last executing test programs: 5m27.004886719s ago: executing program 1 (id=20088): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, r2}) sendmmsg$unix(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1, 0x0, 0x0, 0x20000045}}], 0x1, 0x40015) 5m26.862102744s ago: executing program 1 (id=20090): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m26.466559521s ago: executing program 1 (id=20091): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000240)={0xa, 0x4e22, 0x3, @remote, 0x1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="ce7b", 0x2}], 0x1}, 0x44044) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) 5m26.092365746s ago: executing program 1 (id=20103): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m25.180521755s ago: executing program 1 (id=20098): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x10}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0xd}, {0x6, 0xfff1}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x884) 5m24.660257494s ago: executing program 1 (id=20104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x1, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 5m24.16323224s ago: executing program 32 (id=20104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x1, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 6.279069145s ago: executing program 4 (id=23005): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$unix(r1, &(0x7f0000000080)="9298af71b4880ff9d46b856199e8133b", 0x10, 0xc800, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}, 0x1) 6.084958469s ago: executing program 4 (id=23009): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0x0, 0xc72e, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xfffffffb, "fe1d00003413000000000020b42717e47f00"}}) 5.865984886s ago: executing program 4 (id=23010): socket$inet(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x800, 0x3, 0x2de}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.44976668s ago: executing program 4 (id=23016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 3.053378104s ago: executing program 2 (id=23037): r0 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.894098698s ago: executing program 2 (id=23038): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x2b8, 0xb0000010, 0x248, 0x5c8f0200, 0x340, 0x3a8, 0x3a8, 0x340, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) 2.447232599s ago: executing program 4 (id=23039): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) unshare(0x20040600) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000006) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) 2.327451963s ago: executing program 4 (id=23040): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000180)=0x1) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xe3) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 2.321392479s ago: executing program 2 (id=23050): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.172923287s ago: executing program 2 (id=23041): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0xb, 0x901, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x7, 0x1, 'lp\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x24}}, 0x8010) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.935489462s ago: executing program 2 (id=23042): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x20000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) flistxattr(r0, &(0x7f0000000100)=""/103, 0x67) 1.726056719s ago: executing program 2 (id=23043): syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000011c0)={0x80002005}) 1.314921444s ago: executing program 5 (id=23046): unshare(0x2c020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000600), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) 1.166316872s ago: executing program 5 (id=23048): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 985.51105ms ago: executing program 5 (id=23052): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 706.704651ms ago: executing program 5 (id=23056): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x20c02) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @remote, 0x1, 0x0, 0x6, 0x400, 0xcbb0, 0x4000201}) 659.776272ms ago: executing program 0 (id=23057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(0x4) 604.031753ms ago: executing program 3 (id=23058): socket(0x2c, 0x4, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 576.409325ms ago: executing program 0 (id=23059): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000440)="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", 0x0, 0xbb2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 566.413599ms ago: executing program 5 (id=23060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYRESHEX]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[]) 481.255843ms ago: executing program 3 (id=23061): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 372.56744ms ago: executing program 0 (id=23062): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 336.131844ms ago: executing program 3 (id=23063): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680", @ANYRES64=r1], 0x38}}, 0x10) 309.796993ms ago: executing program 5 (id=23064): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x0, 0x22, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) 247.831518ms ago: executing program 3 (id=23065): socket(0x1e, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000021c0)=""/102400, 0x19000) 215.462732ms ago: executing program 0 (id=23066): r0 = creat(&(0x7f0000000480)='./bus\x00', 0x141) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xb) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000500)='./bus\x00', 0xa40000e1) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 149.551707ms ago: executing program 3 (id=23067): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9) 90.140291ms ago: executing program 0 (id=23068): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x1}) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 1.239313ms ago: executing program 0 (id=23069): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffb, 0x20}, &(0x7f00000001c0)=0x18) 0s ago: executing program 3 (id=23070): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dd43400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1789.457959][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dd43800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1789.515786][T27133] netlink: 'syz.3.21796': attribute type 11 has an invalid length. [ 1791.713284][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.719859][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.989729][ T5888] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1793.164523][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.189044][ T5888] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1793.213715][ T5888] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1793.241775][ T5888] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1793.251306][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.311009][ T5888] usb 5-1: Product: syz [ 1793.325731][ T5888] usb 5-1: Manufacturer: syz [ 1793.339277][ T5888] usb 5-1: SerialNumber: syz [ 1793.810030][T19401] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1793.981852][T19401] usb 4-1: Using ep0 maxpacket: 8 [ 1793.991736][T19401] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1794.009713][T19401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.028821][T27179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21818'. [ 1794.039651][T27179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21818'. [ 1794.054521][T19401] usb 4-1: config 0 descriptor?? [ 1794.270891][T22225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1794.413050][ T5888] cdc_ncm 5-1:1.0: bind() failure [ 1794.448755][ T5888] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1794.488903][ T5888] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1794.517489][ T5888] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1794.554725][ T5888] usb 5-1: USB disconnect, device number 89 [ 1795.103533][T19401] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1795.131517][T27207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21831'. [ 1795.172643][T19401] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1795.190495][T27207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21831'. [ 1795.224391][T19401] usb 4-1: USB disconnect, device number 84 [ 1795.697474][ T5888] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1795.939773][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 1795.948747][ T5888] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1795.968032][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1795.994174][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1796.025706][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1796.054423][ T5888] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1796.090995][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1796.118893][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.397727][ T5888] usb 3-1: usb_control_msg returned -32 [ 1796.569968][ T5888] usbtmc 3-1:16.0: can't read capabilities [ 1796.804496][T27240] usbtmc 3-1:16.0: control status returned 0 [ 1797.042034][T21995] usb 3-1: USB disconnect, device number 87 [ 1797.410187][ T5888] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1797.579595][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 1797.632461][ T5888] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1797.649864][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.688679][ T5888] usb 5-1: config 0 descriptor?? [ 1797.939636][ T5888] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1798.738271][ T5888] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1798.795218][ T5888] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1798.857596][ T5888] usb 5-1: USB disconnect, device number 90 [ 1800.035233][T22225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1802.329791][T12374] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1802.546408][T12374] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1802.579616][T12374] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1802.599367][T12374] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1802.618014][T12374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.647118][T27310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1802.677018][T12374] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1802.945116][T12374] usb 5-1: USB disconnect, device number 91 [ 1803.304174][T27342] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.21885'. [ 1803.594415][T27344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21886'. [ 1803.701219][T27349] netlink: 'syz.2.21888': attribute type 1 has an invalid length. [ 1803.726297][T27349] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.21888'. [ 1803.811957][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21892'. [ 1803.827337][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21892'. [ 1803.840600][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21892'. [ 1803.851909][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21892'. [ 1803.869928][T12374] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1803.940336][T27359] netlink: 'syz.4.21893': attribute type 4 has an invalid length. [ 1804.032063][T12374] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.052787][T12374] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1804.100819][T12374] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1804.111799][T12374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.137799][T12374] usb 6-1: Product: syz [ 1804.143495][T12374] usb 6-1: Manufacturer: syz [ 1804.148146][T12374] usb 6-1: SerialNumber: syz [ 1804.403002][T12374] usb 6-1: 0:2 : does not exist [ 1804.436811][T12374] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1804.509465][T12374] usb 6-1: USB disconnect, device number 29 [ 1804.617046][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1804.667332][T27379] loop9: detected capacity change from 0 to 7 [ 1804.692786][T27379] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1804.719340][T27379] loop9: partition table partially beyond EOD, truncated [ 1804.736905][T27379] loop9: p1 size 501170297 extends beyond EOD, truncated [ 1804.893216][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1805.790784][ T3466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1805.869572][T27413] input: syz1 as /devices/virtual/input/input218 [ 1806.100143][T27422] netlink: 14 bytes leftover after parsing attributes in process `syz.2.21918'. [ 1806.132103][T27421] netlink: 'syz.0.21919': attribute type 27 has an invalid length. [ 1806.553154][T27436] input: syz1 as /devices/virtual/input/input219 [ 1806.870040][T27422] bond0 (unregistering): left promiscuous mode [ 1806.900801][T27422] bond0 (unregistering): Released all slaves [ 1807.070524][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1808.011346][T27464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21938'. [ 1808.062468][T27464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21938'. [ 1808.579367][ T5910] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1808.764816][ T5910] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1808.797115][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.845719][ T5910] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1808.859751][ T5910] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1808.891454][ T5910] usb 3-1: Manufacturer: syz [ 1808.926639][ T5910] usb 3-1: config 0 descriptor?? [ 1809.062644][ T5910] rc_core: IR keymap rc-hauppauge not found [ 1809.091295][ T5910] Registered IR keymap rc-empty [ 1809.113629][ T5910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1809.151904][T23158] Bluetooth: hci0: command 0x0406 tx timeout [ 1809.178058][ T5910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input220 [ 1809.263435][T27485] input: syz1 as /devices/virtual/input/input221 [ 1809.277141][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1809.356567][T24824] usb 3-1: USB disconnect, device number 88 [ 1809.638256][T27494] netlink: 'syz.0.21950': attribute type 1 has an invalid length. [ 1809.727664][T27497] bond2: entered allmulticast mode [ 1809.738238][T27498] __nla_validate_parse: 2 callbacks suppressed [ 1809.738258][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21951'. [ 1809.770118][T27497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1809.806309][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21951'. [ 1809.839865][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21951'. [ 1809.868891][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21951'. [ 1810.015661][T27506] netlink: 'syz.4.21965': attribute type 27 has an invalid length. [ 1811.221650][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 1811.221670][ T30] audit: type=1326 audit(1751574370.071:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27516 comm="syz.2.21958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7fc00000 [ 1813.644109][T27555] netlink: 'syz.3.21974': attribute type 1 has an invalid length. [ 1813.849347][T19401] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1814.021590][T19401] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1814.054532][T19401] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 1814.097238][T19401] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1814.137685][T19401] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1814.160968][T27564] kvm: apic: phys broadcast and lowest prio [ 1814.168526][T19401] usb 5-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 1814.187895][T19401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.219422][T19401] usb 5-1: Product: syz [ 1814.224558][T19401] usb 5-1: Manufacturer: syz [ 1814.251138][T19401] usb 5-1: SerialNumber: syz [ 1814.266264][T27553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1814.342371][T27575] netlink: 'syz.2.21984': attribute type 1 has an invalid length. [ 1814.413677][T27575] bond0: entered allmulticast mode [ 1814.420413][T27575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.482552][T27579] netlink: 14 bytes leftover after parsing attributes in process `syz.3.21986'. [ 1814.527964][T19401] usbhid 5-1:1.0: can't add hid device: -71 [ 1814.539248][ T5888] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1814.549929][T19401] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1814.562671][T19401] usb 5-1: USB disconnect, device number 92 [ 1814.666271][T27579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1814.677700][T27579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1814.695035][T27579] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1814.704798][ T5888] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1814.714256][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.727168][ T5888] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1814.728895][T27579] bond0 (unregistering): Released all slaves [ 1814.745073][ T5888] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1814.758570][ T5888] usb 6-1: Manufacturer: syz [ 1814.777517][ T5888] usb 6-1: config 0 descriptor?? [ 1814.869300][ T5888] rc_core: IR keymap rc-hauppauge not found [ 1814.882609][ T5888] Registered IR keymap rc-empty [ 1814.891050][ T5888] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1814.904006][ T5888] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input222 [ 1815.028386][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1815.041432][T21995] usb 6-1: USB disconnect, device number 30 [ 1815.175915][T27590] netlink: 'syz.4.21988': attribute type 1 has an invalid length. [ 1816.123124][T27614] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1816.160694][ T30] audit: type=1326 audit(1751574375.011:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27616 comm="syz.3.21999" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe539 code=0x0 [ 1816.569373][T19401] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1816.729316][T19401] usb 5-1: Using ep0 maxpacket: 8 [ 1816.745334][T19401] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1816.805887][T19401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.819177][T19401] usb 5-1: config 0 descriptor?? [ 1818.060564][T19401] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1818.095418][T19401] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1818.129741][T19401] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1818.158074][T19401] usb 5-1: USB disconnect, device number 93 [ 1818.788804][T27681] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.22023'. [ 1819.913720][T27719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22038'. [ 1820.129903][T24824] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1820.169554][ T5910] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1820.299382][T24824] usb 3-1: Using ep0 maxpacket: 16 [ 1820.321681][T24824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.348130][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1820.349247][T24824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.376677][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1820.394471][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1820.408222][T24824] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 1820.410873][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1820.436671][T24824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.459587][ T5910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1820.478382][T24824] usb 3-1: config 0 descriptor?? [ 1820.481627][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.514734][ T5910] usb 4-1: config 0 descriptor?? [ 1820.550329][ T5888] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1820.739455][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 1820.777233][ T5888] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1820.792826][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.803594][ T5888] usb 5-1: config 0 has no interface number 0 [ 1820.809903][ T5888] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1820.822007][ T5888] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1820.835739][ T5888] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1820.846920][ T5888] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1820.857128][ T5888] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1820.880425][ T5888] usb 5-1: Manufacturer: syz [ 1820.917577][ T5888] usb 5-1: config 0 descriptor?? [ 1820.965788][T24824] apple 0003:05AC:0274.015D: unknown main item tag 0x4 [ 1820.978018][T24824] apple 0003:05AC:0274.015D: unexpected long global item [ 1820.995187][T27721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.011741][T24824] apple 0003:05AC:0274.015D: parse failed [ 1821.018188][T27721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.028826][T24824] apple 0003:05AC:0274.015D: probe with driver apple failed with error -22 [ 1821.048697][ T5910] plantronics 0003:047F:FFFF.015E: unknown main item tag 0x0 [ 1821.079772][ T5910] plantronics 0003:047F:FFFF.015E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1821.209516][T17007] usb 3-1: USB disconnect, device number 89 [ 1821.218862][ T5888] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input224 [ 1821.417120][ T5910] usb 4-1: USB disconnect, device number 85 [ 1821.471368][T17007] usb 5-1: USB disconnect, device number 94 [ 1821.477367][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1821.858753][T27750] pim6reg1: entered promiscuous mode [ 1821.875807][T27750] pim6reg1: entered allmulticast mode [ 1822.010369][T27755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22051'. [ 1822.159187][ T30] audit: type=1326 audit(1751574380.981:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.0.22052" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 1822.323263][ T30] audit: type=1326 audit(1751574381.171:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.373126][ T30] audit: type=1326 audit(1751574381.191:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.404674][ T30] audit: type=1326 audit(1751574381.201:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.443344][ T30] audit: type=1326 audit(1751574381.201:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.477941][ T30] audit: type=1326 audit(1751574381.201:9658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.511545][ T30] audit: type=1326 audit(1751574381.201:9659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.545061][ T30] audit: type=1326 audit(1751574381.201:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.576173][ T30] audit: type=1326 audit(1751574381.201:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.599863][ T30] audit: type=1326 audit(1751574381.201:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27765 comm="syz.2.22056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1822.690155][T27776] TCP: TCP_TX_DELAY enabled [ 1823.440833][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22076'. [ 1823.487498][T27799] netlink: 'syz.5.22076': attribute type 18 has an invalid length. [ 1823.562107][T27799] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1823.571621][T27799] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1823.580531][T27799] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1823.589372][T27799] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1823.648795][T27799] vxlan0: entered promiscuous mode [ 1824.991358][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1826.145237][T27874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22101'. [ 1826.612101][T27887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22105'. [ 1826.624036][T27887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22105'. [ 1826.635536][T27887] netlink: 104 bytes leftover after parsing attributes in process `syz.4.22105'. [ 1826.647474][T27887] netlink: 104 bytes leftover after parsing attributes in process `syz.4.22105'. [ 1828.017460][T27929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22120'. [ 1829.225016][T27954] Set syz1 is full, maxelem 65536 reached [ 1829.593491][T27961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22133'. [ 1829.605506][T27961] netlink: 'syz.2.22133': attribute type 18 has an invalid length. [ 1830.179820][T17007] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1830.340357][T17007] usb 4-1: Using ep0 maxpacket: 16 [ 1830.352889][T17007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.368119][T17007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.378570][T17007] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 1830.396048][T17007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.416994][T17007] usb 4-1: config 0 descriptor?? [ 1830.761341][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1830.857163][T17007] apple 0003:05AC:0274.015F: unknown main item tag 0x4 [ 1830.875689][T17007] apple 0003:05AC:0274.015F: unexpected long global item [ 1830.888548][T17007] apple 0003:05AC:0274.015F: parse failed [ 1830.904917][T17007] apple 0003:05AC:0274.015F: probe with driver apple failed with error -22 [ 1830.907281][T27995] kernel read not supported for file /bus (pid: 27995 comm: syz.2.22147) [ 1830.929396][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1830.929417][ T30] audit: type=1800 audit(1751574389.771:9684): pid=27995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.22147" name="bus" dev="mqueue" ino=252587 res=0 errno=0 [ 1830.985166][ T30] audit: type=1804 audit(1751574389.821:9685): pid=27995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.22147" name="bus" dev="mqueue" ino=252587 res=1 errno=0 [ 1831.092205][ T5910] usb 4-1: USB disconnect, device number 86 [ 1831.439864][T28013] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1831.471343][T28015] input: syz0 as /devices/virtual/input/input225 [ 1832.539652][T17007] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1832.627311][T28048] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1832.713175][T17007] usb 3-1: Using ep0 maxpacket: 32 [ 1832.736149][T17007] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1832.758018][T17007] usb 3-1: config 0 has no interface number 0 [ 1832.781030][T17007] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1832.809801][T17007] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1832.836082][T17007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.864322][T17007] usb 3-1: Product: syz [ 1832.881460][T17007] usb 3-1: Manufacturer: syz [ 1832.886120][T17007] usb 3-1: SerialNumber: syz [ 1832.924105][T17007] usb 3-1: config 0 descriptor?? [ 1832.970670][T17007] smsc75xx v1.0.0 [ 1833.516458][T28073] input: syz0 as /devices/virtual/input/input226 [ 1834.088718][T28088] veth0_to_bond: entered allmulticast mode [ 1834.104135][T28088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22186'. [ 1834.214298][T17007] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1834.222894][T28088] veth0_to_bond (unregistering): left allmulticast mode [ 1834.249444][T17007] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1834.351943][T17007] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1834.368407][T17007] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1834.400691][T17007] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1834.422135][T17007] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1834.443186][T17007] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1834.499563][T17007] usb 3-1: USB disconnect, device number 90 [ 1834.947261][ T30] audit: type=1326 audit(1751574393.791:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28104 comm="syz.0.22196" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 1834.990242][T28107] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22195'. [ 1835.219714][T17007] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1835.379792][T17007] usb 5-1: Using ep0 maxpacket: 32 [ 1835.388277][T17007] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1835.398263][T17007] usb 5-1: config 7 has an invalid interface number: 32 but max is 1 [ 1835.409939][T17007] usb 5-1: config 7 has an invalid interface number: 69 but max is 1 [ 1835.446608][T17007] usb 5-1: config 7 has no interface number 0 [ 1835.466634][T17007] usb 5-1: config 7 has no interface number 1 [ 1835.484975][T17007] usb 5-1: config 7 interface 32 altsetting 9 bulk endpoint 0xC has invalid maxpacket 1024 [ 1835.511405][T17007] usb 5-1: config 7 interface 32 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1835.545146][T17007] usb 5-1: config 7 interface 32 has no altsetting 0 [ 1835.556076][T17007] usb 5-1: config 7 interface 69 has no altsetting 0 [ 1835.575576][T17007] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=a5.97 [ 1835.597801][T17007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.614887][T17007] usb 5-1: Product: syz [ 1835.645881][T17007] usb 5-1: Manufacturer: syz [ 1835.658151][T17007] usb 5-1: SerialNumber: syz [ 1835.679730][T28102] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1835.881178][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1835.914460][T17007] kvaser_usb 5-1:7.32: error -ENODEV: Cannot get usb endpoint(s) [ 1835.971633][T17007] kvaser_usb 5-1:7.69: error -ENODEV: Cannot get usb endpoint(s) [ 1836.001349][T17007] usb 5-1: USB disconnect, device number 95 [ 1836.618293][T28142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22218'. [ 1836.950108][T24824] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1837.120221][T24824] usb 5-1: Using ep0 maxpacket: 32 [ 1837.137883][T24824] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1837.163850][T24824] usb 5-1: config 0 has no interface number 0 [ 1837.184060][T24824] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1837.216296][T24824] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1837.236290][T24824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.259420][T24824] usb 5-1: Product: syz [ 1837.265697][T24824] usb 5-1: Manufacturer: syz [ 1837.284441][T24824] usb 5-1: SerialNumber: syz [ 1837.304854][T24824] usb 5-1: config 0 descriptor?? [ 1837.332555][T24824] smsc75xx v1.0.0 [ 1838.550723][T24824] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1838.568021][T24824] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1838.580803][T24824] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1838.594156][T24824] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1838.604956][T24824] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1838.615791][T24824] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1838.626287][T24824] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1838.639940][T24824] usb 5-1: USB disconnect, device number 96 [ 1839.464239][T28196] loop4: detected capacity change from 0 to 7 [ 1839.477355][T28196] Dev loop4: unable to read RDB block 7 [ 1839.484415][T28196] loop4: unable to read partition table [ 1839.491906][T28196] loop4: partition table beyond EOD, truncated [ 1839.498932][T28196] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1841.581872][ T30] audit: type=1326 audit(1751574400.431:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1841.627468][ T30] audit: type=1326 audit(1751574400.431:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1841.668708][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1841.688804][ T30] audit: type=1326 audit(1751574400.431:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1841.711041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1841.739410][ T30] audit: type=1326 audit(1751574400.431:9690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1841.789254][T12374] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1841.806775][ T30] audit: type=1326 audit(1751574400.431:9691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1841.865655][ T30] audit: type=1326 audit(1751574400.431:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1841.939692][ T30] audit: type=1326 audit(1751574400.431:9693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1841.987784][ T30] audit: type=1326 audit(1751574400.431:9694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1842.010020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1842.017774][T12374] usb 3-1: Using ep0 maxpacket: 16 [ 1842.063849][T12374] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1842.088255][T12374] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1842.118672][ T30] audit: type=1326 audit(1751574400.431:9695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1842.140983][ C0] vkms_vblank_simulate: vblank timer overrun [ 1842.149318][T12374] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1842.179148][T12374] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1842.187997][ T30] audit: type=1326 audit(1751574400.431:9696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28235 comm="syz.0.22247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1842.210208][ C0] vkms_vblank_simulate: vblank timer overrun [ 1842.218303][T12374] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1842.269196][T12374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.277290][T12374] usb 3-1: Product: syz [ 1842.309278][T12374] usb 3-1: Manufacturer: syz [ 1842.314022][T12374] usb 3-1: SerialNumber: syz [ 1842.543296][T21995] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1842.562196][T12374] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1842.729672][T21995] usb 5-1: Using ep0 maxpacket: 8 [ 1842.752094][T21995] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1842.763947][T21995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.779284][T21995] usb 5-1: Product: syz [ 1842.784786][T21995] usb 5-1: Manufacturer: syz [ 1842.792993][T21995] usb 5-1: SerialNumber: syz [ 1842.818788][T21995] usb 5-1: config 0 descriptor?? [ 1842.852482][T21995] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1842.921346][T28240] usblp0:failed reading printer status (-71) [ 1842.941775][T17007] usb 3-1: USB disconnect, device number 91 [ 1843.148381][T28239] usblp0: removed [ 1843.505137][T28265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1843.537750][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1843.563741][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.673027][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1843.705328][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.837063][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1843.857222][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.028799][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1844.054437][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.089320][T21995] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 1844.319730][T21995] gspca_sq930x: Sensor ov9630 not yet treated [ 1844.328172][T21995] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 1844.409544][T21995] usb 5-1: USB disconnect, device number 97 [ 1844.612063][T28289] loop4: detected capacity change from 0 to 7 [ 1844.641590][T28289] Dev loop4: unable to read RDB block 7 [ 1844.647288][T28289] loop4: unable to read partition table [ 1844.679511][T28289] loop4: partition table beyond EOD, truncated [ 1844.700264][T28289] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1845.813454][T23158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1845.827219][T23158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1845.859755][T23158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1845.870980][T23158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1845.899445][T23158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1846.073876][ T59] bond1 (unregistering): Released all slaves [ 1846.091360][ T59] bond2 (unregistering): Released all slaves [ 1846.279002][ T59] tipc: Disabling bearer [ 1846.292430][ T59] tipc: Left network mode [ 1846.629314][T24824] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1846.809211][T24824] usb 6-1: Using ep0 maxpacket: 32 [ 1846.816687][T24824] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1846.831838][T24824] usb 6-1: config 0 has no interface number 0 [ 1846.848498][T24824] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1846.857165][T28333] netlink: 'syz.2.22276': attribute type 16 has an invalid length. [ 1846.871730][T28333] netlink: 'syz.2.22276': attribute type 3 has an invalid length. [ 1846.886466][T24824] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1846.906021][T28333] netlink: 'syz.2.22276': attribute type 4 has an invalid length. [ 1846.914515][T24824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.958430][T24824] usb 6-1: Product: syz [ 1846.965816][T28333] netlink: 64026 bytes leftover after parsing attributes in process `syz.2.22276'. [ 1846.976847][T24824] usb 6-1: Manufacturer: syz [ 1846.989222][T24824] usb 6-1: SerialNumber: syz [ 1847.030066][T24824] usb 6-1: config 0 descriptor?? [ 1847.065073][T24824] smsc75xx v1.0.0 [ 1847.136850][T28312] chnl_net:caif_netlink_parms(): no params data found [ 1847.348241][ T59] mac80211_hwsim hwsim12 wlan0 (unregistering): left allmulticast mode [ 1847.390715][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1847.615293][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1847.667731][ T59] macsec0: left allmulticast mode [ 1847.674336][ T59] veth1_macvtap: left allmulticast mode [ 1847.686975][ T59] veth1_macvtap: left promiscuous mode [ 1847.692834][ T59] veth0_macvtap: left promiscuous mode [ 1847.956719][T23158] Bluetooth: hci2: command tx timeout [ 1848.199992][ T59] team_slave_1 (unregistering): left promiscuous mode [ 1848.230878][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1848.266496][T24824] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1848.304818][T24824] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1848.327904][T24824] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1848.346458][T24824] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1848.357741][T24824] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1848.378003][T24824] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1848.388326][T24824] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1848.419879][ T59] C (unregistering): left promiscuous mode [ 1848.426443][T24824] usb 6-1: USB disconnect, device number 31 [ 1848.532207][ T59] team0 (unregistering): Port device C removed [ 1848.769219][T21995] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1848.793152][T12374] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1848.954105][T21995] usb 3-1: Using ep0 maxpacket: 8 [ 1848.964274][T12374] usb 5-1: Using ep0 maxpacket: 8 [ 1848.977983][T12374] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1848.987498][T12374] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1848.998895][T21995] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1849.027248][T21995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.036031][T12374] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1849.046086][T21995] usb 3-1: Product: syz [ 1849.051712][T12374] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1849.061862][T21995] usb 3-1: Manufacturer: syz [ 1849.066677][T21995] usb 3-1: SerialNumber: syz [ 1849.071568][T12374] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1849.086388][T12374] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1849.107646][T21995] usb 3-1: config 0 descriptor?? [ 1849.121952][T21995] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1849.128176][T12374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.367880][T12374] usb 5-1: usb_control_msg returned -32 [ 1849.390359][T12374] usbtmc 5-1:16.0: can't read capabilities [ 1849.657702][T28312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.692152][T28312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.706087][T28312] bridge_slave_0: entered allmulticast mode [ 1849.794210][T28312] bridge_slave_0: entered promiscuous mode [ 1849.812707][T28312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.830074][T28312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.838267][T28312] bridge_slave_1: entered allmulticast mode [ 1849.851681][T28312] bridge_slave_1: entered promiscuous mode [ 1849.997045][T12374] usb 5-1: USB disconnect, device number 98 [ 1850.025054][T28312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1850.034455][T23158] Bluetooth: hci2: command tx timeout [ 1850.066195][T28312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1850.161912][T21995] gspca_sq905: bulk read fail (-22) len 0/4 [ 1850.171476][T21995] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 1850.303298][T28312] team0: Port device team_slave_0 added [ 1850.342509][T28312] team0: Port device team_slave_1 added [ 1850.380922][ T59] IPVS: stop unused estimator thread 0... [ 1850.436566][T12374] usb 3-1: USB disconnect, device number 92 [ 1850.469466][T24824] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1850.587125][T28312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1850.618295][T28312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.639804][T24824] usb 6-1: Using ep0 maxpacket: 32 [ 1850.668861][T24824] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1850.713105][T24824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1850.719564][T28312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1850.743041][T28312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1850.754461][T28312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.763299][T24824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1850.780919][T28312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1850.812773][T24824] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1850.826337][T24824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.847685][T24824] usb 6-1: config 0 descriptor?? [ 1850.856280][T28384] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1850.874437][T24824] hub 6-1:0.0: USB hub found [ 1850.919896][T28312] hsr_slave_0: entered promiscuous mode [ 1850.926892][T28312] hsr_slave_1: entered promiscuous mode [ 1850.936699][T28312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1850.945546][T28312] Cannot create hsr debugfs directory [ 1850.951385][T12374] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1851.094081][T24824] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1851.148513][T12374] usb 5-1: Using ep0 maxpacket: 16 [ 1851.162489][T12374] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1851.171073][T12374] usb 5-1: config 1 has no interface number 0 [ 1851.177230][T12374] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1851.205199][T12374] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1851.227254][T12374] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1851.240284][T12374] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1851.251463][T12374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.260061][T12374] usb 5-1: Product: syz [ 1851.264363][T12374] usb 5-1: Manufacturer: syz [ 1851.268989][T12374] usb 5-1: SerialNumber: syz [ 1851.293792][T28394] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1851.312578][T28394] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1851.331884][T24824] hid-generic 0003:046D:C314.0160: collection stack underflow [ 1851.371746][T24824] hid-generic 0003:046D:C314.0160: item 0 0 0 12 parsing failed [ 1851.400165][T24824] hid-generic 0003:046D:C314.0160: probe with driver hid-generic failed with error -22 [ 1851.670013][T17007] usb 6-1: USB disconnect, device number 32 [ 1851.760090][T28394] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1851.767531][T28394] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1852.124259][T23158] Bluetooth: hci2: command tx timeout [ 1852.183392][T12374] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1852.397432][T28312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1852.409796][T12374] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1852.440104][T28312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1852.492401][T12374] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 1852.510736][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1852.528708][T28312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1852.566880][T12374] usb 5-1: USB disconnect, device number 99 [ 1852.575709][T28312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1852.595456][T12374] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1852.737885][T28437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.739779][T12374] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1852.797808][T12374] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1852.817561][T12374] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1852.893682][T28312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.922729][T28312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.936305][T28366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.943576][T28366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.973058][T28366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.980329][T28366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.134629][T28312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.140295][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22303'. [ 1853.164236][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.172035][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.314015][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 1853.314036][ T30] audit: type=1326 audit(1751574412.161:9856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 1853.377570][ T30] audit: type=1326 audit(1751574412.161:9857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 1853.378204][T28312] veth0_vlan: entered promiscuous mode [ 1853.438361][ T30] audit: type=1326 audit(1751574412.161:9858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 1853.458049][T28312] veth1_vlan: entered promiscuous mode [ 1853.499506][ T30] audit: type=1326 audit(1751574412.161:9859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 1853.528943][ T30] audit: type=1326 audit(1751574412.191:9860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 1853.559680][ T30] audit: type=1326 audit(1751574412.191:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 1853.584259][ T30] audit: type=1326 audit(1751574412.191:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 1853.717105][T28312] veth0_macvtap: entered promiscuous mode [ 1853.730289][ T30] audit: type=1326 audit(1751574412.191:9863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 1853.785440][T28312] veth1_macvtap: entered promiscuous mode [ 1853.871667][ T30] audit: type=1326 audit(1751574412.191:9864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 1853.908781][T28312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1853.942586][T28312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1853.987794][T28312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.019465][ T5888] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1854.020069][T28312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.057212][T28312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.075870][T28312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.076286][ T30] audit: type=1326 audit(1751574412.191:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28447 comm="syz.4.22304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 1854.189839][T23158] Bluetooth: hci2: command tx timeout [ 1854.372539][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 1854.383313][ T5888] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1854.394983][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.428504][ T5888] usb 6-1: Product: syz [ 1854.440995][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.460097][ T5888] usb 6-1: Manufacturer: syz [ 1854.467139][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.478994][ T5888] usb 6-1: SerialNumber: syz [ 1854.528545][ T5888] usb 6-1: config 0 descriptor?? [ 1854.546981][ T5888] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1854.626851][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.668224][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.319408][T21995] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1855.472420][T21995] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.491486][T21995] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1855.512188][T21995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.550949][T21995] usb 4-1: config 0 descriptor?? [ 1855.578114][ T5888] gspca_sq905: bulk read fail (-22) len 0/4 [ 1855.587832][ T5888] sq905 6-1:0.0: probe with driver sq905 failed with error -5 [ 1855.588563][T21995] pwc: Askey VC010 type 2 USB webcam detected. [ 1855.844827][T12374] usb 6-1: USB disconnect, device number 33 [ 1856.020736][T21995] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1856.051633][T21995] pwc: recv_control_msg error -32 req 02 val 2700 [ 1856.077717][T21995] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1856.301668][T21995] pwc: recv_control_msg error -71 req 04 val 1300 [ 1856.345776][T21995] pwc: recv_control_msg error -71 req 04 val 1400 [ 1856.356753][T21995] pwc: recv_control_msg error -71 req 02 val 2000 [ 1856.376767][T21995] pwc: recv_control_msg error -71 req 02 val 2100 [ 1856.394080][T21995] pwc: recv_control_msg error -71 req 04 val 1500 [ 1856.406539][T28498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1856.410823][T21995] pwc: recv_control_msg error -71 req 02 val 2500 [ 1856.448073][T21995] pwc: recv_control_msg error -71 req 02 val 2400 [ 1856.480076][T21995] pwc: recv_control_msg error -71 req 02 val 2600 [ 1856.496945][T21995] pwc: recv_control_msg error -71 req 02 val 2900 [ 1856.527482][T21995] pwc: recv_control_msg error -71 req 02 val 2800 [ 1856.548496][T21995] pwc: recv_control_msg error -71 req 04 val 1100 [ 1856.580342][T21995] pwc: recv_control_msg error -71 req 04 val 1200 [ 1856.598019][T21995] pwc: Registered as video103. [ 1856.617333][T21995] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input227 [ 1856.690288][T21995] usb 4-1: USB disconnect, device number 87 [ 1857.633673][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1858.450468][T28559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1859.774084][T28581] netlink: 'syz.4.22337': attribute type 11 has an invalid length. [ 1860.230971][T28594] bridge0: entered promiscuous mode [ 1860.262082][T28594] batman_adv: batadv0: Adding interface: macsec3 [ 1860.268499][T28594] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.340352][T28594] batman_adv: batadv0: Interface activated: macsec3 [ 1861.967763][T28654] bridge0: entered promiscuous mode [ 1862.001950][T28654] batman_adv: batadv0: Adding interface: macsec1 [ 1862.029018][T28654] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.106868][T28654] batman_adv: batadv0: Interface activated: macsec1 [ 1863.400109][T12196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1863.439204][T21995] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1863.611850][T21995] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1863.629372][T21995] usb 5-1: config 0 has no interface number 0 [ 1863.651371][T21995] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1863.671051][T21995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.687621][T21995] usb 5-1: Product: syz [ 1863.693018][T21995] usb 5-1: Manufacturer: syz [ 1863.697829][T21995] usb 5-1: SerialNumber: syz [ 1863.729867][T21995] usb 5-1: config 0 descriptor?? [ 1864.199444][T21995] usb 5-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 1864.406599][T21995] usb 5-1: Read permanent extended address 00:00:00:00:00:00:00:4f from device [ 1864.424594][T21995] usb 5-1: atusb_probe: initialization failed, error = -524 [ 1864.438630][T21995] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 1864.644112][T21995] usb 5-1: USB disconnect, device number 100 [ 1865.434794][T28733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22384'. [ 1866.462504][T28772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22401'. [ 1866.590426][T28774] wireguard0: entered promiscuous mode [ 1866.598799][T28774] wireguard0: entered allmulticast mode [ 1867.468650][T28801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22412'. [ 1867.506382][T28802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22422'. [ 1869.168342][ T3466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1869.982685][ T5048] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1870.161346][ T5048] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1870.189614][ T5048] usb 4-1: config 0 has no interface number 0 [ 1870.205221][ T5048] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1870.236872][ T5048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.265613][ T5048] usb 4-1: Product: syz [ 1870.272833][ T5048] usb 4-1: Manufacturer: syz [ 1870.287557][ T5048] usb 4-1: SerialNumber: syz [ 1870.313072][ T5048] usb 4-1: config 0 descriptor?? [ 1870.413575][T28875] syzkaller1: entered promiscuous mode [ 1870.419491][T28875] syzkaller1: entered allmulticast mode [ 1870.760270][ T5048] usb 4-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 1870.962286][ T5048] usb 4-1: Read permanent extended address 00:00:00:00:00:00:00:4f from device [ 1870.972483][ T5048] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1870.980942][ T5048] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 1871.185284][ T5048] usb 4-1: USB disconnect, device number 88 [ 1872.460745][T21995] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1872.679674][T21995] usb 6-1: Using ep0 maxpacket: 16 [ 1872.701430][T21995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.729844][T21995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.759017][T21995] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1872.785120][T21995] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1872.814039][T21995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.844632][T21995] usb 6-1: config 0 descriptor?? [ 1873.273276][T21995] HID 045e:07da: Invalid code 65791 type 1 [ 1873.300012][T21995] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0161/input/input228 [ 1873.336172][T21995] microsoft 0003:045E:07DA.0161: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1873.530991][T21995] usb 6-1: USB disconnect, device number 34 [ 1874.252333][ T30] kauditd_printk_skb: 360 callbacks suppressed [ 1874.252351][ T30] audit: type=1326 audit(1751574433.101:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.5.22484" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x0 [ 1874.716537][T28983] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 1874.723373][T28983] syzkaller0: group set to 0 [ 1874.910601][T22225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1875.075241][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22490'. [ 1875.495082][T29010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22499'. [ 1875.550237][T21995] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1875.608094][T29015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22501'. [ 1875.733553][T21995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.769171][T21995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.799179][T21995] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1875.808298][T21995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.830754][T29020] binder: 29019:29020 ioctl c0306201 800003c0 returned -14 [ 1875.870720][T21995] usb 3-1: config 0 descriptor?? [ 1876.472616][T29038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22510'. [ 1876.493333][T29038] netlink: 'syz.4.22510': attribute type 5 has an invalid length. [ 1876.724906][T21995] hid-led 0003:27B8:01ED.0162: probe with driver hid-led failed with error -71 [ 1876.790220][T21995] usb 3-1: USB disconnect, device number 93 [ 1877.899438][ T5888] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1877.962997][T29078] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1878.069766][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 1878.080518][ T5888] usb 3-1: config 0 has no interfaces? [ 1878.107206][ T5888] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1878.133982][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.152036][ T5888] usb 3-1: Product: syz [ 1878.156261][ T5888] usb 3-1: Manufacturer: syz [ 1878.162032][ T5888] usb 3-1: SerialNumber: syz [ 1878.177482][ T5888] usb 3-1: config 0 descriptor?? [ 1878.380039][T17007] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1878.397626][ T5048] usb 3-1: USB disconnect, device number 94 [ 1878.552773][T17007] usb 5-1: Using ep0 maxpacket: 32 [ 1878.565756][T17007] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 1878.579248][T21995] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1878.583170][T17007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.598848][T17007] usb 5-1: Product: syz [ 1878.604255][T17007] usb 5-1: Manufacturer: syz [ 1878.610911][T17007] usb 5-1: SerialNumber: syz [ 1878.619966][T17007] usb 5-1: config 0 descriptor?? [ 1878.628891][T17007] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1878.770173][T21995] usb 6-1: Using ep0 maxpacket: 8 [ 1878.780127][T21995] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1878.790810][T21995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1878.805735][T21995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1878.816151][T21995] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1878.848967][ T5048] usb 5-1: USB disconnect, device number 101 [ 1878.856807][T21995] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1878.882839][T21995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.074779][ T30] audit: type=1326 audit(1751574437.921:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.101660][ T30] audit: type=1326 audit(1751574437.921:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.107493][T21995] usb 6-1: GET_CAPABILITIES returned 0 [ 1879.142998][T21995] usbtmc 6-1:16.0: can't read capabilities [ 1879.159535][ T30] audit: type=1326 audit(1751574437.921:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.200344][ T30] audit: type=1326 audit(1751574437.921:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.228836][ T30] audit: type=1326 audit(1751574437.921:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.251177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1879.262901][ T30] audit: type=1326 audit(1751574437.921:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.285186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1879.292635][ T30] audit: type=1326 audit(1751574437.921:10233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.316387][ T30] audit: type=1326 audit(1751574437.921:10234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.338657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1879.346245][ T30] audit: type=1326 audit(1751574437.921:10235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.359572][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.368650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1879.377911][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.392837][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.460790][ T30] audit: type=1326 audit(1751574437.921:10236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.464334][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.492554][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.501670][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.511631][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.520775][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.529854][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.538913][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.548778][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.557880][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.566955][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.577286][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.586425][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.595547][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1879.600765][T29115] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1879.622655][ T30] audit: type=1326 audit(1751574437.921:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.2.22545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1879.647840][T21995] usb 6-1: USB disconnect, device number 35 [ 1880.604894][T29153] netlink: 'syz.4.22566': attribute type 10 has an invalid length. [ 1880.670311][T12196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1880.683717][T29153] veth0_vlan: left promiscuous mode [ 1880.732449][T29153] veth0_vlan: entered promiscuous mode [ 1880.755546][T29153] team0: Device veth0_vlan failed to register rx_handler [ 1880.939262][ T5048] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1880.990977][T29167] input: syz1 as /devices/virtual/input/input229 [ 1881.112929][ T5048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.141834][ T5048] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1881.182319][ T5048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.223589][ T5048] usb 4-1: config 0 descriptor?? [ 1881.444069][ T5048] usbhid 4-1:0.0: can't add hid device: -71 [ 1881.459326][ T5048] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1881.477636][ T5048] usb 4-1: USB disconnect, device number 89 [ 1881.969844][ T5048] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1882.142561][ T5048] usb 4-1: Using ep0 maxpacket: 32 [ 1882.162193][ T5048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.184762][ T5048] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1882.194776][ T5048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.209746][ T5048] usb 4-1: config 0 descriptor?? [ 1882.229426][ T5048] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1882.264510][ T5048] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1882.468341][ C0] ldusb 4-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1882.692843][ T30] audit: type=1326 audit(1751574441.541:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29202 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1882.739284][ T30] audit: type=1326 audit(1751574441.581:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29202 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1882.801790][ C0] ldusb 4-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1882.827101][ T30] audit: type=1326 audit(1751574441.581:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29202 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1882.851447][ T30] audit: type=1326 audit(1751574441.581:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29202 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1883.029582][T17007] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1883.179821][T17007] usb 3-1: Using ep0 maxpacket: 32 [ 1883.193715][T17007] usb 3-1: config 32 has an invalid interface number: 76 but max is 0 [ 1883.203045][T17007] usb 3-1: config 32 has no interface number 0 [ 1883.210114][T17007] usb 3-1: config 32 interface 76 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 1883.223770][T17007] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.e3 [ 1883.243105][T17007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.270976][T17007] usbtest 3-1:32.76: Linux gadget zero [ 1883.283405][T17007] usbtest 3-1:32.76: high-speed {control in/out int-out} tests (+alt) [ 1883.589208][T21995] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1883.751560][T21995] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1883.763693][T21995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1883.774847][T21995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1883.784811][T21995] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1883.798587][T21995] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1883.807834][T21995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.823516][T21995] usb 6-1: config 0 descriptor?? [ 1883.857506][T17007] usb 4-1: USB disconnect, device number 90 [ 1883.873127][T17007] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1884.022553][ T5910] usb 3-1: USB disconnect, device number 95 [ 1884.277192][T21995] plantronics 0003:047F:FFFF.0163: ignoring exceeding usage max [ 1884.343025][T21995] plantronics 0003:047F:FFFF.0163: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1884.401150][T29230] loop6: detected capacity change from 0 to 1 [ 1884.429936][T29230] Dev loop6: unable to read RDB block 1 [ 1884.435626][T29230] loop6: unable to read partition table [ 1884.465810][T29230] loop6: partition table beyond EOD, truncated [ 1884.501783][T29230] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1884.871024][T29247] netlink: 7 bytes leftover after parsing attributes in process `syz.2.22605'. [ 1885.250048][ T5888] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1885.429680][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 1885.451815][T29265] kvm: Disabled LAPIC found during irq injection [ 1885.451876][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.477910][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.500445][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1885.524613][ T5888] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1885.547433][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.581458][ T5888] usb 5-1: config 0 descriptor?? [ 1885.611261][T29270] netlink: 'syz.0.22615': attribute type 11 has an invalid length. [ 1886.055211][ T5888] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0164/input/input230 [ 1886.143344][ T5888] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0164/input/input231 [ 1886.224611][T29253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.224633][ T5888] kye 0003:0458:5011.0164: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 1886.332615][T29253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.431536][T28366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1886.552619][ T5888] usb 5-1: USB disconnect, device number 102 [ 1886.719428][T17007] usb 6-1: reset high-speed USB device number 36 using dummy_hcd [ 1886.880029][T17007] usb 6-1: device firmware changed [ 1886.892046][T24824] usb 6-1: USB disconnect, device number 36 [ 1887.069914][T24824] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1887.281276][T24824] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1887.290620][T24824] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1887.319660][T24824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1887.370511][T24824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1887.415626][T24824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1887.467523][T24824] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1887.493802][T24824] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1887.557083][T24824] usb 6-1: Product: syz [ 1887.564259][T24824] usb 6-1: Manufacturer: syz [ 1887.641513][T24824] cdc_wdm 6-1:1.0: skipping garbage [ 1887.657323][T24824] cdc_wdm 6-1:1.0: skipping garbage [ 1887.667682][T24824] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1887.676082][T24824] cdc_wdm 6-1:1.0: Unknown control protocol [ 1888.056346][T29334] input: syz0 as /devices/virtual/input/input232 [ 1888.134574][ T5910] usb 6-1: USB disconnect, device number 37 [ 1888.354633][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22644'. [ 1888.582499][T29350] kvm: user requested TSC rate below hardware speed [ 1888.661345][T29347] hsr0: left promiscuous mode [ 1888.989518][T17007] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1889.152203][T17007] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1889.170344][T17007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.182642][T17007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.193339][T17007] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1889.208461][T17007] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1889.218065][T17007] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1889.227035][T17007] usb 3-1: Manufacturer: syz [ 1889.246324][T17007] usb 3-1: config 0 descriptor?? [ 1889.403392][T29370] kvm: Disabled LAPIC found during irq injection [ 1889.714852][T17007] appleir 0003:05AC:8243.0165: unknown main item tag 0x0 [ 1889.737768][T17007] appleir 0003:05AC:8243.0165: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1891.550277][T22225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1891.999442][T21995] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1892.141299][T17007] usb 3-1: USB disconnect, device number 96 [ 1892.149553][T21995] usb 5-1: Using ep0 maxpacket: 8 [ 1892.164192][T21995] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1892.197031][T21995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1892.240145][T29440] netlink: 'syz.0.22682': attribute type 10 has an invalid length. [ 1892.255742][T21995] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 61192, setting to 1024 [ 1892.269738][T21995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1892.286082][T21995] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1892.303351][T21995] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1892.336176][T29440] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1892.343944][T21995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.589640][T21995] usb 5-1: GET_CAPABILITIES returned 0 [ 1892.605959][T21995] usbtmc 5-1:16.0: can't read capabilities [ 1892.807400][ T5048] usb 5-1: USB disconnect, device number 103 [ 1892.929551][T21995] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1893.053502][T29462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.061148][T29462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.105457][T21995] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1893.115301][T21995] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1893.127354][T21995] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1893.144668][T21995] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1893.154956][T21995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1893.163740][T21995] usb 6-1: Product: syz [ 1893.168269][T21995] usb 6-1: Manufacturer: syz [ 1893.176123][T21995] usb 6-1: SerialNumber: syz [ 1893.415533][T29462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1893.447830][T21995] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1893.492319][T29462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1893.680224][T17007] usb 6-1: USB disconnect, device number 38 [ 1893.692738][T17007] usblp0: removed [ 1893.770615][T29462] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.849355][T29462] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.888991][T29462] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.938407][T29462] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.206841][ T48] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1894.362477][ T48] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1894.399634][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1894.421639][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1894.459331][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.467496][ T48] usb 3-1: Product: syz [ 1894.496016][ T48] usb 3-1: Manufacturer: syz [ 1894.502784][ T48] usb 3-1: SerialNumber: syz [ 1894.756797][T29491] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1894.819487][T29464] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1894.833268][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1894.833286][ T30] audit: type=1326 audit(1751574453.681:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29505 comm="syz.4.22701" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f68539 code=0x0 [ 1894.981614][T29464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1894.993595][T29464] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1895.008291][T29464] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1895.019357][T29464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.031032][T29464] usb 6-1: config 0 descriptor?? [ 1895.037039][T29502] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1895.372220][T29491] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1895.538700][T29464] usbhid 6-1:0.0: can't add hid device: -71 [ 1895.580542][T29464] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1895.582673][ T48] cdc_ncm 3-1:1.0: bind() failure [ 1895.646580][ T48] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1895.650019][T29464] usb 6-1: USB disconnect, device number 39 [ 1895.698337][ T48] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1895.730280][ T48] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1895.757637][ T48] usb 3-1: USB disconnect, device number 97 [ 1896.053143][T29523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22706'. [ 1896.504995][T29464] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1896.715318][T29464] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.748268][T29464] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1896.771893][T29464] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1896.807774][T29464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.842833][T29464] usb 4-1: config 0 descriptor?? [ 1896.852986][T29464] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1896.881554][T29549] netlink: 'syz.2.22716': attribute type 10 has an invalid length. [ 1896.962632][T29549] veth0_vlan: left promiscuous mode [ 1896.995075][T29549] veth0_vlan: entered promiscuous mode [ 1897.057240][T29549] team0: Device veth0_vlan failed to register rx_handler [ 1897.218801][T29464] usb 4-1: USB disconnect, device number 91 [ 1897.311605][T12196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1897.692002][T29563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22724'. [ 1897.855701][T12196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.191580][T12196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.241503][T29573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.22727'. [ 1898.297397][T29568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22727'. [ 1898.482518][T12196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.607286][T29582] netlink: 'syz.2.22731': attribute type 10 has an invalid length. [ 1898.930298][T12196] bond0: (slave netdevsim0): Releasing backup interface [ 1898.966669][T23483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1898.980469][T23483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1898.990618][T23483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1899.003350][T12196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.022709][T23483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1899.036706][T23483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1899.174355][T29586] bond0: left promiscuous mode [ 1899.179719][T29586] bond_slave_0: left promiscuous mode [ 1899.185536][T29586] bond_slave_1: left promiscuous mode [ 1899.191633][T29586] syz_tun: left promiscuous mode [ 1899.197408][T29586] batadv0: left promiscuous mode [ 1899.293453][T29586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1899.315620][T29586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1899.349734][ T5903] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1899.427252][T29586] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.438090][T29586] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.447811][T29586] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.457872][T29586] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.496502][T29586] bond1: left promiscuous mode [ 1899.509475][T29586] bond2: left promiscuous mode [ 1899.519813][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 1899.533755][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1899.550627][ T5903] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1899.576877][T29586] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.587657][T29586] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.596861][T29586] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.606355][T29586] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.616316][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.630059][ T5903] usb 4-1: config 0 descriptor?? [ 1899.856512][ T5903] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1900.128108][T12196] bridge_slave_1: left allmulticast mode [ 1900.135883][T12196] bridge_slave_1: left promiscuous mode [ 1900.150154][T12196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.173349][T12196] bridge_slave_0: left allmulticast mode [ 1900.186352][T12196] bridge_slave_0: left promiscuous mode [ 1900.194217][T12196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.269330][ T5903] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1900.353556][T29623] netlink: 'syz.5.22746': attribute type 10 has an invalid length. [ 1900.430713][T17007] usb 4-1: USB disconnect, device number 92 [ 1900.449161][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 1900.459657][ T5903] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1900.473191][ T5903] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1900.492847][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1900.532692][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1900.543155][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1900.553580][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1900.586615][ T5903] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1900.597776][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.629736][ T5903] usb 5-1: config 0 descriptor?? [ 1900.865880][ T5903] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1900.988287][T12196] batman_adv: batadv0: Interface deactivated: macsec1 [ 1901.044777][T12196] batman_adv: batadv0: Removing interface: macsec1 [ 1901.070459][T23158] Bluetooth: hci0: command tx timeout [ 1901.099435][ T5903] usb 5-1: USB disconnect, device number 104 [ 1901.115487][ T5903] usblp0: removed [ 1901.435288][T12196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1901.446666][T12196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1901.457212][T12196] bond0 (unregistering): Released all slaves [ 1901.476322][T12196] bond1 (unregistering): Released all slaves [ 1901.639700][T12196] bond2 (unregistering): Released all slaves [ 1901.762669][T29623] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1902.927140][T29597] chnl_net:caif_netlink_parms(): no params data found [ 1903.073789][ T3466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1903.143042][T29683] sit0: left promiscuous mode [ 1903.155484][T23158] Bluetooth: hci0: command tx timeout [ 1903.536040][T29683] hsr0: left promiscuous mode [ 1903.642551][T29683] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.659562][T29683] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.668546][T29683] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.682871][T29683] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.710714][T29683] hsr1: left promiscuous mode [ 1903.716626][T29683] ipvlan2: left promiscuous mode [ 1903.724154][T29683] gretap0: left allmulticast mode [ 1903.729962][T29683] macsec2: left promiscuous mode [ 1903.741299][T29683] batman_adv: batadv0: Interface deactivated: macsec3 [ 1903.908334][T12196] hsr_slave_0: left promiscuous mode [ 1903.951636][T12196] hsr_slave_1: left promiscuous mode [ 1903.958242][T12196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1903.967058][T12196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1903.996850][T12196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1904.006843][T12196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1904.062473][T12196] veth1_macvtap: left promiscuous mode [ 1904.074180][T12196] veth0_macvtap: left promiscuous mode [ 1904.085923][T12196] veth1_vlan: left promiscuous mode [ 1904.103958][T12196] veth0_vlan: left promiscuous mode [ 1905.081558][T12196] team0 (unregistering): Port device team_slave_1 removed [ 1905.157409][T12196] team0 (unregistering): Port device team_slave_0 removed [ 1905.235333][T23158] Bluetooth: hci0: command tx timeout [ 1906.180526][ T30] audit: type=1326 audit(1751574465.031:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29740 comm="syz.5.22779" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe4539 code=0x0 [ 1906.253922][T29747] netlink: 'syz.3.22781': attribute type 10 has an invalid length. [ 1906.316128][T29597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.344208][T29597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.411447][T29597] bridge_slave_0: entered allmulticast mode [ 1906.450875][T29597] bridge_slave_0: entered promiscuous mode [ 1906.510566][T29747] veth0_vlan: left promiscuous mode [ 1906.619642][T29747] veth0_vlan: entered promiscuous mode [ 1906.635753][T29747] team0: Device veth0_vlan failed to register rx_handler [ 1906.728941][T29597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.744711][T29597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.763178][T29597] bridge_slave_1: entered allmulticast mode [ 1906.776867][T29597] bridge_slave_1: entered promiscuous mode [ 1907.021394][T29597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1907.090962][T29597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.309924][T23158] Bluetooth: hci0: command tx timeout [ 1907.359794][ T5903] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1907.544548][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1907.566051][ T5903] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1907.580008][T29597] team0: Port device team_slave_0 added [ 1907.631681][T29597] team0: Port device team_slave_1 added [ 1907.638915][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.690477][ T5903] usb 6-1: config 0 descriptor?? [ 1907.872293][T29597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1907.896436][T29597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1907.992756][ T5903] usbhid 6-1:0.0: can't add hid device: -71 [ 1907.998842][ T5903] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1908.012069][T29597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.039627][ T5903] usb 6-1: USB disconnect, device number 40 [ 1908.137728][T29597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.166097][T29597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.216458][T28366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1908.237478][T29597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.434444][T29597] hsr_slave_0: entered promiscuous mode [ 1908.459860][T29597] hsr_slave_1: entered promiscuous mode [ 1908.478553][T29597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1908.496844][T29597] Cannot create hsr debugfs directory [ 1908.529469][ T5903] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1908.732746][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 1908.758761][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1908.799522][ T5903] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1908.808727][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.849485][ T5903] usb 6-1: config 0 descriptor?? [ 1908.913885][ T5903] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1908.980532][ T5903] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1909.059348][ T30] audit: type=1326 audit(1751574467.901:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.22799" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 1909.115290][T29801] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 1909.135933][T29801] syzkaller0: group set to 0 [ 1909.162614][ C1] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1909.299783][T29466] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1909.470805][T29466] usb 5-1: Using ep0 maxpacket: 32 [ 1909.492495][ C0] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1909.495828][T29466] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1909.531864][T29466] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1909.545352][T29466] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1909.564006][T29466] usb 5-1: Product: syz [ 1909.572933][T29466] usb 5-1: Manufacturer: syz [ 1909.583334][T29466] usb 5-1: SerialNumber: syz [ 1909.605023][T29466] usb 5-1: config 0 descriptor?? [ 1909.634085][T29805] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1909.672406][T29466] hub 5-1:0.0: bad descriptor, ignoring hub [ 1909.692836][T29466] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1909.899802][ T30] audit: type=1326 audit(1751574468.741:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29822 comm="syz.2.22802" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f88539 code=0x0 [ 1910.059609][ T5903] usb 5-1: USB disconnect, device number 105 [ 1910.303359][T29597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1910.326359][T29597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1910.343773][T29597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1910.355592][T29597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1910.409330][ T5903] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1910.495605][T29597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.555239][ T48] usb 6-1: USB disconnect, device number 41 [ 1910.564772][T29597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1910.585395][ T48] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1910.599747][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 1910.617468][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.624722][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.645142][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1910.693216][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.700440][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1910.729801][ T5903] usb 5-1: string descriptor 0 read error: -22 [ 1910.736325][ T5903] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1910.759003][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1910.769350][T29464] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1910.802477][ T5903] usb 5-1: config 0 descriptor?? [ 1910.809847][T29805] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1910.847659][ T5903] hub 5-1:0.0: bad descriptor, ignoring hub [ 1910.867255][ T5903] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1910.944740][T29464] usb 4-1: Using ep0 maxpacket: 8 [ 1910.953590][T29464] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1910.970708][T29464] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1910.990966][T29464] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1911.002299][T29464] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1911.026691][T29464] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1911.060528][T29464] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1911.078493][T29464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.117373][T29597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.190243][ T5903] usb 5-1: USB disconnect, device number 106 [ 1911.233842][T29597] veth0_vlan: entered promiscuous mode [ 1911.268030][T29597] veth1_vlan: entered promiscuous mode [ 1911.312389][T29464] usb 4-1: GET_CAPABILITIES returned 0 [ 1911.318156][T29464] usbtmc 4-1:16.0: can't read capabilities [ 1911.385870][T29597] veth0_macvtap: entered promiscuous mode [ 1911.422940][T29597] veth1_macvtap: entered promiscuous mode [ 1911.503057][T29597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1911.562252][T29597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1911.583399][T29597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.606039][T29597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.625684][T29597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.644123][T29597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.653687][T29845] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 1911.655214][T17007] usb 4-1: USB disconnect, device number 93 [ 1911.695081][T29873] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -19 [ 1911.935741][T28366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.958745][T28366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1912.036281][T22225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.056090][T22225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1912.063809][T29464] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1912.231736][T29464] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.247285][T29464] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1912.268366][T29464] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1912.287565][T29464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.309873][T29464] usb 5-1: config 0 descriptor?? [ 1912.333698][T29464] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1912.722723][T29464] usb 5-1: USB disconnect, device number 107 [ 1913.952875][T12196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1914.593964][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.604970][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.894604][ T30] audit: type=1326 audit(1751574473.731:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4558 code=0x7ffc0000 [ 1914.979371][T29465] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1915.045414][ T30] audit: type=1326 audit(1751574473.731:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1915.091020][ T30] audit: type=1326 audit(1751574473.731:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4558 code=0x7ffc0000 [ 1915.119780][ T30] audit: type=1326 audit(1751574473.731:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1915.172893][T29465] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1915.229468][ T30] audit: type=1326 audit(1751574473.731:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4558 code=0x7ffc0000 [ 1915.269457][T29465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.289704][T29465] usb 4-1: Product: syz [ 1915.294036][T29465] usb 4-1: Manufacturer: syz [ 1915.298683][T29465] usb 4-1: SerialNumber: syz [ 1915.326483][ T30] audit: type=1326 audit(1751574473.731:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1915.352225][T29465] usb 4-1: config 0 descriptor?? [ 1915.386048][ T30] audit: type=1326 audit(1751574473.731:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4558 code=0x7ffc0000 [ 1915.478278][ T30] audit: type=1326 audit(1751574473.731:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1915.618887][ T30] audit: type=1326 audit(1751574473.731:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4558 code=0x7ffc0000 [ 1915.652868][T29977] input: syz1 as /devices/virtual/input/input233 [ 1915.770507][ T30] audit: type=1326 audit(1751574473.731:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.22833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1915.869917][ T48] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1916.029473][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 1916.142360][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.196126][ T48] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1916.250058][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1916.292201][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1916.342296][ T48] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1916.368284][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.411910][ T48] usb 3-1: Product: syz [ 1916.432459][ T48] usb 3-1: Manufacturer: syz [ 1916.455461][ T48] usb 3-1: SerialNumber: syz [ 1916.485390][ T48] usb 3-1: config 0 descriptor?? [ 1916.615284][T29465] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1916.666889][T29465] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1916.683200][ T48] rc_core: IR keymap rc-xbox-dvd not found [ 1916.703940][ T48] Registered IR keymap rc-empty [ 1916.744947][ T48] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1916.759758][T29465] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1916.807968][ T48] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input234 [ 1916.829859][T29465] usb 4-1: USB disconnect, device number 94 [ 1918.407799][T21995] usb 3-1: USB disconnect, device number 98 [ 1918.407823][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1919.710130][T22225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1920.161457][T30078] kvm: user requested TSC rate below hardware speed [ 1922.001554][T30131] kvm: user requested TSC rate below hardware speed [ 1922.039286][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 1922.039305][ T30] audit: type=1326 audit(1751574480.881:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88558 code=0x7ffc0000 [ 1922.182772][ T30] audit: type=1326 audit(1751574480.881:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88558 code=0x7ffc0000 [ 1922.303186][ T30] audit: type=1326 audit(1751574480.921:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88558 code=0x7ffc0000 [ 1922.367319][ T30] audit: type=1326 audit(1751574480.921:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1922.399379][ T30] audit: type=1326 audit(1751574480.921:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88558 code=0x7ffc0000 [ 1922.529662][ T30] audit: type=1326 audit(1751574480.921:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1922.578717][ T30] audit: type=1326 audit(1751574480.921:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1922.605548][T30143] loop8: detected capacity change from 0 to 7 [ 1922.622199][T30143] Dev loop8: unable to read RDB block 7 [ 1922.627804][T30143] loop8: unable to read partition table [ 1922.642192][T30143] loop8: partition table beyond EOD, truncated [ 1922.648440][T30143] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1922.663303][ T30] audit: type=1326 audit(1751574480.921:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88558 code=0x7ffc0000 [ 1922.695878][ T30] audit: type=1326 audit(1751574480.921:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1922.779583][ T30] audit: type=1326 audit(1751574480.921:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30122 comm="syz.2.22885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88558 code=0x7ffc0000 [ 1922.838247][T30147] Dev loop8: unable to read RDB block 7 [ 1922.859751][T30147] loop8: unable to read partition table [ 1922.866267][T30147] loop8: partition table beyond EOD, truncated [ 1922.901122][T30147] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1923.627563][T30161] batadv_slave_1: entered promiscuous mode [ 1923.657479][T30160] batadv_slave_1: left promiscuous mode [ 1924.019876][ T48] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1924.191091][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 1924.212778][ T48] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1924.241791][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.283723][ T48] usb 3-1: config 0 has no interface number 0 [ 1924.306935][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1924.338699][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.377836][ T48] usb 3-1: Product: syz [ 1924.401709][ T48] usb 3-1: Manufacturer: syz [ 1924.406391][ T48] usb 3-1: SerialNumber: syz [ 1924.457444][ T48] usb 3-1: config 0 descriptor?? [ 1924.471977][ T48] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1924.494248][ T48] usb 3-1: No valid video chain found. [ 1924.630236][T29465] psmouse serio11: Failed to reset mouse on : -5 [ 1924.727440][T29464] usb 3-1: USB disconnect, device number 99 [ 1925.122280][T21995] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1925.290585][T21995] usb 6-1: Using ep0 maxpacket: 8 [ 1925.305247][T21995] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1925.329248][T21995] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1925.367162][T21995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1925.384333][T30207] loop8: detected capacity change from 0 to 79 [ 1925.385384][T21995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1925.441993][T21995] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1925.462653][T21995] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1925.474629][ T3466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1925.489332][T30207] loop8: detected capacity change from 79 to 78 [ 1925.495912][T21995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.742100][T21995] usb 6-1: GET_CAPABILITIES returned 0 [ 1925.747921][T21995] usbtmc 6-1:16.0: can't read capabilities [ 1926.117040][T30194] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 1926.117574][T17007] usb 6-1: USB disconnect, device number 42 [ 1926.136715][T30226] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -19 [ 1926.811678][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22937'. [ 1926.834840][T30248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22937'. [ 1928.084528][ T30] kauditd_printk_skb: 470 callbacks suppressed [ 1928.084549][ T30] audit: type=1326 audit(1751574486.931:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 1928.181273][ T30] audit: type=1326 audit(1751574486.961:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1928.204564][ T30] audit: type=1326 audit(1751574486.961:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 1928.227442][ T30] audit: type=1326 audit(1751574486.961:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1928.259292][ T30] audit: type=1326 audit(1751574486.971:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 1928.282260][ T30] audit: type=1326 audit(1751574486.971:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 1928.305832][ T30] audit: type=1326 audit(1751574486.971:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 1928.453406][T29465] misc userio: Buffer overflowed, userio client isn't keeping up [ 1928.549870][ T30] audit: type=1326 audit(1751574486.971:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1928.649158][ T30] audit: type=1326 audit(1751574486.971:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 1928.749176][ T30] audit: type=1326 audit(1751574486.971:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30273 comm="syz.3.22946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 1928.907492][T30290] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1929.139397][T21995] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1929.305125][T21995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.320741][T21995] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1929.330629][T21995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.342234][T21995] usb 3-1: config 0 descriptor?? [ 1929.479670][T29464] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1929.521205][T29465] input: PS/2 Generic Mouse as /devices/serio11/input/input235 [ 1929.592894][T21995] usbhid 3-1:0.0: can't add hid device: -71 [ 1929.606090][T21995] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1929.637938][T21995] usb 3-1: USB disconnect, device number 100 [ 1929.644491][T29464] usb 4-1: Using ep0 maxpacket: 8 [ 1929.663374][T29464] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1929.687418][T29464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.720164][T29464] usb 4-1: config 0 descriptor?? [ 1929.740313][T29465] psmouse serio11: Failed to enable mouse on [ 1929.937127][T29464] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1930.119283][T21995] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1930.320714][T21995] usb 3-1: Using ep0 maxpacket: 16 [ 1930.333943][T21995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.362947][T21995] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1930.386826][T21995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.427268][T21995] usb 3-1: config 0 descriptor?? [ 1930.892272][T21995] mcp2221 0003:04D8:00DD.0166: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1930.953809][T29464] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1930.974211][T29464] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1931.019352][T29464] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1931.050736][T29464] usb 4-1: USB disconnect, device number 95 [ 1931.230489][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1931.331526][T29464] usb 3-1: USB disconnect, device number 101 [ 1932.199938][T29464] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1932.383605][T29464] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1932.423011][T29464] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1932.489689][T29464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1932.547830][T29464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1932.571326][T30343] netlink: 'syz.4.22975': attribute type 2 has an invalid length. [ 1932.587489][T29464] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1932.652851][T29464] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1932.682553][T29464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.755879][T29464] usb 4-1: config 0 descriptor?? [ 1932.809638][T30331] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1933.286387][T29464] plantronics 0003:047F:FFFF.0167: reserved main item tag 0xd [ 1933.361135][T29464] plantronics 0003:047F:FFFF.0167: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1933.564460][T29465] usb 4-1: USB disconnect, device number 96 [ 1933.607829][T30351] fido_id[30351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1934.449750][ T5048] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1934.801530][ T5048] usb 3-1: config index 0 descriptor too short (expected 32786, got 18) [ 1934.813423][ T5048] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1934.837473][ T5048] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 1934.869256][ T5048] usb 3-1: Manufacturer: syz [ 1934.902443][ T5048] usb 3-1: config 0 descriptor?? [ 1934.937761][ T5048] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1934.965034][ T5048] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1935.024219][ T1153] tipc: Subscription rejected, illegal request [ 1935.148481][T29465] usb 3-1: USB disconnect, device number 102 [ 1935.171120][T29465] ftdi_sio 3-1:0.0: device disconnected [ 1935.333255][T30396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22990'. [ 1936.549707][T28366] tipc: Subscription rejected, illegal request [ 1937.040870][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1937.040890][ T30] audit: type=1800 audit(1751574495.891:11019): pid=30448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.23012" name="file1" dev="tmpfs" ino=2900 res=0 errno=0 [ 1937.174443][T30452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23013'. [ 1937.629993][T21995] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1937.793162][T21995] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1937.817258][T21995] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1937.877880][T21995] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1937.899854][T21995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.194672][T21995] usb 5-1: usb_control_msg returned -32 [ 1938.219641][T21995] usbtmc 5-1:16.0: can't read capabilities [ 1938.319513][T29464] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1938.412033][T22225] tipc: Subscription rejected, illegal request [ 1938.529243][T29464] usb 6-1: Using ep0 maxpacket: 8 [ 1938.540427][T29464] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1938.548704][T29464] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1938.569991][T29464] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1938.579974][T29464] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1938.590058][T29464] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1938.619875][T29464] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1938.634540][T29464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.866317][T29464] usb 6-1: usb_control_msg returned -32 [ 1938.872774][T29464] usbtmc 6-1:16.0: can't read capabilities [ 1939.137369][T30491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23030'. [ 1939.588093][T30506] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1939.597149][T21995] usb 5-1: USB disconnect, device number 108 [ 1939.729597][T29464] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1939.919283][T29464] usb 4-1: Using ep0 maxpacket: 32 [ 1939.933409][T29464] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1939.949126][T29464] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1939.979427][T29464] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1939.990627][T29464] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1940.009531][T29464] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1940.018690][T29464] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1940.028512][T29464] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1940.037445][T29464] usb 4-1: Product: syz [ 1940.042040][T29464] usb 4-1: Manufacturer: syz [ 1940.046677][T29464] usb 4-1: SerialNumber: syz [ 1940.056391][T29464] usb 4-1: config 0 descriptor?? [ 1940.070780][T29464] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1940.083071][T29464] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1940.191233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1940.298018][T29464] usb 4-1: USB disconnect, device number 97 [ 1940.304318][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1940.375149][T29464] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1941.105273][T29464] usb 6-1: USB disconnect, device number 43 [ 1941.189507][T17007] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1941.215024][T30528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23044'. [ 1941.349178][T17007] usb 3-1: Using ep0 maxpacket: 16 [ 1941.356642][T17007] usb 3-1: config 0 has no interfaces? [ 1941.384064][T17007] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1941.414136][T17007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.433328][T17007] usb 3-1: Product: syz [ 1941.438108][T17007] usb 3-1: Manufacturer: syz [ 1941.450779][T17007] usb 3-1: SerialNumber: syz [ 1941.466679][T17007] usb 3-1: config 0 descriptor?? [ 1942.626048][T30580] [ 1942.628452][T30580] ===================================================== [ 1942.635413][T30580] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1942.642983][T30580] 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 Not tainted [ 1942.650147][T30580] ----------------------------------------------------- [ 1942.657102][T30580] syz.3.23070/30580 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1942.664920][T30580] ffff888023d1c948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1942.673655][T30580] [ 1942.673655][T30580] and this task is already holding: [ 1942.681069][T30580] ffff888021f40028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1942.690876][T30580] which would create a new lock dependency: [ 1942.696787][T30580] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1942.704928][T30580] [ 1942.704928][T30580] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1942.714393][T30580] (&client->buffer_lock){..-.}-{3:3} [ 1942.714426][T30580] [ 1942.714426][T30580] ... which became SOFTIRQ-irq-safe at: [ 1942.727513][T30580] lock_acquire+0x120/0x360 [ 1942.732123][T30580] _raw_spin_lock+0x2e/0x40 [ 1942.736725][T30580] evdev_pass_values+0xb9/0xbd0 [ 1942.741675][T30580] evdev_events+0x1e6/0x340 [ 1942.746290][T30580] input_pass_values+0x288/0x890 [ 1942.751337][T30580] input_event_dispose+0x3e5/0x6b0 [ 1942.756548][T30580] input_event+0x8c/0xc0 [ 1942.760891][T30580] hidinput_hid_event+0x132c/0x1c90 [ 1942.766184][T30580] hid_process_event+0x4be/0x620 [ 1942.771219][T30580] hid_report_raw_event+0xe91/0x16d0 [ 1942.776632][T30580] hid_input_report+0x43e/0x520 [ 1942.781586][T30580] hid_irq_in+0x47e/0x6d0 [ 1942.786009][T30580] __usb_hcd_giveback_urb+0x417/0x690 [ 1942.791480][T30580] dummy_timer+0x862/0x4550 [ 1942.796115][T30580] __hrtimer_run_queues+0x52c/0xc60 [ 1942.801423][T30580] hrtimer_run_softirq+0x187/0x2b0 [ 1942.806638][T30580] handle_softirqs+0x286/0x870 [ 1942.811502][T30580] __irq_exit_rcu+0xca/0x1f0 [ 1942.816297][T30580] irq_exit_rcu+0x9/0x30 [ 1942.820642][T30580] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1942.826375][T30580] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.832470][T30580] __read_once_word_nocheck+0x3/0x10 [ 1942.837857][T30580] unwind_next_frame+0xe39/0x2390 [ 1942.842992][T30580] arch_stack_walk+0x11c/0x150 [ 1942.847855][T30580] stack_trace_save+0x9c/0xe0 [ 1942.852669][T30580] kasan_save_track+0x3e/0x80 [ 1942.857455][T30580] __kasan_kmalloc+0x93/0xb0 [ 1942.862136][T30580] __kmalloc_cache_noprof+0x230/0x3d0 [ 1942.867600][T30580] kmem_cache_free+0x166/0x400 [ 1942.872455][T30580] exit_mmap+0x53f/0xb50 [ 1942.876795][T30580] __mmput+0x118/0x420 [ 1942.880973][T30580] exit_mm+0x1da/0x2c0 [ 1942.885138][T30580] do_exit+0x648/0x22e0 [ 1942.889396][T30580] do_group_exit+0x21c/0x2d0 [ 1942.894089][T30580] get_signal+0x1286/0x1340 [ 1942.898696][T30580] arch_do_signal_or_restart+0x9a/0x750 [ 1942.904342][T30580] exit_to_user_mode_loop+0x75/0x110 [ 1942.909731][T30580] __do_fast_syscall_32+0x1f4/0x2b0 [ 1942.915036][T30580] do_fast_syscall_32+0x34/0x80 [ 1942.919998][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1942.926427][T30580] [ 1942.926427][T30580] to a SOFTIRQ-irq-unsafe lock: [ 1942.933452][T30580] (tasklist_lock){.+.+}-{3:3} [ 1942.933483][T30580] [ 1942.933483][T30580] ... which became SOFTIRQ-irq-unsafe at: [ 1942.946193][T30580] ... [ 1942.946206][T30580] lock_acquire+0x120/0x360 [ 1942.953413][T30580] _raw_read_lock+0x36/0x50 [ 1942.958026][T30580] __do_wait+0xde/0x740 [ 1942.962315][T30580] do_wait+0x1f8/0x520 [ 1942.966498][T30580] kernel_wait+0xab/0x170 [ 1942.970940][T30580] call_usermodehelper_exec_work+0xbe/0x230 [ 1942.976968][T30580] process_scheduled_works+0xade/0x17b0 [ 1942.982637][T30580] worker_thread+0x8a0/0xda0 [ 1942.987337][T30580] kthread+0x70e/0x8a0 [ 1942.991503][T30580] ret_from_fork+0x3fc/0x770 [ 1942.996202][T30580] ret_from_fork_asm+0x1a/0x30 [ 1943.001067][T30580] [ 1943.001067][T30580] other info that might help us debug this: [ 1943.001067][T30580] [ 1943.011312][T30580] Chain exists of: [ 1943.011312][T30580] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1943.011312][T30580] [ 1943.024478][T30580] Possible interrupt unsafe locking scenario: [ 1943.024478][T30580] [ 1943.032801][T30580] CPU0 CPU1 [ 1943.038187][T30580] ---- ---- [ 1943.043572][T30580] lock(tasklist_lock); [ 1943.047844][T30580] local_irq_disable(); [ 1943.054604][T30580] lock(&client->buffer_lock); [ 1943.061989][T30580] lock(&new->fa_lock); [ 1943.068765][T30580] [ 1943.072228][T30580] lock(&client->buffer_lock); [ 1943.077285][T30580] [ 1943.077285][T30580] *** DEADLOCK *** [ 1943.077285][T30580] [ 1943.085436][T30580] 7 locks held by syz.3.23070/30580: [ 1943.090725][T30580] #0: ffff888029505118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1943.099890][T30580] #1: ffff88801df53230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1943.110142][T30580] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1943.119833][T30580] #3: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1943.129440][T30580] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1943.138636][T30580] #5: ffff888021f40028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1943.148849][T30580] #6: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1943.157931][T30580] [ 1943.157931][T30580] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1943.168353][T30580] -> (&client->buffer_lock){..-.}-{3:3} { [ 1943.174108][T30580] IN-SOFTIRQ-W at: [ 1943.178101][T30580] lock_acquire+0x120/0x360 [ 1943.184274][T30580] _raw_spin_lock+0x2e/0x40 [ 1943.190452][T30580] evdev_pass_values+0xb9/0xbd0 [ 1943.196968][T30580] evdev_events+0x1e6/0x340 [ 1943.203128][T30580] input_pass_values+0x288/0x890 [ 1943.209722][T30580] input_event_dispose+0x3e5/0x6b0 [ 1943.216498][T30580] input_event+0x8c/0xc0 [ 1943.222413][T30580] hidinput_hid_event+0x132c/0x1c90 [ 1943.229292][T30580] hid_process_event+0x4be/0x620 [ 1943.235903][T30580] hid_report_raw_event+0xe91/0x16d0 [ 1943.242880][T30580] hid_input_report+0x43e/0x520 [ 1943.249417][T30580] hid_irq_in+0x47e/0x6d0 [ 1943.255521][T30580] __usb_hcd_giveback_urb+0x417/0x690 [ 1943.262563][T30580] dummy_timer+0x862/0x4550 [ 1943.268723][T30580] __hrtimer_run_queues+0x52c/0xc60 [ 1943.275589][T30580] hrtimer_run_softirq+0x187/0x2b0 [ 1943.282376][T30580] handle_softirqs+0x286/0x870 [ 1943.288823][T30580] __irq_exit_rcu+0xca/0x1f0 [ 1943.295101][T30580] irq_exit_rcu+0x9/0x30 [ 1943.301029][T30580] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1943.308331][T30580] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1943.315990][T30580] __read_once_word_nocheck+0x3/0x10 [ 1943.322969][T30580] unwind_next_frame+0xe39/0x2390 [ 1943.329684][T30580] arch_stack_walk+0x11c/0x150 [ 1943.336123][T30580] stack_trace_save+0x9c/0xe0 [ 1943.342485][T30580] kasan_save_track+0x3e/0x80 [ 1943.348842][T30580] __kasan_kmalloc+0x93/0xb0 [ 1943.355098][T30580] __kmalloc_cache_noprof+0x230/0x3d0 [ 1943.362139][T30580] kmem_cache_free+0x166/0x400 [ 1943.368573][T30580] exit_mmap+0x53f/0xb50 [ 1943.374497][T30580] __mmput+0x118/0x420 [ 1943.380254][T30580] exit_mm+0x1da/0x2c0 [ 1943.385986][T30580] do_exit+0x648/0x22e0 [ 1943.391809][T30580] do_group_exit+0x21c/0x2d0 [ 1943.398082][T30580] get_signal+0x1286/0x1340 [ 1943.404265][T30580] arch_do_signal_or_restart+0x9a/0x750 [ 1943.411481][T30580] exit_to_user_mode_loop+0x75/0x110 [ 1943.418434][T30580] __do_fast_syscall_32+0x1f4/0x2b0 [ 1943.425303][T30580] do_fast_syscall_32+0x34/0x80 [ 1943.431827][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1943.439825][T30580] INITIAL USE at: [ 1943.443737][T30580] lock_acquire+0x120/0x360 [ 1943.449823][T30580] _raw_spin_lock_irq+0xa2/0xf0 [ 1943.456260][T30580] evdev_read+0x370/0xca0 [ 1943.462171][T30580] vfs_readv+0x5aa/0x850 [ 1943.467994][T30580] do_readv+0x14d/0x2d0 [ 1943.473733][T30580] __do_fast_syscall_32+0xb6/0x2b0 [ 1943.480432][T30580] do_fast_syscall_32+0x34/0x80 [ 1943.486870][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1943.494775][T30580] } [ 1943.497282][T30580] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1943.505467][T30580] [ 1943.505467][T30580] the dependencies between the lock to be acquired [ 1943.505481][T30580] and SOFTIRQ-irq-unsafe lock: [ 1943.519072][T30580] -> (tasklist_lock){.+.+}-{3:3} { [ 1943.524429][T30580] HARDIRQ-ON-R at: [ 1943.528612][T30580] lock_acquire+0x120/0x360 [ 1943.535134][T30580] _raw_read_lock+0x36/0x50 [ 1943.541652][T30580] __do_wait+0xde/0x740 [ 1943.547907][T30580] do_wait+0x1f8/0x520 [ 1943.553994][T30580] kernel_wait+0xab/0x170 [ 1943.560358][T30580] call_usermodehelper_exec_work+0xbe/0x230 [ 1943.568316][T30580] process_scheduled_works+0xade/0x17b0 [ 1943.575930][T30580] worker_thread+0x8a0/0xda0 [ 1943.582567][T30580] kthread+0x70e/0x8a0 [ 1943.588673][T30580] ret_from_fork+0x3fc/0x770 [ 1943.595396][T30580] ret_from_fork_asm+0x1a/0x30 [ 1943.602210][T30580] SOFTIRQ-ON-R at: [ 1943.606411][T30580] lock_acquire+0x120/0x360 [ 1943.612967][T30580] _raw_read_lock+0x36/0x50 [ 1943.619515][T30580] __do_wait+0xde/0x740 [ 1943.625697][T30580] do_wait+0x1f8/0x520 [ 1943.631802][T30580] kernel_wait+0xab/0x170 [ 1943.638163][T30580] call_usermodehelper_exec_work+0xbe/0x230 [ 1943.646086][T30580] process_scheduled_works+0xade/0x17b0 [ 1943.653658][T30580] worker_thread+0x8a0/0xda0 [ 1943.660271][T30580] kthread+0x70e/0x8a0 [ 1943.666367][T30580] ret_from_fork+0x3fc/0x770 [ 1943.672969][T30580] ret_from_fork_asm+0x1a/0x30 [ 1943.679747][T30580] INITIAL USE at: [ 1943.683832][T30580] lock_acquire+0x120/0x360 [ 1943.690351][T30580] _raw_write_lock_irq+0xa2/0xf0 [ 1943.697306][T30580] copy_process+0x224f/0x3c00 [ 1943.703900][T30580] kernel_clone+0x21e/0x870 [ 1943.710327][T30580] user_mode_thread+0xdd/0x140 [ 1943.717028][T30580] rest_init+0x23/0x300 [ 1943.723108][T30580] start_kernel+0x47d/0x500 [ 1943.729537][T30580] x86_64_start_reservations+0x24/0x30 [ 1943.736924][T30580] x86_64_start_kernel+0x143/0x1c0 [ 1943.743961][T30580] common_startup_64+0x13e/0x147 [ 1943.750856][T30580] INITIAL READ USE at: [ 1943.755372][T30580] lock_acquire+0x120/0x360 [ 1943.762241][T30580] _raw_read_lock+0x36/0x50 [ 1943.769117][T30580] __do_wait+0xde/0x740 [ 1943.775644][T30580] do_wait+0x1f8/0x520 [ 1943.782073][T30580] kernel_wait+0xab/0x170 [ 1943.788760][T30580] call_usermodehelper_exec_work+0xbe/0x230 [ 1943.797100][T30580] process_scheduled_works+0xade/0x17b0 [ 1943.805010][T30580] worker_thread+0x8a0/0xda0 [ 1943.811963][T30580] kthread+0x70e/0x8a0 [ 1943.818391][T30580] ret_from_fork+0x3fc/0x770 [ 1943.825343][T30580] ret_from_fork_asm+0x1a/0x30 [ 1943.832460][T30580] } [ 1943.835138][T30580] ... key at: [] tasklist_lock+0x18/0x40 [ 1943.843044][T30580] ... acquired at: [ 1943.847026][T30580] lock_acquire+0x120/0x360 [ 1943.851715][T30580] _raw_read_lock+0x36/0x50 [ 1943.856405][T30580] send_sigurg+0x12b/0x420 [ 1943.861014][T30580] sk_send_sigurg+0x6c/0x2e0 [ 1943.865795][T30580] queue_oob+0x490/0x5a0 [ 1943.870222][T30580] unix_stream_sendmsg+0xaf9/0xc90 [ 1943.875524][T30580] __sock_sendmsg+0x219/0x270 [ 1943.880403][T30580] ____sys_sendmsg+0x52d/0x830 [ 1943.885353][T30580] ___sys_sendmsg+0x21f/0x2a0 [ 1943.890211][T30580] __sys_sendmmsg+0x28e/0x430 [ 1943.895078][T30580] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1943.900829][T30580] __do_fast_syscall_32+0xb6/0x2b0 [ 1943.906144][T30580] do_fast_syscall_32+0x34/0x80 [ 1943.911194][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1943.917715][T30580] [ 1943.920045][T30580] -> (&f_owner->lock){....}-{3:3} { [ 1943.925449][T30580] INITIAL USE at: [ 1943.929451][T30580] lock_acquire+0x120/0x360 [ 1943.935703][T30580] _raw_write_lock_irq+0xa2/0xf0 [ 1943.942392][T30580] __f_setown+0x67/0x370 [ 1943.948383][T30580] generic_setlease+0xd5d/0x1240 [ 1943.955158][T30580] fcntl_setlease+0x3a2/0x4c0 [ 1943.961692][T30580] do_fcntl+0x6a9/0x1910 [ 1943.967704][T30580] do_compat_fcntl64+0x477/0x720 [ 1943.974395][T30580] __do_fast_syscall_32+0xb6/0x2b0 [ 1943.981265][T30580] do_fast_syscall_32+0x34/0x80 [ 1943.987869][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1943.995954][T30580] INITIAL READ USE at: [ 1944.000385][T30580] lock_acquire+0x120/0x360 [ 1944.007076][T30580] _raw_read_lock_irqsave+0xaf/0x100 [ 1944.014546][T30580] send_sigio+0x38/0x370 [ 1944.020974][T30580] dnotify_handle_event+0x169/0x440 [ 1944.028364][T30580] fsnotify+0x1814/0x1a80 [ 1944.034887][T30580] vfs_readv+0x703/0x850 [ 1944.041319][T30580] do_readv+0x14d/0x2d0 [ 1944.047672][T30580] __do_fast_syscall_32+0xb6/0x2b0 [ 1944.054978][T30580] do_fast_syscall_32+0x34/0x80 [ 1944.062452][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1944.070962][T30580] } [ 1944.073558][T30580] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1944.082506][T30580] ... acquired at: [ 1944.086401][T30580] lock_acquire+0x120/0x360 [ 1944.091094][T30580] _raw_read_lock_irqsave+0xaf/0x100 [ 1944.096572][T30580] send_sigio+0x38/0x370 [ 1944.101004][T30580] kill_fasync+0x24d/0x4d0 [ 1944.105609][T30580] lease_break_callback+0x26/0x30 [ 1944.110824][T30580] __break_lease+0x6a5/0x1620 [ 1944.115695][T30580] do_dentry_open+0xd62/0x1970 [ 1944.120643][T30580] vfs_open+0x3b/0x340 [ 1944.124901][T30580] path_openat+0x2ee5/0x3830 [ 1944.129680][T30580] do_filp_open+0x1fa/0x410 [ 1944.134377][T30580] do_sys_openat2+0x121/0x1c0 [ 1944.139242][T30580] __ia32_compat_sys_open+0x117/0x140 [ 1944.144801][T30580] __do_fast_syscall_32+0xb6/0x2b0 [ 1944.150146][T30580] do_fast_syscall_32+0x34/0x80 [ 1944.155191][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1944.161702][T30580] [ 1944.164027][T30580] -> (&new->fa_lock){....}-{3:3} { [ 1944.169164][T30580] INITIAL USE at: [ 1944.173065][T30580] lock_acquire+0x120/0x360 [ 1944.179171][T30580] _raw_write_lock_irq+0xa2/0xf0 [ 1944.185696][T30580] fasync_remove_entry+0xf1/0x1c0 [ 1944.192296][T30580] lease_modify+0x1ca/0x3c0 [ 1944.198371][T30580] locks_remove_file+0x4bf/0xea0 [ 1944.204887][T30580] __fput+0x3ab/0xa70 [ 1944.210450][T30580] task_work_run+0x1d1/0x260 [ 1944.216613][T30580] exit_to_user_mode_loop+0xec/0x110 [ 1944.223478][T30580] __do_fast_syscall_32+0x1f4/0x2b0 [ 1944.230257][T30580] do_fast_syscall_32+0x34/0x80 [ 1944.236698][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1944.244596][T30580] INITIAL READ USE at: [ 1944.248928][T30580] lock_acquire+0x120/0x360 [ 1944.255447][T30580] _raw_read_lock_irqsave+0xaf/0x100 [ 1944.262744][T30580] kill_fasync+0x199/0x4d0 [ 1944.269259][T30580] pipe_release+0x1b2/0x330 [ 1944.275783][T30580] __fput+0x449/0xa70 [ 1944.281774][T30580] fput_close_sync+0x119/0x200 [ 1944.288553][T30580] __ia32_sys_close+0x7f/0x110 [ 1944.295341][T30580] __do_fast_syscall_32+0xb6/0x2b0 [ 1944.302470][T30580] do_fast_syscall_32+0x34/0x80 [ 1944.309338][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1944.317670][T30580] } [ 1944.320180][T30580] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1944.328870][T30580] ... acquired at: [ 1944.332678][T30580] lock_acquire+0x120/0x360 [ 1944.337367][T30580] _raw_read_lock_irqsave+0xaf/0x100 [ 1944.342838][T30580] kill_fasync+0x199/0x4d0 [ 1944.347456][T30580] evdev_pass_values+0x627/0xbd0 [ 1944.352588][T30580] evdev_events+0x1e6/0x340 [ 1944.357298][T30580] input_pass_values+0x288/0x890 [ 1944.362468][T30580] input_event_dispose+0x330/0x6b0 [ 1944.367790][T30580] input_inject_event+0x1fe/0x320 [ 1944.373029][T30580] evdev_write+0x2fc/0x480 [ 1944.377664][T30580] vfs_write+0x27e/0xa90 [ 1944.382131][T30580] ksys_write+0x145/0x250 [ 1944.386657][T30580] __do_fast_syscall_32+0xb6/0x2b0 [ 1944.391973][T30580] do_fast_syscall_32+0x34/0x80 [ 1944.397037][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1944.403587][T30580] [ 1944.405937][T30580] [ 1944.405937][T30580] stack backtrace: [ 1944.411856][T30580] CPU: 0 UID: 0 PID: 30580 Comm: syz.3.23070 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1944.411879][T30580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1944.411892][T30580] Call Trace: [ 1944.411901][T30580] [ 1944.411910][T30580] dump_stack_lvl+0x189/0x250 [ 1944.411943][T30580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1944.411968][T30580] ? __pfx__printk+0x10/0x10 [ 1944.411989][T30580] validate_chain+0x1f05/0x2140 [ 1944.412015][T30580] __lock_acquire+0xab9/0xd20 [ 1944.412039][T30580] ? kill_fasync+0x199/0x4d0 [ 1944.412061][T30580] lock_acquire+0x120/0x360 [ 1944.412082][T30580] ? kill_fasync+0x199/0x4d0 [ 1944.412108][T30580] _raw_read_lock_irqsave+0xaf/0x100 [ 1944.412130][T30580] ? kill_fasync+0x199/0x4d0 [ 1944.412150][T30580] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1944.412177][T30580] ? do_raw_spin_lock+0x121/0x290 [ 1944.412199][T30580] kill_fasync+0x199/0x4d0 [ 1944.412219][T30580] ? kill_fasync+0x53/0x4d0 [ 1944.412241][T30580] evdev_pass_values+0x627/0xbd0 [ 1944.412261][T30580] ? evdev_pass_values+0x5d1/0xbd0 [ 1944.412280][T30580] evdev_events+0x1e6/0x340 [ 1944.412296][T30580] ? evdev_events+0x79/0x340 [ 1944.412311][T30580] ? input_pass_values+0x8d/0x890 [ 1944.412326][T30580] input_pass_values+0x288/0x890 [ 1944.412344][T30580] ? input_handle_event+0x70c/0xf30 [ 1944.412368][T30580] input_event_dispose+0x330/0x6b0 [ 1944.412392][T30580] input_inject_event+0x1fe/0x320 [ 1944.412415][T30580] ? input_inject_event+0xbc/0x320 [ 1944.412438][T30580] evdev_write+0x2fc/0x480 [ 1944.412457][T30580] ? __pfx_evdev_write+0x10/0x10 [ 1944.412474][T30580] ? bpf_lsm_file_permission+0x9/0x20 [ 1944.412496][T30580] ? security_file_permission+0x75/0x290 [ 1944.412513][T30580] ? rw_verify_area+0x258/0x650 [ 1944.412537][T30580] ? __pfx_evdev_write+0x10/0x10 [ 1944.412554][T30580] vfs_write+0x27e/0xa90 [ 1944.412581][T30580] ? __pfx_vfs_write+0x10/0x10 [ 1944.412605][T30580] ? __fget_files+0x2a/0x420 [ 1944.412624][T30580] ? __fget_files+0x2a/0x420 [ 1944.412640][T30580] ? __fget_files+0x3a0/0x420 [ 1944.412656][T30580] ? __fget_files+0x2a/0x420 [ 1944.412676][T30580] ksys_write+0x145/0x250 [ 1944.412691][T30580] ? __pfx_ksys_write+0x10/0x10 [ 1944.412705][T30580] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1944.412731][T30580] ? lockdep_hardirqs_on+0x9c/0x150 [ 1944.412755][T30580] __do_fast_syscall_32+0xb6/0x2b0 [ 1944.412780][T30580] ? lockdep_hardirqs_on+0x9c/0x150 [ 1944.412804][T30580] do_fast_syscall_32+0x34/0x80 [ 1944.412828][T30580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1944.412866][T30580] RIP: 0023:0xf70de539 [ 1944.412882][T30580] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 SYZFAIL: failed to send rpc fd=3 want=60776 sent=0 n=-1 (errno 32: Broken pipe) [ 1944.412898][T30580] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1944.412917][T30580] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1944.412930][T30580] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1944.412940][T30580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1944.412950][T30580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1944.412960][T30580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1944.412976][T30580] [ 1944.959248][T17007] usb 3-1: USB disconnect, device number 103 [ 1945.491817][T29507] bond0: (slave syz_tun): Releasing backup interface [ 1946.373063][T28368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1946.383112][T28368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1946.393272][T28368] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1946.402627][T28368] bond0 (unregistering): Released all slaves [ 1946.543328][T28368] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1946.551990][T28368] bond1 (unregistering): Released all slaves [ 1946.686973][T28368] bond2 (unregistering): Released all slaves [ 1946.769456][T28368] þ: left promiscuous mode [ 1946.838355][T28368] tipc: Disabling bearer [ 1946.848184][T28368] tipc: Left network mode [ 1947.151485][T28368] hsr_slave_0: left promiscuous mode [ 1947.162540][T28368] hsr_slave_1: left promiscuous mode [ 1947.168423][T28368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1947.177626][T28368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1947.652782][T28368] team0 (unregistering): Port device team_slave_1 removed [ 1947.695749][T28368] team0 (unregistering): Port device team_slave_0 removed [ 1948.358220][T28368] IPVS: stop unused estimator thread 0... [ 1948.963747][T28368] vlan5 (unregistering): left allmulticast mode [ 1948.970366][T28368] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1948.979976][T28368] vlan5 (unregistering): left promiscuous mode [ 1948.986183][T28368] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1948.995492][T28368] bridge0: port 1(vlan5) entered disabled state [ 1949.099299][T28368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.184899][T28368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.235737][T28368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.275938][T28368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.384998][T28368] vlan6: left promiscuous mode [ 1949.396705][T28368] bridge_slave_0: left promiscuous mode [ 1949.402981][T28368] bridge0: port 2(vlan6) entered disabled state [ 1949.420657][T28368] bridge_slave_1: left allmulticast mode [ 1949.426325][T28368] bridge_slave_1: left promiscuous mode [ 1949.432197][T28368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.441029][T28368] bridge_slave_0: left allmulticast mode [ 1949.446684][T28368] bridge_slave_0: left promiscuous mode [ 1949.453746][T28368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.738244][T28368] batman_adv: batadv0: Removing interface: macsec3 [ 1949.843833][T28368] bond1 (unregistering): Released all slaves [ 1949.997641][T28368] bond0 (unregistering): Released all slaves [ 1950.075744][T28368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1950.088721][T28368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1950.098937][T28368] bond0 (unregistering): Released all slaves [ 1950.189611][T28368] tipc: Disabling bearer [ 1950.207457][T28368] tipc: Disabling bearer [ 1950.213793][T28368] tipc: Left network mode [ 1950.245743][T28368] IPVS: stopping backup sync thread 11007 ... [ 1950.431054][ T3466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1950.686838][T28368] bond_slave_0: left promiscuous mode [ 1950.704426][T28368] hsr_slave_0: left promiscuous mode [ 1950.711864][T28368] hsr_slave_1: left promiscuous mode [ 1950.724106][T28368] hsr_slave_0: left promiscuous mode [ 1950.739539][T28368] hsr_slave_1: left promiscuous mode [ 1950.745516][T28368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1950.764498][T28368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1950.776241][T28368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1950.784106][T28368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1950.799548][T28368] veth1_macvtap: left promiscuous mode [ 1950.805088][T28368] veth0_macvtap: left promiscuous mode [ 1950.813380][T28368] veth1_vlan: left promiscuous mode [ 1950.818728][T28368] veth0_vlan: left promiscuous mode [ 1951.786350][T28368] team0 (unregistering): Port device team_slave_1 removed [ 1951.815264][T28368] team0 (unregistering): Port device team_slave_0 removed [ 1952.339933][T28368] IPVS: stop unused estimator thread 0...