last executing test programs: 9m23.843216713s ago: executing program 4 (id=3202): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9m23.703706797s ago: executing program 4 (id=3204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 9m23.480934494s ago: executing program 4 (id=3208): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0xfffffffd, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x4c17, 0x4, 0x0, 0x3d) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x500, 0xb, 0x3432564e, 0x5, 0x4000, [{}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0xfffffffe, 0x7f}, {0x0, 0x2}, {0x9, 0xfffffffe}], 0x5, 0x4, 0x4, 0x0, 0x5}}) 9m23.20765211s ago: executing program 4 (id=3211): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 9m22.3060427s ago: executing program 4 (id=3221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 9m21.979501248s ago: executing program 4 (id=3224): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) 9m21.644942513s ago: executing program 32 (id=3224): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) 4m50.448997021s ago: executing program 3 (id=5887): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x8725, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x4, 0x20000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0xb7, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xe5, 0x0, 0x10000000, 0x0, 0xfffffffe, 0x0, 0xa8e, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x3, 0x0, 0x20, 0x3, 0x5, 0x80000004, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x20004, 0x0, 0x0, 0xd, 0x2, 0xffffffff], [0x10, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x800, 0x0, 0xfffffffc, 0x3, 0x1, 0x0, 0x3, 0x0, 0x5, 0x40000000, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x8, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0x4], [0x0, 0x4, 0xfffffffe, 0x0, 0xffffffff, 0x1, 0x100, 0x0, 0x0, 0xb7c, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x7, 0xfffffffe, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x2ff, 0x4000005, 0x0, 0x4, 0x2, 0x0, 0x40000000, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20e, 0x5, 0x0, 0x103, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7fff, 0xfffffffd, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x40000003, 0x2, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x8, 0x0, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x0, 0x8002, 0x80000003, 0x1000000, 0x0, 0x3]}, 0x45c) 4m50.235107956s ago: executing program 3 (id=5900): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 4m48.93407897s ago: executing program 3 (id=5904): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000, 0x9, 0x3, 0x7fffffff, 0x8000, 0x9, 0x0, 0x80000001, 0x9}) 4m48.782451552s ago: executing program 3 (id=5907): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 4m48.567634217s ago: executing program 3 (id=5908): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0x2, @in6=@loopback, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 4m48.327294791s ago: executing program 3 (id=5911): r0 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x3c7b, 0x1, 0x0, 0x3]) semctl$GETPID(r0, 0x1, 0xb, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "b6"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x20000001}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 4m47.752552921s ago: executing program 33 (id=5911): r0 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x3c7b, 0x1, 0x0, 0x3]) semctl$GETPID(r0, 0x1, 0xb, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "b6"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x20000001}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 3m47.648139175s ago: executing program 1 (id=6409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x781382, 0x0) r1 = io_uring_setup(0x42c2, &(0x7f0000000180)={0x0, 0xda8d, 0x80, 0x1000000a, 0x322}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, r2, 0x2) 3m47.440318398s ago: executing program 1 (id=6411): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3m46.46222927s ago: executing program 1 (id=6419): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50026bd7000ffffffff07080000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ff"], 0x38}}, 0x0) 3m46.191199664s ago: executing program 1 (id=6421): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 3m46.019751573s ago: executing program 1 (id=6423): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m45.680318565s ago: executing program 1 (id=6426): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) 3m45.316231236s ago: executing program 34 (id=6426): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) 2m34.107587221s ago: executing program 7 (id=6995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4) shutdown(r0, 0x1) 2m33.931285579s ago: executing program 7 (id=6998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/5, 0x5}], 0x1}, 0x40002140) 2m33.061772364s ago: executing program 7 (id=7010): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f00000000c0)={0x3, 0x3ff, 0x4, 0xfffffff9, 0x3, 0x1, 0x7, 0x0, 0x8, 0xffffff98, 0xd}) 2m32.020068772s ago: executing program 7 (id=7006): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 2m31.803689607s ago: executing program 7 (id=7011): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendfile(r1, r0, 0x0, 0xfff283) 2m31.543536631s ago: executing program 7 (id=7013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m31.188099887s ago: executing program 35 (id=7013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m27.926600375s ago: executing program 6 (id=7025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m25.776805839s ago: executing program 6 (id=7029): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000600)="f6", 0x1, 0x80c5, &(0x7f00000001c0)={0xa, 0x0, 0x400, @local, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2m25.564549387s ago: executing program 6 (id=7039): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) 2m25.40005949s ago: executing program 6 (id=7032): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 2m25.243266994s ago: executing program 6 (id=7036): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1000000016141106f8ffffff00000000"], 0x10}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb0000000000000000000007000000000024206558"], 0x0) 2m24.967676895s ago: executing program 6 (id=7037): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40000032, r1, 0x0) unshare(0x2040400) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) 2m24.318047292s ago: executing program 36 (id=7037): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40000032, r1, 0x0) unshare(0x2040400) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) 20.212640292s ago: executing program 8 (id=8033): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r1, 0x3, {0x0, 0xf0, 0x1}, 0x2}, 0x18, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18.302021905s ago: executing program 8 (id=8050): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/110) 17.700465565s ago: executing program 8 (id=8058): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x6, 0x9, 0x80, 0xfffffffc}, 0x14) 17.526833934s ago: executing program 8 (id=8060): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 17.348968441s ago: executing program 8 (id=8063): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) 16.918038597s ago: executing program 8 (id=8070): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 16.499931236s ago: executing program 37 (id=8070): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 14.204450941s ago: executing program 9 (id=8089): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380), 0x4) 14.057093555s ago: executing program 9 (id=8091): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$char_usb(r0, &(0x7f00000003c0)='5', 0x1) 11.889560156s ago: executing program 9 (id=8097): syz_io_uring_setup(0x8d3, &(0x7f0000000140)={0x0, 0xfb8f, 0x0, 0xfffffffe, 0x8069}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x4, 0x0, 0x10000, 0x8080000], 0x7fffffffffffffff, 0xf0, 0xda83}) 11.58827068s ago: executing program 9 (id=8101): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 11.474171635s ago: executing program 9 (id=8102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0xdddd0000, 0x2000}) 10.55011937s ago: executing program 0 (id=8107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70b52d, 0x0, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000007ffffc, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 10.420742032s ago: executing program 0 (id=8108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4", 0x66}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg$qrtr(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000000280)=""/220, 0xdc}], 0x2, 0x0, 0x0, 0x12061}, 0x1c, 0x2) 10.289335297s ago: executing program 0 (id=8110): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) landlock_restrict_self(r0, 0x0) renameat2(r1, &(0x7f00000000c0)='.\x02\x00', r1, &(0x7f0000000000)='./file0\x00', 0x2) 10.070522155s ago: executing program 0 (id=8112): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 9.900725962s ago: executing program 0 (id=8114): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3}, &(0x7f0000000080)=0x8) 9.147551622s ago: executing program 0 (id=8119): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$inet(0x2, 0x1, 0x200001) syz_io_uring_setup(0x1eb2, 0x0, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, 0x0) close(0x3) 9.14739594s ago: executing program 9 (id=8120): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r0, 0x2e) tkill(r0, 0x14) ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x7f, 0x0, 0x1}, &(0x7f00000016c0)=[{}]) 8.326134237s ago: executing program 38 (id=8119): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$inet(0x2, 0x1, 0x200001) syz_io_uring_setup(0x1eb2, 0x0, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, 0x0) close(0x3) 8.297858718s ago: executing program 39 (id=8120): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r0, 0x2e) tkill(r0, 0x14) ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x7f, 0x0, 0x1}, &(0x7f00000016c0)=[{}]) 5.312806551s ago: executing program 2 (id=8129): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0x0, 0x7fff, 0xfffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x2ea1, &(0x7f0000000300)={0x0, 0x2, 0x10100, 0x3, 0x3b0}, &(0x7f0000000000), &(0x7f0000000400)) r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acb"], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 4.065047543s ago: executing program 5 (id=8130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @loopback}], 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 3.584161237s ago: executing program 2 (id=8131): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) 3.201376536s ago: executing program 2 (id=8133): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 3.041341782s ago: executing program 2 (id=8134): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="982c142b8450b102ad0165834bc681a2b9538ec9003eb81ce041528232fc395350841d8fa696f09024", 0x29}], 0x1}}], 0x1, 0x0) 3.030213962s ago: executing program 5 (id=8135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x10940a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.974538678s ago: executing program 2 (id=8136): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000380)='mountinfo\x00') 2.050432592s ago: executing program 2 (id=8137): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.202500785s ago: executing program 5 (id=8138): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 1.049773056s ago: executing program 5 (id=8139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) sendmmsg$inet(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200448c0) 979.515986ms ago: executing program 5 (id=8140): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) 0s ago: executing program 5 (id=8141): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): valid length. [ 871.738577][T24525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 871.771922][T24529] bond1: (slave ip6erspan0): making interface the new active one [ 871.803526][T24529] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 872.009444][T24535] netlink: 'syz.5.7350': attribute type 4 has an invalid length. [ 872.036850][T24535] netlink: 'syz.5.7350': attribute type 4 has an invalid length. [ 872.266904][ T5829] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 872.364964][T24546] netlink: 'syz.0.7368': attribute type 4 has an invalid length. [ 872.405049][T24546] netlink: 'syz.0.7368': attribute type 4 has an invalid length. [ 872.423157][ T5829] usb 10-1: Using ep0 maxpacket: 16 [ 872.440938][ T5829] usb 10-1: config 0 has an invalid interface number: 98 but max is 0 [ 872.460645][ T5829] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.487224][ T5829] usb 10-1: config 0 has no interface number 0 [ 872.502565][ T5829] usb 10-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 872.532928][ T5829] usb 10-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 872.547689][ T5829] usb 10-1: config 0 interface 98 has no altsetting 0 [ 872.575803][ T5829] usb 10-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 872.588502][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.617768][ T5829] usb 10-1: Product: syz [ 872.627744][ T5829] usb 10-1: Manufacturer: syz [ 872.643905][ T5829] usb 10-1: SerialNumber: syz [ 872.660544][ T5829] usb 10-1: config 0 descriptor?? [ 872.684117][T24537] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 872.696437][T24537] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 872.855178][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 872.922039][T24537] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 872.932599][T24537] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 873.023711][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 873.035491][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.052403][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 873.061595][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 873.073510][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 873.103390][ T24] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 873.120925][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.176392][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 873.182393][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 873.197694][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 873.215559][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 873.225004][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 873.230969][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 873.423446][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 873.573040][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 873.585463][ T24] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 873.604028][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 873.622626][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 873.641357][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 873.657569][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.702973][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 873.722429][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.803671][ T5898] usb 1-1: USB disconnect, device number 88 [ 873.977357][ T5829] asix 10-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 873.992469][ T24] usb 9-1: GET_CAPABILITIES returned 0 [ 873.992691][ T5829] asix 10-1:0.98: probe with driver asix failed with error -71 [ 874.010616][ T24] usbtmc 9-1:16.0: can't read capabilities [ 874.017836][ T5829] usb 10-1: USB disconnect, device number 6 [ 874.321101][T24572] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 874.327653][ T5829] usb 9-1: USB disconnect, device number 8 [ 874.662284][T24588] netlink: 'syz.9.7373': attribute type 4 has an invalid length. [ 874.711476][T24588] netlink: 'syz.9.7373': attribute type 4 has an invalid length. [ 874.847246][T24593] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7377'. [ 874.863292][ T5898] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 875.052907][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 875.069431][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.086421][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 875.096665][ T5898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 875.110122][ T5898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 875.125616][ T5898] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 875.135224][T24604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7382'. [ 875.159637][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.205667][T24604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7382'. [ 875.216004][ T5898] hub 3-1:1.0: bad descriptor, ignoring hub [ 875.221997][ T5898] hub 3-1:1.0: probe with driver hub failed with error -5 [ 875.246603][ T5898] cdc_wdm 3-1:1.0: skipping garbage [ 875.251883][ T5898] cdc_wdm 3-1:1.0: skipping garbage [ 875.297083][ T5898] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 875.319192][ T5898] cdc_wdm 3-1:1.0: Unknown control protocol [ 875.583927][T24619] netlink: 'syz.0.7390': attribute type 4 has an invalid length. [ 875.623068][T24619] netlink: 'syz.0.7390': attribute type 4 has an invalid length. [ 875.803460][ T5898] usb 3-1: USB disconnect, device number 91 [ 875.848886][T24629] netlink: 'syz.5.7394': attribute type 4 has an invalid length. [ 876.245520][ T937] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 876.254883][T24641] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7399'. [ 876.313103][T24641] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7399'. [ 876.423086][ T937] usb 6-1: Using ep0 maxpacket: 8 [ 876.441053][ T937] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 876.459952][ T937] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 876.490789][ T937] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 876.522975][ T937] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 876.552943][ T937] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.591901][ T937] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 876.644047][ T937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.727186][T24655] netlink: 'syz.0.7404': attribute type 4 has an invalid length. [ 876.781296][T24655] netlink: 'syz.0.7404': attribute type 4 has an invalid length. [ 876.893589][ T937] usb 6-1: GET_CAPABILITIES returned 0 [ 876.901351][ T937] usbtmc 6-1:16.0: can't read capabilities [ 877.094157][T24664] netlink: 'syz.8.7408': attribute type 4 has an invalid length. [ 877.239641][T24633] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 877.240002][ T5898] usb 6-1: USB disconnect, device number 65 [ 877.973625][ T5898] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 878.152986][ T5898] usb 9-1: Using ep0 maxpacket: 8 [ 878.164502][ T5898] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.176160][ T5898] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 878.186505][ T5898] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 878.198691][ T5898] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 878.210682][ T5898] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 878.222578][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.256967][ T5898] hub 9-1:1.0: bad descriptor, ignoring hub [ 878.277737][ T5898] hub 9-1:1.0: probe with driver hub failed with error -5 [ 878.294754][ T5898] cdc_wdm 9-1:1.0: skipping garbage [ 878.300352][ T5898] cdc_wdm 9-1:1.0: skipping garbage [ 878.310824][ T5898] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 878.318264][ T39] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 878.328032][ T5898] cdc_wdm 9-1:1.0: Unknown control protocol [ 878.497351][ T39] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 878.508053][ T39] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 878.519648][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 878.532208][ T39] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 878.541925][ T39] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 878.554077][ T39] usb 10-1: Product: syz [ 878.561079][ T39] usb 10-1: Manufacturer: syz [ 878.566550][ T39] usb 10-1: SerialNumber: syz [ 878.580518][ T39] usb 10-1: config 0 descriptor?? [ 878.595776][ T39] hub 10-1:0.0: bad descriptor, ignoring hub [ 878.602135][ T39] hub 10-1:0.0: probe with driver hub failed with error -5 [ 878.617404][ T39] usb 10-1: selecting invalid altsetting 0 [ 878.827041][ T937] usb 9-1: USB disconnect, device number 9 [ 879.084638][T24708] netlink: 'syz.2.7422': attribute type 4 has an invalid length. [ 879.313148][T24691] usb 10-1: reset high-speed USB device number 7 using dummy_hcd [ 879.495805][T24691] usb 10-1: device firmware changed [ 879.531575][ T39] usb 10-1: USB disconnect, device number 7 [ 879.753045][ T39] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 879.927498][ T39] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 879.950987][ T39] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 879.985448][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 880.010595][ T39] usb 10-1: string descriptor 0 read error: -22 [ 880.041686][ T39] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 880.087772][ T39] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 880.108625][ T39] usb 10-1: config 0 descriptor?? [ 880.123787][ T39] hub 10-1:0.0: bad descriptor, ignoring hub [ 880.134660][ T39] hub 10-1:0.0: probe with driver hub failed with error -5 [ 880.149038][ T39] usb 10-1: selecting invalid altsetting 0 [ 880.553360][ T39] usb 10-1: USB disconnect, device number 8 [ 881.090246][T24733] veth0: entered promiscuous mode [ 881.098187][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7433'. [ 881.344786][ T5914] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 881.393835][T24743] netlink: 'syz.0.7435': attribute type 4 has an invalid length. [ 881.522925][ T5914] usb 10-1: Using ep0 maxpacket: 8 [ 881.541177][ T5914] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 881.570428][ T5914] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.603291][ T5914] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 881.642192][ T5914] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 881.674663][ T5914] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.709273][ T5914] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 881.745582][ T5914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.997169][ T5914] usb 10-1: GET_CAPABILITIES returned 0 [ 882.004203][T24757] Set syz1 is full, maxelem 1023 reached [ 882.281188][ T5914] usbtmc 10-1:16.0: can't read capabilities [ 882.306906][ T5914] usb 10-1: USB disconnect, device number 9 [ 882.393642][ T5898] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 882.533651][ T5906] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 882.564834][ T5898] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 882.579504][ T5898] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 882.591690][ T5898] usb 6-1: config 0 interface 0 has no altsetting 0 [ 882.606489][ T5898] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 882.618718][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 882.628185][ T5898] usb 6-1: Product: syz [ 882.632489][ T5898] usb 6-1: Manufacturer: syz [ 882.639992][ T5898] usb 6-1: SerialNumber: syz [ 882.653252][ T5898] usb 6-1: config 0 descriptor?? [ 882.664941][ T5898] hub 6-1:0.0: bad descriptor, ignoring hub [ 882.671581][ T5898] hub 6-1:0.0: probe with driver hub failed with error -5 [ 882.683750][ T5898] usb 6-1: selecting invalid altsetting 0 [ 882.705936][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 882.718393][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 882.732443][ T5906] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 882.743467][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.758118][ T5906] usb 1-1: Product: syz [ 882.762470][ T5906] usb 1-1: Manufacturer: syz [ 882.772799][ T5906] usb 1-1: SerialNumber: syz [ 882.805547][ T5906] usb 1-1: config 0 descriptor?? [ 882.821874][T24763] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 882.837220][ T5906] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input143 [ 883.183817][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 883.195092][ T5906] usb 1-1: USB disconnect, device number 89 [ 883.334091][T24761] usb 6-1: reset high-speed USB device number 66 using dummy_hcd [ 883.516240][T24761] usb 6-1: device firmware changed [ 883.522909][ T5898] usb 6-1: USB disconnect, device number 66 [ 883.743331][ T5898] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 883.905033][ T5898] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 883.939962][ T5898] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 883.986427][ T5898] usb 6-1: config 0 interface 0 has no altsetting 0 [ 884.043583][ T5898] usb 6-1: string descriptor 0 read error: -22 [ 884.050055][ T5898] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 884.074645][T24795] Set syz1 is full, maxelem 1023 reached [ 884.125441][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 884.174797][ T5898] usb 6-1: config 0 descriptor?? [ 884.193021][ T5898] hub 6-1:0.0: bad descriptor, ignoring hub [ 884.208726][ T5898] hub 6-1:0.0: probe with driver hub failed with error -5 [ 884.228295][T24801] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7461'. [ 884.243074][T24801] netlink: 'syz.8.7461': attribute type 15 has an invalid length. [ 884.257179][ T5898] usb 6-1: selecting invalid altsetting 0 [ 884.267505][T24801] netlink: 'syz.8.7461': attribute type 18 has an invalid length. [ 884.358991][T24801] vxlan0: entered promiscuous mode [ 884.396666][T23154] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.440252][T23154] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.484636][T23154] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.515072][T23154] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.614780][ T5906] usb 6-1: USB disconnect, device number 67 [ 885.913533][ T5898] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 885.973516][ T39] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 886.084214][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 886.100990][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 886.152938][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 886.160680][ T5898] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 886.191500][ T39] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 886.211790][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.232939][ T39] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 886.254562][ T5898] usb 3-1: Product: syz [ 886.258908][ T5898] usb 3-1: Manufacturer: syz [ 886.267470][ T39] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 886.281609][ T5898] usb 3-1: SerialNumber: syz [ 886.298246][ T5898] usb 3-1: config 0 descriptor?? [ 886.304841][ T39] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 886.317743][ T39] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.342027][T24833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 886.367605][ T5898] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input144 [ 886.377281][ T39] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 886.387523][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.655677][ T39] usb 9-1: usb_control_msg returned -32 [ 886.661615][ T39] usbtmc 9-1:16.0: can't read capabilities [ 886.785210][ T937] usb 3-1: USB disconnect, device number 92 [ 886.785272][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 886.973253][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 887.133007][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 887.151282][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 887.178322][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 887.194184][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.213263][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.228773][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 887.239248][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.468501][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 887.481880][ T9] usbtmc 6-1:16.0: can't read capabilities [ 887.533103][ T5829] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 887.670765][ T39] usb 9-1: USB disconnect, device number 10 [ 887.679724][T24853] usbtmc 9-1:16.0: usbtmc488_ioctl_trigger returned -19 [ 887.693997][ T5829] usb 10-1: Using ep0 maxpacket: 32 [ 887.709716][ T5829] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 887.725494][ T5829] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 887.738433][ T937] usb 6-1: USB disconnect, device number 68 [ 887.748459][ T5829] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 887.761808][ T5829] usb 10-1: config 1 has no interface number 0 [ 887.790895][ T5829] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 887.808172][ T5829] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 887.824405][ T5829] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 887.834594][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.855129][ T5829] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 888.055267][ T5829] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 888.487067][ T5829] usb 10-1: USB disconnect, device number 10 [ 888.503221][ T39] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 888.515621][ T5829] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 888.675452][ T39] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.697802][ T39] usb 9-1: config 0 interface 0 has no altsetting 0 [ 888.715406][ T39] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 888.725133][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.735394][ T39] usb 9-1: Product: syz [ 888.741005][ T39] usb 9-1: Manufacturer: syz [ 888.746314][ T39] usb 9-1: SerialNumber: syz [ 888.758955][ T39] usb 9-1: config 0 descriptor?? [ 888.777727][ T39] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 888.791190][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 888.813464][ T39] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 888.825242][ T39] usb 9-1: media controller created [ 888.831916][T24899] netlink: 'syz.0.7503': attribute type 1 has an invalid length. [ 888.852463][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 888.927858][T24899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.971253][T24902] bond1: (slave geneve2): making interface the new active one [ 888.991237][ T39] DVB: Unable to find symbol tda10046_attach() [ 889.018865][ T39] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 889.047367][T24902] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 889.064900][ T39] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 889.343083][ T30] audit: type=1326 audit(1765955170.633:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24917 comm="syz.5.7510" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f41539 code=0x0 [ 890.123244][ T39] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 890.147714][ T39] usb 9-1: USB disconnect, device number 11 [ 890.358901][T24948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7523'. [ 891.423010][ T5898] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 891.503981][T24982] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7539'. [ 891.542986][ T39] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 891.596437][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.623424][ T5914] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 891.639738][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.650917][ T5898] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 891.660308][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.689220][ T5898] usb 1-1: config 0 descriptor?? [ 891.694320][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 891.701889][ T39] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 891.726924][ T39] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 891.741185][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 891.760699][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 891.774933][ T39] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 891.789394][ T39] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 891.804496][ T39] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 891.814750][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.823991][ T5914] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 891.836946][ T5914] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 891.850962][ T5914] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 891.862488][ T39] usb 10-1: config 0 descriptor?? [ 891.882159][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.911178][T24978] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 891.930799][ T5914] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 892.117815][ T39] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 892.163031][ T5914] usb 6-1: USB disconnect, device number 69 [ 892.201873][ T5898] cm6533_jd 0003:0D8C:0022.008C: unknown main item tag 0x0 [ 892.219797][ T5898] cm6533_jd 0003:0D8C:0022.008C: unknown main item tag 0x0 [ 892.262540][ T5898] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.008C/input/input145 [ 892.318087][ T5898] cm6533_jd 0003:0D8C:0022.008C: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 892.401320][ T5898] usb 1-1: USB disconnect, device number 90 [ 892.424472][ C0] usblp0: nonzero read bulk status received: -71 [ 892.446589][ T39] usb 10-1: USB disconnect, device number 11 [ 892.528555][T25000] fido_id[25000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 892.628386][T24973] usblp0: removed [ 892.654254][ T30] audit: type=1326 audit(1765955173.953:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25004 comm="syz.8.7548" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 894.366459][T25048] input: syz1 as /devices/virtual/input/input146 [ 895.054920][ T5898] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 895.216717][ T5898] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 895.241521][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.287949][ T5898] usb 6-1: config 0 descriptor?? [ 895.305201][ T5898] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 895.380845][ C1] sd 0:0:1:0: [sda] tag#7153 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 895.391375][ C1] sd 0:0:1:0: [sda] tag#7153 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 895.725830][ T5898] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 896.537874][ T5898] gspca_cpia1: usb_control_msg 03, error -71 [ 896.546327][ T5898] cpia1 6-1:0.0: unexpected systemstate: 00 [ 896.554947][ T5898] usb 6-1: USB disconnect, device number 70 [ 896.784568][T20473] Bluetooth: hci0: command 0x0406 tx timeout [ 896.791688][T25055] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 896.798346][T25055] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 896.943046][T20473] Bluetooth: hci2: command 0x0c1a tx timeout [ 896.943125][T25064] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 897.730234][T25064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 897.742670][T25064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 897.752244][T25055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 897.752282][T25064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 897.761638][T25055] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 897.766835][T25064] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 897.782604][T25064] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 897.796128][T25055] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 897.802085][T25055] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 897.813419][T25064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 897.819529][T25064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 897.829954][T25064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 897.839676][T25055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 897.848034][T25064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 897.854501][T25055] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 897.863228][T25064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 897.878115][T25064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 897.885706][T25055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 897.891670][T25055] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 898.048826][T25107] loop3: detected capacity change from 0 to 7 [ 898.052657][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7590'. [ 898.070047][T25107] Dev loop3: unable to read RDB block 7 [ 898.079547][T25107] loop3: unable to read partition table [ 898.088226][T25107] loop3: partition table beyond EOD, truncated [ 898.108420][T25107] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 898.143097][ T5898] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 898.150840][ T39] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 898.313032][ T5898] usb 9-1: Using ep0 maxpacket: 32 [ 898.318530][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 898.336552][ T5898] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 898.345209][ T39] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 898.356181][ T5898] usb 9-1: config 0 has no interface number 0 [ 898.362493][ T5898] usb 9-1: config 0 interface 12 has no altsetting 0 [ 898.371121][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.385704][ T5898] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 898.401554][ T39] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 898.409371][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.418860][ T5898] usb 9-1: Product: syz [ 898.426286][ T5898] usb 9-1: Manufacturer: syz [ 898.431882][ T5898] usb 9-1: SerialNumber: syz [ 898.462436][ T5898] usb 9-1: config 0 descriptor?? [ 898.583008][ T39] gspca_nw80x: reg_w err -71 [ 898.587877][ T39] nw80x 10-1:3.0: probe with driver nw80x failed with error -71 [ 898.612645][ T39] usb 10-1: USB disconnect, device number 12 [ 899.373420][ T5829] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 899.535766][ T5829] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 899.544608][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.559929][ T5829] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 899.571083][ T5829] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 899.579342][ T5829] usb 1-1: Manufacturer: syz [ 899.586780][ T5829] usb 1-1: config 0 descriptor?? [ 899.681590][ T5829] rc_core: IR keymap rc-hauppauge not found [ 899.703268][ T5829] Registered IR keymap rc-empty [ 899.724294][ T5829] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 899.740982][ T5898] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 899.761929][ T5898] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 899.762570][ T5829] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input147 [ 899.774237][ T5898] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 899.791153][ T5898] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 899.817567][ T5898] usb 9-1: USB disconnect, device number 12 [ 899.843704][ T5829] usb 1-1: USB disconnect, device number 91 [ 900.262768][T25152] input: syz1 as /devices/virtual/input/input148 [ 900.372970][ T5898] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 900.590722][ T5898] usb 10-1: Using ep0 maxpacket: 16 [ 900.608589][ T5898] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.646463][ T5898] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.681370][ T5898] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 900.709563][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.751982][ T5898] usb 10-1: config 0 descriptor?? [ 900.753006][ T5829] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 900.943530][ T5829] usb 9-1: Using ep0 maxpacket: 8 [ 900.952626][ T5829] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 900.961411][ T5829] usb 9-1: config 179 has no interface number 0 [ 900.970534][ T5829] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 900.982394][ T5829] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 901.007037][ T5829] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 901.017425][ T5829] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 901.031337][ T5829] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 901.042690][ T30] audit: type=1326 audit(1765955182.333:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25173 comm="syz.5.7619" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f41539 code=0x0 [ 901.043092][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.073102][ T937] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 901.118905][T25161] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 901.224416][ T5898] nzxt-smart2 0003:1E71:2009.008D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 901.232892][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 901.250100][ T937] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 901.277851][ T937] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 901.299160][ T937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 901.314816][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 901.346513][ T937] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 901.366586][ T937] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 901.398168][ T5829] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x4 [ 901.424530][ T937] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 901.434148][ T5829] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x2 [ 901.441861][ T5829] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x0 [ 901.451147][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.460394][ T5829] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x0 [ 901.473234][ T937] usb 3-1: config 0 descriptor?? [ 901.479500][ T5829] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x0 [ 901.487676][ T5829] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x0 [ 901.502309][ T5829] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x0 [ 901.515920][ T5829] hid-generic 0000:3000000:0000.008E: hidraw1: HID v0.00 Device [sy] on syz0 [ 901.542559][ T5914] usb 9-1: USB disconnect, device number 13 [ 901.626173][T25179] fido_id[25179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 901.644981][ T5829] usb 10-1: USB disconnect, device number 13 [ 901.712714][ T937] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 901.964881][ C0] usblp0: nonzero read bulk status received: -71 [ 901.973127][ T5829] usb 3-1: USB disconnect, device number 93 [ 902.239109][T25168] usblp0: removed [ 902.273323][ T937] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 902.443224][ T937] usb 6-1: Using ep0 maxpacket: 32 [ 902.455852][ T937] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 902.467510][ T937] usb 6-1: config 0 has no interface number 0 [ 902.479140][ T937] usb 6-1: config 0 interface 12 has no altsetting 0 [ 902.491182][ T937] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 902.500821][ T937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.513791][ T937] usb 6-1: Product: syz [ 902.518327][ T937] usb 6-1: Manufacturer: syz [ 902.526909][ T937] usb 6-1: SerialNumber: syz [ 902.542022][ T937] usb 6-1: config 0 descriptor?? [ 902.825952][T25200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7628'. [ 903.792573][ T937] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 903.813332][ T937] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 903.830947][ T937] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 903.878359][ T937] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 903.922101][ T937] usb 6-1: USB disconnect, device number 71 [ 904.434091][ T937] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 904.604911][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 904.614312][ T937] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 904.638570][ T937] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 904.648679][ T937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 904.682933][ T937] usb 3-1: config 1 has no interface number 0 [ 904.711381][ T937] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.753614][ T937] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 904.805254][ T937] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 904.840135][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.868962][ T937] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 905.084058][ T937] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 905.464592][T25268] netlink: 'syz.9.7656': attribute type 1 has an invalid length. [ 905.527189][T25268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 905.616108][ T937] usb 3-1: USB disconnect, device number 94 [ 905.634110][ T937] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 905.684833][T25272] bond2: (slave geneve2): making interface the new active one [ 905.700979][T25272] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 906.352951][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 906.523681][ T937] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 906.536694][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 906.557510][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 906.583247][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 906.606064][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.624169][T25283] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 906.644895][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.696972][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.733544][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.754397][ T937] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 906.764644][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.778844][ T937] usb 3-1: config 0 descriptor?? [ 906.867215][ T5914] usb 9-1: USB disconnect, device number 14 [ 907.134921][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7677'. [ 907.164165][T25298] netlink: 'syz.9.7677': attribute type 15 has an invalid length. [ 907.190899][T25298] netlink: 'syz.9.7677': attribute type 18 has an invalid length. [ 907.224453][ T937] cm6533_jd 0003:0D8C:0022.008F: unknown main item tag 0x0 [ 907.243222][ T937] cm6533_jd 0003:0D8C:0022.008F: unknown main item tag 0x0 [ 907.245618][T25298] vxlan0: entered promiscuous mode [ 907.273195][ T937] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.008F/input/input149 [ 907.300941][ T1151] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.326083][ T1151] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.338886][ T937] cm6533_jd 0003:0D8C:0022.008F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 907.363038][ T1151] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.413276][ T1151] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.528074][ T937] usb 3-1: USB disconnect, device number 95 [ 907.622344][T25300] fido_id[25300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 908.030664][ T937] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 908.223394][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 908.240723][ T937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 908.268696][ T937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 908.308478][ T937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 908.341538][ T937] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.386004][ T937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 908.397716][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.622267][ T937] usb 1-1: GET_CAPABILITIES returned 0 [ 908.645075][ T937] usbtmc 1-1:16.0: can't read capabilities [ 908.659456][T25319] netlink: 'syz.8.7673': attribute type 1 has an invalid length. [ 908.732387][T25319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.820116][T25323] bond2: (slave geneve2): making interface the new active one [ 908.830035][T25323] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 908.880725][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.889876][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.899002][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.910456][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.919682][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.933698][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.942947][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.952368][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.962940][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.972101][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 908.991606][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 909.001046][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 909.010883][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 909.022297][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 909.032493][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 909.042424][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 909.082622][T25304] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 909.110038][ T937] usb 1-1: USB disconnect, device number 92 [ 909.555105][ T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 909.748117][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 909.761316][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 909.772005][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 909.781627][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.813292][T25332] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 909.825847][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 910.150716][ T9] usb 3-1: USB disconnect, device number 96 [ 910.473396][ T5898] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 910.663343][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 910.692109][ T5898] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 910.735951][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.768911][ T5898] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 911.164364][ T5914] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 911.338017][ T5914] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 911.360943][ T5914] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 911.385018][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 911.408633][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 911.429248][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 911.449644][ T5914] usb 3-1: Product: syz [ 911.459728][ T5914] usb 3-1: Manufacturer: syz [ 911.472083][ T5914] usb 3-1: SerialNumber: syz [ 911.492998][ T5914] usb 3-1: config 0 descriptor?? [ 911.502535][ T5914] hub 3-1:0.0: bad descriptor, ignoring hub [ 911.524725][ T5914] hub 3-1:0.0: probe with driver hub failed with error -5 [ 911.549845][ T5914] usb 3-1: selecting invalid altsetting 0 [ 911.580885][T25376] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 911.996321][ T5898] gspca_nw80x: reg_w err -71 [ 912.004732][ T5898] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 912.036073][ T5898] usb 1-1: USB disconnect, device number 93 [ 912.223790][T25357] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 912.415743][T25357] usb 3-1: device firmware changed [ 912.438037][ T9] usb 3-1: USB disconnect, device number 97 [ 912.523196][ T937] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 912.607007][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7706'. [ 912.643698][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 912.693440][ T937] usb 6-1: Using ep0 maxpacket: 8 [ 912.700885][ T937] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 912.722987][ T937] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 912.733849][ T937] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 912.751364][ T937] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 912.766978][ T937] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.794634][ T937] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 912.804407][ T937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.826101][ T9] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 912.838951][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 912.849134][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 912.870546][ T9] usb 3-1: string descriptor 0 read error: -22 [ 912.877615][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 912.886953][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 912.898556][ T9] usb 3-1: config 0 descriptor?? [ 912.907576][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 912.914153][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 912.925204][ T9] usb 3-1: selecting invalid altsetting 0 [ 913.025735][ T937] usb 6-1: usb_control_msg returned -32 [ 913.031473][ T937] usbtmc 6-1:16.0: can't read capabilities [ 913.033044][ T5898] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 913.056570][ T5914] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 913.203123][ T5898] usb 9-1: Using ep0 maxpacket: 32 [ 913.214430][ T5898] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 913.224948][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 913.244636][ T5914] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 913.254173][ T5898] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 913.263666][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.272707][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.281197][ T5914] usb 1-1: Product: syz [ 913.287318][ T39] usb 3-1: USB disconnect, device number 98 [ 913.293673][ T5898] usb 9-1: Product: syz [ 913.297858][ T5898] usb 9-1: Manufacturer: syz [ 913.302468][ T5898] usb 9-1: SerialNumber: syz [ 913.307247][ T5914] usb 1-1: Manufacturer: syz [ 913.311862][ T5914] usb 1-1: SerialNumber: syz [ 913.329007][ T5914] usb 1-1: config 0 descriptor?? [ 913.337196][ T5898] usb 9-1: config 0 descriptor?? [ 913.368525][T25395] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 913.368545][ T5914] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 913.409487][ T5898] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input150 [ 913.816928][ T5898] usb 9-1: USB disconnect, device number 15 [ 913.817023][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 914.582763][ T5914] gspca_sonixj: reg_w1 err -71 [ 914.587869][ T5914] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 914.601404][ T5914] usb 1-1: USB disconnect, device number 94 [ 914.611594][T25419] gretap0: entered promiscuous mode [ 914.632248][T25419] vlan2: entered promiscuous mode [ 915.088296][ T30] audit: type=1326 audit(1765955196.383:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25425 comm="syz.8.7714" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 915.355494][ T5914] usb 6-1: USB disconnect, device number 72 [ 915.590543][ T39] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 915.629810][ T39] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 917.486030][T25473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7736'. [ 917.964560][T25486] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 918.562945][ T5914] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 918.653106][ T5898] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 918.773928][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 918.780530][ T5914] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 918.793889][ T5914] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 918.806708][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.816492][ T5914] usb 6-1: Product: syz [ 918.820701][ T5914] usb 6-1: Manufacturer: syz [ 918.825586][ T5914] usb 6-1: SerialNumber: syz [ 918.832417][ T5914] usb 6-1: config 0 descriptor?? [ 918.838909][T25493] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 918.849751][ T5914] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input151 [ 918.862584][ T5898] usb 1-1: config 0 interface 0 has no altsetting 0 [ 918.875378][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 918.891324][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.910437][ T5898] usb 1-1: config 0 descriptor?? [ 919.082708][ T9] usb 6-1: USB disconnect, device number 73 [ 919.082729][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 919.941693][ T5898] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 920.158650][ T5898] usb 1-1: USB disconnect, device number 95 [ 920.784284][T25506] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7750'. [ 921.212940][ T5914] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 921.324894][T25521] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 921.384083][ T5898] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 921.402913][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 921.416355][ T5914] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 921.433734][ T5914] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.462938][ T5914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 921.489118][ T5914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 921.524677][ T5914] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.554190][ T5914] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 921.565215][ T5898] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 921.579886][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.600500][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.610098][ T5898] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 921.643029][ T5898] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 921.651122][ T5898] usb 3-1: Manufacturer: syz [ 921.729257][ T5898] usb 3-1: config 0 descriptor?? [ 921.840986][ T5914] usb 6-1: GET_CAPABILITIES returned 0 [ 921.853841][ T5914] usbtmc 6-1:16.0: can't read capabilities [ 922.024430][ T5898] rc_core: IR keymap rc-hauppauge not found [ 922.047145][ T5898] Registered IR keymap rc-empty [ 922.056887][ T5898] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 922.065201][ T937] usb 6-1: USB disconnect, device number 74 [ 922.094897][ T5898] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input152 [ 922.145272][ T5898] usb 3-1: USB disconnect, device number 99 [ 922.252963][ T39] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 922.473513][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 922.485207][ T39] usb 10-1: config 150 has an invalid interface number: 204 but max is 0 [ 922.505878][ T39] usb 10-1: config 150 has no interface number 0 [ 922.512319][ T39] usb 10-1: config 150 interface 204 has no altsetting 0 [ 922.540525][ T39] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 922.562905][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.572123][ T39] usb 10-1: Product: syz [ 922.591081][ T39] usb 10-1: Manufacturer: syz [ 922.602906][ T39] usb 10-1: SerialNumber: syz [ 922.917260][T25547] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 923.085352][ T39] usb 10-1: USB disconnect, device number 14 [ 923.373287][ T937] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 923.545365][ T937] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 923.559592][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.590849][ T937] usb 1-1: config 0 descriptor?? [ 923.642976][ T39] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 923.815628][ T39] usb 6-1: config 0 has no interfaces? [ 923.849666][ T39] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 923.869426][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.883068][ T39] usb 6-1: Product: syz [ 923.888915][ T39] usb 6-1: Manufacturer: syz [ 923.894652][ T39] usb 6-1: SerialNumber: syz [ 923.904522][ T39] usb 6-1: config 0 descriptor?? [ 924.013137][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 924.165717][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.182605][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.196383][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 924.210106][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 924.221266][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.245622][ T9] usb 10-1: config 0 descriptor?? [ 924.248269][ T39] usb 6-1: USB disconnect, device number 75 [ 924.667933][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.678072][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.686692][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.695183][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.704522][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.712179][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.732384][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.750143][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.757901][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.766083][ T9] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x0 [ 924.796916][ T9] plantronics 0003:047F:FFFF.0091: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 924.833717][ T937] pegasus 1-1:0.0: can't reset MAC [ 924.841335][ T937] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 924.905779][ T937] usb 1-1: USB disconnect, device number 96 [ 925.324482][ T937] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 925.393108][T25616] input: syz0 as /devices/virtual/input/input153 [ 925.483676][ T937] usb 6-1: Using ep0 maxpacket: 8 [ 925.495626][ T937] usb 6-1: config 150 has an invalid interface number: 204 but max is 0 [ 925.513180][ T937] usb 6-1: config 150 has no interface number 0 [ 925.531172][ T937] usb 6-1: config 150 interface 204 has no altsetting 0 [ 925.555052][ T937] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 925.573323][ T937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.591917][ T937] usb 6-1: Product: syz [ 925.601813][ T937] usb 6-1: Manufacturer: syz [ 925.611942][ T937] usb 6-1: SerialNumber: syz [ 925.612490][ T39] usb 10-1: USB disconnect, device number 15 [ 925.825531][ T5914] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 926.003665][ T5914] usb 9-1: Using ep0 maxpacket: 8 [ 926.056203][ T5914] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 926.059427][ T937] usb 6-1: USB disconnect, device number 76 [ 926.084014][ T5914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.133820][ T5914] usb 9-1: Product: syz [ 926.143934][ T5914] usb 9-1: Manufacturer: syz [ 926.152910][ T5914] usb 9-1: SerialNumber: syz [ 926.183269][ T5914] usb 9-1: config 0 descriptor?? [ 926.199365][ T5914] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 926.710898][T25644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7808'. [ 926.775492][T25644] bond3: entered promiscuous mode [ 926.781118][T25644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 926.934954][T25646] bridge1: entered promiscuous mode [ 926.946121][T25646] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 927.431140][ T5914] gspca_sonixj: reg_w1 err -71 [ 927.439840][ T5914] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 927.459824][ T5914] usb 9-1: USB disconnect, device number 16 [ 927.484151][ T937] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 927.646490][ T937] usb 10-1: Using ep0 maxpacket: 16 [ 927.663498][ T5898] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 927.666234][ T937] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 927.702319][ T937] usb 10-1: config 1 has no interface number 1 [ 927.712755][ T937] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 927.726340][ T937] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 927.740871][ T937] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 927.762504][ T937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.770799][ T937] usb 10-1: Product: syz [ 927.775481][ T937] usb 10-1: Manufacturer: syz [ 927.780201][ T937] usb 10-1: SerialNumber: syz [ 927.833395][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 927.845296][ T5898] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 927.863017][ T5898] usb 6-1: config 0 has no interface number 0 [ 927.879679][ T5898] usb 6-1: config 0 interface 184 has no altsetting 0 [ 927.895710][ T5898] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 927.914145][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.925718][ T5898] usb 6-1: Product: syz [ 927.929956][ T5898] usb 6-1: Manufacturer: syz [ 927.934977][ T5898] usb 6-1: SerialNumber: syz [ 927.944538][ T5898] usb 6-1: config 0 descriptor?? [ 927.957230][ T5898] smsc75xx v1.0.0 [ 928.246002][ T937] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 928.975706][ T5898] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 929.060089][ T937] usb 10-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 929.122390][ T937] usb 10-1: USB disconnect, device number 16 [ 929.190086][ T5898] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 929.224159][ T5898] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 929.283032][ T5898] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 929.287506][T18225] udevd[18225]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.323969][ T5898] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 929.363405][ T5898] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 929.388309][ T5898] usb 6-1: USB disconnect, device number 77 [ 929.888760][T25723] input: syz0 as /devices/virtual/input/input154 [ 930.468617][T25753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7852'. [ 930.482102][T25753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7852'. [ 930.491570][ T5898] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 930.523264][ T5829] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 930.656078][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 930.674925][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 930.687705][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 930.700637][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 930.714771][ T5898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 930.725224][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.729603][ T5829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 930.736442][ T5898] usb 1-1: config 0 descriptor?? [ 930.740897][ T937] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 930.753099][ T5829] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 930.762291][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.776397][ T5829] usb 9-1: config 0 descriptor?? [ 930.932933][ T39] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 930.932933][ T937] usb 6-1: Using ep0 maxpacket: 16 [ 930.948828][ T937] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 930.958345][ T937] usb 6-1: config 1 has no interface number 1 [ 930.964672][ T937] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 930.977942][ T937] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.997296][ T937] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 931.007085][ T937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.016774][ T937] usb 6-1: Product: syz [ 931.021330][ T937] usb 6-1: Manufacturer: syz [ 931.031053][ T937] usb 6-1: SerialNumber: syz [ 931.092600][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.124269][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.148101][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 931.178406][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 931.211803][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.228383][ T5898] plantronics 0003:047F:FFFF.0092: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 931.245166][ T39] usb 3-1: config 0 descriptor?? [ 931.460923][ T937] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 931.688508][ T39] plantronics 0003:047F:FFFF.0093: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 931.835662][ T5829] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 931.987702][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.994717][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.060705][ T5829] usb 9-1: USB disconnect, device number 17 [ 932.268064][ T937] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 932.314374][ T937] usb 6-1: USB disconnect, device number 78 [ 932.547291][ T937] usb 3-1: USB disconnect, device number 100 [ 933.115282][ T5898] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 933.303198][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.322966][ T5829] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 933.338357][ T39] usb 1-1: USB disconnect, device number 97 [ 933.346667][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.388984][ T5898] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 933.445704][ T5898] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 933.486193][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.495248][ T5829] usb 10-1: config 0 has no interfaces? [ 933.520077][ T5829] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 933.524829][ T5898] usb 9-1: config 0 descriptor?? [ 933.563074][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.579304][ T5829] usb 10-1: Product: syz [ 933.586837][ T5829] usb 10-1: Manufacturer: syz [ 933.591679][ T5829] usb 10-1: SerialNumber: syz [ 933.607132][ T5829] usb 10-1: config 0 descriptor?? [ 933.932076][ T5906] usb 10-1: USB disconnect, device number 17 [ 933.953155][ T5829] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 934.060722][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.102939][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.110642][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.115497][ T5829] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 934.126474][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.139060][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.146672][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.154286][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.159882][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.179708][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.190573][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.199211][ T5829] usb 6-1: config 0 descriptor?? [ 934.204914][ T5898] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 934.234864][ T5829] gspca_main: spca508-2.14.0 probing 8086:0110 [ 934.248594][ T5898] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 934.465728][ T5829] gspca_spca508: reg_read err -32 [ 934.487411][ T5829] gspca_spca508: reg_read err -32 [ 934.501604][ T5829] gspca_spca508: reg_read err -32 [ 934.508606][ T5829] gspca_spca508: reg_read err -32 [ 934.784757][ T5829] gspca_spca508: reg write: error -71 [ 934.808372][ T5829] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 934.840226][ T5829] usb 6-1: USB disconnect, device number 79 [ 934.985243][ T5898] usb 9-1: USB disconnect, device number 18 [ 935.684179][T25822] netlink: 'syz.9.7877': attribute type 1 has an invalid length. [ 935.774573][ T5829] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 935.789369][T25824] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7878'. [ 935.864866][T25822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 935.883681][T25831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7878'. [ 935.964819][ T5829] usb 3-1: config 0 has no interfaces? [ 936.028377][ T5829] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 936.042354][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.057532][ T5829] usb 3-1: Product: syz [ 936.062525][ T5829] usb 3-1: Manufacturer: syz [ 936.073128][ T5829] usb 3-1: SerialNumber: syz [ 936.081066][ T5829] usb 3-1: config 0 descriptor?? [ 936.558341][T25815] veth0_macvtap: left promiscuous mode [ 936.773233][T25815] veth0_macvtap: entered promiscuous mode [ 936.849951][ T5829] usb 3-1: USB disconnect, device number 101 [ 936.957836][T25865] netlink: 'syz.0.7893': attribute type 1 has an invalid length. [ 937.013086][T25865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 937.162992][ T5906] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 937.313051][ T5906] usb 10-1: Using ep0 maxpacket: 8 [ 937.331631][ T5906] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 937.361446][ T5906] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 937.382315][ T5906] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 937.402975][ T5906] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 937.431918][ T5906] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.491615][ T5906] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 937.513393][ T5906] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.653150][ T39] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 937.739943][ T5906] usb 10-1: usb_control_msg returned -32 [ 937.765789][T24661] veth0_macvtap: left promiscuous mode [ 937.772977][ T5906] usbtmc 10-1:16.0: can't read capabilities [ 937.858493][ T39] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 937.897887][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 937.923176][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 937.938689][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 937.955605][ T39] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 937.965241][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.984947][ T39] usb 9-1: config 0 descriptor?? [ 938.309083][ T5898] usb 10-1: USB disconnect, device number 18 [ 938.312926][ T5906] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 938.429127][ T39] plantronics 0003:047F:FFFF.0095: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 938.493588][ T5906] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 938.531591][ T5906] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 938.552554][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 938.568489][ T5906] usb 1-1: Product: syz [ 938.586788][ T5906] usb 1-1: Manufacturer: syz [ 938.591450][ T5906] usb 1-1: SerialNumber: syz [ 938.881450][ T5906] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 98 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 939.840355][ T5914] usb 1-1: USB disconnect, device number 98 [ 939.863604][ T5914] usblp1: removed [ 940.561287][T25955] netlink: 'syz.2.7929': attribute type 1 has an invalid length. [ 940.573185][ T5898] usb 9-1: USB disconnect, device number 19 [ 940.592182][T25955] netlink: 'syz.2.7929': attribute type 4 has an invalid length. [ 940.637071][T25955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7929'. [ 941.924878][T25979] ip6tnl1: entered promiscuous mode [ 941.950481][T25979] ip6tnl1: entered allmulticast mode [ 942.393437][ T5906] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 942.433158][ T937] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 942.513629][ T5829] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 942.552982][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 942.563822][ T5906] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 942.573861][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.592969][ T937] usb 1-1: Using ep0 maxpacket: 32 [ 942.601622][ T937] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 942.612725][ T5906] usb 6-1: config 0 descriptor?? [ 942.620244][ T937] usb 1-1: config 0 has no interface number 0 [ 942.630991][ T937] usb 1-1: config 0 interface 184 has no altsetting 0 [ 942.647782][ T5906] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 942.666632][ T937] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 942.678303][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.687283][ T5829] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.700489][ T937] usb 1-1: Product: syz [ 942.705806][ T937] usb 1-1: Manufacturer: syz [ 942.710598][ T937] usb 1-1: SerialNumber: syz [ 942.718685][ T5829] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 942.733735][ T937] usb 1-1: config 0 descriptor?? [ 942.738845][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 942.747555][ T5829] usb 3-1: Product: syz [ 942.755863][ T937] smsc75xx v1.0.0 [ 942.760613][ T5829] usb 3-1: Manufacturer: syz [ 942.772907][ T5829] usb 3-1: SerialNumber: syz [ 943.020030][ T5829] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 102 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 943.797113][ T937] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 943.862272][ T5906] gspca_vc032x: reg_w err -71 [ 943.892012][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 943.899118][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 943.918879][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 943.938436][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 943.948554][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 943.962998][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 943.968503][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 943.993698][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.000559][ T937] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 944.052986][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.058393][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.073628][ T937] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 944.090786][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.111840][ T937] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 944.122384][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.138512][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.144382][ T937] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 944.160767][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.169874][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.182271][ T937] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 944.206311][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.211669][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.226875][ T937] usb 1-1: USB disconnect, device number 99 [ 944.238099][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.246339][ T5906] gspca_vc032x: Unknown sensor... [ 944.258403][ T5906] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 944.277122][ T5906] usb 6-1: USB disconnect, device number 80 [ 944.603080][T26010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7950'. [ 944.856995][T26016] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7953'. [ 946.662990][ T39] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 946.686294][ T5906] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 946.825732][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 946.834702][ T39] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 946.850011][ T39] usb 10-1: config 0 has no interface number 0 [ 946.855231][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 946.856543][ T39] usb 10-1: config 0 interface 184 has no altsetting 0 [ 946.887423][ T39] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 946.896802][ T5906] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 946.913102][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.913909][ T5906] usb 6-1: config 0 has no interface number 0 [ 946.921418][ T39] usb 10-1: Product: syz [ 946.941281][ T5906] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 946.943025][ T39] usb 10-1: Manufacturer: syz [ 946.953614][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.962959][ T39] usb 10-1: SerialNumber: syz [ 946.974452][ T5906] usb 6-1: Product: syz [ 946.978879][ T5906] usb 6-1: Manufacturer: syz [ 946.995569][ T39] usb 10-1: config 0 descriptor?? [ 947.003405][ T5906] usb 6-1: SerialNumber: syz [ 947.011677][ T39] smsc75xx v1.0.0 [ 947.019509][ T5906] usb 6-1: config 0 descriptor?? [ 947.038353][ T5906] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 947.262441][ T5906] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 947.292291][ T5906] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 947.812576][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 947.815922][ T5898] usb 6-1: USB disconnect, device number 81 [ 947.865128][ T5898] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 947.911854][ T5898] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 947.960655][ T5898] quatech2 6-1:0.51: device disconnected [ 948.028204][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 948.229427][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 948.284308][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 948.303236][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 948.332870][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 948.345554][ T39] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 948.363390][ T39] usb 10-1: USB disconnect, device number 19 [ 948.884909][T26076] netlink: 'syz.0.7982': attribute type 9 has an invalid length. [ 948.895985][T26076] netlink: 'syz.0.7982': attribute type 11 has an invalid length. [ 948.915858][T26076] netlink: 'syz.0.7982': attribute type 12 has an invalid length. [ 948.933237][T26076] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.7982'. [ 948.953146][T26076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7982'. [ 949.164529][T26084] team_slave_0: entered promiscuous mode [ 949.170931][T26084] team_slave_1: entered promiscuous mode [ 949.197562][T26084] team_slave_0: left promiscuous mode [ 949.203540][T26084] team_slave_1: left promiscuous mode [ 949.414840][ T39] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 949.587096][ T39] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 949.603324][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.627611][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.643204][ T39] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 949.667632][ T39] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 949.687647][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.701197][ T39] usb 10-1: config 0 descriptor?? [ 949.743803][ T5898] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 949.884342][ T5906] usb 3-1: USB disconnect, device number 102 [ 949.903178][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 949.910466][ T5898] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 949.921612][ T5906] usblp0: removed [ 949.958871][ T5898] usb 1-1: config 0 has no interface number 0 [ 949.976088][ T5898] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 950.006332][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.033784][ T5898] usb 1-1: Product: syz [ 950.038141][ T5898] usb 1-1: Manufacturer: syz [ 950.064468][ T5898] usb 1-1: SerialNumber: syz [ 950.083516][ T5898] usb 1-1: config 0 descriptor?? [ 950.110928][ T5898] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 950.160277][ T39] plantronics 0003:047F:FFFF.0096: reserved main item tag 0xd [ 950.216131][ T39] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 950.271940][T26109] netlink: 'syz.2.7995': attribute type 9 has an invalid length. [ 950.289262][T26109] netlink: 'syz.2.7995': attribute type 11 has an invalid length. [ 950.298488][T26109] netlink: 'syz.2.7995': attribute type 12 has an invalid length. [ 950.309555][T26109] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.7995'. [ 950.324628][ T5898] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 950.335829][T26109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7995'. [ 950.355644][ T5898] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 950.474863][ T5906] usb 10-1: USB disconnect, device number 20 [ 950.497768][T26113] team_slave_1: entered promiscuous mode [ 950.503593][T26113] bridge_slave_1: entered promiscuous mode [ 950.522325][T26113] team_slave_1: left promiscuous mode [ 950.527878][T26113] bridge_slave_1: left promiscuous mode [ 950.546206][ T39] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 950.733102][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 950.745157][ T39] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 950.762957][ T39] usb 9-1: config 0 has no interface number 0 [ 950.774523][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 950.774974][ T5906] usb 1-1: USB disconnect, device number 100 [ 950.789173][ T39] usb 9-1: config 0 interface 184 has no altsetting 0 [ 950.815107][ T39] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 950.829973][ T5906] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 950.833014][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.872953][ T39] usb 9-1: Product: syz [ 950.877247][ T39] usb 9-1: Manufacturer: syz [ 950.880638][ T5906] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 950.886515][ T39] usb 9-1: SerialNumber: syz [ 950.916258][ T39] usb 9-1: config 0 descriptor?? [ 950.920381][ T5906] quatech2 1-1:0.51: device disconnected [ 950.946925][ T39] smsc75xx v1.0.0 [ 951.459521][T26138] team_slave_0: entered promiscuous mode [ 951.465333][T26138] team_slave_1: entered promiscuous mode [ 951.523235][T26138] team_slave_0: left promiscuous mode [ 951.528785][T26138] team_slave_1: left promiscuous mode [ 951.932948][ T5906] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 951.951037][ T39] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 952.114990][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 952.145222][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.154095][ T39] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 952.213292][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.247899][ T5906] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 952.249821][ T39] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 952.273307][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.287150][ T39] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 952.318442][ T39] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 952.319884][ T5906] usb 6-1: config 0 descriptor?? [ 952.341944][ T39] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 952.362944][ T39] usb 9-1: USB disconnect, device number 20 [ 952.730800][T26175] team_slave_0: entered promiscuous mode [ 952.737282][T26175] team_slave_1: entered promiscuous mode [ 952.746256][T26175] team_slave_0: left promiscuous mode [ 952.751945][T26175] team_slave_1: left promiscuous mode [ 952.810635][ T5906] ft260 0003:0403:6030.0097: unknown main item tag 0x7 [ 952.973082][ T5829] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 953.001360][ T5906] ft260 0003:0403:6030.0097: chip code: b200 0000 [ 953.143832][ T5829] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 953.165291][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.183941][ T5829] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.199031][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.212732][ T5906] ft260 0003:0403:6030.0097: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 953.235456][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.262677][ T5829] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.277015][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.288422][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.299364][ T5829] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.315195][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.326446][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.340123][ T5829] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.360743][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.383007][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.404274][ T5829] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.419885][ T5906] ft260 0003:0403:6030.0097: failed to retrieve status: -71, no wakeup [ 953.437328][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.463190][ T5906] ft260 0003:0403:6030.0097: failed to retrieve status: -71 [ 953.513898][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.514132][ T5906] ft260 0003:0403:6030.0097: failed to reset I2C controller: -71 [ 953.539599][ T5829] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.596003][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.616676][ T5906] usb 6-1: USB disconnect, device number 82 [ 953.634480][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.682942][ T5829] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.706349][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.727831][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.750239][ T5829] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.772872][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.838780][ T5829] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 953.853445][ T5829] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 953.875211][ T5829] usb 1-1: Product: syz [ 953.879618][ T5829] usb 1-1: Manufacturer: syz [ 953.907565][ T5829] usb 1-1: SerialNumber: syz [ 953.920559][ T5829] usb 1-1: config 0 descriptor?? [ 953.946378][ T5829] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 954.264639][ C0] usb 1-1: yurex_control_callback - control failed: -2 [ 954.278316][ T5829] usb 1-1: USB disconnect, device number 101 [ 954.288113][ T5829] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 954.509922][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805b2c3800: rx timeout, send abort [ 954.792986][ T5829] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 954.946193][ T5829] usb 3-1: config 0 has no interfaces? [ 954.963946][ T5829] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 954.973749][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.981875][ T5829] usb 3-1: Product: syz [ 954.986900][ T5829] usb 3-1: Manufacturer: syz [ 954.992983][ T5829] usb 3-1: SerialNumber: syz [ 955.000532][ T5829] usb 3-1: config 0 descriptor?? [ 955.018439][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805b2c3800: abort rx timeout. Force session deactivation [ 955.396088][ T5898] usb 3-1: USB disconnect, device number 103 [ 955.799253][T26245] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 955.905630][ T5829] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 956.078801][ T5829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 956.100944][T26256] ALSA: seq fatal error: cannot create timer (-16) [ 956.117167][ T5829] usb 6-1: not running at top speed; connect to a high speed hub [ 956.161454][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.190390][ T5829] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 956.247145][ T5829] usb 6-1: string descriptor 0 read error: -22 [ 956.258476][ T5829] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 956.282251][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.347188][ T5829] usb 6-1: 0:2 : does not exist [ 956.788959][T26133] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.803278][T26133] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.976505][T26278] loop8: detected capacity change from 0 to 79 [ 957.119356][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 957.122760][T26133] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.124515][T26278] loop8: detected capacity change from 79 to 78 [ 957.147229][T26133] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.150374][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 957.170438][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 957.181910][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 957.199854][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 957.218563][T20473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 957.226945][T20473] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 957.234910][T20473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 957.243521][T20473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 957.251444][T20473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 957.568569][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8079'. [ 957.648694][ T5829] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 957.659653][T26133] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.678247][T26133] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.680017][ T5829] usb 6-1: Warning! Unlikely big volume range (=23808), cval->res is probably wrong. [ 957.712764][ T5829] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/1 [ 957.746581][ T5829] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 957.762982][ T937] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 957.787693][ T5829] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 957.859727][ T5829] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 957.871218][T26133] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.894939][T26133] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.903406][ T5829] usb 6-1: USB disconnect, device number 83 [ 957.936073][ T937] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 957.964508][ T937] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 958.003041][ T937] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 958.022347][ T937] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.062994][T26289] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 958.070376][T26289] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 958.107295][ T937] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 958.397068][ T5898] usb 10-1: USB disconnect, device number 21 [ 958.550711][T26133] bridge_slave_1: left allmulticast mode [ 958.556975][T26133] bridge_slave_1: left promiscuous mode [ 958.578500][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.594651][T26133] bridge_slave_0: left allmulticast mode [ 958.600507][T26133] bridge_slave_0: left promiscuous mode [ 958.606447][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.760681][T26133] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 958.824578][ T5914] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 958.990417][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 958.998074][ T5914] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 959.007364][ T5914] usb 1-1: config 0 has no interface number 0 [ 959.014294][ T5914] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 959.026222][ T5914] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 959.038506][ T5914] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 959.052134][T26133] bond2 (unregistering): (slave geneve2): Releasing active interface [ 959.055597][ T5914] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.077576][ T5914] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 959.087294][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.104573][ T5914] usb 1-1: Product: syz [ 959.109000][ T5914] usb 1-1: Manufacturer: syz [ 959.114380][ T5914] usb 1-1: SerialNumber: syz [ 959.124865][ T5914] usb 1-1: config 0 descriptor?? [ 959.343296][T20473] Bluetooth: hci4: command tx timeout [ 959.375721][ T5914] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 959.513155][ T937] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 959.536533][T26327] ALSA: seq fatal error: cannot create timer (-16) [ 959.616886][T26133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.638205][T26133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.646167][ T5914] usb 1-1: USB disconnect, device number 102 [ 959.657022][T26133] bond0 (unregistering): Released all slaves [ 959.675849][ T937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.687284][ T937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 959.696434][ T5829] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 959.730529][ T937] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 959.741514][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 959.750569][ T937] usb 3-1: SerialNumber: syz [ 959.877783][ T39] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 959.884944][ T5829] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 959.898070][ T5829] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 959.910198][ T5829] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 959.921733][ T5829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 959.930554][ T5829] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 959.939893][ T5829] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 959.953859][ T5829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 959.962173][ T5829] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 959.995171][ T937] usb 3-1: 0:2 : does not exist [ 960.000519][ T5829] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 960.012200][ T5829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 960.020051][ T937] usb 3-1: unit 16 not found! [ 960.033989][ T5829] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 960.043415][ T5829] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 960.059028][ T5829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 960.059029][T26133] bond1 (unregistering): Released all slaves [ 960.060562][ T5829] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 960.083547][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 960.095596][ T937] usb 3-1: USB disconnect, device number 104 [ 960.095626][ T39] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 960.102756][ T5829] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 960.121182][ T5829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 960.131281][ T39] usb 6-1: config 0 has no interface number 0 [ 960.140537][ T39] usb 6-1: config 0 interface 230 has no altsetting 0 [ 960.175957][ T5829] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 960.177698][ T39] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 960.189507][ T5829] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 960.207706][ T5829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 960.217366][ T5829] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 960.228455][ T5829] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 960.233657][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.251303][T25709] udevd[25709]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.271143][ T5829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 960.281116][ T39] usb 6-1: Product: syz [ 960.285251][ T5829] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 960.295826][ T5829] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 960.309448][ T39] usb 6-1: Manufacturer: syz [ 960.323346][ T39] usb 6-1: SerialNumber: syz [ 960.326281][ T5829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 960.350316][ T5829] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 960.351539][ T39] usb 6-1: config 0 descriptor?? [ 960.360302][ T5829] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 960.382001][ T5829] usb 10-1: Product: syz [ 960.388491][ T5829] usb 10-1: Manufacturer: syz [ 960.394891][ T5829] usb 10-1: SerialNumber: syz [ 960.424005][ T5829] usb 10-1: config 0 descriptor?? [ 960.424052][ T39] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 960.435376][ T5829] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 960.480564][ T39] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 960.651640][T26133] bond2 (unregistering): Released all slaves [ 960.710972][T26285] chnl_net:caif_netlink_parms(): no params data found [ 960.866783][ C0] usb 10-1: yurex_control_callback - control failed: -2 [ 960.876348][ T5935] usb 10-1: USB disconnect, device number 22 [ 960.904306][ T5935] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 961.159641][T26285] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.171400][T26285] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.179722][T26285] bridge_slave_0: entered allmulticast mode [ 961.191540][T26285] bridge_slave_0: entered promiscuous mode [ 961.239060][T26133] hsr_slave_0: left promiscuous mode [ 961.247873][T26133] hsr_slave_1: left promiscuous mode [ 961.254876][T26133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.262593][T26133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.276416][T26133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.284225][T26133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.321273][T26133] veth1_macvtap: left promiscuous mode [ 961.327650][T26133] veth0_macvtap: left promiscuous mode [ 961.333892][T26133] veth1_vlan: left promiscuous mode [ 961.339555][T26133] veth0_vlan: left promiscuous mode [ 961.425630][T20473] Bluetooth: hci4: command tx timeout [ 961.670273][T26363] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8099'. [ 962.038168][ T5914] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 962.276517][ T5914] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 962.289238][ T5914] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 962.300787][ T5914] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 962.310322][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.340258][T26365] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 962.348259][T26365] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 962.366202][ T5914] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 962.483605][T26133] team0 (unregistering): Port device team_slave_1 removed [ 962.622448][ T5914] usb 3-1: USB disconnect, device number 105 [ 962.643856][T26133] team0 (unregistering): Port device team_slave_0 removed [ 962.775800][ T39] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 962.888750][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8107'. [ 963.003959][ T5914] usb 6-1: USB disconnect, device number 84 [ 963.503083][T20473] Bluetooth: hci4: command tx timeout [ 963.880420][T26285] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.888428][T26285] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.895865][T26285] bridge_slave_1: entered allmulticast mode [ 963.905122][T26285] bridge_slave_1: entered promiscuous mode [ 964.066244][ T5914] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 964.086335][T26285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.119231][T26285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.239284][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 964.257377][ T5914] usb 3-1: not running at top speed; connect to a high speed hub [ 964.275538][T26285] team0: Port device team_slave_0 added [ 964.298434][T26285] team0: Port device team_slave_1 added [ 964.304687][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.322292][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.385766][ T5914] usb 3-1: string descriptor 0 read error: -22 [ 964.392383][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.433672][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.487889][ T5914] usb 3-1: 0:2 : does not exist [ 964.561129][T26285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.604196][T26285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.660970][T26285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.716734][T26285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.753482][T26285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.852993][T26285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.025720][T26285] hsr_slave_0: entered promiscuous mode [ 965.032761][T26285] hsr_slave_1: entered promiscuous mode [ 965.039788][T26285] debugfs: 'hsr0' already exists in 'hsr' [ 965.048053][T26285] Cannot create hsr debugfs directory [ 965.343886][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 965.369691][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 965.380324][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 965.389413][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 965.398914][ T937] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 965.408328][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 965.440667][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 965.453733][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 965.464332][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 965.473823][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 965.490901][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.492640][T26133] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.522906][T26133] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.571125][ T937] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 965.583253][T20473] Bluetooth: hci4: command tx timeout [ 965.611377][ T937] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 965.641205][ T937] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 965.651904][ T937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.676405][T26413] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 965.692396][T26413] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 965.734113][ T5914] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 965.769363][ T5914] usb 3-1: Warning! Unlikely big volume range (=23808), cval->res is probably wrong. [ 965.780395][T26133] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.790964][ T5914] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/1 [ 965.798903][T26133] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.815324][ T5914] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 965.836793][ T5914] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 965.897433][ T5914] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 965.915004][ T937] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 965.927926][ T5914] usb 3-1: USB disconnect, device number 106 [ 966.026134][T26133] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.037475][T26133] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.078246][ T937] usb 6-1: USB disconnect, device number 85 [ 966.247177][T26133] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.257925][T26133] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.012101][T26421] chnl_net:caif_netlink_parms(): no params data found [ 967.173931][T26133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.232665][ T30] audit: type=1326 audit(1765955248.523:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26449 comm="syz.2.8127" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d539 code=0x0 [ 967.249339][T26420] chnl_net:caif_netlink_parms(): no params data found [ 967.418899][T26133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.503144][T20473] Bluetooth: hci2: command tx timeout [ 967.559797][T26133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.593207][T20473] Bluetooth: hci3: command tx timeout [ 967.614667][ T5914] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 967.659917][T26133] bond0: (slave netdevsim0): Releasing backup interface [ 967.675362][T26133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.706642][T26421] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.714104][T26421] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.721361][T26421] bridge_slave_0: entered allmulticast mode [ 967.730840][T26421] bridge_slave_0: entered promiscuous mode [ 967.794072][T26421] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.801693][ T5914] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 967.804106][T26421] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.811566][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.817120][T26421] bridge_slave_1: entered allmulticast mode [ 967.844776][T26421] bridge_slave_1: entered promiscuous mode [ 967.845061][ T5914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.867228][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 967.877574][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.877680][T26420] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.888951][ T5914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.895766][T26420] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.908032][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 967.914159][T26420] bridge_slave_0: entered allmulticast mode [ 967.921403][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.928446][T26420] bridge_slave_0: entered promiscuous mode [ 967.935346][ T5914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.944420][T26420] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.961047][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 967.961136][T26420] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.969915][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.976036][T26420] bridge_slave_1: entered allmulticast mode [ 967.988228][ T5914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.992712][T26420] bridge_slave_1: entered promiscuous mode [ 968.002703][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 968.022268][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 968.049394][ T5914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 968.062080][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 968.075056][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 968.086971][ T5914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 968.099685][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 968.108059][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 968.117449][ T5914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 968.128846][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 968.137689][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 968.146945][ T5914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 968.159905][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 968.170888][ T5914] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 968.180908][ T5914] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 968.190143][ T5914] usb 6-1: Product: syz [ 968.194669][ T5914] usb 6-1: Manufacturer: syz [ 968.199518][ T5914] usb 6-1: SerialNumber: syz [ 968.219991][ T5914] usb 6-1: config 0 descriptor?? [ 968.229182][T26421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.243858][ T5914] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 968.262355][T26420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.286451][T26421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.345052][T26420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.373060][ T5829] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 968.475060][T26421] team0: Port device team_slave_0 added [ 968.516514][T26420] team0: Port device team_slave_0 added [ 968.526429][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 968.530715][T26420] team0: Port device team_slave_1 added [ 968.544743][ T5829] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 968.546126][T26421] team0: Port device team_slave_1 added [ 968.564713][ T5829] usb 3-1: config 0 has no interface number 0 [ 968.593107][ T5829] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 968.608605][ T5829] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 968.621295][ T5829] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 968.633624][ T5829] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.673773][ T5829] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 968.693141][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.701367][ T5829] usb 3-1: Product: syz [ 968.710059][ T5829] usb 3-1: Manufacturer: syz [ 968.715951][ T5829] usb 3-1: SerialNumber: syz [ 968.730533][ T5829] usb 3-1: config 0 descriptor?? [ 968.767518][T26421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.776422][T26421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.803439][T26421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.834238][T26420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.841966][T26420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.869056][T26420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.885531][T26421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.892889][T26421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.919735][T26421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.948063][T26420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.956070][T26420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.960704][ T5829] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 968.983384][T26420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.017816][T26133] bridge_slave_1: left allmulticast mode [ 969.025336][T26133] bridge_slave_1: left promiscuous mode [ 969.031259][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.046067][T26133] bridge_slave_0: left allmulticast mode [ 969.051987][T26133] bridge_slave_0: left promiscuous mode [ 969.058217][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.074739][T26133] bridge_slave_1: left allmulticast mode [ 969.081999][T26133] bridge_slave_1: left promiscuous mode [ 969.088667][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.100456][T26133] bridge_slave_0: left allmulticast mode [ 969.106976][T26133] bridge_slave_0: left promiscuous mode [ 969.112740][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.249318][ T5829] usb 3-1: USB disconnect, device number 107 [ 969.296388][ T937] usb 6-1: USB disconnect, device number 86 [ 969.321368][ T937] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 969.409864][T26133] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 969.586296][T20473] Bluetooth: hci2: command tx timeout [ 969.594239][T26133] bond2 (unregistering): (slave geneve2): Releasing active interface [ 969.667372][T20473] Bluetooth: hci3: command tx timeout [ 969.738633][T26133] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 969.748014][T26133] bridge1 (unregistering): left promiscuous mode [ 970.031459][T26133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.045303][T26133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.060254][T26133] bond0 (unregistering): Released all slaves [ 970.061746][T26469] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 970.090326][T26469] block device autoloading is deprecated and will be removed. [ 970.367183][T26133] bond1 (unregistering): Released all slaves [ 970.486177][ T30] audit: type=1326 audit(1765955251.773:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26476 comm="syz.2.8136" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d539 code=0x0 [ 970.628413][T26133] bond2 (unregistering): Released all slaves [ 970.819687][T26133] bond3 (unregistering): Released all slaves [ 971.016732][T26133] bond4 (unregistering): Released all slaves [ 971.247563][T26133] bond1 (unregistering): (slave geneve2): Releasing active interface [ 971.536250][T26133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.548688][T26133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.559558][T26133] bond0 (unregistering): Released all slaves [ 971.603098][ T5935] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 971.673154][T20473] Bluetooth: hci2: command tx timeout [ 971.751186][T20473] Bluetooth: hci3: command tx timeout [ 971.772015][T26133] bond1 (unregistering): Released all slaves [ 971.783180][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 971.790868][ T5935] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 971.800457][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.816328][ T5935] usb 3-1: config 0 descriptor?? [ 971.843209][ T5935] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 972.000997][T26133] bond2 (unregistering): Released all slaves [ 972.232272][T26285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 972.494601][T26285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 972.526127][T26420] hsr_slave_0: entered promiscuous mode [ 972.533388][T26420] hsr_slave_1: entered promiscuous mode [ 972.539906][T26420] debugfs: 'hsr0' already exists in 'hsr' [ 972.546399][T26420] Cannot create hsr debugfs directory [ 972.570743][T26421] hsr_slave_0: entered promiscuous mode [ 972.578414][T26421] hsr_slave_1: entered promiscuous mode [ 972.586246][T26421] debugfs: 'hsr0' already exists in 'hsr' [ 972.592098][T26421] Cannot create hsr debugfs directory [ 972.599125][T26285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 972.649998][T26285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 973.046717][ T5935] gspca_sonixj: reg_w1 err -71 [ 973.073664][ T5935] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 973.107231][ T5935] usb 3-1: USB disconnect, device number 108 [ 973.200671][T26133] hsr_slave_0: left promiscuous mode [ 973.207003][T26133] hsr_slave_1: left promiscuous mode [ 973.214874][T26133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.222472][T26133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.231290][T26133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.239936][T26133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.254957][T26133] hsr_slave_0: left promiscuous mode [ 973.261875][T26133] hsr_slave_1: left promiscuous mode [ 973.268247][T26133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.275820][T26133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.285512][T26133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.293189][T26133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.328013][T26133] veth1_macvtap: left promiscuous mode [ 973.333685][T26133] veth0_macvtap: left promiscuous mode [ 973.339400][T26133] veth1_vlan: left promiscuous mode [ 973.345296][T26133] veth0_vlan: left promiscuous mode [ 973.356359][T26133] veth1_macvtap: left promiscuous mode [ 973.361957][T26133] veth0_macvtap: left promiscuous mode [ 973.369047][T26133] veth1_vlan: left promiscuous mode [ 973.376689][T26133] veth0_vlan: left promiscuous mode [ 973.427429][T26496] [ 973.429799][T26496] ===================================================== [ 973.436735][T26496] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 973.444193][T26496] syzkaller #0 Tainted: G L [ 973.450183][T26496] ----------------------------------------------------- [ 973.457146][T26496] syz.5.8141/26496 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 973.464901][T26496] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 973.473759][T26496] [ 973.473759][T26496] and this task is already holding: [ 973.481150][T26496] ffff88806fcf2b20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 973.489913][T26496] which would create a new lock dependency: [ 973.495830][T26496] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 973.503550][T26496] [ 973.503550][T26496] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 973.513035][T26496] (&client->buffer_lock){..-.}-{3:3} [ 973.513070][T26496] [ 973.513070][T26496] ... which became SOFTIRQ-irq-safe at: [ 973.526272][T26496] lock_acquire+0x117/0x340 [ 973.530881][T26496] _raw_spin_lock+0x2e/0x40 [ 973.535568][T26496] evdev_pass_values+0xb9/0xbd0 [ 973.540520][T26496] evdev_events+0x1e6/0x340 [ 973.545109][T26496] input_pass_values+0x288/0x890 [ 973.550129][T26496] input_event_dispose+0x3e5/0x6b0 [ 973.555330][T26496] input_event+0x89/0xe0 [ 973.559660][T26496] hidinput_hid_event+0x1404/0x1e50 [ 973.564946][T26496] hid_process_event+0x4be/0x620 [ 973.569970][T26496] hid_report_raw_event+0xe91/0x1720 [ 973.575340][T26496] hid_input_report+0x44b/0x580 [ 973.580284][T26496] hid_irq_in+0x47e/0x6d0 [ 973.584702][T26496] __usb_hcd_giveback_urb+0x376/0x540 [ 973.590174][T26496] dummy_timer+0x85f/0x45b0 [ 973.594784][T26496] __hrtimer_run_queues+0x51c/0xc30 [ 973.600081][T26496] hrtimer_run_softirq+0x187/0x2b0 [ 973.605287][T26496] handle_softirqs+0x27d/0x850 [ 973.610146][T26496] __irq_exit_rcu+0xca/0x1f0 [ 973.614915][T26496] irq_exit_rcu+0x9/0x30 [ 973.619241][T26496] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 973.624963][T26496] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 973.631031][T26496] finish_task_switch+0x242/0x940 [ 973.636149][T26496] __schedule+0x14c4/0x5000 [ 973.640742][T26496] preempt_schedule_notrace+0xd1/0x110 [ 973.646374][T26496] preempt_schedule_notrace_thunk+0x16/0x30 [ 973.652353][T26496] rcu_is_watching+0x7f/0xb0 [ 973.657031][T26496] unwind_next_frame+0xd4/0x23d0 [ 973.662061][T26496] arch_stack_walk+0x11c/0x150 [ 973.666912][T26496] stack_trace_save+0x9c/0xe0 [ 973.671853][T26496] kasan_save_track+0x3e/0x80 [ 973.676618][T26496] kasan_save_free_info+0x46/0x50 [ 973.681744][T26496] __kasan_slab_free+0x5c/0x80 [ 973.686590][T26496] kmem_cache_free+0x197/0x620 [ 973.691526][T26496] unlink_anon_vmas+0x2cc/0x670 [ 973.696465][T26496] free_pgtables+0x735/0x9d0 [ 973.701140][T26496] exit_mmap+0x431/0xb10 [ 973.705465][T26496] __mmput+0x118/0x430 [ 973.709622][T26496] exec_mmap+0x44d/0x520 [ 973.714043][T26496] begin_new_exec+0x1353/0x2440 [ 973.719013][T26496] load_elf_binary+0x998/0x2740 [ 973.723960][T26496] bprm_execve+0x92e/0x1400 [ 973.728551][T26496] do_execveat_common+0x510/0x6a0 [ 973.733658][T26496] __x64_sys_execve+0x94/0xb0 [ 973.738416][T26496] do_syscall_64+0xfa/0xf80 [ 973.743003][T26496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.748984][T26496] [ 973.748984][T26496] to a SOFTIRQ-irq-unsafe lock: [ 973.755996][T26496] (tasklist_lock){.+.+}-{3:3} [ 973.756024][T26496] [ 973.756024][T26496] ... which became SOFTIRQ-irq-unsafe at: [ 973.768748][T26496] ... [ 973.768756][T26496] lock_acquire+0x117/0x340 [ 973.775924][T26496] _raw_read_lock+0x36/0x50 [ 973.780699][T26496] __do_wait+0xde/0x740 [ 973.784952][T26496] do_wait+0x1e8/0x4f0 [ 973.789112][T26496] kernel_wait+0xab/0x170 [ 973.793533][T26496] call_usermodehelper_exec_work+0xbe/0x230 [ 973.799517][T26496] process_scheduled_works+0xad1/0x1770 [ 973.805151][T26496] worker_thread+0x8a0/0xda0 [ 973.809828][T26496] kthread+0x711/0x8a0 [ 973.813989][T26496] ret_from_fork+0x599/0xb30 [ 973.818759][T26496] ret_from_fork_asm+0x1a/0x30 [ 973.823668][T26496] [ 973.823668][T26496] other info that might help us debug this: [ 973.823668][T26496] [ 973.833982][T26496] Chain exists of: [ 973.833982][T26496] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 973.833982][T26496] [ 973.847198][T26496] Possible interrupt unsafe locking scenario: [ 973.847198][T26496] [ 973.855512][T26496] CPU0 CPU1 [ 973.860963][T26496] ---- ---- [ 973.866326][T26496] lock(tasklist_lock); [ 973.870574][T26496] local_irq_disable(); [ 973.877329][T26496] lock(&client->buffer_lock); [ 973.884736][T26496] lock(&f_owner->lock); [ 973.891606][T26496] [ 973.895068][T26496] lock(&client->buffer_lock); [ 973.900093][T26496] [ 973.900093][T26496] *** DEADLOCK *** [ 973.900093][T26496] [ 973.908234][T26496] 2 locks held by syz.5.8141/26496: [ 973.913424][T26496] #0: ffff888079c62120 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 973.921965][T26496] #1: ffff88806fcf2b20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 973.931108][T26496] [ 973.931108][T26496] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 973.941511][T26496] -> (&client->buffer_lock){..-.}-{3:3} { [ 973.947423][T26496] IN-SOFTIRQ-W at: [ 973.951574][T26496] lock_acquire+0x117/0x340 [ 973.958076][T26496] _raw_spin_lock+0x2e/0x40 [ 973.964597][T26496] evdev_pass_values+0xb9/0xbd0 [ 973.971443][T26496] evdev_events+0x1e6/0x340 [ 973.977941][T26496] input_pass_values+0x288/0x890 [ 973.984874][T26496] input_event_dispose+0x3e5/0x6b0 [ 973.991988][T26496] input_event+0x89/0xe0 [ 973.998247][T26496] hidinput_hid_event+0x1404/0x1e50 [ 974.005451][T26496] hid_process_event+0x4be/0x620 [ 974.012391][T26496] hid_report_raw_event+0xe91/0x1720 [ 974.019678][T26496] hid_input_report+0x44b/0x580 [ 974.026625][T26496] hid_irq_in+0x47e/0x6d0 [ 974.032978][T26496] __usb_hcd_giveback_urb+0x376/0x540 [ 974.040351][T26496] dummy_timer+0x85f/0x45b0 [ 974.046858][T26496] __hrtimer_run_queues+0x51c/0xc30 [ 974.054078][T26496] hrtimer_run_softirq+0x187/0x2b0 [ 974.061478][T26496] handle_softirqs+0x27d/0x850 [ 974.068245][T26496] __irq_exit_rcu+0xca/0x1f0 [ 974.074831][T26496] irq_exit_rcu+0x9/0x30 [ 974.081068][T26496] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 974.088781][T26496] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 974.096758][T26496] finish_task_switch+0x242/0x940 [ 974.103877][T26496] __schedule+0x14c4/0x5000 [ 974.110378][T26496] preempt_schedule_notrace+0xd1/0x110 [ 974.117836][T26496] preempt_schedule_notrace_thunk+0x16/0x30 [ 974.125737][T26496] rcu_is_watching+0x7f/0xb0 [ 974.132339][T26496] unwind_next_frame+0xd4/0x23d0 [ 974.139277][T26496] arch_stack_walk+0x11c/0x150 [ 974.146129][T26496] stack_trace_save+0x9c/0xe0 [ 974.152809][T26496] kasan_save_track+0x3e/0x80 [ 974.159487][T26496] kasan_save_free_info+0x46/0x50 [ 974.166538][T26496] __kasan_slab_free+0x5c/0x80 [ 974.173298][T26496] kmem_cache_free+0x197/0x620 [ 974.180058][T26496] unlink_anon_vmas+0x2cc/0x670 [ 974.186905][T26496] free_pgtables+0x735/0x9d0 [ 974.193600][T26496] exit_mmap+0x431/0xb10 [ 974.199924][T26496] __mmput+0x118/0x430 [ 974.206010][T26496] exec_mmap+0x44d/0x520 [ 974.212256][T26496] begin_new_exec+0x1353/0x2440 [ 974.219282][T26496] load_elf_binary+0x998/0x2740 [ 974.226136][T26496] bprm_execve+0x92e/0x1400 [ 974.232650][T26496] do_execveat_common+0x510/0x6a0 [ 974.239698][T26496] __x64_sys_execve+0x94/0xb0 [ 974.246477][T26496] do_syscall_64+0xfa/0xf80 [ 974.253076][T26496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.260969][T26496] INITIAL USE at: [ 974.265039][T26496] lock_acquire+0x117/0x340 [ 974.271465][T26496] _raw_spin_lock_irqsave+0xa7/0xf0 [ 974.278587][T26496] evdev_ioctl_handler+0x1969/0x1f10 [ 974.285896][T26496] __ia32_compat_sys_ioctl+0x543/0x840 [ 974.293268][T26496] __do_fast_syscall_32+0x1f7/0x590 [ 974.300382][T26496] do_fast_syscall_32+0x34/0x80 [ 974.307144][T26496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 974.315391][T26496] } [ 974.318072][T26496] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 974.326416][T26496] -> (&new->fa_lock){....}-{3:3} { [ 974.331649][T26496] INITIAL USE at: [ 974.335718][T26496] lock_acquire+0x117/0x340 [ 974.341964][T26496] _raw_write_lock_irq+0xa2/0xf0 [ 974.348816][T26496] fasync_remove_entry+0xf1/0x1c0 [ 974.355584][T26496] pipe_fasync+0xff/0x1e0 [ 974.361652][T26496] __fput+0x8a2/0xa70 [ 974.367372][T26496] fput_close_sync+0x113/0x220 [ 974.373969][T26496] __ia32_sys_close+0x7f/0x110 [ 974.380478][T26496] __do_fast_syscall_32+0x1f7/0x590 [ 974.387417][T26496] do_fast_syscall_32+0x34/0x80 [ 974.394095][T26496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 974.402156][T26496] INITIAL READ USE at: [ 974.406570][T26496] lock_acquire+0x117/0x340 [ 974.413243][T26496] _raw_read_lock_irqsave+0xaf/0x100 [ 974.420707][T26496] kill_fasync+0x199/0x4d0 [ 974.427307][T26496] snd_fasync_work_fn+0x162/0x210 [ 974.434509][T26496] process_scheduled_works+0xad1/0x1770 [ 974.442230][T26496] worker_thread+0x8a0/0xda0 [ 974.448998][T26496] kthread+0x711/0x8a0 [ 974.455240][T26496] ret_from_fork+0x599/0xb30 [ 974.461996][T26496] ret_from_fork_asm+0x1a/0x30 [ 974.468936][T26496] } [ 974.471636][T26496] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 974.480410][T26496] ... acquired at: [ 974.484392][T26496] _raw_read_lock_irqsave+0xaf/0x100 [ 974.489949][T26496] kill_fasync+0x199/0x4d0 [ 974.494549][T26496] evdev_pass_values+0x627/0xbd0 [ 974.499661][T26496] evdev_events+0x1e6/0x340 [ 974.504338][T26496] input_pass_values+0x288/0x890 [ 974.509444][T26496] input_event_dispose+0x330/0x6b0 [ 974.514739][T26496] input_inject_event+0x1dd/0x340 [ 974.520128][T26496] evdev_write+0x2fc/0x480 [ 974.524727][T26496] vfs_write+0x27e/0xb30 [ 974.529149][T26496] ksys_write+0x145/0x250 [ 974.533739][T26496] __do_fast_syscall_32+0x1f7/0x590 [ 974.539110][T26496] do_fast_syscall_32+0x34/0x80 [ 974.544139][T26496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 974.550644][T26496] [ 974.552977][T26496] -> (&f_owner->lock){....}-{3:3} { [ 974.558196][T26496] INITIAL USE at: [ 974.562090][T26496] lock_acquire+0x117/0x340 [ 974.568160][T26496] _raw_write_lock_irq+0xa2/0xf0 [ 974.574664][T26496] __f_setown+0x67/0x370 [ 974.580478][T26496] do_fcntl+0x173f/0x1a50 [ 974.586379][T26496] do_compat_fcntl64+0x477/0x720 [ 974.592977][T26496] __do_fast_syscall_32+0x1f7/0x590 [ 974.599744][T26496] do_fast_syscall_32+0x34/0x80 [ 974.606156][T26496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 974.614058][T26496] INITIAL READ USE at: [ 974.618384][T26496] lock_acquire+0x117/0x340 [ 974.624882][T26496] _raw_read_lock_irqsave+0xaf/0x100 [ 974.632168][T26496] send_sigio+0x38/0x370 [ 974.638417][T26496] dnotify_handle_event+0x169/0x440 [ 974.645615][T26496] fsnotify+0x180b/0x1ab0 [ 974.651945][T26496] path_openat+0x1aa1/0x3dd0 [ 974.658534][T26496] do_filp_open+0x1fa/0x410 [ 974.665031][T26496] do_sys_openat2+0x121/0x200 [ 974.671710][T26496] __ia32_compat_sys_openat+0x131/0x160 [ 974.679257][T26496] __do_fast_syscall_32+0x1f7/0x590 [ 974.686454][T26496] do_fast_syscall_32+0x34/0x80 [ 974.693312][T26496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 974.701636][T26496] } [ 974.704129][T26496] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 974.712984][T26496] ... acquired at: [ 974.716783][T26496] _raw_read_lock_irqsave+0xaf/0x100 [ 974.722249][T26496] send_sigio+0x38/0x370 [ 974.726666][T26496] kill_fasync+0x24d/0x4d0 [ 974.731259][T26496] lease_break_callback+0x26/0x30 [ 974.736463][T26496] __break_lease+0x730/0x1620 [ 974.741320][T26496] do_dentry_open+0x73a/0x1420 [ 974.746345][T26496] vfs_open+0x3b/0x340 [ 974.750601][T26496] path_openat+0x340e/0x3dd0 [ 974.755357][T26496] do_filp_open+0x1fa/0x410 [ 974.760030][T26496] do_sys_openat2+0x121/0x200 [ 974.764969][T26496] __ia32_compat_sys_open+0x117/0x140 [ 974.770523][T26496] __do_fast_syscall_32+0x1f7/0x590 [ 974.775891][T26496] do_fast_syscall_32+0x34/0x80 [ 974.780917][T26496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 974.787420][T26496] [ 974.789745][T26496] [ 974.789745][T26496] the dependencies between the lock to be acquired [ 974.789754][T26496] and SOFTIRQ-irq-unsafe lock: [ 974.803266][T26496] -> (tasklist_lock){.+.+}-{3:3} { [ 974.808401][T26496] HARDIRQ-ON-R at: [ 974.812378][T26496] lock_acquire+0x117/0x340 [ 974.818531][T26496] _raw_read_lock+0x36/0x50 [ 974.824693][T26496] __do_wait+0xde/0x740 [ 974.830509][T26496] do_wait+0x1e8/0x4f0 [ 974.836237][T26496] kernel_wait+0xab/0x170 [ 974.842221][T26496] call_usermodehelper_exec_work+0xbe/0x230 [ 974.849865][T26496] process_scheduled_works+0xad1/0x1770 [ 974.857062][T26496] worker_thread+0x8a0/0xda0 [ 974.863301][T26496] kthread+0x711/0x8a0 [ 974.869114][T26496] ret_from_fork+0x599/0xb30 [ 974.875354][T26496] ret_from_fork_asm+0x1a/0x30 [ 974.881782][T26496] SOFTIRQ-ON-R at: [ 974.885768][T26496] lock_acquire+0x117/0x340 [ 974.891922][T26496] _raw_read_lock+0x36/0x50 [ 974.898109][T26496] __do_wait+0xde/0x740 [ 974.903945][T26496] do_wait+0x1e8/0x4f0 [ 974.909670][T26496] kernel_wait+0xab/0x170 [ 974.915658][T26496] call_usermodehelper_exec_work+0xbe/0x230 [ 974.923203][T26496] process_scheduled_works+0xad1/0x1770 [ 974.930407][T26496] worker_thread+0x8a0/0xda0 [ 974.936649][T26496] kthread+0x711/0x8a0 [ 974.942370][T26496] ret_from_fork+0x599/0xb30 [ 974.948612][T26496] ret_from_fork_asm+0x1a/0x30 [ 974.955049][T26496] INITIAL USE at: [ 974.958943][T26496] lock_acquire+0x117/0x340 [ 974.965043][T26496] _raw_write_lock_irq+0xa2/0xf0 [ 974.971545][T26496] copy_process+0x2185/0x3950 [ 974.977787][T26496] kernel_clone+0x21e/0x820 [ 974.983945][T26496] user_mode_thread+0xdd/0x140 [ 974.990275][T26496] rest_init+0x23/0x300 [ 974.996087][T26496] start_kernel+0x3a7/0x400 [ 975.002163][T26496] x86_64_start_reservations+0x24/0x30 [ 975.009191][T26496] x86_64_start_kernel+0x143/0x1c0 [ 975.015871][T26496] common_startup_64+0x13e/0x147 [ 975.022377][T26496] INITIAL READ USE at: [ 975.026707][T26496] lock_acquire+0x117/0x340 [ 975.033211][T26496] _raw_read_lock+0x36/0x50 [ 975.039821][T26496] __do_wait+0xde/0x740 [ 975.045990][T26496] do_wait+0x1e8/0x4f0 [ 975.052263][T26496] kernel_wait+0xab/0x170 [ 975.058617][T26496] call_usermodehelper_exec_work+0xbe/0x230 [ 975.066563][T26496] process_scheduled_works+0xad1/0x1770 [ 975.074110][T26496] worker_thread+0x8a0/0xda0 [ 975.080701][T26496] kthread+0x711/0x8a0 [ 975.086775][T26496] ret_from_fork+0x599/0xb30 [ 975.093371][T26496] ret_from_fork_asm+0x1a/0x30 [ 975.100260][T26496] } [ 975.102769][T26496] ... key at: [] tasklist_lock+0x18/0x40 [ 975.110499][T26496] ... acquired at: [ 975.114380][T26496] _raw_read_lock+0x36/0x50 [ 975.119063][T26496] send_sigurg+0x12b/0x420 [ 975.123660][T26496] sk_send_sigurg+0x6c/0x2e0 [ 975.128434][T26496] queue_oob+0x420/0x4f0 [ 975.132901][T26496] unix_stream_sendmsg+0xc32/0xde0 [ 975.138185][T26496] __sock_sendmsg+0x21c/0x270 [ 975.143129][T26496] ____sys_sendmsg+0x52d/0x820 [ 975.148077][T26496] ___sys_sendmsg+0x21f/0x2a0 [ 975.153021][T26496] __sys_sendmmsg+0x28e/0x430 [ 975.157877][T26496] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 975.163602][T26496] __do_fast_syscall_32+0x1f7/0x590 [ 975.168981][T26496] do_fast_syscall_32+0x34/0x80 [ 975.174027][T26496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 975.180537][T26496] [ 975.182862][T26496] [ 975.182862][T26496] stack backtrace: [ 975.188769][T26496] CPU: 0 UID: 0 PID: 26496 Comm: syz.5.8141 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.188796][T26496] Tainted: [L]=SOFTLOCKUP [ 975.188802][T26496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 975.188812][T26496] Call Trace: [ 975.188822][T26496] [ 975.188831][T26496] dump_stack_lvl+0x189/0x250 [ 975.188854][T26496] ? __pfx_dump_stack_lvl+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 975.188871][T26496] ? __pfx__printk+0x10/0x10 [ 975.188896][T26496] __lock_acquire+0x2a95/0x2cf0 [ 975.188920][T26496] ? send_sigurg+0x12b/0x420 [ 975.188941][T26496] lock_acquire+0x117/0x340 [ 975.188955][T26496] ? send_sigurg+0x12b/0x420 [ 975.188976][T26496] ? _raw_read_lock_irqsave+0xbb/0x100 [ 975.189001][T26496] _raw_read_lock+0x36/0x50 [ 975.189023][T26496] ? send_sigurg+0x12b/0x420 [ 975.189043][T26496] send_sigurg+0x12b/0x420 [ 975.189065][T26496] sk_send_sigurg+0x6c/0x2e0 [ 975.189087][T26496] queue_oob+0x420/0x4f0 [ 975.189103][T26496] ? __pfx_queue_oob+0x10/0x10 [ 975.189120][T26496] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 975.189139][T26496] unix_stream_sendmsg+0xc32/0xde0 [ 975.189157][T26496] ? trace_sched_exit_tp+0x36/0xf0 [ 975.189179][T26496] ? __schedule+0x14d2/0x5000 [ 975.189193][T26496] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 975.189209][T26496] ? __asan_memset+0x22/0x50 [ 975.189223][T26496] ? __import_iovec+0x5d4/0x7f0 [ 975.189241][T26496] ? aa_sock_msg_perm+0xda/0x1b0 [ 975.189261][T26496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 975.189275][T26496] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 975.189290][T26496] __sock_sendmsg+0x21c/0x270 [ 975.189312][T26496] ____sys_sendmsg+0x52d/0x820 [ 975.189331][T26496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 975.189350][T26496] ? futex_unqueue+0x22/0x240 [ 975.189364][T26496] ? futex_unqueue+0x22/0x240 [ 975.189379][T26496] ___sys_sendmsg+0x21f/0x2a0 [ 975.189426][T26496] ? __pfx____sys_sendmsg+0x10/0x10 [ 975.189445][T26496] ? __pfx___futex_wait+0x10/0x10 [ 975.189465][T26496] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 975.189566][T26496] ? __fget_files+0x2a/0x420 [ 975.189585][T26496] ? __fget_files+0x3a0/0x420 [ 975.189606][T26496] __sys_sendmmsg+0x28e/0x430 [ 975.189626][T26496] ? __pfx___sys_sendmmsg+0x10/0x10 [ 975.189646][T26496] ? __pfx_do_futex+0x10/0x10 [ 975.189667][T26496] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 975.189688][T26496] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 975.189710][T26496] __do_fast_syscall_32+0x1f7/0x590 [ 975.189729][T26496] ? rcu_is_watching+0x15/0xb0 [ 975.189830][T26496] ? do_fast_syscall_32+0x34/0x80 [ 975.189856][T26496] do_fast_syscall_32+0x34/0x80 [ 975.189874][T26496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 975.189893][T26496] RIP: 0023:0xf7f41539 [ 975.189907][T26496] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 975.189920][T26496] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 975.189938][T26496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006c40 [ 975.189949][T26496] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 975.189959][T26496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 975.189969][T26496] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 975.189978][T26496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 975.189993][T26496] [ 975.223128][T20473] Bluetooth: hci2: command tx timeout [ 975.304907][ T5837] Bluetooth: hci3: command tx timeout [ 976.209438][T26133] team0 (unregistering): Port device team_slave_1 removed [ 976.267408][T26133] team0 (unregistering): Port device team_slave_0 removed [ 977.262527][T26133] team0 (unregistering): Port device team_slave_1 removed [ 977.321201][T26133] team0 (unregistering): Port device team_slave_0 removed [ 978.740503][T26133] IPVS: stop unused estimator thread 0... [ 979.109641][T26133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.162323][T26133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.238775][T26133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.278646][T26133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.397828][T26133] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.410619][T26133] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.450372][T26133] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.463191][T26133] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.535898][T26133] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.546488][T26133] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.602300][T26133] bond0: (slave netdevsim0): Releasing backup interface [ 979.611847][T26133] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.626057][T26133] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.751978][T26133] bridge_slave_1: left allmulticast mode [ 979.757876][T26133] bridge_slave_1: left promiscuous mode [ 979.770168][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.779284][T26133] bridge_slave_0: left allmulticast mode [ 979.785046][T26133] bridge_slave_0: left promiscuous mode [ 979.790789][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.801830][T26133] bridge_slave_1: left allmulticast mode [ 979.808642][T26133] bridge_slave_1: left promiscuous mode [ 979.814827][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.825755][T26133] bridge_slave_0: left allmulticast mode [ 979.831991][T26133] bridge_slave_0: left promiscuous mode [ 979.839754][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.849851][T26133] bridge_slave_1: left allmulticast mode [ 979.855648][T26133] bridge_slave_1: left promiscuous mode [ 979.861368][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.870223][T26133] bridge_slave_0: left allmulticast mode [ 979.876696][T26133] bridge_slave_0: left promiscuous mode [ 979.882419][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.892586][T26133] bridge_slave_1: left allmulticast mode [ 979.898528][T26133] bridge_slave_1: left promiscuous mode [ 979.905670][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.916105][T26133] bridge_slave_0: left allmulticast mode [ 979.921783][T26133] bridge_slave_0: left promiscuous mode [ 979.928163][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.943312][T26133] bridge_slave_0: left allmulticast mode [ 979.949004][T26133] bridge_slave_0: left promiscuous mode [ 979.957777][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.140353][T26133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.155465][T26133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.165575][T26133] bond0 (unregistering): Released all slaves [ 980.259562][T26133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.274294][T26133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.285339][T26133] bond0 (unregistering): Released all slaves [ 980.358246][T26133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.368779][T26133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.378769][T26133] bond0 (unregistering): Released all slaves [ 980.489237][T26133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.499342][T26133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.509171][T26133] bond0 (unregistering): Released all slaves [ 980.718759][T26133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.728795][T26133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.738344][T26133] bond0 (unregistering): Released all slaves [ 980.747450][T26133] bond1 (unregistering): (slave bond2): Releasing backup interface [ 980.757092][T26133] bond1 (unregistering): Released all slaves [ 980.907793][T26133] bond2 (unregistering): Released all slaves [ 981.046635][T26133] tipc: Disabling bearer [ 981.052398][T26133] tipc: Left network mode [ 981.389313][T26133] hsr_slave_0: left promiscuous mode [ 981.397739][T26133] hsr_slave_1: left promiscuous mode [ 981.406772][T26133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.415241][T26133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.429754][T26133] hsr_slave_0: left promiscuous mode [ 981.436409][T26133] hsr_slave_1: left promiscuous mode [ 981.442317][T26133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.450865][T26133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.464327][T26133] hsr_slave_0: left promiscuous mode [ 981.470308][T26133] hsr_slave_1: left promiscuous mode [ 981.480921][T26133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.491965][T26133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.507383][T26133] hsr_slave_0: left promiscuous mode [ 981.517824][T26133] hsr_slave_1: left promiscuous mode [ 981.524152][T26133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.531689][T26133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.539767][T26133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.547595][T26133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.557965][T26133] hsr_slave_0: left promiscuous mode [ 981.564672][T26133] hsr_slave_1: left promiscuous mode [ 981.576293][T26133] veth1_macvtap: left promiscuous mode [ 981.581921][T26133] veth1_vlan: left promiscuous mode [ 981.587781][T26133] veth0_vlan: left promiscuous mode [ 981.595534][T26133] veth1_vlan: left promiscuous mode [ 981.600948][T26133] veth0_vlan: left promiscuous mode [ 981.787281][T26133] team0 (unregistering): Port device team_slave_1 removed [ 981.797859][T26133] team0 (unregistering): Port device team_slave_0 removed [ 981.957259][T26133] team0 (unregistering): Port device team_slave_1 removed [ 981.987160][T26133] team0 (unregistering): Port device team_slave_0 removed [ 982.186713][T26133] team0 (unregistering): Port device team_slave_1 removed [ 982.199515][T26133] team0 (unregistering): Port device team_slave_0 removed [ 982.421162][T26133] team0 (unregistering): Port device team_slave_1 removed [ 982.455092][T26133] team0 (unregistering): Port device team_slave_0 removed [ 982.658484][T26133] team0 (unregistering): Port device team_slave_1 removed [ 982.749221][T26133] team0 (unregistering): Port device bridge_slave_1 removed