __mutex_lock+0x1a5/0x10c0 [ 856.368379][ T142] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 856.374991][ T142] notifier_call_chain+0x1a5/0x3f0 [ 856.380662][ T142] __dev_close_many+0x15d/0x760 [ 856.386057][ T142] dev_close_many+0x250/0x4c0 [ 856.391262][ T142] unregister_netdevice_many_notify+0x628/0x2510 [ 856.398117][ T142] default_device_exit_batch+0x7ff/0x880 [ 856.404288][ T142] cleanup_net+0x8af/0xd60 [ 856.409232][ T142] process_scheduled_works+0xac3/0x18e0 [ 856.415304][ T142] worker_thread+0x870/0xd50 [ 856.420421][ T142] kthread+0x7b7/0x940 [ 856.425027][ T142] ret_from_fork+0x4b/0x80 [ 856.429971][ T142] ret_from_fork_asm+0x1a/0x30 [ 856.435266][ T142] [ 856.435266][ T142] other info that might help us debug this: [ 856.435266][ T142] [ 856.445522][ T142] Chain exists of: [ 856.445522][ T142] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 856.445522][ T142] [ 856.459017][ T142] Possible unsafe locking scenario: [ 856.459017][ T142] [ 856.466469][ T142] CPU0 CPU1 [ 856.471834][ T142] ---- ---- [ 856.477202][ T142] lock(&dev_instance_lock_key#3); [ 856.482413][ T142] lock(&xs->mutex); [ 856.488923][ T142] lock(&dev_instance_lock_key#3); [ 856.496653][ T142] lock(&rdev->wiphy.mtx); [ 856.501165][ T142] [ 856.501165][ T142] *** DEADLOCK *** [ 856.501165][ T142] [ 856.509315][ T142] 5 locks held by kworker/u8:5/142: [ 856.514508][ T142] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 856.525400][ T142] #1: ffffc90002e3fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 856.535942][ T142] #2: ffffffff900f0a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 856.545355][ T142] #3: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 856.555375][ T142] #4: ffff888035d0cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 856.567404][ T142] [ 856.567404][ T142] stack backtrace: [ 856.573293][ T142] CPU: 0 UID: 0 PID: 142 Comm: kworker/u8:5 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 856.573313][ T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 856.573325][ T142] Workqueue: netns cleanup_net [ 856.573349][ T142] Call Trace: [ 856.573355][ T142] [ 856.573362][ T142] dump_stack_lvl+0x241/0x360 [ 856.573386][ T142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.573406][ T142] ? __pfx__printk+0x10/0x10 [ 856.573427][ T142] ? print_lock+0x171/0x1a0 [ 856.573446][ T142] print_circular_bug+0x2e1/0x300 [ 856.573466][ T142] check_noncircular+0x142/0x160 [ 856.573488][ T142] validate_chain+0xa69/0x24e0 [ 856.573513][ T142] __lock_acquire+0xad5/0xd80 [ 856.573531][ T142] lock_acquire+0x116/0x2f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 856.573545][ T142] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 856.573565][ T142] __mutex_lock+0x1a5/0x10c0 [ 856.573583][ T142] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 856.573598][ T142] ? validate_chain+0x8a7/0x24e0 [ 856.573619][ T142] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 856.573633][ T142] ? __pfx___mutex_lock+0x10/0x10 [ 856.573657][ T142] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 856.573673][ T142] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 856.573690][ T142] ? __lock_acquire+0xad5/0xd80 [ 856.573705][ T142] ? do_raw_spin_lock+0x151/0x370 [ 856.573732][ T142] ? inetdev_event+0x4fb/0x1740 [ 856.573749][ T142] ? igmp_netdev_event+0x7c/0x770 [ 856.573766][ T142] notifier_call_chain+0x1a5/0x3f0 [ 856.573786][ T142] __dev_close_many+0x15d/0x760 [ 856.573807][ T142] ? __mutex_lock+0x380/0x10c0 [ 856.573824][ T142] ? kthread+0x7b7/0x940 [ 856.573844][ T142] ? __pfx___dev_close_many+0x10/0x10 [ 856.573867][ T142] dev_close_many+0x250/0x4c0 [ 856.573889][ T142] ? __pfx_dev_close_many+0x10/0x10 [ 856.573911][ T142] unregister_netdevice_many_notify+0x628/0x2510 [ 856.573932][ T142] ? lockdep_hardirqs_on+0x9d/0x150 [ 856.573950][ T142] ? __local_bh_enable_ip+0x168/0x200 [ 856.573965][ T142] ? batadv_tt_local_remove+0x119/0x230 [ 856.573981][ T142] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 856.573996][ T142] ? batadv_tt_local_remove+0x119/0x230 [ 856.574011][ T142] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 856.574046][ T142] ? unregister_netdevice_queue+0x2c4/0x400 [ 856.574065][ T142] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 856.574088][ T142] default_device_exit_batch+0x7ff/0x880 [ 856.574112][ T142] ? __pfx_default_device_exit_batch+0x10/0x10 [ 856.574134][ T142] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 856.574155][ T142] ? cfg802154_pernet_exit+0xc3/0xe0 [ 856.574169][ T142] ? __pfx_default_device_exit_batch+0x10/0x10 [ 856.574197][ T142] cleanup_net+0x8af/0xd60 [ 856.574221][ T142] ? __pfx_cleanup_net+0x10/0x10 [ 856.574245][ T142] ? process_scheduled_works+0x9cb/0x18e0 [ 856.574261][ T142] process_scheduled_works+0xac3/0x18e0 [ 856.574286][ T142] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.574305][ T142] ? assign_work+0x367/0x3d0 [ 856.574322][ T142] worker_thread+0x870/0xd50 [ 856.574343][ T142] ? __kthread_parkme+0x1a8/0x200 [ 856.574362][ T142] ? __pfx_worker_thread+0x10/0x10 [ 856.574379][ T142] kthread+0x7b7/0x940 [ 856.574399][ T142] ? __pfx_worker_thread+0x10/0x10 [ 856.574416][ T142] ? __pfx_kthread+0x10/0x10 [ 856.574435][ T142] ? __pfx_kthread+0x10/0x10 [ 856.574455][ T142] ? __pfx_kthread+0x10/0x10 [ 856.574473][ T142] ? __pfx_kthread+0x10/0x10 [ 856.574493][ T142] ? _raw_spin_unlock_irq+0x23/0x50 [ 856.574507][ T142] ? lockdep_hardirqs_on+0x9d/0x150 [ 856.574524][ T142] ? __pfx_kthread+0x10/0x10 [ 856.574544][ T142] ret_from_fork+0x4b/0x80 [ 856.574559][ T142] ? __pfx_kthread+0x10/0x10 [ 856.574578][ T142] ret_from_fork_asm+0x1a/0x30 [ 856.574597][ T142] [ 856.578633][ T5837] Bluetooth: hci5: command tx timeout [ 857.033734][ T142] veth1_vlan: left promiscuous mode [ 857.046649][ T142] veth0_vlan: left promiscuous mode [ 857.834842][T27625] 8021q: adding VLAN 0 to HW filter on device team0