last executing test programs: 34.626869605s ago: executing program 4 (id=1973): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4f1c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 33.577800644s ago: executing program 4 (id=1979): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 33.468957803s ago: executing program 4 (id=1980): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000002}) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 33.276870361s ago: executing program 4 (id=1981): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 33.113475702s ago: executing program 4 (id=1983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x865}, 0x2404c880) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x6}}, 0x14}}, 0x80) 32.673353242s ago: executing program 4 (id=1989): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x24000280) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 32.376749663s ago: executing program 32 (id=1989): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x24000280) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 4.260388761s ago: executing program 5 (id=2273): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000880), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0xfffffffffffffffe) 4.087576085s ago: executing program 5 (id=2275): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x18f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 3.977789362s ago: executing program 3 (id=2277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x2040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x3, 0xe691, 0xfffffffffffffffc, 0x0, 0x2, 0x100000001, 0xfffffffffffffffe, 0xfff, 0x7ff, 0xffffffffffffffff, 0x6, 0x4], 0x80a0000, 0x6f84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.787160246s ago: executing program 3 (id=2278): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4f1c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3.786170806s ago: executing program 2 (id=2288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) 3.68651269s ago: executing program 2 (id=2279): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x10, 0x29, 0x34, 0x804}}], 0x10}, 0x40c0) 3.575523345s ago: executing program 2 (id=2281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.423063766s ago: executing program 2 (id=2282): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x65fc, 0x4) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xffffff9a}], 0x1, 0x100, 0x0) 3.272613977s ago: executing program 2 (id=2285): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0xffffffffffffffff, 0xeeef0000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7073b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e976744da29f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f6373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f00000000dfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) close_range(r0, 0xffffffffffffffff, 0x0) 3.078984226s ago: executing program 5 (id=2287): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x80, 0x6, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc880}, 0x840) 2.944275754s ago: executing program 2 (id=2290): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000003c0)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000300)=0x9) 2.919144825s ago: executing program 3 (id=2291): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r0, &(0x7f000000a200), 0x3ffffffffffff31, 0x60000800) connect$can_j1939(r0, &(0x7f0000000a40)={0x1d, r1, 0x1, {0x0, 0xf0, 0x1}, 0x2}, 0x18) 2.842981834s ago: executing program 5 (id=2292): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x7ff, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="2fae1b", 0x3}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 2.647194688s ago: executing program 5 (id=2295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008094) 2.498863514s ago: executing program 3 (id=2297): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) futimesat(r0, 0x0, 0x0) 2.397798338s ago: executing program 0 (id=2298): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x2, 0x1, 0x4, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 2.342380931s ago: executing program 3 (id=2300): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="1e6f0cc07826ed41ffc934f8d11edaaa088b", 0x12}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360716db10d69eb69fbb37b4fe035bbb09587304851d9e210a48ab7f57e0bb22a9def8b589b7a78b3b6fd69f62fc40acf7772df3e5a5c865b64d854f7c56e8bdcc09fdf67e33877bf9e37c4f2a6d3dda4c2ba1bf16b5d3612ad5d71079a4e3752d0b0769d18e40fc724898caee2e3e3d1ce338d118a208aa9fa2f27e273ae80be929e182ea5f6c3543cc537681b397dbd688a7f45739198964ebe7563b3351f3410f1a6cacd134c799660d0b8e3a3daa34f6cce", 0xf3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c156", 0x7b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.229107902s ago: executing program 0 (id=2311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) sendmmsg$inet(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200448c0) 2.179429405s ago: executing program 1 (id=2302): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4f1c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 2.179237365s ago: executing program 3 (id=2303): open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = io_uring_setup(0x7d7, &(0x7f0000000580)={0x0, 0x50c4, 0x40, 0xfffffffe, 0x8000170}) close_range(r0, r0, 0x0) r1 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 1.834253452s ago: executing program 0 (id=2304): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) 1.667135624s ago: executing program 0 (id=2305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1}, 0x0) 1.66398003s ago: executing program 5 (id=2306): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000003c0)) 1.43412145s ago: executing program 0 (id=2307): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.327610434s ago: executing program 1 (id=2308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.215280581s ago: executing program 1 (id=2309): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 348.867549ms ago: executing program 1 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000960000000e00000200060000000000000000", @ANYRES32=0x0, @ANYBLOB='T2\t\x00\b'], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 162.472615ms ago: executing program 1 (id=2312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="ebe3a0e9796cfd1657e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f000000006cb55b5bb9fa693566c46098ed88dd2a063926b360fbb37b4fe035bbb09587860f52a24dbf12c1942330", 0x57}, {&(0x7f0000000a80)="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", 0x159}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000006800)=""/4096, 0x1000}], 0x3}, 0x2000) 19.856267ms ago: executing program 1 (id=2313): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 0s ago: executing program 0 (id=2314): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) kernel console output (not intermixed with test programs): : USB disconnect, device number 23 [ 238.760068][ T5955] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 238.908046][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 238.937552][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 238.954249][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.001660][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.051099][ T5955] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 239.080465][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.103361][ T5955] usb 1-1: config 0 descriptor?? [ 239.118204][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 239.133961][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.145921][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 239.156435][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.189503][ T43] usb 2-1: config 0 descriptor?? [ 239.573976][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x2 [ 239.624270][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x0 [ 239.640130][ T43] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 239.652659][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x0 [ 239.679844][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x0 [ 239.698296][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x0 [ 239.705335][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x0 [ 239.730649][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x0 [ 239.748640][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x0 [ 239.783669][ T5955] cherry 0003:046A:0027.0027: unknown main item tag 0x0 [ 239.828196][ T5955] cherry 0003:046A:0027.0027: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.0-1/input0 [ 239.907892][ T5955] usb 1-1: USB disconnect, device number 19 [ 239.911245][ T8871] i2c i2c-1: unsupported multi-msg i2c transaction [ 239.990347][ T43] usb 2-1: USB disconnect, device number 29 [ 240.084601][ T8898] fido_id[8898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 241.081257][ T8923] input: syz0 as /devices/virtual/input/input34 [ 242.020596][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 242.096457][ T8955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.387649][ T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 242.573757][ T43] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 242.645510][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.668891][ T43] usb 5-1: Product: syz [ 242.673481][ T43] usb 5-1: Manufacturer: syz [ 242.678853][ T43] usb 5-1: SerialNumber: syz [ 242.722831][ T43] usb 5-1: config 0 descriptor?? [ 242.939468][ T5842] Bluetooth: hci0: unknown advertising packet type: 0x17 [ 242.939532][ T5842] Bluetooth: hci0: Dropping invalid advertising data [ 242.960500][ T5842] Bluetooth: hci0: Malformed LE Event: 0x02 [ 242.972726][ T43] usb-storage 5-1:0.0: USB Mass Storage device detected [ 243.118409][ T5978] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 243.129051][ T43] usb 5-1: USB disconnect, device number 24 [ 243.327161][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 243.344834][ T5978] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 243.360188][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.376304][ T5978] usb 2-1: config 0 descriptor?? [ 243.383875][ T8974] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 243.832936][ T5978] elan 0003:04F3:0755.0029: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 243.867802][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 244.027564][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 244.034492][ T8974] elan 0003:04F3:0755.0029: pid 8974 passed too short report [ 244.050307][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.068709][ T24] usb 2-1: USB disconnect, device number 30 [ 244.088462][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.108104][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.120506][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.127628][ T982] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 244.129100][ T43] usb 5-1: Product: syz [ 244.141801][ T43] usb 5-1: Manufacturer: syz [ 244.146454][ T43] usb 5-1: SerialNumber: syz [ 244.307721][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 244.315662][ T982] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 244.337630][ T982] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.347709][ T982] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 244.367755][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.401361][ T982] usb 4-1: config 0 descriptor?? [ 244.589759][ T43] usb 5-1: 0:2 : does not exist [ 244.754387][ T9017] tap0: tun_chr_ioctl cmd 1074025675 [ 244.770047][ T9017] tap0: persist enabled [ 244.781237][ T9017] tap0: tun_chr_ioctl cmd 1074025675 [ 244.797293][ T9017] tap0: persist enabled [ 244.944091][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 244.954249][ T9026] bond0: Unable to set down delay as MII monitoring is disabled [ 245.009549][ T43] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 245.076018][ T43] usb 5-1: USB disconnect, device number 25 [ 245.125672][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.175211][ T982] hid_parser_main: 49 callbacks suppressed [ 245.175239][ T982] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 245.227139][ T982] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 245.246200][ T982] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 245.263031][ T982] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 245.276019][ T982] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 245.289934][ T982] corsair-cpro 0003:1B1C:0C10.002A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 245.348521][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 245.348539][ T30] audit: type=1326 audit(1765706239.018:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.385609][ T30] audit: type=1326 audit(1765706239.038:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.456435][ T30] audit: type=1326 audit(1765706239.048:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.498142][ T30] audit: type=1326 audit(1765706239.048:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.524784][ T30] audit: type=1326 audit(1765706239.048:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.525045][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 245.558400][ T30] audit: type=1326 audit(1765706239.078:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.595222][ T30] audit: type=1326 audit(1765706239.078:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.602929][ T9043] binder: 9042:9043 ioctl 4018620d 0 returned -22 [ 245.621772][ T30] audit: type=1326 audit(1765706239.078:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.648119][ T30] audit: type=1326 audit(1765706239.078:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.707175][ T982] corsair-cpro 0003:1B1C:0C10.002A: probe with driver corsair-cpro failed with error -110 [ 245.716876][ T30] audit: type=1326 audit(1765706239.088:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 245.772711][ T982] usb 4-1: USB disconnect, device number 19 [ 246.157549][ T982] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 246.321117][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 246.335495][ T982] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 246.353366][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.375801][ T982] usb 2-1: Product: syz [ 246.386978][ T982] usb 2-1: Manufacturer: syz [ 246.397307][ T982] usb 2-1: SerialNumber: syz [ 246.416056][ T982] usb 2-1: config 0 descriptor?? [ 246.447839][ T5955] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 246.521595][ T9069] TCP: TCP_TX_DELAY enabled [ 246.627604][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 246.651191][ T5955] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 246.679568][ T5955] usb 5-1: config 0 has no interface number 0 [ 246.690305][ T5955] usb 5-1: config 0 interface 12 has no altsetting 0 [ 246.701693][ T5955] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 246.727877][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.748276][ T5955] usb 5-1: Product: syz [ 246.752667][ T5955] usb 5-1: Manufacturer: syz [ 246.760752][ T5955] usb 5-1: SerialNumber: syz [ 246.789408][ T5955] usb 5-1: config 0 descriptor?? [ 246.849526][ T982] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 246.863061][ T982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.889346][ T982] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 246.925537][ T982] usb 2-1: media controller created [ 246.963574][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.147613][ T6193] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 247.307607][ T6193] usb 4-1: Using ep0 maxpacket: 32 [ 247.319771][ T6193] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 247.330160][ T6193] usb 4-1: config 0 has no interface number 0 [ 247.339997][ T6193] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.357762][ T6193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.366034][ T6193] usb 4-1: Product: syz [ 247.374394][ T6193] usb 4-1: Manufacturer: syz [ 247.380624][ T6193] usb 4-1: SerialNumber: syz [ 247.381312][ T9089] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1294'. [ 247.390762][ T6193] usb 4-1: config 0 descriptor?? [ 247.412191][ T6193] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.427699][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 247.528007][ T982] zl10353_read_register: readreg error (reg=127, ret==0) [ 247.545568][ T982] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 247.556396][ T982] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 247.587532][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 247.589748][ T982] usb 2-1: USB disconnect, device number 31 [ 247.605957][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 247.636195][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 247.648357][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.650021][ T6193] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 247.662941][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.686545][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.702113][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 247.714640][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 247.721034][ T982] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 247.742117][ T6193] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 247.762795][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.796644][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.825446][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.846113][ T5955] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 247.885856][ T5955] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 247.885963][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 247.905297][ T5955] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 247.933695][ T5955] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 247.937677][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 247.969585][ T5955] usb 5-1: USB disconnect, device number 26 [ 247.997581][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.028339][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.046991][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.063326][ T5896] usb 3-1: string descriptor 0 read error: -22 [ 248.071732][ T5896] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 248.082081][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.107906][ T5896] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 248.221688][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 248.222262][ T5896] usb 4-1: USB disconnect, device number 20 [ 248.271870][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 248.308966][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 248.340645][ T5896] quatech2 4-1:0.51: device disconnected [ 248.523374][ T982] usb 3-1: USB disconnect, device number 22 [ 248.557889][ T5955] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 248.721535][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.739490][ T5955] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.754927][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.779704][ T5955] usb 1-1: config 0 descriptor?? [ 248.795842][ T5955] pwc: Askey VC010 type 2 USB webcam detected. [ 249.228485][ T5955] pwc: recv_control_msg error -32 req 02 val 2b00 [ 249.241707][ T5955] pwc: recv_control_msg error -32 req 02 val 2700 [ 249.296588][ T9125] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1309'. [ 249.397200][ T9127] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 249.435742][ T9127] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 249.457614][ T5955] pwc: recv_control_msg error -71 req 04 val 1000 [ 249.471702][ T5955] pwc: recv_control_msg error -71 req 04 val 1300 [ 249.482612][ T5955] pwc: recv_control_msg error -71 req 04 val 1400 [ 249.491170][ T5955] pwc: recv_control_msg error -71 req 02 val 2000 [ 249.506006][ T5955] pwc: recv_control_msg error -71 req 02 val 2100 [ 249.524316][ T5955] pwc: recv_control_msg error -71 req 04 val 1500 [ 249.545530][ T5955] pwc: recv_control_msg error -71 req 02 val 2500 [ 249.557344][ T5955] pwc: recv_control_msg error -71 req 02 val 2400 [ 249.565779][ T5955] pwc: recv_control_msg error -71 req 02 val 2600 [ 249.592111][ T5955] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.602036][ T5955] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.613544][ T5955] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.624322][ T5955] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.659913][ T5955] pwc: Registered as video103. [ 249.675082][ T5955] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 249.724984][ T5955] usb 1-1: USB disconnect, device number 20 [ 251.389370][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 251.579994][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.614252][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.657586][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 251.694925][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.715189][ T9196] loop2: detected capacity change from 0 to 7 [ 251.724660][ T24] usb 1-1: config 0 descriptor?? [ 251.742832][ T9196] Dev loop2: unable to read RDB block 7 [ 251.754211][ T9196] loop2: unable to read partition table [ 251.769067][ T9196] loop2: partition table beyond EOD, truncated [ 251.780521][ T9196] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.997667][ T8505] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 252.172755][ T8505] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 252.183697][ T24] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 252.202004][ T8505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.222074][ T24] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 252.242628][ T8505] usb 2-1: config 0 descriptor?? [ 252.263845][ T8505] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 252.370615][ T24] cp2112 0003:10C4:EA90.002B: Part Number: 0x82 Device Version: 0xFE [ 252.692648][ T8505] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 252.778800][ T24] cp2112 0003:10C4:EA90.002B: error setting SMBus config [ 252.819257][ T24] cp2112 0003:10C4:EA90.002B: probe with driver cp2112 failed with error -71 [ 252.854044][ T24] usb 1-1: USB disconnect, device number 21 [ 252.888615][ T9218] input: syz1 as /devices/virtual/input/input36 [ 253.094561][ T8505] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 253.344133][ T8505] usb 2-1: USB disconnect, device number 32 [ 253.368212][ T9226] loop9: detected capacity change from 0 to 7 [ 254.160239][ T5955] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 254.237588][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 254.330256][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.345392][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.355810][ T5955] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 254.365470][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.380126][ T5955] usb 4-1: config 0 descriptor?? [ 254.432400][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 254.448027][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.456341][ T24] usb 2-1: Product: syz [ 254.467466][ T24] usb 2-1: Manufacturer: syz [ 254.472214][ T24] usb 2-1: SerialNumber: syz [ 254.499089][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 254.521207][ T5896] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.587645][ T43] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 254.760175][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.771086][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.785378][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.794705][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.800672][ T5955] cm6533_jd 0003:0D8C:0022.002C: unknown main item tag 0x0 [ 254.837654][ T5955] cm6533_jd 0003:0D8C:0022.002C: unknown main item tag 0x0 [ 254.853468][ T5955] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.002C/input/input37 [ 254.918871][ T5955] cm6533_jd 0003:0D8C:0022.002C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 254.937985][ T6193] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 255.042587][ T5955] usb 4-1: USB disconnect, device number 21 [ 255.044147][ T43] usb 5-1: usb_control_msg returned -32 [ 255.066470][ T43] usbtmc 5-1:16.0: can't read capabilities [ 255.110583][ T6193] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 255.122719][ T9247] fido_id[9247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 255.141696][ T6193] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 255.171477][ T6193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.188429][ T6193] usb 3-1: Product: syz [ 255.205784][ T6193] usb 3-1: Manufacturer: syz [ 255.217159][ T6193] usb 3-1: SerialNumber: syz [ 255.259632][ T6193] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 255.279376][ T43] usb 2-1: USB disconnect, device number 33 [ 255.430689][ T9254] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 255.651443][ T9260] capability: warning: `syz.0.1362' uses 32-bit capabilities (legacy support in use) [ 255.677360][ T9243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.689237][ T6193] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 255.721649][ T9243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.730345][ T6193] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 255.742118][ T6193] usb 3-1: media controller created [ 255.769080][ T5896] usb 2-1: Service connection timeout for: 256 [ 255.785492][ T5896] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 255.810483][ T5896] ath9k_htc: Failed to initialize the device [ 255.812473][ T6193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.829880][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 255.885463][ T9264] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1364'. [ 256.128352][ T6193] usb 3-1: USB disconnect, device number 23 [ 256.163021][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.169874][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.012424][ T9303] loop5: detected capacity change from 0 to 7 [ 257.029077][ T9303] Dev loop5: unable to read RDB block 7 [ 257.035060][ T9303] loop5: unable to read partition table [ 257.041918][ T9303] loop5: partition table beyond EOD, truncated [ 257.054385][ T9303] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 257.376519][ T6193] usb 5-1: USB disconnect, device number 27 [ 257.567935][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1385'. [ 257.762923][ T9326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.770354][ T9326] IPv6: NLM_F_CREATE should be set when creating new route [ 258.618965][ T9354] syzkaller1: entered promiscuous mode [ 258.646094][ T9354] syzkaller1: entered allmulticast mode [ 258.927549][ T24] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 259.094301][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.109602][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 259.135915][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 259.159365][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.189121][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.221988][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.235165][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.244384][ T24] usb 2-1: Product: syz [ 259.248987][ T24] usb 2-1: Manufacturer: syz [ 259.253708][ T24] usb 2-1: SerialNumber: syz [ 259.696257][ T24] usb 2-1: 0:2 : does not exist [ 259.756597][ T24] usb 2-1: USB disconnect, device number 34 [ 259.809033][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.234541][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 260.234564][ T30] audit: type=1326 audit(1765706253.898:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.1412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 260.388118][ T6193] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 260.548723][ T6193] usb 4-1: Using ep0 maxpacket: 32 [ 260.569346][ T6193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.584659][ T6193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.596739][ T6193] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.606620][ T6193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.620468][ T6193] usb 4-1: config 0 descriptor?? [ 260.641157][ T6193] hub 4-1:0.0: USB hub found [ 260.854178][ T6193] hub 4-1:0.0: 1 port detected [ 260.900210][ T30] audit: type=1326 audit(1765706254.558:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.1412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 261.060838][ T6193] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 261.080686][ T6193] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 261.108458][ T6193] usbhid 4-1:0.0: can't add hid device: -71 [ 261.124895][ T6193] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 261.168925][ T6193] usb 4-1: USB disconnect, device number 22 [ 261.259966][ T5955] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 261.433410][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.465202][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.496238][ T5955] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 261.516016][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.536220][ T5955] usb 2-1: config 0 descriptor?? [ 261.989233][ T5955] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 262.015134][ T5955] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 262.039530][ T5955] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.002D/input/input38 [ 262.098277][ T5955] cm6533_jd 0003:0D8C:0022.002D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 262.099760][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 262.294227][ T8505] usb 2-1: USB disconnect, device number 35 [ 262.341181][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 262.387592][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.418466][ T24] usb 1-1: config 0 descriptor?? [ 262.659065][ T24] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 262.859915][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 262.940671][ T24] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 262.967491][ T24] [drm] Initialized udl on minor 2 [ 263.008028][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.038889][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 263.068544][ T5978] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.090382][ T24] usb 1-1: USB disconnect, device number 22 [ 263.100554][ T5978] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 263.603015][ T9448] loop5: detected capacity change from 0 to 7 [ 263.611921][ T9448] Dev loop5: unable to read RDB block 7 [ 263.618708][ T9448] loop5: AHDI p3 [ 263.622746][ T9448] loop5: partition table partially beyond EOD, truncated [ 263.837632][ T5978] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 263.922260][ T9374] syz.4.1404 (9374): drop_caches: 3 [ 264.017899][ T5978] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.040349][ T5978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.065554][ T5978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.080755][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.099234][ T5978] usb 1-1: Product: syz [ 264.109445][ T5978] usb 1-1: Manufacturer: syz [ 264.118774][ T5978] usb 1-1: SerialNumber: syz [ 264.198156][ T9456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.205758][ T9456] IPv6: NLM_F_CREATE should be set when creating new route [ 264.369180][ T5978] usb 1-1: 0:2 : does not exist [ 264.403959][ T5978] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 264.475741][ T5978] usb 1-1: USB disconnect, device number 23 [ 264.590914][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.007535][ T5955] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 265.177531][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 265.183409][ T6193] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 265.200894][ T5955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.225050][ T5955] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 265.231667][ T9486] loop2: detected capacity change from 0 to 7 [ 265.235199][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.257355][ T9486] Dev loop2: unable to read RDB block 7 [ 265.264835][ T9486] loop2: unable to read partition table [ 265.279249][ T5955] usb 3-1: Product: syz [ 265.284750][ T9486] loop2: partition table beyond EOD, truncated [ 265.293095][ T5955] usb 3-1: Manufacturer: syz [ 265.301567][ T5955] usb 3-1: SerialNumber: syz [ 265.305000][ T9486] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 265.339182][ T5955] usb 3-1: config 0 descriptor?? [ 265.367594][ T6193] usb 4-1: Using ep0 maxpacket: 16 [ 265.384998][ T6193] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 265.415423][ T6193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.436245][ T9488] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 265.447645][ T6193] usb 4-1: Product: syz [ 265.452188][ T6193] usb 4-1: Manufacturer: syz [ 265.459749][ T6193] usb 4-1: SerialNumber: syz [ 265.469536][ T9490] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1456'. [ 265.476813][ T6193] usb 4-1: config 0 descriptor?? [ 265.789204][ T5955] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 265.928950][ T6193] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 265.960637][ T6193] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.987050][ T6193] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 266.001630][ T6193] usb 4-1: media controller created [ 266.044292][ T6193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.507151][ T5955] usb 3-1: USB disconnect, device number 24 [ 266.648703][ T6193] zl10353_read_register: readreg error (reg=127, ret==0) [ 266.678723][ T6193] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 266.713334][ T6193] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 266.765028][ T6193] usb 4-1: USB disconnect, device number 23 [ 266.906964][ T6193] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 268.579403][ T5955] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 268.771820][ T5955] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.837872][ T5955] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.910346][ T5955] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.971999][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.238125][ T5955] usb 5-1: GET_CAPABILITIES returned 0 [ 269.256101][ T5955] usbtmc 5-1:16.0: can't read capabilities [ 269.522523][ T5955] usb 5-1: USB disconnect, device number 28 [ 269.576511][ T9589] loop9: detected capacity change from 0 to 7 [ 269.616813][ T5995] Dev loop9: unable to read RDB block 7 [ 269.630513][ T5995] loop9: unable to read partition table [ 269.636993][ T5995] loop9: partition table beyond EOD, truncated [ 269.667590][ T9589] Dev loop9: unable to read RDB block 7 [ 269.686945][ T9589] loop9: unable to read partition table [ 269.694707][ T9589] loop9: partition table beyond EOD, truncated [ 269.730586][ T9589] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.882711][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1498'. [ 271.100427][ T9630] netlink: 212188 bytes leftover after parsing attributes in process `syz.4.1501'. [ 272.797717][ T43] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 272.967790][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 272.975830][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.997792][ T43] usb 3-1: config 0 has no interface number 0 [ 273.012020][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 273.027659][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.035803][ T43] usb 3-1: Product: syz [ 273.057473][ T43] usb 3-1: Manufacturer: syz [ 273.067583][ T43] usb 3-1: SerialNumber: syz [ 273.081213][ T43] usb 3-1: config 0 descriptor?? [ 273.100752][ T43] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 273.115985][ T43] usb 3-1: selecting invalid altsetting 1 [ 273.123412][ T43] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 273.136929][ T43] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 273.147630][ T6193] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 273.176598][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 273.186448][ T43] usb 3-1: media controller created [ 273.216806][ T30] audit: type=1326 audit(1765706266.878:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.3.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 273.266571][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.326774][ T6193] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.370851][ T6193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.397154][ T6193] usb 5-1: config 0 descriptor?? [ 273.566629][ T43] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 273.587531][ T43] zl10353_read_register: readreg error (reg=127, ret==-71) [ 273.595815][ T43] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 273.634513][ T6193] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 273.680612][ T43] usb 3-1: USB disconnect, device number 25 [ 273.844923][ T6193] [drm:udl_init] *ERROR* Selecting channel failed [ 273.868717][ T6193] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 273.878373][ T6193] [drm] Initialized udl on minor 2 [ 273.886483][ T6193] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.898832][ T6193] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 273.920359][ T982] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.941341][ T6193] usb 5-1: USB disconnect, device number 29 [ 273.953483][ T982] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 274.338154][ T43] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 274.512025][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.534094][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.555121][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.569997][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.596180][ T43] usb 2-1: Product: syz [ 274.608875][ T43] usb 2-1: Manufacturer: syz [ 274.617616][ T43] usb 2-1: SerialNumber: syz [ 274.799561][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 274.839496][ T9731] loop8: detected capacity change from 0 to 8 [ 274.852314][ T6281] Dev loop8: unable to read RDB block 8 [ 274.859342][ T43] usb 2-1: 0:2 : does not exist [ 274.867649][ T6281] loop8: unable to read partition table [ 274.881108][ T6281] loop8: partition table beyond EOD, truncated [ 274.892246][ T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 274.905038][ T9731] Dev loop8: unable to read RDB block 8 [ 274.928139][ T9731] loop8: unable to read partition table [ 274.943738][ T43] usb 2-1: USB disconnect, device number 36 [ 274.947814][ T9731] loop8: partition table beyond EOD, truncated [ 274.966775][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.980852][ T9731] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 275.006818][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 275.032189][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.058651][ T24] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 275.088330][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.096539][ T24] usb 5-1: Product: syz [ 275.129424][ T24] usb 5-1: Manufacturer: syz [ 275.135548][ T24] usb 5-1: SerialNumber: syz [ 275.158157][ T24] usb 5-1: config 0 descriptor?? [ 275.172408][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 275.205825][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.238517][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 275.255741][ T24] usb 5-1: media controller created [ 275.277038][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.379806][ T24] DVB: Unable to find symbol tda10046_attach() [ 275.386335][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 275.412730][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 276.256406][ T24] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 276.271129][ T24] usb 5-1: USB disconnect, device number 30 [ 276.297583][ T5978] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 276.457577][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 276.464533][ T5978] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 276.475355][ T5978] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 276.485013][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.493129][ T5978] usb 4-1: Product: syz [ 276.497529][ T5978] usb 4-1: Manufacturer: syz [ 276.502328][ T5978] usb 4-1: SerialNumber: syz [ 276.509741][ T5978] usb 4-1: config 0 descriptor?? [ 276.521976][ T5978] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 276.530429][ T5978] usb 4-1: setting power ON [ 276.535930][ T5978] dvb-usb: bulk message failed: -22 (2/0) [ 276.546082][ T5978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.556845][ T5978] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 276.573548][ T5978] usb 4-1: media controller created [ 276.598576][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.661826][ T5978] usb 4-1: selecting invalid altsetting 6 [ 276.669324][ T5978] usb 4-1: digital interface selection failed (-22) [ 276.676372][ T5978] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 276.689040][ T5978] usb 4-1: setting power OFF [ 276.693919][ T5978] dvb-usb: bulk message failed: -22 (2/0) [ 276.708986][ T5978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 276.723458][ T5978] (NULL device *): no alternate interface [ 276.806499][ T5978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 276.851775][ T5978] usb 4-1: USB disconnect, device number 24 [ 276.960494][ T6193] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 277.130062][ T6193] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.161032][ T6193] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.194635][ T6193] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.221589][ T6193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.247957][ T6193] usb 3-1: Product: syz [ 277.253112][ T6193] usb 3-1: Manufacturer: syz [ 277.266973][ T9792] input: syz1 as /devices/virtual/input/input39 [ 277.267726][ T6193] usb 3-1: SerialNumber: syz [ 277.293787][ T9792] input: failed to attach handler leds to device input39, error: -6 [ 277.527242][ T6193] usb 3-1: 0:2 : does not exist [ 277.532544][ T982] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 277.556693][ T6193] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 277.612976][ T6193] usb 3-1: USB disconnect, device number 26 [ 277.675140][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.717132][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.747020][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.759789][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.775331][ T982] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.788837][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.812932][ T982] usb 5-1: config 0 descriptor?? [ 278.261943][ T982] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 278.418037][ T6193] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 278.590369][ T6193] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.627529][ T6193] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 278.660241][ T6193] usb 1-1: config 1 has no interface number 0 [ 278.677949][ T6193] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.760560][ T6193] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 278.787084][ T6193] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.829721][ T6193] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.855830][ T6193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.888287][ T6193] usb 1-1: Product: syz [ 278.902460][ T6193] usb 1-1: Manufacturer: syz [ 278.913575][ T6193] usb 1-1: SerialNumber: syz [ 279.474893][ T8505] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 279.677715][ T8505] usb 2-1: Using ep0 maxpacket: 16 [ 279.693620][ T8505] usb 2-1: config 0 has no interfaces? [ 279.699612][ T8505] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 279.741670][ T8505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.753850][ T8505] usb 2-1: config 0 descriptor?? [ 279.800728][ T6193] cdc_ncm 1-1:1.1: bind() failure [ 280.009854][ T43] usb 1-1: USB disconnect, device number 24 [ 280.034584][ T6193] usb 2-1: USB disconnect, device number 37 [ 280.309235][ T982] usb 5-1: USB disconnect, device number 31 [ 280.510996][ T5955] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 280.689182][ T5955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.702622][ T5955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.725848][ T5955] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.746592][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.766642][ T5955] usb 3-1: Product: syz [ 280.780063][ T5955] usb 3-1: Manufacturer: syz [ 280.784980][ T5955] usb 3-1: SerialNumber: syz [ 280.817518][ T982] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 280.990300][ T982] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 281.142275][ T982] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.153610][ T5955] usb 3-1: 0:2 : does not exist [ 281.168064][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.182334][ T982] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.191988][ T982] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.201628][ T982] usb 5-1: Product: syz [ 281.206245][ T982] usb 5-1: Manufacturer: syz [ 281.211501][ T982] usb 5-1: SerialNumber: syz [ 281.219550][ T5955] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 281.240069][ T982] usb 5-1: config 0 descriptor?? [ 281.281566][ T982] hub 5-1:0.0: bad descriptor, ignoring hub [ 281.291205][ T5955] usb 3-1: USB disconnect, device number 27 [ 281.302870][ T982] hub 5-1:0.0: probe with driver hub failed with error -5 [ 281.333847][ T982] usb 5-1: selecting invalid altsetting 0 [ 281.395671][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.008314][ T9847] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 282.034512][ T9865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1606'. [ 282.059394][ T9847] usb 5-1: device reset changed ep0 maxpacket size! [ 282.083488][ T5955] usb 5-1: USB disconnect, device number 32 [ 282.297566][ T5955] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 282.479713][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 282.489402][ T5955] usb 5-1: config 0 has no interfaces? [ 282.525625][ T5955] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 282.571579][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.597567][ T5955] usb 5-1: Product: syz [ 282.607709][ T5955] usb 5-1: Manufacturer: syz [ 282.627540][ T5955] usb 5-1: SerialNumber: syz [ 282.642160][ T5955] usb 5-1: config 0 descriptor?? [ 282.878136][ T5955] usb 5-1: USB disconnect, device number 33 [ 284.989880][ T30] audit: type=1326 audit(1765706278.658:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1633" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54539 code=0x0 [ 285.070653][ T9935] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 285.079573][ T9935] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1635'. [ 285.462074][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1637'. [ 285.487783][ T5948] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 285.658354][ T5948] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 285.675448][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.717644][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.747651][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.756430][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.779646][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.803890][ T9833] Set syz1 is full, maxelem 65536 reached [ 285.810831][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.838991][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.867189][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.898261][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.915618][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.953694][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.998021][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.006560][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.024015][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.045388][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.057776][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.067560][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.085703][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.099972][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.110757][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.126148][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.140042][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.152349][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.179854][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.202210][ T5948] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 286.212702][ T5948] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 286.226781][ T5948] usb 3-1: Product: syz [ 286.231548][ T5948] usb 3-1: Manufacturer: syz [ 286.237014][ T5948] usb 3-1: SerialNumber: syz [ 286.245706][ T5948] usb 3-1: config 0 descriptor?? [ 286.278054][ T5948] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 286.462341][ T9962] syz.4.1646 (9962): drop_caches: 4 [ 286.571633][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 286.581284][ T5948] usb 3-1: USB disconnect, device number 28 [ 286.603597][ T5948] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 286.837553][ T982] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 286.897539][ T5978] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 287.007502][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 287.020671][ T982] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.037643][ T982] usb 2-1: config 0 has no interface number 0 [ 287.060426][ T982] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 287.077570][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 287.085885][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.097003][ T5978] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 287.105904][ T982] usb 2-1: Product: syz [ 287.114230][ T982] usb 2-1: Manufacturer: syz [ 287.120760][ T982] usb 2-1: SerialNumber: syz [ 287.130820][ T5978] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 287.143936][ T982] usb 2-1: config 0 descriptor?? [ 287.155856][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.164536][ T5978] usb 5-1: Product: syz [ 287.175644][ T5978] usb 5-1: Manufacturer: syz [ 287.183145][ T5978] usb 5-1: SerialNumber: syz [ 287.185585][ T982] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 287.218086][ T5978] usb 5-1: config 0 descriptor?? [ 287.231775][ T982] usb 2-1: selecting invalid altsetting 1 [ 287.238462][ T5978] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 287.253204][ T982] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 287.257703][ T5978] usb 5-1: setting power ON [ 287.267202][ T5978] dvb-usb: bulk message failed: -22 (2/0) [ 287.293008][ T982] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.305976][ T5978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.327944][ T5978] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 287.345233][ T5978] usb 5-1: media controller created [ 287.366086][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.493306][ T5978] usb 5-1: selecting invalid altsetting 6 [ 287.497456][ T982] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 287.530883][ T5978] usb 5-1: digital interface selection failed (-22) [ 287.537511][ T982] usb 2-1: media controller created [ 287.567586][ T5978] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 287.603851][ T5978] usb 5-1: setting power OFF [ 287.610208][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.619512][ T5978] dvb-usb: bulk message failed: -22 (2/0) [ 287.642714][ T5978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 287.683987][ T5978] (NULL device *): no alternate interface [ 287.690059][ T9987] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1658'. [ 287.708602][ T982] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 287.739331][ T9987] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1658'. [ 287.753472][ T982] zl10353_read_register: readreg error (reg=127, ret==-32) [ 287.761088][ T9987] netlink: 'syz.3.1658': attribute type 6 has an invalid length. [ 287.786525][ T9987] netlink: 'syz.3.1658': attribute type 5 has an invalid length. [ 287.786726][ T982] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 287.806035][ T9987] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1658'. [ 287.809242][ T5978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 287.871288][ T5978] usb 5-1: USB disconnect, device number 34 [ 287.963656][ T982] usb 2-1: USB disconnect, device number 38 [ 289.070903][ T30] audit: type=1326 audit(1765706282.738:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 289.274870][ T30] audit: type=1326 audit(1765706282.768:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 289.368746][ T30] audit: type=1326 audit(1765706282.768:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 289.455450][ T30] audit: type=1326 audit(1765706282.768:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 289.539823][ T30] audit: type=1326 audit(1765706282.768:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 289.629963][ T30] audit: type=1326 audit(1765706282.768:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 289.729045][ T30] audit: type=1326 audit(1765706282.768:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 289.823403][ T30] audit: type=1326 audit(1765706282.768:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 289.915926][ T30] audit: type=1326 audit(1765706282.778:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 289.927659][ T5948] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 290.005196][ T30] audit: type=1326 audit(1765706282.778:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 290.067481][ T30] audit: type=1326 audit(1765706282.778:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 290.151384][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 290.168799][ T5948] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.187522][ T30] audit: type=1326 audit(1765706282.778:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 290.197523][ T5948] usb 1-1: config 0 has no interface number 0 [ 290.273334][ T5948] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 290.307600][ T30] audit: type=1326 audit(1765706282.778:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 290.312009][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.388832][ T5948] usb 1-1: Product: syz [ 290.393796][ T5948] usb 1-1: Manufacturer: syz [ 290.404098][ T5948] usb 1-1: SerialNumber: syz [ 290.416666][ T30] audit: type=1326 audit(1765706282.778:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 290.427975][ T5948] usb 1-1: config 0 descriptor?? [ 290.471583][ T5948] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 290.487014][ T5948] usb 1-1: selecting invalid altsetting 1 [ 290.499166][ T5948] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 290.518936][ T5948] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 290.521958][ T30] audit: type=1326 audit(1765706282.778:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 290.575850][ T5948] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 290.612644][ T5948] usb 1-1: media controller created [ 290.681662][ T30] audit: type=1326 audit(1765706282.828:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 290.688911][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.792587][ T30] audit: type=1326 audit(1765706282.828:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 290.870641][ T5948] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 290.887737][ T5948] zl10353_read_register: readreg error (reg=127, ret==-32) [ 290.907216][ T30] audit: type=1326 audit(1765706282.828:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 290.907790][ T5948] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 290.998885][ T30] audit: type=1326 audit(1765706282.828:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 291.266626][ T5948] usb 1-1: USB disconnect, device number 25 [ 291.717553][ T5948] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 291.831210][T10073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1696'. [ 291.856053][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1696'. [ 291.897935][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 291.910027][ T5948] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 291.926201][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.963943][ T5948] usb 3-1: Product: syz [ 291.969789][ T5948] usb 3-1: Manufacturer: syz [ 291.986484][ T5948] usb 3-1: SerialNumber: syz [ 292.021159][ T5948] usb 3-1: config 0 descriptor?? [ 292.043007][ T5948] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 292.410634][T10091] syzkaller1: entered promiscuous mode [ 292.427728][T10091] syzkaller1: entered allmulticast mode [ 292.471374][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 292.628467][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 292.667908][ T5978] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 292.680500][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 292.711766][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.728612][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.747502][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.761582][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.780344][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.791711][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.866413][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 292.889347][ T5978] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 292.911768][ T5978] usb 1-1: config 0 has no interface number 0 [ 292.921076][ T5978] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.933354][ T5978] usb 1-1: config 0 interface 85 has no altsetting 0 [ 292.945521][ T5978] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 292.956937][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.968716][ T5978] usb 1-1: Product: syz [ 292.974875][ T5978] usb 1-1: Manufacturer: syz [ 292.994808][ T5978] usb 1-1: SerialNumber: syz [ 293.008263][ T5978] usb 1-1: config 0 descriptor?? [ 293.016138][ T43] usb 4-1: usb_control_msg returned -32 [ 293.030570][T10101] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1710'. [ 293.030696][ T43] usbtmc 4-1:16.0: can't read capabilities [ 293.046269][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 293.086389][ T5948] usb 3-1: USB disconnect, device number 29 [ 293.306630][T10109] input: syz1 as /devices/virtual/input/input41 [ 293.646054][ T982] usb 4-1: USB disconnect, device number 25 [ 293.669896][ T5978] appletouch 1-1:0.85: Geyser mode initialized. [ 293.709384][ T5978] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input40 [ 293.959909][ T5978] usb 1-1: USB disconnect, device number 26 [ 294.039683][ T5978] appletouch 1-1:0.85: input: appletouch disconnected [ 294.588234][ T982] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 294.768007][ T982] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.799825][ T982] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 294.820005][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.832550][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.846712][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.864555][ T982] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.875567][ T982] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.884849][ T982] usb 4-1: Product: syz [ 294.890636][ T982] usb 4-1: Manufacturer: syz [ 294.908401][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 294.914561][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 294.922973][ T982] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 294.930032][ T982] cdc_wdm 4-1:1.0: Unknown control protocol [ 294.957616][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 295.129112][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 295.129132][ T30] audit: type=1326 audit(1765706288.798:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7fc00000 [ 295.200496][ T43] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 295.211824][ T43] usb 1-1: config 0 has no interface number 0 [ 295.224978][ T43] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 295.239062][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.249730][ T43] usb 1-1: Product: syz [ 295.254362][ T43] usb 1-1: Manufacturer: syz [ 295.259858][ T43] usb 1-1: SerialNumber: syz [ 295.278896][ T43] usb 1-1: config 0 descriptor?? [ 295.292447][ T43] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 295.342049][ T43] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 295.598068][ T5978] usb 1-1: USB disconnect, device number 27 [ 295.800517][ T43] usb 4-1: USB disconnect, device number 26 [ 295.859528][ T30] audit: type=1326 audit(1765706289.528:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7fc00000 [ 296.627560][ T982] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 296.817509][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 296.847896][ T5978] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 296.862370][ T982] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 296.892568][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 296.940767][ T982] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.987709][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.017949][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 297.042628][ T5978] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 297.048118][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.093440][ T5978] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 297.111582][ T982] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 297.145177][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 297.187782][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 297.211630][ T5978] usb 1-1: Product: syz [ 297.230424][ T5978] usb 1-1: Manufacturer: syz [ 297.242425][ T5978] usb 1-1: SerialNumber: syz [ 297.261481][ T5978] usb 1-1: config 0 descriptor?? [ 297.267493][ T982] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.297974][T10188] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.307484][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.366083][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.416478][ T982] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 297.447724][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 297.489723][ T982] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.540712][ T6193] usb 1-1: USB disconnect, device number 28 [ 297.552672][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.598289][ T982] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.654206][ T982] usb 2-1: string descriptor 0 read error: -22 [ 297.668046][ T982] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 297.699905][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.793866][ T982] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 298.161549][ T982] usb 2-1: USB disconnect, device number 39 [ 298.384134][T10184] adutux: No device or device unplugged -19 [ 298.810888][T10235] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 298.821553][T10235] syzkaller1: Refused to change device type [ 299.488215][ T982] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 299.613071][T10276] loop6: detected capacity change from 0 to 2640 [ 299.647882][T10276] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.678304][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 299.718674][ T982] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 299.778717][T10291] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.795505][ T982] usb 4-1: config 0 has no interface number 0 [ 299.818385][T10279] syzkaller1: entered promiscuous mode [ 299.827534][ T982] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.842307][T10279] syzkaller1: entered allmulticast mode [ 299.937492][T10276] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.975591][T10291] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.996810][ T982] usb 4-1: config 0 interface 85 has no altsetting 0 [ 300.017095][ T982] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 300.030729][T10291] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.040180][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.051901][ T982] usb 4-1: Product: syz [ 300.056948][ T982] usb 4-1: Manufacturer: syz [ 300.064947][T10276] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.065323][ T982] usb 4-1: SerialNumber: syz [ 300.108348][ T982] usb 4-1: config 0 descriptor?? [ 300.116773][T10276] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.147129][T10276] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.203546][T10291] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.221557][T10291] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.237727][T10276] ldm_validate_partition_table(): Disk read failed. [ 300.244970][T10276] Dev loop6: unable to read RDB block 0 [ 300.265506][T10276] loop6: unable to read partition table [ 300.272406][T10276] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 300.511485][ T5198] ldm_validate_partition_table(): Disk read failed. [ 300.525026][ T5198] Dev loop6: unable to read RDB block 0 [ 300.531507][ T5198] loop6: unable to read partition table [ 300.582260][T10305] netlink: 'syz.4.1788': attribute type 1 has an invalid length. [ 300.734149][T10305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.773238][ T982] appletouch 4-1:0.85: Geyser mode initialized. [ 300.791548][ T982] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input42 [ 300.840365][T10309] bond1: (slave ip6erspan0): making interface the new active one [ 300.881203][T10309] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 300.978534][ T6193] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 301.138814][ T982] usb 4-1: USB disconnect, device number 27 [ 301.167502][ T6193] usb 2-1: Using ep0 maxpacket: 32 [ 301.185503][ T982] appletouch 4-1:0.85: input: appletouch disconnected [ 301.209287][ T6193] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 301.234553][ T6193] usb 2-1: config 0 has no interface number 0 [ 301.249917][ T6193] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 301.262679][ T6193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.272141][T10317] netlink: 'syz.4.1793': attribute type 11 has an invalid length. [ 301.282907][ T6193] usb 2-1: Product: syz [ 301.287150][ T6193] usb 2-1: Manufacturer: syz [ 301.316959][ T6193] usb 2-1: SerialNumber: syz [ 301.346386][ T6193] usb 2-1: config 0 descriptor?? [ 301.355695][ T6193] smsc95xx v2.0.0 [ 301.785565][ T6193] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 301.826283][ T6193] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 302.451783][ T6193] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 302.495221][ T6193] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 302.519872][ T6193] usb 2-1: USB disconnect, device number 40 [ 302.602903][ T30] audit: type=1326 audit(1765706296.258:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 302.691150][ T30] audit: type=1326 audit(1765706296.268:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 302.783334][ T30] audit: type=1326 audit(1765706296.268:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 302.836119][T10348] vivid-002: disconnect [ 302.854515][T10348] vivid-002: reconnect [ 302.867615][ T30] audit: type=1326 audit(1765706296.268:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.3.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 303.200338][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1811'. [ 303.781597][T10371] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 303.809485][T10371] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1817'. [ 303.873922][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.467873][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 304.634322][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 304.653757][ T43] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 304.674286][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.698191][ T43] usb 1-1: Product: syz [ 304.702947][ T43] usb 1-1: Manufacturer: syz [ 304.735706][ T43] usb 1-1: SerialNumber: syz [ 304.764578][ T43] usb 1-1: config 0 descriptor?? [ 305.090249][ T43] usb 1-1: USB disconnect, device number 29 [ 306.138235][ T30] audit: type=1326 audit(1765706299.798:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.1.1846" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66539 code=0x0 [ 306.507595][ T5978] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 306.670254][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 306.685423][ T5978] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 306.694742][ T43] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 306.707792][ T5978] usb 3-1: config 0 has no interface number 0 [ 306.714182][ T5978] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.748004][ T5978] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 306.770060][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.796941][ T5978] usb 3-1: Product: syz [ 306.814683][ T5978] usb 3-1: Manufacturer: syz [ 306.832904][ T5978] usb 3-1: SerialNumber: syz [ 306.866465][ T5978] usb 3-1: config 0 descriptor?? [ 306.887953][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 306.901564][ T43] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 306.925383][ T5978] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 306.954219][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.974291][ T5978] em28xx 3-1:0.132: Video interface 132 found: [ 306.986118][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.011365][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.039720][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.063739][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.099240][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.124726][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.159150][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.179333][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 307.200916][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 307.216315][ T43] usb 1-1: SerialNumber: syz [ 307.248319][ T43] usb 1-1: config 0 descriptor?? [ 307.273305][ T43] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 307.340094][ T5978] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 307.397374][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1858'. [ 307.496690][ T5183] bcm5974 1-1:0.0: could not read from device [ 307.534651][ T5183] bcm5974 1-1:0.0: could not read from device [ 307.563854][ T43] usb 1-1: USB disconnect, device number 30 [ 307.570655][ T5978] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 307.592398][ T5978] em28xx 3-1:0.132: board has no eeprom [ 307.662691][ T5978] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 307.691316][ T5978] em28xx 3-1:0.132: analog set to bulk mode. [ 307.718345][ T5896] em28xx 3-1:0.132: Registering V4L2 extension [ 307.768625][ T5978] usb 3-1: USB disconnect, device number 30 [ 307.791998][ T5978] em28xx 3-1:0.132: Disconnecting em28xx [ 308.052403][ T5896] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 308.072058][ T5896] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 308.084648][ T5896] em28xx 3-1:0.132: No AC97 audio processor [ 308.124011][ T5896] usb 3-1: Decoder not found [ 308.134540][ T5896] em28xx 3-1:0.132: failed to create media graph [ 308.149916][ T5896] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 308.239167][ T5896] em28xx 3-1:0.132: Remote control support is not available for this card. [ 308.269412][ T5978] em28xx 3-1:0.132: Closing input extension [ 308.362742][ T5978] em28xx 3-1:0.132: Freeing device [ 308.532144][T10496] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 308.537565][ T8505] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 308.560804][T10496] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 308.570916][T10496] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 308.584795][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 308.795647][ T8505] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 308.820763][T10505] random: crng reseeded on system resumption [ 308.825268][ T8505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.849656][ T8505] usb 1-1: Product: syz [ 308.854464][ T8505] usb 1-1: Manufacturer: syz [ 308.860424][ T8505] usb 1-1: SerialNumber: syz [ 308.887283][ T8505] usb 1-1: config 0 descriptor?? [ 308.921788][T10505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 308.945077][T10505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 308.969591][T10505] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 309.147679][ T8505] usb 1-1: ignoring: probably an ADSL modem [ 309.544632][ T8505] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 309.821059][T10539] netlink: 'syz.1.1888': attribute type 9 has an invalid length. [ 309.839625][ T10] usb 1-1: USB disconnect, device number 31 [ 309.862192][T10539] netlink: 'syz.1.1888': attribute type 11 has an invalid length. [ 309.889160][T10539] netlink: 'syz.1.1888': attribute type 12 has an invalid length. [ 309.904220][T10539] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1888'. [ 309.925492][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 310.072341][T10548] netlink: 'syz.1.1892': attribute type 10 has an invalid length. [ 310.267951][ T8505] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 310.445285][ T8505] usb 4-1: Using ep0 maxpacket: 32 [ 310.464367][ T8505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.489954][ T8505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.504996][ T8505] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 310.516644][ T8505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.531142][ T8505] usb 4-1: config 0 descriptor?? [ 310.727703][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 310.912420][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 310.922535][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.931233][ T10] usb 1-1: Product: syz [ 310.935531][ T10] usb 1-1: Manufacturer: syz [ 310.942421][ T10] usb 1-1: SerialNumber: syz [ 310.958252][ T10] usb 1-1: config 0 descriptor?? [ 310.976634][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 310.984192][ T8505] savu 0003:1E7D:2D5A.002F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 311.002218][ T5948] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 311.184689][ T5948] usb 5-1: config 1 interface 0 has no altsetting 0 [ 311.201633][ T5948] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 311.230906][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.245831][ T5948] usb 5-1: Product: syz [ 311.252709][ T5978] usb 4-1: USB disconnect, device number 28 [ 311.257474][ T5948] usb 5-1: Manufacturer: syz [ 311.263894][ T5948] usb 5-1: SerialNumber: syz [ 311.408155][T10574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1904'. [ 311.418123][T10574] netlink: 'syz.2.1904': attribute type 7 has an invalid length. [ 311.426087][T10574] netlink: 'syz.2.1904': attribute type 8 has an invalid length. [ 311.435097][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 311.751291][ T5948] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 312.007102][ T10] gspca_sunplus: reg_r err -71 [ 312.020088][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 312.057797][ T10] usb 1-1: USB disconnect, device number 32 [ 312.222704][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1912'. [ 312.704165][T10609] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 312.897548][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 313.070603][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.091533][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.113401][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.146564][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.178683][T10607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 313.214919][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.455333][ T5896] usb 2-1: USB disconnect, device number 41 [ 313.823557][ T5896] usb 5-1: USB disconnect, device number 35 [ 313.852449][ T5896] usblp0: removed [ 314.767766][ T982] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 314.947530][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 314.971032][ T982] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 314.997848][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.022918][ T982] usb 5-1: Product: syz [ 315.034977][ T982] usb 5-1: Manufacturer: syz [ 315.044654][ T982] usb 5-1: SerialNumber: syz [ 315.059464][ T982] usb 5-1: config 0 descriptor?? [ 315.322607][ T982] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 315.975342][T10669] loop8: detected capacity change from 0 to 79 [ 316.169013][T10669] loop8: detected capacity change from 79 to 78 [ 316.330303][ T982] gspca_sunplus: reg_w_riv err -71 [ 316.349331][ T982] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 316.384604][ T982] usb 5-1: USB disconnect, device number 36 [ 316.782523][ T30] audit: type=1326 audit(1765706310.448:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 316.790557][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 316.838166][T10690] netlink: 'syz.0.1950': attribute type 15 has an invalid length. [ 316.846952][T10690] netlink: 'syz.0.1950': attribute type 18 has an invalid length. [ 316.859915][T10692] netlink: 'syz.1.1951': attribute type 9 has an invalid length. [ 316.888150][T10692] netlink: 'syz.1.1951': attribute type 11 has an invalid length. [ 316.896295][T10692] netlink: 'syz.1.1951': attribute type 12 has an invalid length. [ 316.949424][T10690] vxlan0: entered promiscuous mode [ 316.959713][T10692] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1951'. [ 316.970945][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 317.000356][ T243] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.036351][ T243] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.076202][ T243] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.106040][ T243] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.503822][ T30] audit: type=1326 audit(1765706311.168:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7fc00000 [ 317.604357][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.613848][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.168001][ T8505] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 318.399342][ T8505] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 318.417455][ T8505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.425600][ T8505] usb 2-1: Product: syz [ 318.440463][ T8505] usb 2-1: Manufacturer: syz [ 318.445584][ T8505] usb 2-1: SerialNumber: syz [ 318.473829][ T8505] usb 2-1: config 0 descriptor?? [ 318.495711][ T8505] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 042 [ 318.897914][ T8505] (null): failure reading functionality [ 318.923580][ T8505] i2c i2c-2: connected i2c-tiny-usb device [ 319.161814][ T10] usb 2-1: USB disconnect, device number 42 [ 320.037716][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 320.097538][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 320.197480][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 320.205088][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 320.214842][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.236553][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.246906][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.259304][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.273044][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 320.280054][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.284121][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 320.317910][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.329450][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 320.357723][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 320.377165][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.386842][ T43] usb 3-1: Product: syz [ 320.398438][ T43] usb 3-1: Manufacturer: syz [ 320.403101][ T43] usb 3-1: SerialNumber: syz [ 320.424012][ T43] usb 3-1: config 0 descriptor?? [ 320.575775][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 320.588782][ T10] usbtmc 4-1:16.0: can't read capabilities [ 320.853975][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 320.891376][ T43] usb 3-1: USB disconnect, device number 31 [ 320.921769][T10755] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 320.922077][ T10] usb 4-1: USB disconnect, device number 29 [ 320.950098][T10777] usb 4-1: usbtmc_ioctl_clear_in_halt returned -19 [ 321.323183][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1993'. [ 321.341853][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1993'. [ 321.563080][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.573154][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.582100][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.591548][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.601667][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.660013][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 321.735340][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 322.593490][T10795] chnl_net:caif_netlink_parms(): no params data found [ 322.811173][T10823] netlink: 'syz.2.2007': attribute type 9 has an invalid length. [ 322.864205][T10823] netlink: 'syz.2.2007': attribute type 11 has an invalid length. [ 322.929261][T10823] netlink: 'syz.2.2007': attribute type 12 has an invalid length. [ 322.958256][T10823] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2007'. [ 323.012931][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 323.149854][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.188998][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.196720][T10795] bridge_slave_0: entered allmulticast mode [ 323.320549][T10795] bridge_slave_0: entered promiscuous mode [ 323.349367][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.367736][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.401894][T10795] bridge_slave_1: entered allmulticast mode [ 323.432690][T10795] bridge_slave_1: entered promiscuous mode [ 323.651328][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.683437][ T5842] Bluetooth: hci0: command tx timeout [ 323.702199][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.834385][T10795] team0: Port device team_slave_0 added [ 323.845607][T10795] team0: Port device team_slave_1 added [ 323.963369][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.967492][ T5978] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 323.988343][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.060491][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.094724][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.126923][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.150696][ T5978] usb 3-1: Using ep0 maxpacket: 16 [ 324.197482][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.201535][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.237160][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.294003][ T5978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.341566][ T5978] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 324.373394][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.402625][ T5978] usb 3-1: config 0 descriptor?? [ 324.414459][T10795] hsr_slave_0: entered promiscuous mode [ 324.433469][T10795] hsr_slave_1: entered promiscuous mode [ 324.462705][T10795] debugfs: 'hsr0' already exists in 'hsr' [ 324.486553][T10795] Cannot create hsr debugfs directory [ 324.816219][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 324.834776][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 324.903446][ T5978] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0030/input/input44 [ 324.985124][ T5978] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 325.253464][T10795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.281895][T10795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.319480][T10795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.350280][T10795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.563523][T10795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.629891][T10795] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.656426][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.663993][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.700943][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.708334][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.760804][ T5842] Bluetooth: hci0: command tx timeout [ 325.854465][T10795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.960224][T10795] veth0_vlan: entered promiscuous mode [ 325.981678][T10795] veth1_vlan: entered promiscuous mode [ 326.043861][T10795] veth0_macvtap: entered promiscuous mode [ 326.058060][T10795] veth1_macvtap: entered promiscuous mode [ 326.089258][T10795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.111235][T10795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.135238][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.149280][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.164378][ T1105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.192405][ T1105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.386091][ T243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.405045][ T243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.483639][ T6131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.504659][ T6131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.747946][ T43] usb 3-1: USB disconnect, device number 32 [ 327.077545][ T5948] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 327.238169][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 327.247183][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.260680][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.271731][ T5948] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.288107][ T5948] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.298358][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.310966][ T5948] usb 6-1: config 0 descriptor?? [ 327.615627][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 327.657290][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 327.756633][ T5948] HID 045e:07da: Invalid code 65791 type 1 [ 327.800585][ T5948] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0031/input/input45 [ 327.825452][T10940] input: syz0 as /devices/virtual/input/input46 [ 327.844407][ T5842] Bluetooth: hci0: command tx timeout [ 327.916145][ T5948] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 327.956147][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 327.996485][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 328.031467][ T5948] usb 6-1: USB disconnect, device number 2 [ 328.059695][T10942] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2054'. [ 328.080115][T10942] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2054'. [ 328.169501][ T43] hid-generic 0000:0003:0001.0032: unknown main item tag 0x0 [ 328.180247][ T43] hid-generic 0000:0003:0001.0032: unknown main item tag 0x0 [ 328.196153][T10943] fido_id[10943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 328.247987][ T43] hid-generic 0000:0003:0001.0032: hidraw0: HID v0.03 Device [syz0] on syz1 [ 328.462085][T10953] fido_id[10953]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 329.018894][T10970] netlink: 'syz.3.2065': attribute type 10 has an invalid length. [ 329.166137][ T6994] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 329.337487][ T6994] usb 6-1: Using ep0 maxpacket: 32 [ 329.345221][ T6994] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 329.368921][ T6994] usb 6-1: config 0 has no interface number 0 [ 329.394769][ T6994] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.540152][ T6994] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 329.550650][ T6994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.580054][ T6994] usb 6-1: Product: syz [ 329.597478][ T6994] usb 6-1: Manufacturer: syz [ 329.607546][ T6994] usb 6-1: SerialNumber: syz [ 329.639376][ T6994] usb 6-1: config 0 descriptor?? [ 329.671284][ T6994] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 329.691950][T10983] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 329.737470][ T6994] em28xx 6-1:0.132: Video interface 132 found: [ 329.929055][ T5842] Bluetooth: hci0: command tx timeout [ 330.047993][ T5978] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 330.096759][ T6994] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 330.230378][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 330.241891][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.274208][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.317886][ T5978] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 330.337111][ T6994] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 330.357880][ T6994] em28xx 6-1:0.132: board has no eeprom [ 330.359689][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.416760][ T5978] usb 3-1: config 0 descriptor?? [ 330.434223][ T5978] hub 3-1:0.0: USB hub found [ 330.447504][ T6994] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 330.477704][ T6994] em28xx 6-1:0.132: analog set to bulk mode. [ 330.490254][ T10] em28xx 6-1:0.132: Registering V4L2 extension [ 330.513242][ T6994] usb 6-1: USB disconnect, device number 3 [ 330.525610][ T6994] em28xx 6-1:0.132: Disconnecting em28xx [ 330.648665][ T5978] hub 3-1:0.0: 1 port detected [ 330.898801][ T10] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 330.927464][ T10] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 330.935037][ T10] em28xx 6-1:0.132: No AC97 audio processor [ 330.958647][ T10] usb 6-1: Decoder not found [ 330.963347][ T10] em28xx 6-1:0.132: failed to create media graph [ 331.007551][ T10] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 331.040903][ T10] em28xx 6-1:0.132: Remote control support is not available for this card. [ 331.073955][ T6994] em28xx 6-1:0.132: Closing input extension [ 331.099926][ T6994] em28xx 6-1:0.132: Freeing device [ 331.144101][T11021] netlink: 'syz.5.2084': attribute type 10 has an invalid length. [ 331.284204][ T5978] hub 3-1:0.0: activate --> -90 [ 331.438150][ T43] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 331.485186][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 331.493336][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 331.504610][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 331.513480][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 331.529374][ T6994] usb 3-1: USB disconnect, device number 33 [ 331.540877][ T5978] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 331.558050][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 331.632208][ T43] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 331.640490][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 331.652605][ T43] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.666618][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 331.679494][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 331.695596][ T43] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 331.704722][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 331.716350][ T43] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.730728][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 331.747609][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 331.759077][ T10] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 331.766563][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 331.780724][ T43] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 331.788808][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 331.788987][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.817546][ T43] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.822524][ T10] usb 4-1: config 0 has no interface number 0 [ 331.839073][ T10] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 331.851277][ T10] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 331.864177][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 331.882912][ T43] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 331.894526][ T10] usb 4-1: config 0 interface 98 has no altsetting 0 [ 331.901029][ T43] usb 2-1: string descriptor 0 read error: -22 [ 331.909152][ T43] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 331.915824][ T10] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 331.920479][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.937481][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.937513][ T10] usb 4-1: Product: syz [ 331.937530][ T10] usb 4-1: Manufacturer: syz [ 331.967116][ T43] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 331.975294][ T10] usb 4-1: SerialNumber: syz [ 331.992245][ T10] usb 4-1: config 0 descriptor?? [ 332.000055][T11028] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 332.009125][T11028] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 332.233351][T11028] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 332.259072][T11028] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 332.277772][T11039] loop2: detected capacity change from 0 to 7 [ 332.302477][ T5995] Dev loop2: unable to read RDB block 7 [ 332.338968][ T6994] usb 2-1: USB disconnect, device number 43 [ 332.348825][T11041] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 332.357798][ T5995] loop2: unable to read partition table [ 332.366940][ T5995] loop2: partition table beyond EOD, truncated [ 332.383010][T11039] Dev loop2: unable to read RDB block 7 [ 332.403257][T11039] loop2: unable to read partition table [ 332.421892][T11039] loop2: partition table beyond EOD, truncated [ 332.443716][T11039] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 332.765402][ T30] audit: type=1326 audit(1765706326.428:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11052 comm="syz.2.2099" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0 [ 332.914950][T11060] input: syz1 as /devices/virtual/input/input47 [ 333.311145][ T10] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 333.334324][ T10] asix 4-1:0.98: probe with driver asix failed with error -71 [ 333.365453][ T10] usb 4-1: USB disconnect, device number 30 [ 334.109043][ C0] Unknown status report in ack skb [ 334.400269][ T24] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 334.445269][ T24] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.208231][ T6193] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 335.394495][ T6193] usb 3-1: Using ep0 maxpacket: 8 [ 335.402950][ T6193] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 335.427681][ T6193] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.457503][ T6193] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.468052][ T6193] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.487647][ T6193] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.512076][ T6193] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.532735][ T6193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.802086][ T6193] usb 3-1: GET_CAPABILITIES returned 0 [ 335.827553][ T6193] usbtmc 3-1:16.0: can't read capabilities [ 336.061233][T11147] syzkaller1: entered promiscuous mode [ 336.070807][T11147] syzkaller1: entered allmulticast mode [ 336.093381][T11147] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 336.173616][T11114] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 336.194827][ T6193] usb 3-1: USB disconnect, device number 34 [ 336.201177][T11153] usb 3-1: usbtmc_ioctl_clear_in_halt returned -19 [ 336.378961][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2144'. [ 336.452439][T11163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.482636][T11163] team0: Port device bond0 added [ 336.997806][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 337.177897][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 337.186947][ T43] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 337.204706][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.240890][ T43] usb 2-1: config 0 descriptor?? [ 337.273626][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 337.333957][T11186] netlink: 'syz.0.2153': attribute type 10 has an invalid length. [ 338.537288][ T43] gspca_vc032x: reg_w err -71 [ 338.544612][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.554630][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.568496][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.573930][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.589818][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.595622][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.616525][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.626688][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.637932][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.644037][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.650601][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.656194][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.663893][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.670167][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.675697][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.682500][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.689667][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.695778][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.702023][ T43] gspca_vc032x: Unknown sensor... [ 338.707315][ T43] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 338.730581][ T43] usb 2-1: USB disconnect, device number 44 [ 339.227128][ T6193] IPVS: starting estimator thread 0... [ 339.347539][T11235] IPVS: using max 26 ests per chain, 62400 per kthread [ 339.544900][T11244] netlink: 'syz.5.2179': attribute type 12 has an invalid length. [ 340.533709][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 340.695994][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 340.715463][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.758006][ T10] usb 2-1: Product: syz [ 340.772546][ T10] usb 2-1: Manufacturer: syz [ 340.787554][ T10] usb 2-1: SerialNumber: syz [ 340.810935][ T10] usb 2-1: config 0 descriptor?? [ 340.875010][T11277] input: syz1 as /devices/virtual/input/input48 [ 341.827534][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 342.011001][ T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 342.021155][ T5978] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 342.034522][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.035058][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 342.053077][ T24] usb 1-1: config 0 descriptor?? [ 342.059086][ T10] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 342.095535][T11309] vxlan0: entered promiscuous mode [ 342.121871][ T10] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 342.140986][ T1105] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.158290][ T10] usb 2-1: USB disconnect, device number 45 [ 342.168232][ T1105] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.218536][ T5978] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 342.219182][ T10] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 342.241772][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.279716][ T5978] usb 6-1: config 0 descriptor?? [ 342.287925][ T1105] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.322057][ T1105] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.323580][ T5978] gspca_main: spca508-2.14.0 probing 8086:0110 [ 342.343471][ T5493] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 342.379726][ T10] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 342.520485][ T5978] gspca_spca508: reg_read err -32 [ 342.530336][ T5978] gspca_spca508: reg_read err -32 [ 342.537359][ T5978] gspca_spca508: reg_read err -32 [ 342.543601][ T5978] gspca_spca508: reg_read err -32 [ 342.752057][ T5978] gspca_spca508: reg write: error -71 [ 342.776608][ T5978] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 342.818982][ T5978] usb 6-1: USB disconnect, device number 4 [ 343.102254][T11325] pim6reg1: entered promiscuous mode [ 343.111347][T11325] pim6reg1: entered allmulticast mode [ 343.320289][ T24] usb 1-1: Cannot set autoneg [ 343.337983][ T24] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 343.391620][ T24] usb 1-1: USB disconnect, device number 33 [ 344.171535][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2217'. [ 344.467104][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 344.613337][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 344.708391][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2223'. [ 345.510162][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 345.706665][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.721449][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 345.772359][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 345.794772][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.826556][ T10] usb 1-1: config 0 descriptor?? [ 346.283712][ T10] kovaplus 0003:1E7D:2D50.0034: unknown main item tag 0x0 [ 346.327650][ T10] kovaplus 0003:1E7D:2D50.0034: unknown main item tag 0x0 [ 346.337663][ T10] kovaplus 0003:1E7D:2D50.0034: unknown main item tag 0x0 [ 346.344942][ T10] kovaplus 0003:1E7D:2D50.0034: unknown main item tag 0x0 [ 346.383898][ T10] kovaplus 0003:1E7D:2D50.0034: unknown main item tag 0x0 [ 346.407115][ T10] kovaplus 0003:1E7D:2D50.0034: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 346.951531][ T10] kovaplus 0003:1E7D:2D50.0034: couldn't init struct kovaplus_device [ 346.991853][ T10] kovaplus 0003:1E7D:2D50.0034: couldn't install mouse [ 347.026268][ T10] kovaplus 0003:1E7D:2D50.0034: probe with driver kovaplus failed with error -71 [ 347.080879][ T10] usb 1-1: USB disconnect, device number 34 [ 347.602899][ T30] audit: type=1326 audit(1765706341.268:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 347.694378][ T30] audit: type=1326 audit(1765706341.308:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 347.807860][ T30] audit: type=1326 audit(1765706341.308:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 347.960746][ T30] audit: type=1326 audit(1765706341.328:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 348.045937][ T30] audit: type=1326 audit(1765706341.328:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 348.137249][ T30] audit: type=1326 audit(1765706341.328:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 348.265223][T11428] pim6reg1: entered promiscuous mode [ 348.267564][ T30] audit: type=1326 audit(1765706341.328:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 348.293346][T11428] pim6reg1: entered allmulticast mode [ 348.406572][ T30] audit: type=1326 audit(1765706341.328:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 348.566987][ T30] audit: type=1326 audit(1765706341.328:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 348.653353][ T30] audit: type=1326 audit(1765706341.328:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 349.797515][ T5896] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 349.960814][ T5896] usb 1-1: config 0 has no interfaces? [ 349.972508][ T5896] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 349.982910][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.991423][ T5896] usb 1-1: Product: syz [ 349.996330][ T5896] usb 1-1: Manufacturer: syz [ 350.006430][ T5896] usb 1-1: SerialNumber: syz [ 350.037684][ T5896] usb 1-1: config 0 descriptor?? [ 350.289565][ T6994] usb 1-1: USB disconnect, device number 35 [ 351.045829][T11512] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 352.031109][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.042080][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.051112][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.073660][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.083692][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.367783][ T6994] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 352.462697][T11545] chnl_net:caif_netlink_parms(): no params data found [ 352.527531][ T5896] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 352.539096][ T6994] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.552004][ T6994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.565047][ T6994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.575560][ T6994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.592353][ T6994] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.594800][T11545] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.603698][ T6994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.611844][T11545] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.628675][T11545] bridge_slave_0: entered allmulticast mode [ 352.631743][ T6994] usb 6-1: config 0 descriptor?? [ 352.636898][T11545] bridge_slave_0: entered promiscuous mode [ 352.656421][T11545] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.663864][T11545] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.671707][T11545] bridge_slave_1: entered allmulticast mode [ 352.679784][T11545] bridge_slave_1: entered promiscuous mode [ 352.690726][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.702068][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.730049][ T5896] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.739837][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.748224][ T5896] usb 1-1: SerialNumber: syz [ 352.779763][T11545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.795362][T11545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.865839][T11545] team0: Port device team_slave_0 added [ 352.877319][T11545] team0: Port device team_slave_1 added [ 352.930889][T11545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.938971][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.967089][T11545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.982611][ T5896] usb 1-1: 0:2 : does not exist [ 352.992761][T11545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.003646][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.040836][ T5896] usb 1-1: USB disconnect, device number 36 [ 353.048563][T11545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.093190][ T6994] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 353.150178][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.247512][T11545] hsr_slave_0: entered promiscuous mode [ 353.254995][T11545] hsr_slave_1: entered promiscuous mode [ 353.262938][T11545] debugfs: 'hsr0' already exists in 'hsr' [ 353.287560][T11545] Cannot create hsr debugfs directory [ 353.603425][T11545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.685096][T11566] [ 353.687723][T11566] ===================================================== [ 353.695107][T11566] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 353.702771][T11566] syzkaller #0 Tainted: G L [ 353.708920][T11566] ----------------------------------------------------- [ 353.716020][T11566] syz.1.2313/11566 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 353.724227][T11566] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 353.733270][T11566] [ 353.733270][T11566] and this task is already holding: [ 353.740817][T11566] ffff888079213020 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 353.750098][T11566] which would create a new lock dependency: [ 353.756603][T11566] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 353.764547][T11566] [ 353.764547][T11566] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 353.774524][T11566] (&dev->event_lock#2){..-.}-{3:3} [ 353.774558][T11566] [ 353.774558][T11566] ... which became SOFTIRQ-irq-safe at: [ 353.788253][T11566] lock_acquire+0x117/0x340 [ 353.793291][T11566] _raw_spin_lock_irqsave+0xa7/0xf0 [ 353.798946][T11566] input_event+0x76/0xe0 [ 353.803455][T11566] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 353.810526][T11566] __usb_hcd_giveback_urb+0x376/0x540 [ 353.816638][T11566] dummy_timer+0x85f/0x45b0 [ 353.821599][T11566] __hrtimer_run_queues+0x51c/0xc30 [ 353.827080][T11566] hrtimer_run_softirq+0x187/0x2b0 [ 353.832716][T11566] handle_softirqs+0x27d/0x850 [ 353.837668][T11566] __irq_exit_rcu+0xca/0x1f0 [ 353.842530][T11566] irq_exit_rcu+0x9/0x30 [ 353.847064][T11566] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 353.853312][T11566] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 353.859738][T11566] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 353.865817][T11566] dummy_urb_enqueue+0x58a/0x780 [ 353.871057][T11566] usb_hcd_submit_urb+0x328/0x1b80 [ 353.876443][T11566] atp_open+0x63/0xc0 [ 353.880695][T11566] input_open_device+0x1d3/0x390 [ 353.886278][T11566] mousedev_open_device+0xcc/0x150 [ 353.892099][T11566] mousedev_open+0x2ef/0x4a0 [ 353.896783][T11566] chrdev_open+0x4cc/0x5e0 [ 353.901382][T11566] do_dentry_open+0x7ce/0x1420 [ 353.906418][T11566] vfs_open+0x3b/0x340 [ 353.910855][T11566] path_openat+0x340e/0x3dd0 [ 353.915741][T11566] do_filp_open+0x1fa/0x410 [ 353.920631][T11566] do_sys_openat2+0x121/0x200 [ 353.925856][T11566] __x64_sys_openat+0x138/0x170 [ 353.930888][T11566] do_syscall_64+0xfa/0xf80 [ 353.935579][T11566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.941654][T11566] [ 353.941654][T11566] to a SOFTIRQ-irq-unsafe lock: [ 353.949025][T11566] (tasklist_lock){.+.+}-{3:3} [ 353.949061][T11566] [ 353.949061][T11566] ... which became SOFTIRQ-irq-unsafe at: [ 353.961799][T11566] ... [ 353.961807][T11566] lock_acquire+0x117/0x340 [ 353.969859][T11566] _raw_read_lock+0x36/0x50 [ 353.974467][T11566] __do_wait+0xde/0x740 [ 353.979254][T11566] do_wait+0x1e8/0x4f0 [ 353.983592][T11566] kernel_wait+0xab/0x170 [ 353.988030][T11566] call_usermodehelper_exec_work+0xbe/0x230 [ 353.994389][T11566] process_scheduled_works+0xad1/0x1770 [ 354.000579][T11566] worker_thread+0x8a0/0xda0 [ 354.006063][T11566] kthread+0x711/0x8a0 [ 354.010495][T11566] ret_from_fork+0x599/0xb30 [ 354.015346][T11566] ret_from_fork_asm+0x1a/0x30 [ 354.020392][T11566] [ 354.020392][T11566] other info that might help us debug this: [ 354.020392][T11566] [ 354.031865][T11566] Chain exists of: [ 354.031865][T11566] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 354.031865][T11566] [ 354.047121][T11566] Possible interrupt unsafe locking scenario: [ 354.047121][T11566] [ 354.056244][T11566] CPU0 CPU1 [ 354.061989][T11566] ---- ---- [ 354.067802][T11566] lock(tasklist_lock); [ 354.072066][T11566] local_irq_disable(); [ 354.079086][T11566] lock(&dev->event_lock#2); [ 354.086736][T11566] lock(&f_owner->lock); [ 354.093682][T11566] [ 354.097311][T11566] lock(&dev->event_lock#2); [ 354.102997][T11566] [ 354.102997][T11566] *** DEADLOCK *** [ 354.102997][T11566] [ 354.111359][T11566] 2 locks held by syz.1.2313/11566: [ 354.116827][T11566] #0: ffff88807affde60 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 354.125905][T11566] #1: ffff888079213020 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 354.135689][T11566] [ 354.135689][T11566] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 354.146658][T11566] -> (&dev->event_lock#2){..-.}-{3:3} { [ 354.152958][T11566] IN-SOFTIRQ-W at: [ 354.157303][T11566] lock_acquire+0x117/0x340 [ 354.164345][T11566] _raw_spin_lock_irqsave+0xa7/0xf0 [ 354.172457][T11566] input_event+0x76/0xe0 [ 354.179254][T11566] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 354.187596][T11566] __usb_hcd_giveback_urb+0x376/0x540 [ 354.196623][T11566] dummy_timer+0x85f/0x45b0 [ 354.203927][T11566] __hrtimer_run_queues+0x51c/0xc30 [ 354.211493][T11566] hrtimer_run_softirq+0x187/0x2b0 [ 354.219266][T11566] handle_softirqs+0x27d/0x850 [ 354.226728][T11566] __irq_exit_rcu+0xca/0x1f0 [ 354.233590][T11566] irq_exit_rcu+0x9/0x30 [ 354.240016][T11566] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 354.247922][T11566] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.257121][T11566] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 354.265645][T11566] dummy_urb_enqueue+0x58a/0x780 [ 354.272958][T11566] usb_hcd_submit_urb+0x328/0x1b80 [ 354.280805][T11566] atp_open+0x63/0xc0 [ 354.287327][T11566] input_open_device+0x1d3/0x390 [ 354.294817][T11566] mousedev_open_device+0xcc/0x150 [ 354.303607][T11566] mousedev_open+0x2ef/0x4a0 [ 354.311442][T11566] chrdev_open+0x4cc/0x5e0 [ 354.318060][T11566] do_dentry_open+0x7ce/0x1420 [ 354.325793][T11566] vfs_open+0x3b/0x340 [ 354.332934][T11566] path_openat+0x340e/0x3dd0 [ 354.340247][T11566] do_filp_open+0x1fa/0x410 [ 354.347125][T11566] do_sys_openat2+0x121/0x200 [ 354.354774][T11566] __x64_sys_openat+0x138/0x170 [ 354.362276][T11566] do_syscall_64+0xfa/0xf80 [ 354.370094][T11566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.378166][T11566] INITIAL USE at: [ 354.382561][T11566] lock_acquire+0x117/0x340 [ 354.389259][T11566] _raw_spin_lock_irqsave+0xa7/0xf0 [ 354.396986][T11566] input_inject_event+0xa5/0x340 [ 354.405063][T11566] kbd_led_trigger_activate+0xbc/0x100 [ 354.413261][T11566] led_trigger_set+0x52d/0x950 [ 354.420219][T11566] led_trigger_set_default+0x260/0x2a0 [ 354.427879][T11566] led_classdev_register_ext+0x73d/0x960 [ 354.436399][T11566] input_leds_connect+0x517/0x790 [ 354.443897][T11566] input_register_device+0xd00/0x1170 [ 354.451721][T11566] atkbd_connect+0x73b/0xa50 [ 354.459538][T11566] serio_driver_probe+0x82/0xd0 [ 354.467386][T11566] really_probe+0x26d/0xad0 [ 354.475378][T11566] __driver_probe_device+0x18c/0x320 [ 354.483283][T11566] driver_probe_device+0x4f/0x240 [ 354.490753][T11566] __driver_attach+0x349/0x650 [ 354.498494][T11566] bus_for_each_dev+0x233/0x2b0 [ 354.505610][T11566] serio_handle_event+0x1f9/0x8d0 [ 354.513067][T11566] process_scheduled_works+0xad1/0x1770 [ 354.521922][T11566] worker_thread+0x8a0/0xda0 [ 354.529232][T11566] kthread+0x711/0x8a0 [ 354.535563][T11566] ret_from_fork+0x599/0xb30 [ 354.542499][T11566] ret_from_fork_asm+0x1a/0x30 [ 354.549540][T11566] } [ 354.552388][T11566] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 354.562108][T11566] -> (&client->buffer_lock){....}-{3:3} { [ 354.568296][T11566] INITIAL USE at: [ 354.572480][T11566] lock_acquire+0x117/0x340 [ 354.579258][T11566] _raw_spin_lock_irqsave+0xa7/0xf0 [ 354.586905][T11566] evdev_ioctl_handler+0x1969/0x1f10 [ 354.594374][T11566] __ia32_compat_sys_ioctl+0x543/0x840 [ 354.602012][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 354.609849][T11566] do_fast_syscall_32+0x34/0x80 [ 354.616787][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.625548][T11566] } [ 354.628402][T11566] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 354.637626][T11566] ... acquired at: [ 354.641865][T11566] _raw_spin_lock+0x2e/0x40 [ 354.646822][T11566] evdev_pass_values+0xb9/0xbd0 [ 354.651949][T11566] evdev_events+0x1e6/0x340 [ 354.656914][T11566] input_pass_values+0x288/0x890 [ 354.662318][T11566] input_event_dispose+0x330/0x6b0 [ 354.667735][T11566] input_inject_event+0x1dd/0x340 [ 354.673740][T11566] evdev_write+0x2fc/0x480 [ 354.678538][T11566] vfs_write+0x27e/0xb30 [ 354.683779][T11566] ksys_write+0x145/0x250 [ 354.688764][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 354.694776][T11566] do_fast_syscall_32+0x34/0x80 [ 354.700340][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.706863][T11566] [ 354.709539][T11566] -> (&new->fa_lock){....}-{3:3} { [ 354.715384][T11566] INITIAL USE at: [ 354.719976][T11566] lock_acquire+0x117/0x340 [ 354.726767][T11566] _raw_write_lock_irq+0xa2/0xf0 [ 354.734677][T11566] fasync_remove_entry+0xf1/0x1c0 [ 354.743490][T11566] pipe_fasync+0xff/0x1e0 [ 354.749876][T11566] __fput+0x8a2/0xa70 [ 354.756408][T11566] task_work_run+0x1d4/0x260 [ 354.762944][T11566] exit_to_user_mode_loop+0xff/0x4f0 [ 354.770369][T11566] __do_fast_syscall_32+0x3b4/0x590 [ 354.777527][T11566] do_fast_syscall_32+0x34/0x80 [ 354.784476][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.793072][T11566] INITIAL READ USE at: [ 354.798048][T11566] lock_acquire+0x117/0x340 [ 354.805878][T11566] _raw_read_lock_irqsave+0xaf/0x100 [ 354.813914][T11566] kill_fasync+0x199/0x4d0 [ 354.821054][T11566] do_splice+0xf79/0x1660 [ 354.828756][T11566] __se_sys_splice+0x2e1/0x460 [ 354.836330][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 354.844218][T11566] do_fast_syscall_32+0x34/0x80 [ 354.851946][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.861429][T11566] } [ 354.864020][T11566] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 354.873867][T11566] ... acquired at: [ 354.878090][T11566] _raw_read_lock_irqsave+0xaf/0x100 [ 354.883889][T11566] kill_fasync+0x199/0x4d0 [ 354.888790][T11566] evdev_pass_values+0x627/0xbd0 [ 354.894273][T11566] evdev_events+0x1e6/0x340 [ 354.899366][T11566] input_pass_values+0x288/0x890 [ 354.904482][T11566] input_event_dispose+0x330/0x6b0 [ 354.909889][T11566] input_inject_event+0x1dd/0x340 [ 354.915536][T11566] evdev_write+0x2fc/0x480 [ 354.920403][T11566] vfs_write+0x27e/0xb30 [ 354.924906][T11566] ksys_write+0x145/0x250 [ 354.929500][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 354.935001][T11566] do_fast_syscall_32+0x34/0x80 [ 354.940216][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.947471][T11566] [ 354.949863][T11566] -> (&f_owner->lock){....}-{3:3} { [ 354.955083][T11566] INITIAL USE at: [ 354.959064][T11566] lock_acquire+0x117/0x340 [ 354.965416][T11566] _raw_write_lock_irq+0xa2/0xf0 [ 354.972560][T11566] __f_setown+0x67/0x370 [ 354.978841][T11566] fcntl_dirnotify+0x3fa/0x6a0 [ 354.985358][T11566] do_fcntl+0x745/0x1a50 [ 354.991356][T11566] do_compat_fcntl64+0x477/0x720 [ 354.997923][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 355.004776][T11566] do_fast_syscall_32+0x34/0x80 [ 355.011544][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.019698][T11566] INITIAL READ USE at: [ 355.024292][T11566] lock_acquire+0x117/0x340 [ 355.030977][T11566] _raw_read_lock_irqsave+0xaf/0x100 [ 355.038359][T11566] send_sigio+0x38/0x370 [ 355.044703][T11566] dnotify_handle_event+0x169/0x440 [ 355.052287][T11566] fsnotify+0x180b/0x1ab0 [ 355.058730][T11566] fsnotify_create+0x122/0x180 [ 355.065766][T11566] vfs_create+0x3d9/0x400 [ 355.072279][T11566] do_mknodat+0x3ea/0x610 [ 355.078730][T11566] __ia32_sys_mknod+0x8c/0xa0 [ 355.086190][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 355.093480][T11566] do_fast_syscall_32+0x34/0x80 [ 355.100416][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.109040][T11566] } [ 355.111636][T11566] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 355.121125][T11566] ... acquired at: [ 355.124953][T11566] _raw_read_lock_irqsave+0xaf/0x100 [ 355.130640][T11566] send_sigio+0x38/0x370 [ 355.135084][T11566] kill_fasync+0x24d/0x4d0 [ 355.139877][T11566] lease_break_callback+0x26/0x30 [ 355.145204][T11566] __break_lease+0x730/0x1620 [ 355.150344][T11566] do_dentry_open+0x73a/0x1420 [ 355.155353][T11566] vfs_open+0x3b/0x340 [ 355.159870][T11566] path_openat+0x340e/0x3dd0 [ 355.164637][T11566] do_filp_open+0x1fa/0x410 [ 355.169503][T11566] do_sys_openat2+0x121/0x200 [ 355.174573][T11566] __ia32_compat_sys_openat+0x131/0x160 [ 355.180509][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 355.185999][T11566] do_fast_syscall_32+0x34/0x80 [ 355.191125][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.198505][T11566] [ 355.200922][T11566] [ 355.200922][T11566] the dependencies between the lock to be acquired [ 355.200932][T11566] and SOFTIRQ-irq-unsafe lock: [ 355.214917][T11566] -> (tasklist_lock){.+.+}-{3:3} { [ 355.220240][T11566] HARDIRQ-ON-R at: [ 355.224681][T11566] lock_acquire+0x117/0x340 [ 355.231477][T11566] _raw_read_lock+0x36/0x50 [ 355.237845][T11566] __do_wait+0xde/0x740 [ 355.243928][T11566] do_wait+0x1e8/0x4f0 [ 355.249845][T11566] kernel_wait+0xab/0x170 [ 355.256372][T11566] call_usermodehelper_exec_work+0xbe/0x230 [ 355.264158][T11566] process_scheduled_works+0xad1/0x1770 [ 355.271541][T11566] worker_thread+0x8a0/0xda0 [ 355.278239][T11566] kthread+0x711/0x8a0 [ 355.284670][T11566] ret_from_fork+0x599/0xb30 [ 355.291839][T11566] ret_from_fork_asm+0x1a/0x30 [ 355.298556][T11566] SOFTIRQ-ON-R at: [ 355.303118][T11566] lock_acquire+0x117/0x340 [ 355.310180][T11566] _raw_read_lock+0x36/0x50 [ 355.316345][T11566] __do_wait+0xde/0x740 [ 355.322426][T11566] do_wait+0x1e8/0x4f0 [ 355.328605][T11566] kernel_wait+0xab/0x170 [ 355.335391][T11566] call_usermodehelper_exec_work+0xbe/0x230 [ 355.344341][T11566] process_scheduled_works+0xad1/0x1770 [ 355.351565][T11566] worker_thread+0x8a0/0xda0 [ 355.357809][T11566] kthread+0x711/0x8a0 [ 355.363708][T11566] ret_from_fork+0x599/0xb30 [ 355.370130][T11566] ret_from_fork_asm+0x1a/0x30 [ 355.376558][T11566] INITIAL USE at: [ 355.380472][T11566] lock_acquire+0x117/0x340 [ 355.387068][T11566] _raw_write_lock_irq+0xa2/0xf0 [ 355.394017][T11566] copy_process+0x2185/0x3950 [ 355.400538][T11566] kernel_clone+0x21e/0x820 [ 355.406961][T11566] user_mode_thread+0xdd/0x140 [ 355.413471][T11566] rest_init+0x23/0x300 [ 355.419558][T11566] start_kernel+0x3a7/0x400 [ 355.425938][T11566] x86_64_start_reservations+0x24/0x30 [ 355.433087][T11566] x86_64_start_kernel+0x143/0x1c0 [ 355.440599][T11566] common_startup_64+0x13e/0x147 [ 355.448272][T11566] INITIAL READ USE at: [ 355.452892][T11566] lock_acquire+0x117/0x340 [ 355.459572][T11566] _raw_read_lock+0x36/0x50 [ 355.466984][T11566] __do_wait+0xde/0x740 [ 355.473967][T11566] do_wait+0x1e8/0x4f0 [ 355.480686][T11566] kernel_wait+0xab/0x170 [ 355.487570][T11566] call_usermodehelper_exec_work+0xbe/0x230 [ 355.496705][T11566] process_scheduled_works+0xad1/0x1770 [ 355.504872][T11566] worker_thread+0x8a0/0xda0 [ 355.511940][T11566] kthread+0x711/0x8a0 [ 355.518472][T11566] ret_from_fork+0x599/0xb30 [ 355.525552][T11566] ret_from_fork_asm+0x1a/0x30 [ 355.532693][T11566] } [ 355.535204][T11566] ... key at: [] tasklist_lock+0x18/0x40 [ 355.543540][T11566] ... acquired at: [ 355.547694][T11566] _raw_read_lock+0x36/0x50 [ 355.552909][T11566] send_sigurg+0x12b/0x420 [ 355.557611][T11566] sk_send_sigurg+0x6c/0x2e0 [ 355.563000][T11566] queue_oob+0x420/0x4f0 [ 355.567588][T11566] unix_stream_sendmsg+0xc32/0xde0 [ 355.572964][T11566] __sock_sendmsg+0x21c/0x270 [ 355.578257][T11566] ____sys_sendmsg+0x52d/0x820 [ 355.583393][T11566] ___sys_sendmsg+0x21f/0x2a0 [ 355.588511][T11566] __sys_sendmmsg+0x28e/0x430 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 355.593660][T11566] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 355.599801][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 355.605463][T11566] do_fast_syscall_32+0x34/0x80 [ 355.610773][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.617991][T11566] [ 355.620430][T11566] [ 355.620430][T11566] stack backtrace: [ 355.626939][T11566] CPU: 0 UID: 0 PID: 11566 Comm: syz.1.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.626962][T11566] Tainted: [L]=SOFTLOCKUP [ 355.626967][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.626978][T11566] Call Trace: [ 355.626987][T11566] [ 355.626994][T11566] dump_stack_lvl+0x189/0x250 [ 355.627017][T11566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.627035][T11566] ? __pfx__printk+0x10/0x10 [ 355.627061][T11566] __lock_acquire+0x2a95/0x2cf0 [ 355.627085][T11566] ? send_sigurg+0x12b/0x420 [ 355.627107][T11566] lock_acquire+0x117/0x340 [ 355.627122][T11566] ? send_sigurg+0x12b/0x420 [ 355.627144][T11566] ? _raw_read_lock_irqsave+0xbb/0x100 [ 355.627172][T11566] _raw_read_lock+0x36/0x50 [ 355.627193][T11566] ? send_sigurg+0x12b/0x420 [ 355.627214][T11566] send_sigurg+0x12b/0x420 [ 355.627237][T11566] sk_send_sigurg+0x6c/0x2e0 [ 355.627261][T11566] queue_oob+0x420/0x4f0 [ 355.627278][T11566] ? __pfx_queue_oob+0x10/0x10 [ 355.627294][T11566] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 355.627312][T11566] unix_stream_sendmsg+0xc32/0xde0 [ 355.627333][T11566] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 355.627349][T11566] ? __asan_memset+0x22/0x50 [ 355.627380][T11566] ? __import_iovec+0x5d4/0x7f0 [ 355.627401][T11566] ? aa_sock_msg_perm+0xda/0x1b0 [ 355.627423][T11566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.627437][T11566] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 355.627452][T11566] __sock_sendmsg+0x21c/0x270 [ 355.627475][T11566] ____sys_sendmsg+0x52d/0x820 [ 355.627494][T11566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.627516][T11566] ___sys_sendmsg+0x21f/0x2a0 [ 355.627534][T11566] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.627551][T11566] ? preempt_schedule+0xae/0xc0 [ 355.627564][T11566] ? __pfx_preempt_schedule+0x10/0x10 [ 355.627578][T11566] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 355.627602][T11566] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.627633][T11566] ? __fget_files+0x2a/0x420 [ 355.627652][T11566] ? __fget_files+0x3a0/0x420 [ 355.627673][T11566] __sys_sendmmsg+0x28e/0x430 [ 355.627692][T11566] ? __pfx___sys_sendmmsg+0x10/0x10 [ 355.627713][T11566] ? __pfx_do_futex+0x10/0x10 [ 355.627738][T11566] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 355.627760][T11566] __do_fast_syscall_32+0x1f7/0x590 [ 355.627778][T11566] ? rcu_is_watching+0x15/0xb0 [ 355.627796][T11566] ? do_fast_syscall_32+0x34/0x80 [ 355.627814][T11566] do_fast_syscall_32+0x34/0x80 [ 355.627831][T11566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.627850][T11566] RIP: 0023:0xf7f66539 [ 355.627864][T11566] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 355.627879][T11566] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 355.627897][T11566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006c40 [ 355.627908][T11566] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 355.627918][T11566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.627927][T11566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 355.627936][T11566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.627951][T11566] [ 355.965956][ T5832] Bluetooth: hci2: command tx timeout [ 356.125947][T11545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.434321][T11545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.596070][T11545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.856476][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.868998][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.945431][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.957826][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.004420][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.016912][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.082640][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.093887][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.197863][ T129] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 357.327672][ T129] usb 6-1: device descriptor read/64, error -32 [ 357.351445][ T44] bond0 (unregistering): Released all slaves [ 357.647625][ T44] hsr0: left allmulticast mode [ 357.652660][ T44] veth1_macvtap: left promiscuous mode [ 357.667945][ T44] veth0_macvtap: left promiscuous mode [ 357.674169][ T44] veth1_vlan: left promiscuous mode [ 357.687681][ T44] veth0_vlan: left promiscuous mode [ 358.210318][ T6991] usb 6-1: USB disconnect, device number 5 [ 358.285727][ T44] IPVS: stop unused estimator thread 0... [ 358.331061][ T44] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.389150][ T44] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.472218][ T44] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.505360][ T44] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.641761][ T44] bridge_slave_1: left allmulticast mode [ 358.649188][ T44] bridge_slave_1: left promiscuous mode [ 358.655342][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.666277][ T44] bridge_slave_0: left allmulticast mode [ 358.673189][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.684545][ T44] bridge_slave_1: left allmulticast mode [ 358.693111][ T44] bridge_slave_1: left promiscuous mode [ 358.699559][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.709148][ T44] bridge_slave_0: left allmulticast mode [ 358.715268][ T44] bridge_slave_0: left promiscuous mode [ 358.722646][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.916576][ T44] team0: Port device bond0 removed [ 358.923188][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.933541][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.943798][ T44] bond0 (unregistering): Released all slaves [ 359.030989][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.041591][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.052363][ T44] bond0 (unregistering): Released all slaves [ 359.340359][ T44] hsr_slave_0: left promiscuous mode [ 359.346463][ T44] hsr_slave_1: left promiscuous mode [ 359.352837][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.362489][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.370961][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.378975][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.389578][ T44] hsr_slave_0: left promiscuous mode [ 359.396621][ T44] hsr_slave_1: left promiscuous mode [ 359.402561][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.410652][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.421145][ T44] veth1_vlan: left promiscuous mode [ 359.426686][ T44] veth0_vlan: left promiscuous mode [ 359.561453][ T44] team0 (unregistering): Port device team_slave_1 removed [ 359.591444][ T44] team0 (unregistering): Port device team_slave_0 removed [ 359.756687][ T44] team0 (unregistering): Port device team_slave_1 removed [ 359.784245][ T44] team0 (unregistering): Port device team_slave_0 removed