last executing test programs: 2m2.455278489s ago: executing program 3 (id=454): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="1f70db3e7c3e9a6b9033f55b5e49213563306e516f432d32648d574339c6531f3b4cb35dcd0b0c389637db", 0x2b}, {&(0x7f0000000840)="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", 0x117}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="13", 0xffffffffffffff9f, 0x10008095, 0x0, 0x0) 2m1.497983549s ago: executing program 3 (id=455): syz_clone(0x14126080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a7886fba7f4e169edb30", 0x1c}], 0x1}, 0x0) 2m1.367771054s ago: executing program 3 (id=456): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19", 0x85}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m1.256815536s ago: executing program 3 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m0.286044761s ago: executing program 3 (id=472): syz_clone(0x14126080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ff}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a7886fba7f4e169edb30", 0x1c}], 0x1}, 0x0) 2m0.137043311s ago: executing program 3 (id=475): socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf25240000009cfc01007770616e3100000048eddb2fc6d0ecb82d4837d00ee6566ad3773c0280873055f5b7db039db45eb8fe066178a4c1053c59c84d20fdd7fe30df3e784987ed888419b3f919ec6dcf1fae20cb205b079ba9c2a5d02d4555706e89933cd99bb9c0c1687cb83c83da1969de71a244ea2b3837287c7bc461e0fcf29646a3f6de9ec18f24f93c12a2c7bd0e2ad4128f3217ccbaed5739bb7d06deac2ec57d"], 0x20}, 0x1, 0x0, 0x0, 0xc091}, 0x4004040) 1m45.029153438s ago: executing program 32 (id=475): socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf25240000009cfc01007770616e3100000048eddb2fc6d0ecb82d4837d00ee6566ad3773c0280873055f5b7db039db45eb8fe066178a4c1053c59c84d20fdd7fe30df3e784987ed888419b3f919ec6dcf1fae20cb205b079ba9c2a5d02d4555706e89933cd99bb9c0c1687cb83c83da1969de71a244ea2b3837287c7bc461e0fcf29646a3f6de9ec18f24f93c12a2c7bd0e2ad4128f3217ccbaed5739bb7d06deac2ec57d"], 0x20}, 0x1, 0x0, 0x0, 0xc091}, 0x4004040) 2.124041557s ago: executing program 0 (id=1528): sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b10005010000009f0500070107", 0xd, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) 1.911733873s ago: executing program 0 (id=1532): r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchown(r0, 0x0, 0x0) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.568310337s ago: executing program 0 (id=1541): mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xe02) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 1.37731719s ago: executing program 0 (id=1546): r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) 1.227641615s ago: executing program 4 (id=1549): chmod(&(0x7f0000000040)='.\x00', 0xfc) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9d29) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) 1.182990119s ago: executing program 0 (id=1550): r0 = socket$inet(0x2, 0x1, 0x0) close(r0) socket(0x24, 0x2, 0x0) setsockopt(r0, 0x6, 0x1, &(0x7f0000000280)="e9f2d779", 0x4) 1.047547231s ago: executing program 4 (id=1553): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000100), 0x0) 936.765341ms ago: executing program 2 (id=1554): r0 = socket(0x11, 0x10000000000003, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0) 869.452726ms ago: executing program 0 (id=1555): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffff000001"], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/82, 0x52}, 0x800) 735.576678ms ago: executing program 1 (id=1556): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0, 0x0, 0x7fffffffff}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 735.504594ms ago: executing program 4 (id=1557): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0, 0x0, 0x7fffffffff}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 735.461539ms ago: executing program 2 (id=1558): r0 = semget(0x0, 0x1, 0x281) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) 672.214011ms ago: executing program 1 (id=1559): r0 = semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) getgid() setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$GETZCNT(r0, 0x3, 0x7, 0x0) 518.306141ms ago: executing program 2 (id=1560): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0x18, 0x0, 0x1ff}, 0xc, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0xffff, 0xb06}, {0x10, 0xffff, 0x2}], 0x20}, 0x408) 518.221636ms ago: executing program 1 (id=1561): r0 = socket(0x18, 0x3, 0x0) shutdown(r0, 0x2) sendto(r0, 0x0, 0x0, 0x8, 0x0, 0x0) 518.150124ms ago: executing program 4 (id=1562): r0 = socket(0x11, 0x3, 0x8) sendto$unix(r0, &(0x7f0000000100)="b10005016000009f05003f0407000000001813fecea10516d09a32693f316e357ae302b37b673031d2d236acf20b8f25be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821020000000000008bfbb770c116a985c881ea772ec5880400000000ff0000361b1257aea8c50020022138f2d900008a09000000000008e38295f80004073da51a221f0000008004200000000000000000", 0xb1, 0x8, 0x0, 0x0) 384.399424ms ago: executing program 1 (id=1563): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x88, 0x6}, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd31929648160000000000000000", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 384.312769ms ago: executing program 2 (id=1564): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 304.233933ms ago: executing program 2 (id=1565): sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b10005010000009f050007013d", 0xd, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) 265.061308ms ago: executing program 1 (id=1566): r0 = semget(0x0, 0x1, 0x281) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETPID(r0, 0x1, 0x4, 0x0) 184.409865ms ago: executing program 4 (id=1567): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0, 0x0, 0x7fffffffff}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 146.929113ms ago: executing program 1 (id=1568): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/156, 0x9c}, {0x0}], 0x2) dup2(r1, r0) 140.224723ms ago: executing program 2 (id=1569): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002bb000/0x1000)=nil, &(0x7f0000022000/0x3000)=nil, 0x1000, 0x3}) 0s ago: executing program 4 (id=1570): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1e, r0, 0x0, 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000002480)={'syz', 0x3}, &(0x7f00000001c0)='\x84<\xf9\r\x00\x10\x16\xaf\xf6\x1c\xe2\xd7abR\xf5\xaev\xdd\xe9\xcb\n\x93\xfd\x9c6\xfd0w\x91\xfcg\x82\xa7\xcb\x16%\xd9\xb2\b\xa0\xcb\x9a\xd5>7\xd1ST\xbeG\\~S\xabg\xd4\x9e\xba[X\xdd\x9a\x93Y\x94\xfe\x18$\xa54\x0e=\xa3\xf5e\xeej\x10\x1bR\x93gj\x03\xf9d\xbd\t\x05\xff\xe9\xc2\xaf\x97;\x90k\\\xb5\xcd7x\x8d\x05\x00\x00\x00\xf8\xa6(\x11\xe2\xd1\x99-)@x\xbdT_\x84T\x83@\x99\xc4\xe0\xca\x95\xc2\xd66\xa6\xd2\x81\xf4\xe6;\x13\b\x15f\xfa\xcfN6#\xa0\xb7\xa5x\xda^\x80\xcb\x9e\x8b\x9b\xafd\xfb\xaa2\xc0\x92h\v\x12y\xa3\x1fH\xb3FO\x00\xd59\xf6B\xc8$\xc8\xc8Q\a\xc7\x85\x93\xd3\x1d\xafZ\xa8\x9e\xd2\bP\xa1T\x8a\x00\x00\x00\x00\x00\x00\x00\x00', r0) kernel console output (not intermixed with test programs): verter now disconnected from ttyUSB1 [ 127.614695][ T5938] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 127.648724][ T5938] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 127.659208][ T5938] keyspan 1-1:0.107: device disconnected [ 127.814766][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 127.824356][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 127.900574][ T6800] netlink: 204 bytes leftover after parsing attributes in process `syz.1.307'. [ 127.913941][ T6800] netlink: 204 bytes leftover after parsing attributes in process `syz.1.307'. [ 128.071980][ T5915] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 128.136695][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 128.136713][ T30] audit: type=1326 audit(6065239738.718:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.0.310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb36199c799 code=0x0 [ 128.194568][ T6809] GUP no longer grows the stack in syz.0.310 (6809): 200000007000-200000008000 (200000004000) [ 128.205306][ T6809] CPU: 0 UID: 0 PID: 6809 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT(full) [ 128.205328][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.205340][ T6809] Call Trace: [ 128.205346][ T6809] [ 128.205352][ T6809] dump_stack_lvl+0xe8/0x150 [ 128.205379][ T6809] fixup_user_fault+0x637/0x6f0 [ 128.205403][ T6809] fault_in_user_writeable+0x71/0xd0 [ 128.205426][ T6809] futex_lock_pi+0x80b/0xb10 [ 128.205451][ T6809] ? __pfx_futex_lock_pi+0x10/0x10 [ 128.205488][ T6809] ? __pfx_futex_wake_mark+0x10/0x10 [ 128.205533][ T6809] ? __lock_acquire+0x6b5/0x2cf0 [ 128.205570][ T6809] do_futex+0x292/0x420 [ 128.205608][ T6809] ? __pfx_do_futex+0x10/0x10 [ 128.205643][ T6809] __se_sys_futex+0x3a8/0x450 [ 128.205662][ T6809] ? __pfx___se_sys_futex+0x10/0x10 [ 128.205674][ T6809] ? __pfx_inotify_ioctl+0x10/0x10 [ 128.205697][ T6809] ? __x64_sys_futex+0x21/0xf0 [ 128.205713][ T6809] do_syscall_64+0x14d/0xf80 [ 128.205729][ T6809] ? trace_irq_disable+0x3b/0x150 [ 128.205746][ T6809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.205761][ T6809] ? clear_bhb_loop+0x40/0x90 [ 128.205779][ T6809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.205794][ T6809] RIP: 0033:0x7fb36199c799 [ 128.205813][ T6809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.205826][ T6809] RSP: 002b:00007fb3628c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.205844][ T6809] RAX: ffffffffffffffda RBX: 00007fb361c16090 RCX: 00007fb36199c799 [ 128.205855][ T6809] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 128.205864][ T6809] RBP: 00007fb361a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 128.205872][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.205881][ T6809] R13: 00007fb361c16128 R14: 00007fb361c16090 R15: 00007ffdd3ce88e8 [ 128.205904][ T6809] [ 128.427894][ T5915] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.437504][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.456382][ T5915] usb 3-1: config 0 descriptor?? [ 128.475856][ T5915] cp210x 3-1:0.0: cp210x converter detected [ 128.842208][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 128.874088][ T5915] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 128.882976][ T5915] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 128.890613][ T5915] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 128.902083][ T5915] usb 3-1: cp210x converter now attached to ttyUSB0 [ 128.992430][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 129.001364][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.011644][ T9] usb 2-1: config 0 has no interface number 0 [ 129.020059][ T9] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 129.031700][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 129.041341][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 129.053041][ T5895] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 129.070247][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.081474][ T9] usb 2-1: Product: syz [ 129.085734][ T9] usb 2-1: Manufacturer: syz [ 129.090374][ T9] usb 2-1: SerialNumber: syz [ 129.096523][ T5938] usb 3-1: USB disconnect, device number 16 [ 129.120593][ T9] usb 2-1: config 0 descriptor?? [ 129.138986][ T5938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.148346][ T5938] cp210x 3-1:0.0: device disconnected [ 129.205784][ T5895] usb 4-1: device descriptor read/64, error -71 [ 129.366948][ T9] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 129.377220][ T9] cx231xx 2-1:0.1: Not found matching IAD interface [ 129.390854][ T9] usb 2-1: USB disconnect, device number 15 [ 129.452015][ T5895] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 129.593062][ T5895] usb 4-1: device descriptor read/64, error -71 [ 129.702976][ T5895] usb usb4-port1: attempt power cycle [ 129.972946][ T6847] binder: 6845:6847 ioctl c0306201 200000000640 returned -22 [ 129.988183][ T6847] netlink: 'syz.1.323': attribute type 9 has an invalid length. [ 129.997860][ T6847] netlink: 'syz.1.323': attribute type 11 has an invalid length. [ 130.007322][ T6847] netlink: 'syz.1.323': attribute type 12 has an invalid length. [ 130.043195][ T5895] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 130.077986][ T5895] usb 4-1: device descriptor read/8, error -71 [ 130.248928][ T6850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.332650][ T5895] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 130.373793][ T5895] usb 4-1: device descriptor read/8, error -71 [ 130.502547][ T5895] usb usb4-port1: unable to enumerate USB device [ 130.585937][ T6866] fuse: Unknown parameter 'Øðä²®g@ËŽi°' [ 130.832121][ T808] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 130.982052][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 130.993664][ T808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.003525][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.011633][ T808] usb 2-1: Product: syz [ 131.017047][ T808] usb 2-1: Manufacturer: syz [ 131.024632][ T808] usb 2-1: SerialNumber: syz [ 131.033075][ T808] usb 2-1: config 0 descriptor?? [ 131.250230][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.261032][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.275025][ T808] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.625884][ T5938] IPVS: starting estimator thread 0... [ 131.724767][ T6879] IPVS: using max 26 ests per chain, 62400 per kthread [ 131.904796][ T808] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 131.946252][ T808] usb 2-1: USB disconnect, device number 16 [ 132.237233][ T808] IPVS: starting estimator thread 0... [ 132.331979][ T6904] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.382970][ T5938] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 132.532887][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 132.538125][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 132.553653][ T5938] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 132.564186][ T5938] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 132.575626][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 132.584987][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.595487][ T5938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.608749][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 132.622040][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 132.632227][ T5938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 132.642254][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.656516][ T5938] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 132.667165][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.683789][ T5938] usb 4-1: config 0 descriptor?? [ 132.693806][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 132.721078][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.728211][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.737435][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.776389][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.794588][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 132.823161][ T24] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 132.832490][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.873954][ T24] usb 3-1: config 0 descriptor?? [ 132.904873][ T5915] usb 4-1: USB disconnect, device number 17 [ 133.109823][ T6926] netlink: 'syz.1.355': attribute type 29 has an invalid length. [ 133.120297][ T6926] __nla_validate_parse: 7 callbacks suppressed [ 133.120315][ T6926] netlink: 72 bytes leftover after parsing attributes in process `syz.1.355'. [ 133.309991][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 133.319760][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 133.343466][ T24] usb 3-1: USB disconnect, device number 17 [ 133.722001][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 133.884319][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 133.893575][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 133.903036][ T24] usb 1-1: config 0 has no interface number 0 [ 133.912202][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 133.921527][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.929703][ T24] usb 1-1: Product: syz [ 133.934346][ T24] usb 1-1: Manufacturer: syz [ 133.939016][ T24] usb 1-1: SerialNumber: syz [ 133.972283][ T24] usb 1-1: config 0 descriptor?? [ 134.015676][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 134.030943][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 134.415123][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 134.441589][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 134.452338][ T6976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.742056][ T808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 134.901904][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 134.913161][ T808] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 134.922512][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.930560][ T808] usb 4-1: Product: syz [ 134.934799][ T808] usb 4-1: Manufacturer: syz [ 134.939420][ T808] usb 4-1: SerialNumber: syz [ 134.947300][ T808] usb 4-1: config 0 descriptor?? [ 135.167024][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.184371][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.201704][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 135.211055][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 135.225795][ T808] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 135.325860][ T6994] netlink: 'syz.1.381': attribute type 2 has an invalid length. [ 135.342162][ T6994] netlink: 228 bytes leftover after parsing attributes in process `syz.1.381'. [ 135.438508][ T808] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 135.476984][ T808] usb 4-1: USB disconnect, device number 18 [ 136.074242][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 136.102683][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 136.682082][ T5938] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 136.762026][ T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 136.832022][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 136.840009][ T5938] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 136.849218][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.861262][ T5938] usb 4-1: config 0 descriptor?? [ 136.879944][ T5938] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 136.912208][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 136.925835][ T29] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 136.934934][ T29] usb 2-1: config 0 has no interface number 0 [ 136.944306][ T29] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 136.954253][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.964134][ T29] usb 2-1: Product: syz [ 136.968553][ T29] usb 2-1: Manufacturer: syz [ 136.973481][ T29] usb 2-1: SerialNumber: syz [ 136.984601][ T29] usb 2-1: config 0 descriptor?? [ 137.001436][ T29] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 137.077342][ T5938] usb 4-1: Detected FT232B [ 137.111235][ T24] usb 1-1: USB disconnect, device number 18 [ 137.190093][ T7051] netlink: 'syz.2.402': attribute type 11 has an invalid length. [ 137.216036][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.231257][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.250770][ T29] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 137.277776][ T29] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 137.312732][ T7054] tipc: Started in network mode [ 137.334731][ T7054] tipc: Node identity 4, cluster identity 4711 [ 137.357592][ T7054] tipc: Node number set to 4 [ 137.393808][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.403'. [ 137.476051][ T7043] netlink: 'syz.1.398': attribute type 4 has an invalid length. [ 137.491136][ T5938] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 137.507378][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'. [ 137.699894][ T808] usb 4-1: USB disconnect, device number 19 [ 137.746586][ T808] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.790294][ T808] ftdi_sio 4-1:0.0: device disconnected [ 137.797590][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 137.800159][ T9] usb 2-1: USB disconnect, device number 17 [ 137.852841][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 137.898119][ T9] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 137.914768][ T9] quatech2 2-1:0.51: device disconnected [ 138.127294][ T7080] netlink: 204 bytes leftover after parsing attributes in process `syz.0.407'. [ 138.137577][ T7080] netlink: 204 bytes leftover after parsing attributes in process `syz.0.407'. [ 138.409703][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 138.418816][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 138.451926][ T5938] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 138.531965][ T808] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 138.611947][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 138.619508][ T5938] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 138.628222][ T5938] usb 1-1: config 0 has no interface number 0 [ 138.636308][ T5938] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 138.645513][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.653607][ T5938] usb 1-1: Product: syz [ 138.657803][ T5938] usb 1-1: Manufacturer: syz [ 138.662659][ T5938] usb 1-1: SerialNumber: syz [ 138.670474][ T5938] usb 1-1: config 0 descriptor?? [ 138.675602][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 138.683495][ T5972] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 138.692065][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 138.701175][ T808] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 138.712083][ T808] usb 4-1: config 251 has no interface number 0 [ 138.719050][ T808] usb 4-1: config 251 interface 202 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.730460][ T808] usb 4-1: config 251 interface 202 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.740549][ T808] usb 4-1: config 251 interface 202 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 138.751670][ T808] usb 4-1: config 251 interface 202 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 138.764135][ T808] usb 4-1: config 251 interface 202 altsetting 5 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 138.776344][ T808] usb 4-1: config 251 interface 202 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.787647][ T808] usb 4-1: config 251 interface 202 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.805254][ T808] usb 4-1: config 251 interface 202 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.818859][ T808] usb 4-1: config 251 interface 202 has no altsetting 0 [ 138.828312][ T808] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 138.838585][ T808] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 138.846683][ T808] usb 4-1: Product: syz [ 138.850898][ T808] usb 4-1: SerialNumber: syz [ 138.856372][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.865625][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 138.872307][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.882438][ T5972] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 138.893579][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.903111][ T24] usb 2-1: config 0 descriptor?? [ 138.919740][ T24] cp210x 2-1:0.0: cp210x converter detected [ 138.933870][ T5972] usb 3-1: config 0 descriptor?? [ 138.944281][ T5972] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 139.116948][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 139.128253][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 139.144091][ T5972] usb 3-1: Detected FT232B [ 139.276296][ T7085] bpf: Bad value for 'gid' [ 139.289423][ T808] cxacru 4-1:251.202: cxacru_bind: interface has incorrect endpoints [ 139.298283][ T808] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 139.318317][ T808] usb 4-1: USB disconnect, device number 20 [ 139.329398][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 139.339080][ T24] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 139.350203][ T24] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 139.363985][ T24] usb 2-1: cp210x converter now attached to ttyUSB1 [ 139.554301][ T5972] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 139.562761][ T808] usb 2-1: USB disconnect, device number 18 [ 139.591523][ T808] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 139.604334][ T808] cp210x 2-1:0.0: device disconnected [ 139.762213][ T5915] usb 3-1: USB disconnect, device number 18 [ 139.777244][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.787298][ T5915] ftdi_sio 3-1:0.0: device disconnected [ 140.504577][ T5972] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 140.683053][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 140.697771][ T5972] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.715436][ T5972] usb 2-1: config 0 has no interface number 0 [ 140.735152][ T5972] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.752971][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.772208][ T5972] usb 2-1: Product: syz [ 140.778266][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 140.795059][ T5972] usb 2-1: Manufacturer: syz [ 140.810459][ T5972] usb 2-1: SerialNumber: syz [ 140.819147][ T5938] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 140.833317][ T5972] usb 2-1: config 0 descriptor?? [ 140.848696][ T5972] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.057995][ T5972] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.091359][ T5972] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.241777][ T7104] netlink: 'syz.1.417': attribute type 27 has an invalid length. [ 141.448300][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.450999][ T5915] usb 2-1: USB disconnect, device number 19 [ 141.493919][ T5915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.510247][ T5915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.530362][ T5915] quatech2 2-1:0.51: device disconnected [ 142.034274][ T5972] usb 1-1: USB disconnect, device number 19 [ 142.127428][ T7158] raw_sendmsg: syz.0.436 forgot to set AF_INET. Fix it! [ 142.138467][ T7158] netlink: 'syz.0.436': attribute type 15 has an invalid length. [ 142.146899][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.436'. [ 142.192152][ T5915] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 142.376447][ T7154] netlink: 'syz.2.434': attribute type 83 has an invalid length. [ 142.468004][ T7164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 143.025906][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.445'. [ 143.088332][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.110628][ T5915] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 143.125730][ T5915] usb 3-1: can't read configurations, error -71 [ 143.686060][ T7193] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 144.841935][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 144.981917][ T9] usb 1-1: device descriptor read/64, error -71 [ 145.221923][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 145.352033][ T9] usb 1-1: device descriptor read/64, error -71 [ 145.462158][ T9] usb usb1-port1: attempt power cycle [ 145.811910][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 145.842325][ T9] usb 1-1: device descriptor read/8, error -71 [ 146.015474][ T7182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.083929][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 146.113685][ T9] usb 1-1: device descriptor read/8, error -71 [ 146.233440][ T9] usb usb1-port1: unable to enumerate USB device [ 146.340081][ T7237] syzkaller1: entered promiscuous mode [ 146.346165][ T7237] syzkaller1: entered allmulticast mode [ 146.591155][ T7248] netlink: 80 bytes leftover after parsing attributes in process `syz.1.466'. [ 147.118861][ T7273] nftables ruleset with unbound set [ 147.150576][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 147.200414][ T7278] comedi comedi3: comedi_config --init_data is deprecated [ 147.253250][ T7280] netlink: 80 bytes leftover after parsing attributes in process `syz.2.478'. [ 148.021557][ T7301] netlink: 80 bytes leftover after parsing attributes in process `syz.1.487'. [ 148.327658][ T7307] comedi comedi3: comedi_config --init_data is deprecated [ 148.566293][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 148.626731][ T7311] gfs2: gfs2 mount does not exist [ 149.002577][ T29] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 149.151938][ T29] usb 2-1: device descriptor read/64, error -71 [ 149.397192][ T7332] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 149.422633][ T29] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 149.572325][ T29] usb 2-1: device descriptor read/64, error -71 [ 149.677713][ T7340] comedi comedi3: comedi_config --init_data is deprecated [ 149.693320][ T29] usb usb2-port1: attempt power cycle [ 150.041933][ T29] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 150.076365][ T29] usb 2-1: device descriptor read/8, error -71 [ 150.241978][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 150.321913][ T29] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 150.342651][ T29] usb 2-1: device descriptor read/8, error -71 [ 150.392071][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 150.398905][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 150.407113][ T9] usb 1-1: config 0 has no interface number 0 [ 150.416332][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 150.425674][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.433866][ T9] usb 1-1: Product: syz [ 150.438105][ T9] usb 1-1: Manufacturer: syz [ 150.442803][ T9] usb 1-1: SerialNumber: syz [ 150.450741][ T9] usb 1-1: config 0 descriptor?? [ 150.462300][ T29] usb usb2-port1: unable to enumerate USB device [ 150.780987][ T7370] overlayfs: failed to clone upperpath [ 150.862950][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 150.874974][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 152.505234][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 152.532949][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 152.950687][ T7415] 9p: Bad value for 'port' [ 153.188097][ T7423] sctp: [Deprecated]: syz.1.537 (pid 7423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.188097][ T7423] Use struct sctp_sack_info instead [ 153.749604][ T29] usb 1-1: USB disconnect, device number 24 [ 154.232374][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 154.401995][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 154.408869][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 154.418125][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.428974][ T9] usb 2-1: config 0 descriptor?? [ 154.438580][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 154.512900][ T29] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 154.661872][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 154.669073][ T29] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.678230][ T29] usb 1-1: config 0 has no interface number 0 [ 154.687733][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.696968][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.705094][ T29] usb 1-1: Product: syz [ 154.709592][ T29] usb 1-1: Manufacturer: syz [ 154.715283][ T29] usb 1-1: SerialNumber: syz [ 154.723047][ T29] usb 1-1: config 0 descriptor?? [ 154.954543][ T9] gspca_sonixj: reg_w1 err -110 [ 154.960015][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 155.014138][ T7473] netlink: 'syz.2.558': attribute type 3 has an invalid length. [ 155.022112][ T7473] netlink: 766 bytes leftover after parsing attributes in process `syz.2.558'. [ 155.034031][ T7473] netlink: 212 bytes leftover after parsing attributes in process `syz.2.558'. [ 155.185104][ T29] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 155.198304][ T29] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.819815][ T29] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 156.831920][ T29] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 156.872969][ T9] usb 2-1: USB disconnect, device number 24 [ 157.315522][ T7525] netlink: 72 bytes leftover after parsing attributes in process `syz.1.582'. [ 157.791937][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 157.941905][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 157.948817][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 157.958261][ T9] usb 2-1: config 0 has no interface number 0 [ 157.966626][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 157.975975][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.984133][ T9] usb 2-1: Product: syz [ 157.988345][ T9] usb 2-1: Manufacturer: syz [ 157.994444][ T9] usb 2-1: SerialNumber: syz [ 158.001350][ T9] usb 2-1: config 0 descriptor?? [ 158.049905][ T5972] usb 1-1: USB disconnect, device number 25 [ 158.202851][ T7540] No control pipe specified [ 158.421709][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 158.433716][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.567728][ T7573] netlink: 80 bytes leftover after parsing attributes in process `syz.0.594'. [ 160.130399][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 160.141638][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 160.395332][ T7597] netlink: 45 bytes leftover after parsing attributes in process `syz.0.597'. [ 160.520418][ T7603] program syz.0.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.064958][ T7626] netlink: 80 bytes leftover after parsing attributes in process `syz.0.603'. [ 161.401731][ T9] usb 2-1: USB disconnect, device number 25 [ 162.229036][ T7670] netlink: 204 bytes leftover after parsing attributes in process `syz.2.614'. [ 162.244047][ T7670] netlink: 204 bytes leftover after parsing attributes in process `syz.2.614'. [ 162.391551][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.404578][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.416649][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.429244][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.437142][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.638634][ T7684] ======================================================= [ 162.638634][ T7684] WARNING: The mand mount option has been deprecated and [ 162.638634][ T7684] and is ignored by this kernel. Remove the mand [ 162.638634][ T7684] option from the mount to silence this warning. [ 162.638634][ T7684] ======================================================= [ 162.821910][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 162.960459][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 162.995641][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.023383][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.033027][ T9] usb 1-1: Product: syz [ 163.051893][ T9] usb 1-1: Manufacturer: syz [ 163.058119][ T9] usb 1-1: SerialNumber: syz [ 163.078133][ T9] usb 1-1: config 0 descriptor?? [ 163.199554][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.208095][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.215893][ T7675] bridge_slave_0: entered allmulticast mode [ 163.229518][ T7675] bridge_slave_0: entered promiscuous mode [ 163.239396][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.247167][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.254565][ T7675] bridge_slave_1: entered allmulticast mode [ 163.263580][ T7675] bridge_slave_1: entered promiscuous mode [ 163.304034][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 163.318673][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.332029][ T24] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 163.342581][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.392475][ T7675] team0: Port device team_slave_0 added [ 163.402662][ T7675] team0: Port device team_slave_1 added [ 163.445593][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.452973][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.479103][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.495859][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.502910][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.529614][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.538906][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.549578][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.560063][ T24] usb 2-1: Product: syz [ 163.566271][ T24] usb 2-1: Manufacturer: syz [ 163.570921][ T24] usb 2-1: SerialNumber: syz [ 163.585784][ T24] usb 2-1: config 0 descriptor?? [ 163.646432][ T7675] hsr_slave_0: entered promiscuous mode [ 163.654373][ T7675] hsr_slave_1: entered promiscuous mode [ 163.661949][ T7675] debugfs: 'hsr0' already exists in 'hsr' [ 163.667770][ T7675] Cannot create hsr debugfs directory [ 163.798625][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.018355][ T7710] netlink: 'syz.2.627': attribute type 8 has an invalid length. [ 164.068706][ T7675] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.087305][ T7675] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.106429][ T7675] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.126917][ T7675] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.316163][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.358282][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.379964][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.387245][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.414842][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.422150][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.472064][ T5163] Bluetooth: hci4: command tx timeout [ 164.850484][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.281593][ T7675] veth0_vlan: entered promiscuous mode [ 165.316629][ T7675] veth1_vlan: entered promiscuous mode [ 165.405173][ T7675] veth0_macvtap: entered promiscuous mode [ 165.427917][ T7675] veth1_macvtap: entered promiscuous mode [ 165.473537][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.496025][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.526984][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.538836][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.574216][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.607005][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.736239][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.765263][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.831145][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.858842][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.019793][ T7759] netlink: 80 bytes leftover after parsing attributes in process `syz.4.612'. [ 166.148105][ T7764] netlink: 204 bytes leftover after parsing attributes in process `syz.2.641'. [ 166.163055][ T7764] netlink: 204 bytes leftover after parsing attributes in process `syz.2.641'. [ 166.194626][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 166.208286][ T9] usb 1-1: USB disconnect, device number 26 [ 166.296843][ T7766] netlink: 84 bytes leftover after parsing attributes in process `syz.2.642'. [ 166.553728][ T5163] Bluetooth: hci4: command tx timeout [ 166.572015][ T809] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.646082][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 166.660857][ T24] usb 2-1: USB disconnect, device number 26 [ 166.722172][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 166.731726][ T809] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 166.747734][ T809] usb 5-1: config 0 has no interface number 0 [ 166.766944][ T809] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 166.778097][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.786384][ T809] usb 5-1: Product: syz [ 166.790816][ T809] usb 5-1: Manufacturer: syz [ 166.796115][ T809] usb 5-1: SerialNumber: syz [ 166.804208][ T809] usb 5-1: config 0 descriptor?? [ 167.153733][ T7785] netlink: 80 bytes leftover after parsing attributes in process `syz.2.651'. [ 167.324506][ T809] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 167.355542][ T809] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 167.366787][ T7789] FAULT_INJECTION: forcing a failure. [ 167.366787][ T7789] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.412862][ T7789] CPU: 1 UID: 0 PID: 7789 Comm: syz.0.652 Not tainted syzkaller #0 PREEMPT(full) [ 167.412889][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.412901][ T7789] Call Trace: [ 167.412909][ T7789] [ 167.412917][ T7789] dump_stack_lvl+0xe8/0x150 [ 167.412953][ T7789] should_fail_ex+0x412/0x560 [ 167.412987][ T7789] _copy_from_user+0x2d/0xb0 [ 167.413014][ T7789] copy_from_sockptr+0x48/0x70 [ 167.413043][ T7789] ip_mroute_setsockopt+0x74f/0x1090 [ 167.413081][ T7789] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 167.413110][ T7789] ? get_pid_task+0x20/0x1f0 [ 167.413154][ T7789] do_ip_setsockopt+0xf1e/0x2ea0 [ 167.413186][ T7789] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 167.413222][ T7789] ? aa_sk_perm+0x6d5/0x900 [ 167.413256][ T7789] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.413285][ T7789] ? __fget_files+0x2a/0x420 [ 167.413308][ T7789] ? aa_sock_opt_perm+0xff/0x1a0 [ 167.413338][ T7789] ip_setsockopt+0x66/0x110 [ 167.413378][ T7789] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 167.413410][ T7789] do_sock_setsockopt+0x17c/0x1b0 [ 167.413435][ T7789] __x64_sys_setsockopt+0x13d/0x1b0 [ 167.413461][ T7789] do_syscall_64+0x14d/0xf80 [ 167.413480][ T7789] ? trace_irq_disable+0x3b/0x150 [ 167.413512][ T7789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.413532][ T7789] ? clear_bhb_loop+0x40/0x90 [ 167.413556][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.413575][ T7789] RIP: 0033:0x7fb36199c799 [ 167.413595][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.413610][ T7789] RSP: 002b:00007fb3628e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.413631][ T7789] RAX: ffffffffffffffda RBX: 00007fb361c15fa0 RCX: 00007fb36199c799 [ 167.413645][ T7789] RDX: 00000000000000cb RSI: 0000000000000000 RDI: 0000000000000003 [ 167.413655][ T7789] RBP: 00007fb3628e8090 R08: 0000000000000010 R09: 0000000000000000 [ 167.413667][ T7789] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 167.413678][ T7789] R13: 00007fb361c16038 R14: 00007fb361c15fa0 R15: 00007ffdd3ce88e8 [ 167.413708][ T7789] [ 167.987898][ T7803] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 168.030297][ T7803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.047487][ T7803] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 168.057086][ T7807] netlink: 204 bytes leftover after parsing attributes in process `syz.1.659'. [ 168.067432][ T7807] netlink: 204 bytes leftover after parsing attributes in process `syz.1.659'. [ 168.294956][ T7814] netlink: 80 bytes leftover after parsing attributes in process `syz.1.662'. [ 168.631978][ T5163] Bluetooth: hci4: command tx timeout [ 169.306198][ T809] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 169.342807][ T809] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 169.388502][ T809] usb 5-1: USB disconnect, device number 2 [ 169.604044][ T7843] netlink: 80 bytes leftover after parsing attributes in process `syz.1.671'. [ 170.207322][ T7861] Bluetooth: MGMT ver 1.23 [ 170.481126][ T7870] netlink: 80 bytes leftover after parsing attributes in process `syz.1.682'. [ 170.502257][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.662176][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 170.669185][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 170.678643][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.683901][ T809] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 170.696623][ T9] usb 5-1: config 0 descriptor?? [ 170.710439][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 170.722659][ T5163] Bluetooth: hci4: command tx timeout [ 170.855154][ T809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.865097][ T809] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.875768][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.892476][ T809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 170.901596][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 170.911357][ T809] usb 1-1: Product: syz [ 170.915850][ T809] usb 1-1: Manufacturer: syz [ 170.920509][ T809] usb 1-1: SerialNumber: syz [ 170.926029][ T9] gspca_nw80x: reg_w err -71 [ 170.936444][ T9] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 170.952259][ T5938] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 170.967484][ T9] usb 5-1: USB disconnect, device number 3 [ 171.091905][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 171.098843][ T5938] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.107310][ T5938] usb 2-1: config 179 has no interface number 0 [ 171.115182][ T5938] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 171.127044][ T5938] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 171.138780][ T5938] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.157251][ T5938] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 171.180063][ T5938] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.194864][ T809] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 171.209504][ T5938] usb 2-1: config 179 interface 65 has no altsetting 0 [ 171.227226][ T5938] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 171.249443][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.316131][ T5938] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 171.384968][ T9] usb 1-1: USB disconnect, device number 27 [ 171.425816][ T9] usblp0: removed [ 171.500925][ T5895] usb 2-1: USB disconnect, device number 27 [ 171.664204][ T7890] syzkaller1: entered promiscuous mode [ 171.678978][ T7890] syzkaller1: entered allmulticast mode [ 172.072782][ T1240] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 172.232315][ T1240] usb 5-1: Using ep0 maxpacket: 32 [ 172.249573][ T1240] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 172.269560][ T1240] usb 5-1: config 0 has no interface number 0 [ 172.310832][ T1240] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 172.330786][ T1240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.349573][ T1240] usb 5-1: Product: syz [ 172.358368][ T1240] usb 5-1: Manufacturer: syz [ 172.371870][ T1240] usb 5-1: SerialNumber: syz [ 172.385025][ T1240] usb 5-1: config 0 descriptor?? [ 172.417983][ T7913] netlink: 100 bytes leftover after parsing attributes in process `syz.2.700'. [ 172.832087][ T1240] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 172.865234][ T1240] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 173.145068][ T5895] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 173.283164][ T5895] usb 2-1: device descriptor read/64, error -71 [ 173.541973][ T5895] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 173.683607][ T5895] usb 2-1: device descriptor read/64, error -71 [ 173.812462][ T5895] usb usb2-port1: attempt power cycle [ 174.125052][ T7992] netlink: 204 bytes leftover after parsing attributes in process `syz.0.729'. [ 174.136465][ T7992] netlink: 204 bytes leftover after parsing attributes in process `syz.0.729'. [ 174.161955][ T5895] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 174.194647][ T5895] usb 2-1: device descriptor read/8, error -71 [ 174.249304][ T7997] autofs: Bad value for 'fd' [ 174.452000][ T5895] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 174.476379][ T5895] usb 2-1: device descriptor read/8, error -71 [ 174.593544][ T5895] usb usb2-port1: unable to enumerate USB device [ 174.637397][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 174.711235][ T1240] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 174.732611][ T1240] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 174.759715][ T1240] usb 5-1: USB disconnect, device number 4 [ 175.280628][ T8036] netlink: 204 bytes leftover after parsing attributes in process `syz.2.748'. [ 175.290388][ T8036] netlink: 204 bytes leftover after parsing attributes in process `syz.2.748'. [ 175.426653][ T8038] netlink: 'syz.4.749': attribute type 6 has an invalid length. [ 175.446811][ T8038] netlink: 168 bytes leftover after parsing attributes in process `syz.4.749'. [ 175.669754][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.745313][ T8054] netlink: 160 bytes leftover after parsing attributes in process `syz.0.755'. [ 175.754629][ T8054] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 176.320621][ T8082] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 176.338818][ T8082] FAULT_INJECTION: forcing a failure. [ 176.338818][ T8082] name failslab, interval 1, probability 0, space 0, times 1 [ 176.352058][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.1.768 Not tainted syzkaller #0 PREEMPT(full) [ 176.352085][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.352108][ T8082] Call Trace: [ 176.352116][ T8082] [ 176.352125][ T8082] dump_stack_lvl+0xe8/0x150 [ 176.352161][ T8082] should_fail_ex+0x412/0x560 [ 176.352197][ T8082] should_failslab+0xa8/0x100 [ 176.352222][ T8082] __kmalloc_noprof+0xe8/0x760 [ 176.352255][ T8082] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 176.352294][ T8082] tomoyo_realpath_from_path+0xe3/0x5d0 [ 176.352336][ T8082] ? tomoyo_path_number_perm+0x219/0x630 [ 176.352363][ T8082] tomoyo_path_number_perm+0x246/0x630 [ 176.352393][ T8082] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.352422][ T8082] ? __lock_acquire+0x6b5/0x2cf0 [ 176.352465][ T8082] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 176.352508][ T8082] ? __fget_files+0x2a/0x420 [ 176.352538][ T8082] ? __fget_files+0x2a/0x420 [ 176.352564][ T8082] ? __fget_files+0x3a0/0x420 [ 176.352589][ T8082] ? __fget_files+0x2a/0x420 [ 176.352621][ T8082] security_file_ioctl+0xc3/0x2a0 [ 176.352648][ T8082] __se_sys_ioctl+0x47/0x170 [ 176.352672][ T8082] do_syscall_64+0x14d/0xf80 [ 176.352691][ T8082] ? trace_irq_disable+0x3b/0x150 [ 176.352715][ T8082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.352736][ T8082] ? clear_bhb_loop+0x40/0x90 [ 176.352761][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.352782][ T8082] RIP: 0033:0x7ff1b1b9c799 [ 176.352801][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.352819][ T8082] RSP: 002b:00007ff1b2b22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.352852][ T8082] RAX: ffffffffffffffda RBX: 00007ff1b1e15fa0 RCX: 00007ff1b1b9c799 [ 176.352866][ T8082] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 176.352877][ T8082] RBP: 00007ff1b2b22090 R08: 0000000000000000 R09: 0000000000000000 [ 176.352889][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.352901][ T8082] R13: 00007ff1b1e16038 R14: 00007ff1b1e15fa0 R15: 00007ffd857517d8 [ 176.352933][ T8082] [ 176.352941][ T8082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.897750][ T8138] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 178.468299][ T8155] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 178.511894][ T5895] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 178.554193][ T1240] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 178.676177][ T5895] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 178.693809][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.711843][ T5895] usb 5-1: Product: syz [ 178.717117][ T5895] usb 5-1: Manufacturer: syz [ 178.726544][ T1240] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 178.739659][ T5895] usb 5-1: SerialNumber: syz [ 178.750036][ T1240] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 178.762200][ T5895] usb 5-1: config 0 descriptor?? [ 178.777651][ T1240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.819471][ T1240] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 178.979901][ T5895] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 179.032145][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 179.192630][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 179.202409][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.213827][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.224940][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.236475][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.255897][ T9] usb 1-1: config 0 descriptor?? [ 179.362058][ T8160] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.800'. [ 179.688888][ T9] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 179.871325][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.880437][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.892226][ T8158] capability: warning: `syz.0.799' uses 32-bit capabilities (legacy support in use) [ 179.920295][ T1240] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 179.938492][ T1240] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 179.996110][ T8158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 180.012119][ T5915] usb 1-1: USB disconnect, device number 28 [ 180.423535][ T1240] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 180.451602][ T1240] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 180.476283][ T1240] usb 2-1: USB disconnect, device number 32 [ 180.963727][ T1240] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 181.156566][ T1240] usb 2-1: Using ep0 maxpacket: 16 [ 181.181344][ T1240] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 181.200294][ T1240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.236542][ T1240] usb 2-1: config 0 descriptor?? [ 181.254190][ T1240] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 181.453033][ T1240] usb 2-1: Detected FT232B [ 181.473061][ T8198] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 181.661066][ T5895] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 181.697910][ T5895] usb 5-1: USB disconnect, device number 5 [ 181.869938][ T1240] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.069046][ T5895] usb 2-1: USB disconnect, device number 33 [ 182.100112][ T5895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 182.131568][ T5895] ftdi_sio 2-1:0.0: device disconnected [ 182.944713][ T24] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 183.137522][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 183.174762][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.190611][ T24] usb 2-1: Product: syz [ 183.201857][ T24] usb 2-1: Manufacturer: syz [ 183.214082][ T24] usb 2-1: SerialNumber: syz [ 183.227947][ T24] usb 2-1: config 0 descriptor?? [ 183.447521][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.801878][ T5895] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 183.972646][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 183.984391][ T5895] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 184.002131][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.020300][ T5895] usb 1-1: config 0 descriptor?? [ 184.038834][ T5895] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 184.235355][ T5895] usb 1-1: Detected FT232B [ 184.295865][ T8262] netlink: 204 bytes leftover after parsing attributes in process `syz.4.833'. [ 184.322832][ T8262] netlink: 204 bytes leftover after parsing attributes in process `syz.4.833'. [ 184.477734][ T8268] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.834'. [ 184.602187][ T8271] FAULT_INJECTION: forcing a failure. [ 184.602187][ T8271] name failslab, interval 1, probability 0, space 0, times 0 [ 184.618062][ T8271] CPU: 1 UID: 0 PID: 8271 Comm: syz.4.837 Not tainted syzkaller #0 PREEMPT(full) [ 184.618089][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.618109][ T8271] Call Trace: [ 184.618118][ T8271] [ 184.618127][ T8271] dump_stack_lvl+0xe8/0x150 [ 184.618165][ T8271] should_fail_ex+0x412/0x560 [ 184.618195][ T8271] should_failslab+0xa8/0x100 [ 184.618218][ T8271] __kmalloc_noprof+0xe8/0x760 [ 184.618248][ T8271] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 184.618285][ T8271] tomoyo_realpath_from_path+0xe3/0x5d0 [ 184.618326][ T8271] ? tomoyo_path_number_perm+0x219/0x630 [ 184.618352][ T8271] tomoyo_path_number_perm+0x246/0x630 [ 184.618414][ T8271] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 184.618443][ T8271] ? __lock_acquire+0x6b5/0x2cf0 [ 184.618501][ T8271] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 184.618544][ T8271] ? __fget_files+0x2a/0x420 [ 184.618573][ T8271] ? __fget_files+0x2a/0x420 [ 184.618597][ T8271] ? __fget_files+0x3a0/0x420 [ 184.618623][ T8271] ? __fget_files+0x2a/0x420 [ 184.618658][ T8271] security_file_ioctl+0xc3/0x2a0 [ 184.618685][ T8271] __se_sys_ioctl+0x47/0x170 [ 184.618709][ T8271] do_syscall_64+0x14d/0xf80 [ 184.618727][ T8271] ? trace_irq_disable+0x3b/0x150 [ 184.618751][ T8271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.618772][ T8271] ? clear_bhb_loop+0x40/0x90 [ 184.618796][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.618814][ T8271] RIP: 0033:0x7fe82619c799 [ 184.618840][ T8271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.618856][ T8271] RSP: 002b:00007fe82707b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.618876][ T8271] RAX: ffffffffffffffda RBX: 00007fe826415fa0 RCX: 00007fe82619c799 [ 184.618891][ T8271] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000003 [ 184.618904][ T8271] RBP: 00007fe82707b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.618917][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.618928][ T8271] R13: 00007fe826416038 R14: 00007fe826415fa0 R15: 00007ffef44f3ba8 [ 184.618960][ T8271] [ 184.618994][ T8271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 184.666217][ T5895] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 184.872582][ T5895] usb 1-1: USB disconnect, device number 29 [ 184.889535][ T8273] TCP: TCP_TX_DELAY enabled [ 184.890874][ T5895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 184.913757][ T5895] ftdi_sio 1-1:0.0: device disconnected [ 185.231973][ T809] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 185.414080][ T809] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.439569][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.452743][ T809] usb 5-1: Product: syz [ 185.457039][ T809] usb 5-1: Manufacturer: syz [ 185.462890][ T809] usb 5-1: SerialNumber: syz [ 185.469267][ T8288] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.844'. [ 185.486217][ T809] usb 5-1: config 0 descriptor?? [ 185.636376][ T8292] netlink: 80 bytes leftover after parsing attributes in process `syz.2.846'. [ 185.796579][ T809] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.920692][ T8294] netlink: 'syz.2.847': attribute type 2 has an invalid length. [ 186.196964][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 186.220581][ T24] usb 2-1: USB disconnect, device number 34 [ 186.396210][ T8306] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.853'. [ 187.084549][ T8326] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.862'. [ 187.741886][ T29] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 187.919646][ T29] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.940643][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.950810][ T29] usb 2-1: Product: syz [ 187.957576][ T29] usb 2-1: Manufacturer: syz [ 187.962780][ T29] usb 2-1: SerialNumber: syz [ 187.971152][ T29] usb 2-1: config 0 descriptor?? [ 188.047842][ T8342] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 188.196990][ T29] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.235987][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 188.243359][ T809] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 188.269222][ T809] usb 5-1: USB disconnect, device number 6 [ 188.506930][ T8348] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.871'. [ 188.982006][ T24] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 189.036693][ T8369] random: crng reseeded on system resumption [ 189.153924][ T24] usb 1-1: config 2 has an invalid interface number: 18 but max is 0 [ 189.172331][ T24] usb 1-1: config 2 has no interface number 0 [ 189.184704][ T24] usb 1-1: config 2 interface 18 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 189.206023][ T24] usb 1-1: config 2 interface 18 has no altsetting 0 [ 189.222959][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=701f, bcdDevice= b.e4 [ 189.236763][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.245144][ T24] usb 1-1: Product: syz [ 189.249371][ T24] usb 1-1: Manufacturer: syz [ 189.254147][ T24] usb 1-1: SerialNumber: syz [ 189.270888][ T8355] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 189.422028][ T809] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.483382][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.504965][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.553741][ T24] dvb-usb: found a 'VideoWalker DVB-T USB' in warm state. [ 189.561532][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 189.607402][ T809] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 189.635324][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 189.645923][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.660018][ T24] dvbdev: DVB: registering new adapter (VideoWalker DVB-T USB) [ 189.671357][ T809] usb 5-1: config 0 descriptor?? [ 189.693565][ T24] usb 1-1: media controller created [ 189.714530][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.737066][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 189.745090][ T24] dvb-usb: no frontend was attached by 'VideoWalker DVB-T USB' [ 189.763611][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 189.780359][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 189.788013][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 189.812520][ T24] dvb-usb: VideoWalker DVB-T USB successfully initialized and connected. [ 189.860563][ T24] usb 1-1: USB disconnect, device number 30 [ 189.888380][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.927107][ T8375] netlink: 80 bytes leftover after parsing attributes in process `syz.2.882'. [ 189.943859][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.944583][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 190.110736][ T809] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 190.127923][ T5938] dvb-usb: error while querying for an remote control event. [ 190.226661][ T24] dvb-usb: VideoWalker DVB-T USB successfully deinitialized and disconnected. [ 190.621962][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 190.785776][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 190.797618][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.808785][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 190.817958][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.829572][ T24] usb 1-1: config 0 descriptor?? [ 190.922432][ T29] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 190.946164][ T29] usb 2-1: USB disconnect, device number 35 [ 191.040697][ T30] audit: type=1326 audit(6065249017.619:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.0.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb36199c799 code=0x0 [ 191.497462][ T8401] netlink: 80 bytes leftover after parsing attributes in process `syz.1.890'. [ 191.914124][ T24] ath6kl: Failed to submit usb control message: -110 [ 191.922418][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 191.929723][ T24] ath6kl: Unable to send get target info: -110 [ 191.941969][ T24] ath6kl: Failed to init ath6kl core: -110 [ 191.956217][ T24] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 192.022960][ T9] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 192.193641][ T8411] netlink: 80 bytes leftover after parsing attributes in process `syz.2.894'. [ 192.350489][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.361221][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.369708][ T9] usb 2-1: Product: syz [ 192.374422][ T9] usb 2-1: Manufacturer: syz [ 192.379124][ T9] usb 2-1: SerialNumber: syz [ 192.393651][ T9] usb 2-1: config 0 descriptor?? [ 192.604659][ T8419] netlink: 204 bytes leftover after parsing attributes in process `syz.2.897'. [ 192.616206][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 192.616998][ T8419] netlink: 204 bytes leftover after parsing attributes in process `syz.2.897'. [ 193.259106][ T8423] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 193.295417][ T1240] usb 1-1: USB disconnect, device number 31 [ 193.450849][ T8427] 9p: Bad value for 'rfdno' [ 193.771880][ T1240] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 193.922238][ T1240] usb 1-1: Using ep0 maxpacket: 32 [ 193.930111][ T1240] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.939408][ T1240] usb 1-1: config 0 has no interface number 0 [ 193.948344][ T1240] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.957499][ T1240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.965604][ T1240] usb 1-1: Product: syz [ 193.969813][ T1240] usb 1-1: Manufacturer: syz [ 193.974523][ T1240] usb 1-1: SerialNumber: syz [ 193.982868][ T1240] usb 1-1: config 0 descriptor?? [ 194.166389][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.173396][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.398370][ T1240] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 194.410925][ T1240] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 195.044302][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 195.061122][ T9] usb 2-1: USB disconnect, device number 36 [ 195.202184][ T809] [drm:udl_init] *ERROR* Selecting channel failed [ 195.226503][ T809] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 195.233618][ T809] [drm] Initialized udl on minor 2 [ 195.240540][ T809] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 195.253029][ T809] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 195.263162][ T29] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 195.275770][ T29] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 195.576279][ T8451] netlink: 'syz.2.911': attribute type 4 has an invalid length. [ 195.584164][ T8451] netlink: 17 bytes leftover after parsing attributes in process `syz.2.911'. [ 195.596756][ T8452] netlink: 'syz.2.911': attribute type 4 has an invalid length. [ 195.605169][ T8452] netlink: 17 bytes leftover after parsing attributes in process `syz.2.911'. [ 196.044959][ T1240] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 196.061092][ T1240] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 196.077929][ T8369] Restarting kernel threads ... [ 196.085521][ T8369] Done restarting kernel threads. [ 196.092569][ T1240] usb 1-1: USB disconnect, device number 32 [ 196.133083][ T29] usb 5-1: USB disconnect, device number 7 [ 196.351956][ T5938] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 196.525287][ T5938] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 196.533537][ T29] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 196.551979][ T5938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 196.568002][ T5938] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 196.599897][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.635560][ T5938] usb 2-1: config 0 descriptor?? [ 196.670952][ T5938] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 196.700549][ T5938] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 196.733012][ T5938] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 196.755321][ T29] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.769423][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.778487][ T29] usb 5-1: Product: syz [ 196.791250][ T29] usb 5-1: Manufacturer: syz [ 196.798277][ T29] usb 5-1: SerialNumber: syz [ 196.810996][ T29] usb 5-1: config 0 descriptor?? [ 196.907334][ T1240] usb 2-1: USB disconnect, device number 37 [ 197.024135][ T29] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.831966][ T24] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 198.007372][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.016832][ T5938] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 198.024528][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.034058][ T24] usb 2-1: Product: syz [ 198.038299][ T24] usb 2-1: Manufacturer: syz [ 198.044309][ T24] usb 2-1: SerialNumber: syz [ 198.053538][ T24] usb 2-1: config 0 descriptor?? [ 198.060560][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'. [ 198.070141][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'. [ 198.192440][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 198.217705][ T5938] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 198.226015][ T5938] usb 1-1: config 0 has no interface number 0 [ 198.245859][ T5938] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 198.268464][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.278636][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.290440][ T5938] usb 1-1: Product: syz [ 198.300466][ T5938] usb 1-1: Manufacturer: syz [ 198.305343][ T5938] usb 1-1: SerialNumber: syz [ 198.319037][ T5938] usb 1-1: config 0 descriptor?? [ 198.439604][ T8529] netlink: 80 bytes leftover after parsing attributes in process `syz.2.938'. [ 198.739020][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 198.750962][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 199.647912][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 199.655300][ T29] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 199.672920][ T29] usb 5-1: USB disconnect, device number 8 [ 200.464869][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 200.476715][ T5938] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 200.503763][ T5938] usb 1-1: USB disconnect, device number 33 [ 200.522749][ T809] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.694454][ T809] usb 5-1: config 0 has no interfaces? [ 200.709224][ T809] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 200.719190][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.728372][ T809] usb 5-1: Product: syz [ 200.732903][ T809] usb 5-1: Manufacturer: syz [ 200.737571][ T809] usb 5-1: SerialNumber: syz [ 200.747473][ T809] usb 5-1: config 0 descriptor?? [ 200.920200][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 200.939849][ T24] usb 2-1: USB disconnect, device number 38 [ 201.070479][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.944'. [ 201.086357][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.944'. [ 201.260939][ T24] usb 5-1: USB disconnect, device number 9 [ 201.341892][ T1240] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 201.526813][ T1240] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.554115][ T1240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.569661][ T8591] netlink: 80 bytes leftover after parsing attributes in process `syz.2.961'. [ 201.583774][ T1240] usb 1-1: Product: syz [ 201.588591][ T1240] usb 1-1: Manufacturer: syz [ 201.594205][ T1240] usb 1-1: SerialNumber: syz [ 201.604532][ T1240] usb 1-1: config 0 descriptor?? [ 201.817833][ T1240] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.231879][ T809] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 202.397899][ T809] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.416476][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.426412][ T809] usb 5-1: Product: syz [ 202.431024][ T809] usb 5-1: Manufacturer: syz [ 202.436008][ T809] usb 5-1: SerialNumber: syz [ 202.445236][ T809] usb 5-1: config 0 descriptor?? [ 202.661108][ T809] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.942122][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 202.994209][ T8626] netlink: 204 bytes leftover after parsing attributes in process `syz.2.973'. [ 203.005238][ T8626] netlink: 204 bytes leftover after parsing attributes in process `syz.2.973'. [ 203.098808][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 203.108263][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.119014][ T9] usb 2-1: Product: syz [ 203.127959][ T9] usb 2-1: Manufacturer: syz [ 203.133079][ T9] usb 2-1: SerialNumber: syz [ 203.141406][ T9] usb 2-1: config 0 descriptor?? [ 203.258319][ T8633] netlink: 80 bytes leftover after parsing attributes in process `syz.2.976'. [ 203.354262][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 203.681285][ T8640] netlink: 176 bytes leftover after parsing attributes in process `syz.2.979'. [ 204.253994][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 204.261368][ T1240] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 204.280298][ T1240] usb 1-1: USB disconnect, device number 34 [ 205.040326][ T809] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 205.059205][ T809] usb 5-1: USB disconnect, device number 10 [ 205.223980][ T8673] trusted_key: encrypted_key: master key parameter '' is invalid [ 205.783107][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 205.825564][ T9] usb 2-1: USB disconnect, device number 39 [ 206.091353][ T8709] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1007'. [ 206.105044][ T809] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 206.272512][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 206.279732][ T809] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.288904][ T809] usb 1-1: config 0 has no interface number 0 [ 206.297213][ T809] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.306532][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.318972][ T809] usb 1-1: Product: syz [ 206.323567][ T809] usb 1-1: Manufacturer: syz [ 206.328226][ T809] usb 1-1: SerialNumber: syz [ 206.337217][ T809] usb 1-1: config 0 descriptor?? [ 206.342242][ T5915] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 206.506781][ T5915] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.516361][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.525532][ T5915] usb 5-1: Product: syz [ 206.529771][ T5915] usb 5-1: Manufacturer: syz [ 206.538217][ T5915] usb 5-1: SerialNumber: syz [ 206.549468][ T5915] usb 5-1: config 0 descriptor?? [ 206.692013][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 206.758395][ T5915] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 206.768557][ T809] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 206.779512][ T809] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.856091][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.865442][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.873630][ T9] usb 2-1: Product: syz [ 206.878128][ T9] usb 2-1: Manufacturer: syz [ 206.883088][ T9] usb 2-1: SerialNumber: syz [ 206.894069][ T9] usb 2-1: config 0 descriptor?? [ 207.109809][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.593804][ T809] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 207.605057][ T809] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 208.472152][ T5163] Bluetooth: hci0: command tx timeout [ 208.896934][ T809] usb 1-1: USB disconnect, device number 35 [ 208.989470][ T5915] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 209.013827][ T5915] usb 5-1: USB disconnect, device number 11 [ 209.542802][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 209.763752][ T809] usb 2-1: USB disconnect, device number 40 [ 210.207641][ T8767] random: crng reseeded on system resumption [ 210.223438][ T8767] Restarting kernel threads ... [ 210.229226][ T8767] Done restarting kernel threads. [ 210.433028][ T5915] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 210.532299][ T29] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 210.597814][ T5915] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 210.624349][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.633784][ T5915] usb 5-1: Product: syz [ 210.638123][ T5915] usb 5-1: Manufacturer: syz [ 210.644597][ T5915] usb 5-1: SerialNumber: syz [ 210.661453][ T5915] usb 5-1: config 0 descriptor?? [ 210.704826][ T29] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 210.728320][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.746429][ T8775] process 'syz.1.1032' launched './file0' with NULL argv: empty string added [ 210.766702][ T29] usb 1-1: config 0 descriptor?? [ 210.806789][ T8775] Invalid argument reading file caps for ./file0 [ 210.878362][ T5915] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 211.005996][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.033520][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.141655][ T29] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 211.281937][ T24] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 211.344121][ T29] [drm:udl_init] *ERROR* Selecting channel failed [ 211.371673][ T29] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 211.385159][ T29] [drm] Initialized udl on minor 2 [ 211.397995][ T29] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.428158][ T29] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 211.438897][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 211.460092][ T809] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.483296][ T24] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 211.493021][ T29] usb 1-1: USB disconnect, device number 36 [ 211.508226][ T809] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 211.516710][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.534429][ T24] usb 2-1: Product: syz [ 211.541570][ T24] usb 2-1: Manufacturer: syz [ 211.550533][ T24] usb 2-1: SerialNumber: syz [ 211.564453][ T8778] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 211.594105][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.600873][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 211.608555][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.797531][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.806405][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 211.868489][ T24] usb 2-1: USB disconnect, device number 41 [ 212.092721][ T8787] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1036'. [ 212.103003][ T8787] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1036'. [ 212.112308][ T8787] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1036'. [ 212.301884][ T1240] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 212.479105][ T1240] usb 1-1: Using ep0 maxpacket: 8 [ 212.492755][ T1240] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.506567][ T1240] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 212.516044][ T1240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.524206][ T1240] usb 1-1: Product: syz [ 212.528534][ T1240] usb 1-1: Manufacturer: syz [ 212.535555][ T1240] usb 1-1: SerialNumber: syz [ 212.757330][ T8801] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 212.771191][ T8785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.781080][ T8785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.792419][ T29] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 212.820233][ T1240] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.828335][ T1240] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 212.850778][ T1240] usb 1-1: USB disconnect, device number 37 [ 212.961991][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 212.970959][ T29] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 212.980984][ T29] usb 2-1: config 0 has no interface number 0 [ 212.990551][ T29] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 212.999873][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.008045][ T29] usb 2-1: Product: syz [ 213.012430][ T29] usb 2-1: Manufacturer: syz [ 213.017103][ T29] usb 2-1: SerialNumber: syz [ 213.025263][ T29] usb 2-1: config 0 descriptor?? [ 213.349998][ T5915] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 213.381558][ T5915] usb 5-1: USB disconnect, device number 12 [ 213.443289][ T29] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 213.470523][ T29] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 213.642043][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1048'. [ 213.651638][ T8817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1048'. [ 213.741945][ T5915] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 213.898647][ T5915] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.918782][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.949895][ T5915] usb 1-1: Product: syz [ 213.974554][ T5915] usb 1-1: Manufacturer: syz [ 213.984835][ T5915] usb 1-1: SerialNumber: syz [ 214.004447][ T5915] usb 1-1: config 0 descriptor?? [ 214.223621][ T5915] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.681925][ T808] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 214.838968][ T808] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.848242][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.856356][ T808] usb 5-1: Product: syz [ 214.861317][ T808] usb 5-1: Manufacturer: syz [ 214.866051][ T808] usb 5-1: SerialNumber: syz [ 214.876521][ T808] usb 5-1: config 0 descriptor?? [ 215.094388][ T808] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.731306][ T29] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 215.763679][ T29] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 215.793065][ T29] usb 2-1: USB disconnect, device number 42 [ 216.601901][ T29] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 216.754891][ T5915] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 216.777008][ T5915] usb 1-1: USB disconnect, device number 38 [ 216.781938][ T29] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.803820][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.823639][ T29] usb 2-1: Product: syz [ 216.833927][ T29] usb 2-1: Manufacturer: syz [ 216.840882][ T29] usb 2-1: SerialNumber: syz [ 216.859272][ T29] usb 2-1: config 0 descriptor?? [ 217.072838][ T29] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.148840][ T808] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 217.167203][ T808] usb 5-1: USB disconnect, device number 13 [ 217.891897][ T24] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 217.986615][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1078'. [ 218.125726][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.135598][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.144484][ T24] usb 1-1: Product: syz [ 218.148740][ T24] usb 1-1: Manufacturer: syz [ 218.153602][ T24] usb 1-1: SerialNumber: syz [ 218.173513][ T24] usb 1-1: config 0 descriptor?? [ 218.256007][ T8893] netlink: 'syz.4.1079': attribute type 11 has an invalid length. [ 218.395657][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.691861][ T5915] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.841847][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 218.849071][ T5915] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 218.858566][ T5915] usb 5-1: config 0 has no interface number 0 [ 218.867155][ T5915] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 218.876806][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.885990][ T5915] usb 5-1: Product: syz [ 218.890221][ T5915] usb 5-1: Manufacturer: syz [ 218.894904][ T5915] usb 5-1: SerialNumber: syz [ 218.902540][ T5915] usb 5-1: config 0 descriptor?? [ 219.326810][ T5915] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 219.338091][ T5915] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 219.372844][ T8915] netlink: 'syz.2.1088': attribute type 9 has an invalid length. [ 219.380737][ T8915] netlink: 'syz.2.1088': attribute type 11 has an invalid length. [ 219.389150][ T8915] netlink: 'syz.2.1088': attribute type 12 has an invalid length. [ 219.399693][ T8915] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1088'. [ 219.409485][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 219.479071][ T8917] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1089'. [ 219.494391][ T8917] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1089'. [ 219.524826][ T29] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 219.649856][ T5915] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 219.661191][ T5915] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 219.738837][ T29] usb 2-1: USB disconnect, device number 43 [ 220.817013][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 220.836967][ T24] usb 1-1: USB disconnect, device number 39 [ 221.313061][ T5915] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 221.478956][ T5915] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 221.503521][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.511645][ T5915] usb 2-1: Product: syz [ 221.516557][ T5915] usb 2-1: Manufacturer: syz [ 221.521269][ T5915] usb 2-1: SerialNumber: syz [ 221.533251][ T5915] usb 2-1: config 0 descriptor?? [ 221.549078][ T29] usb 5-1: USB disconnect, device number 14 [ 221.747724][ T5915] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 221.961954][ T5895] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 222.116326][ T5895] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 222.125649][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.134010][ T5895] usb 1-1: Product: syz [ 222.138301][ T5895] usb 1-1: Manufacturer: syz [ 222.143021][ T5895] usb 1-1: SerialNumber: syz [ 222.151515][ T5895] usb 1-1: config 0 descriptor?? [ 222.181905][ T29] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 222.335732][ T29] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 222.345102][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.354040][ T29] usb 5-1: Product: syz [ 222.358287][ T29] usb 5-1: Manufacturer: syz [ 222.365229][ T29] usb 5-1: SerialNumber: syz [ 222.366235][ T5895] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.379896][ T29] usb 5-1: config 0 descriptor?? [ 222.589224][ T29] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 223.620761][ T9009] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1130'. [ 223.771093][ T5915] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 223.805895][ T5915] usb 2-1: USB disconnect, device number 44 [ 224.388858][ T5895] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 224.414628][ T5895] usb 1-1: USB disconnect, device number 40 [ 225.009776][ T29] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 225.033040][ T9039] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1143'. [ 225.050924][ T29] usb 5-1: USB disconnect, device number 15 [ 225.477672][ T9052] random: crng reseeded on system resumption [ 225.490311][ T9052] Restarting kernel threads ... [ 225.496070][ T9052] Done restarting kernel threads. [ 225.773348][ T808] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 225.885815][ T9061] FAULT_INJECTION: forcing a failure. [ 225.885815][ T9061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.899584][ T9061] CPU: 0 UID: 0 PID: 9061 Comm: syz.4.1152 Not tainted syzkaller #0 PREEMPT(full) [ 225.899630][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.899644][ T9061] Call Trace: [ 225.899652][ T9061] [ 225.899661][ T9061] dump_stack_lvl+0xe8/0x150 [ 225.899695][ T9061] should_fail_ex+0x412/0x560 [ 225.899724][ T9061] _copy_from_user+0x2d/0xb0 [ 225.899751][ T9061] ___sys_sendmsg+0x1c6/0x360 [ 225.899780][ T9061] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.899837][ T9061] ? __fget_files+0x2a/0x420 [ 225.899864][ T9061] ? __fget_files+0x3a0/0x420 [ 225.899901][ T9061] __x64_sys_sendmsg+0x1bd/0x2a0 [ 225.899926][ T9061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.899958][ T9061] ? __pfx_ksys_write+0x10/0x10 [ 225.899989][ T9061] do_syscall_64+0x14d/0xf80 [ 225.900008][ T9061] ? trace_irq_disable+0x3b/0x150 [ 225.900031][ T9061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.900051][ T9061] ? clear_bhb_loop+0x40/0x90 [ 225.900075][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.900095][ T9061] RIP: 0033:0x7fe82619c799 [ 225.900115][ T9061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.900132][ T9061] RSP: 002b:00007fe82707b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.900153][ T9061] RAX: ffffffffffffffda RBX: 00007fe826415fa0 RCX: 00007fe82619c799 [ 225.900167][ T9061] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 225.900180][ T9061] RBP: 00007fe82707b090 R08: 0000000000000000 R09: 0000000000000000 [ 225.900191][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.900214][ T9061] R13: 00007fe826416038 R14: 00007fe826415fa0 R15: 00007ffef44f3ba8 [ 225.900245][ T9061] [ 226.108852][ T5915] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 226.173032][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 226.180214][ T808] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.190647][ T808] usb 1-1: config 0 has no interface number 0 [ 226.201325][ T808] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 226.210666][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.219045][ T808] usb 1-1: Product: syz [ 226.223345][ T808] usb 1-1: Manufacturer: syz [ 226.228005][ T808] usb 1-1: SerialNumber: syz [ 226.248070][ T808] usb 1-1: config 0 descriptor?? [ 226.321919][ T5915] usb 2-1: Invalid ep0 maxpacket: 32 [ 226.452778][ T5915] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 226.653867][ T5915] usb 2-1: Invalid ep0 maxpacket: 32 [ 226.671480][ T808] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 226.684394][ T5915] usb usb2-port1: attempt power cycle [ 226.710587][ T808] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 227.045259][ T5915] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 227.074148][ T5915] usb 2-1: Invalid ep0 maxpacket: 32 [ 227.203257][ T9088] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 227.211948][ T5915] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 227.243783][ T5915] usb 2-1: Invalid ep0 maxpacket: 32 [ 227.252231][ T5915] usb usb2-port1: unable to enumerate USB device [ 227.286706][ T9085] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 228.141895][ T24] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 228.295403][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 228.305587][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.313815][ T24] usb 5-1: Product: syz [ 228.319002][ T24] usb 5-1: Manufacturer: syz [ 228.323813][ T24] usb 5-1: SerialNumber: syz [ 228.331413][ T24] usb 5-1: config 0 descriptor?? [ 228.547502][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 228.945618][ T808] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 228.959352][ T808] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 229.148460][ T5938] usb 1-1: USB disconnect, device number 41 [ 229.222047][ T808] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 229.375570][ T808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 229.384752][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.393363][ T808] usb 2-1: Product: syz [ 229.397592][ T808] usb 2-1: Manufacturer: syz [ 229.402337][ T808] usb 2-1: SerialNumber: syz [ 229.409829][ T808] usb 2-1: config 0 descriptor?? [ 229.618344][ T808] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.852910][ T9145] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.520129][ T9162] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 230.985625][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 231.014572][ T24] usb 5-1: USB disconnect, device number 16 [ 231.164293][ T9167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.638990][ T808] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 231.661537][ T808] usb 2-1: USB disconnect, device number 49 [ 231.772033][ T5895] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 231.946096][ T5895] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.956764][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.965022][ T5895] usb 5-1: Product: syz [ 231.969314][ T5895] usb 5-1: Manufacturer: syz [ 231.976086][ T5895] usb 5-1: SerialNumber: syz [ 231.987286][ T5895] usb 5-1: config 0 descriptor?? [ 232.200445][ T5895] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.671929][ T5915] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 232.843074][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 232.855808][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.871277][ T5915] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 232.881147][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 232.889965][ T5915] usb 1-1: Product: syz [ 232.893023][ T24] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 232.899295][ T5915] usb 1-1: Manufacturer: syz [ 232.906701][ T5915] usb 1-1: SerialNumber: syz [ 232.923860][ T5915] usb 1-1: config 0 descriptor?? [ 233.065603][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 233.074881][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.082966][ T24] usb 2-1: Product: syz [ 233.087151][ T24] usb 2-1: Manufacturer: syz [ 233.092034][ T24] usb 2-1: SerialNumber: syz [ 233.099782][ T24] usb 2-1: config 0 descriptor?? [ 233.240614][ T5915] usb 1-1: USB disconnect, device number 42 [ 233.308765][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 233.614794][ T9228] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1225'. [ 234.368642][ T5895] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 235.127047][ T29] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 235.296911][ T29] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.307102][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.319018][ T29] usb 1-1: Product: syz [ 235.323714][ T29] usb 1-1: Manufacturer: syz [ 235.328558][ T29] usb 1-1: SerialNumber: syz [ 235.337719][ T9260] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1240'. [ 235.344388][ T29] usb 1-1: config 0 descriptor?? [ 235.353644][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 235.378343][ T24] usb 2-1: USB disconnect, device number 50 [ 235.433987][ T5938] usb 5-1: USB disconnect, device number 17 [ 235.575834][ T29] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.812165][ T5938] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 235.977147][ T5938] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.988412][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.996879][ T5938] usb 5-1: Product: syz [ 236.001618][ T5938] usb 5-1: Manufacturer: syz [ 236.007279][ T5938] usb 5-1: SerialNumber: syz [ 236.020845][ T5938] usb 5-1: config 0 descriptor?? [ 236.234206][ T5938] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.291868][ T1240] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 236.455577][ T1240] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 236.465071][ T1240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.479599][ T1240] usb 2-1: Product: syz [ 236.483937][ T1240] usb 2-1: Manufacturer: syz [ 236.488727][ T1240] usb 2-1: SerialNumber: syz [ 236.499228][ T1240] usb 2-1: config 0 descriptor?? [ 236.711912][ T1240] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.620618][ T29] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 238.378321][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'. [ 238.453868][ T5938] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 238.730684][ T1240] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 238.867778][ T5972] usb 1-1: USB disconnect, device number 43 [ 239.077637][ T9322] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1270'. [ 239.227034][ T9328] overlayfs: failed to clone upperpath [ 239.303802][ T5972] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 239.463733][ T5972] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 239.474786][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.485811][ T5972] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 239.499285][ T5972] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 239.508448][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.520459][ T5972] usb 1-1: config 0 descriptor?? [ 239.677629][ T5938] usb 5-1: USB disconnect, device number 18 [ 239.761250][ T5895] usb 2-1: USB disconnect, device number 51 [ 239.935206][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 239.954922][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 239.964891][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 239.978774][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 239.988550][ T9341] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1279'. [ 239.998567][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 240.011213][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 240.023907][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 240.041930][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 240.049052][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 240.056305][ T5972] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 240.077692][ T5972] corsair 0003:1B1C:1B3E.0005: hidraw0: USB HID v6f.fd Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 240.190220][ T9317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 240.572032][ T1240] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 240.697732][ T5972] usb 1-1: USB disconnect, device number 44 [ 240.738304][ T1240] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.747704][ T1240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.758799][ T1240] usb 5-1: Product: syz [ 240.767666][ T1240] usb 5-1: Manufacturer: syz [ 240.775058][ T1240] usb 5-1: SerialNumber: syz [ 240.782457][ T1240] usb 5-1: config 0 descriptor?? [ 240.991090][ T1240] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.653041][ T5915] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 241.665664][ T5895] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 241.959025][ T9377] cgroup: fork rejected by pids controller in /syz2 [ 242.321968][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 242.356343][ T5915] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.367136][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.377604][ T5915] usb 2-1: Product: syz [ 242.382067][ T5895] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.391443][ T5915] usb 2-1: Manufacturer: syz [ 242.396288][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.404415][ T5915] usb 2-1: SerialNumber: syz [ 242.415467][ T5915] usb 2-1: config 0 descriptor?? [ 242.423705][ T5895] usb 1-1: Product: syz [ 242.434578][ T5895] usb 1-1: Manufacturer: syz [ 242.439578][ T5895] usb 1-1: SerialNumber: syz [ 242.462508][ T5895] usb 1-1: config 0 descriptor?? [ 242.646675][ T5915] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.678854][ T5895] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.163852][ T30] audit: type=1326 audit(6065256493.741:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.2.1298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95ca19c799 code=0x0 [ 243.491655][ T1240] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 244.297822][ T5895] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 244.723324][ T5895] usb 5-1: USB disconnect, device number 19 [ 244.875916][ T5915] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 244.890960][ T5915] usb 2-1: USB disconnect, device number 52 [ 245.104218][ T9511] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1302'. [ 245.290030][ T9513] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 245.326731][ T5915] usb 1-1: USB disconnect, device number 45 [ 245.427240][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.455797][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.509489][ T9520] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 245.671940][ T5972] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 245.721891][ T5915] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 245.821862][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 245.830405][ T5972] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 245.839914][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 245.848807][ T5972] usb 5-1: Product: syz [ 245.853084][ T5972] usb 5-1: Manufacturer: syz [ 245.857695][ T5972] usb 5-1: SerialNumber: syz [ 245.864646][ T5972] usb 5-1: config 0 descriptor?? [ 245.876298][ T5915] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 245.877957][ T5972] gspca_main: sq905-2.14.0 probing 2770:9120 [ 245.893079][ T5915] usb 1-1: config 0 has no interface number 0 [ 245.899266][ T5915] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 245.910558][ T5915] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 245.923950][ T5915] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 244, setting to 64 [ 245.937860][ T5915] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 245.947139][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.955672][ T5915] usb 1-1: Product: syz [ 245.959967][ T5915] usb 1-1: Manufacturer: syz [ 245.964904][ T5915] usb 1-1: SerialNumber: syz [ 245.973025][ T5915] usb 1-1: config 0 descriptor?? [ 245.979730][ T9517] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 245.987169][ T9517] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 246.030734][ T5915] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.227443][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.256307][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.279629][ T5915] usb 1-1: USB disconnect, device number 46 [ 246.881916][ T5915] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 246.889484][ T5972] gspca_sq905: bulk read fail (-22) len 0/4 [ 246.889622][ T5972] sq905 5-1:0.0: probe with driver sq905 failed with error -5 [ 247.055407][ T5915] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.064669][ T5895] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 247.072406][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.081029][ T5915] usb 2-1: Product: syz [ 247.085364][ T5915] usb 2-1: Manufacturer: syz [ 247.090461][ T5915] usb 2-1: SerialNumber: syz [ 247.098296][ T5915] usb 2-1: config 0 descriptor?? [ 247.152252][ T5938] usb 5-1: USB disconnect, device number 20 [ 247.231953][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 247.246078][ T5895] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 247.256345][ T5895] usb 1-1: config 0 has no interface number 0 [ 247.267509][ T5895] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 247.277177][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.287754][ T5895] usb 1-1: Product: syz [ 247.292496][ T5895] usb 1-1: Manufacturer: syz [ 247.297268][ T5895] usb 1-1: SerialNumber: syz [ 247.306003][ T5895] usb 1-1: config 0 descriptor?? [ 247.314194][ T5915] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.737063][ T5895] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 247.750388][ T5895] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.780732][ T9554] tipc: Started in network mode [ 247.785969][ T9554] tipc: Node identity ac14140f, cluster identity 4711 [ 247.796557][ T9554] tipc: New replicast peer: 255.255.255.255 [ 247.806377][ T9554] tipc: Enabled bearer , priority 10 [ 247.980955][ T9558] mkiss: ax0: crc mode is auto. [ 248.133390][ T9565] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 248.146968][ T9567] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 248.407717][ T9575] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1325'. [ 248.834979][ T24] tipc: Node number set to 2886997007 [ 248.957543][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.968001][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.977057][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.989801][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.000272][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.441836][ T9581] chnl_net:caif_netlink_parms(): no params data found [ 249.536148][ T5915] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 249.575481][ T5915] usb 2-1: USB disconnect, device number 53 [ 249.676478][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.687049][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.698877][ T9581] bridge_slave_0: entered allmulticast mode [ 249.708610][ T9581] bridge_slave_0: entered promiscuous mode [ 249.718305][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.725791][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.733598][ T9581] bridge_slave_1: entered allmulticast mode [ 249.742732][ T9581] bridge_slave_1: entered promiscuous mode [ 249.761876][ T1240] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 249.800019][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.810304][ T5895] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -32 [ 249.830223][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.844084][ T5895] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 249.872406][ T5895] usb 1-1: USB disconnect, device number 47 [ 249.933577][ T1240] usb 5-1: Using ep0 maxpacket: 16 [ 249.943868][ T1240] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 249.955463][ T9581] team0: Port device team_slave_0 added [ 249.961123][ T1240] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 249.976219][ T9581] team0: Port device team_slave_1 added [ 249.982440][ T1240] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 250.002494][ T1240] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 250.032047][ T1240] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 250.051820][ T1240] usb 5-1: config 1 interface 0 has no altsetting 0 [ 250.060018][ T1240] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 250.071617][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.079676][ T1240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.088160][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.118920][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.140633][ T1240] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 250.162569][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.178032][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.205141][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.302065][ T9581] hsr_slave_0: entered promiscuous mode [ 250.310129][ T9581] hsr_slave_1: entered promiscuous mode [ 250.320040][ T9581] debugfs: 'hsr0' already exists in 'hsr' [ 250.326426][ T9581] Cannot create hsr debugfs directory [ 250.361575][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.391241][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.492710][ T5972] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 250.513840][ T1240] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 250.570763][ T1240] usb 5-1: USB disconnect, device number 21 [ 250.661845][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 250.679234][ T5972] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 250.697724][ T5972] usb 2-1: config 0 has no interface number 0 [ 250.718737][ T5972] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 250.737214][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.755621][ T5972] usb 2-1: Product: syz [ 250.764497][ T5972] usb 2-1: Manufacturer: syz [ 250.779440][ T5972] usb 2-1: SerialNumber: syz [ 250.798043][ T5972] usb 2-1: config 0 descriptor?? [ 250.935258][ T9581] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.033476][ T5857] Bluetooth: hci5: command tx timeout [ 251.126294][ T9581] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.265606][ T5972] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 251.284373][ T9581] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.294879][ T5972] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 251.508548][ T9612] mmap: syz.0.1338 (9612) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.520148][ T5972] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 251.534224][ T9581] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.550824][ T5972] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 251.695696][ T95] bridge_slave_1: left allmulticast mode [ 251.713387][ T95] bridge_slave_1: left promiscuous mode [ 251.738272][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.758935][ T95] bridge_slave_0: left allmulticast mode [ 251.764798][ T95] bridge_slave_0: left promiscuous mode [ 251.771532][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.068124][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.080543][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.092629][ T95] bond0 (unregistering): Released all slaves [ 252.117024][ T9625] syzkaller1: entered promiscuous mode [ 252.124234][ T9625] syzkaller1: entered allmulticast mode [ 252.257136][ T95] tipc: Left network mode [ 252.479308][ T9581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.491560][ T9581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.506250][ T9581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.525196][ T9581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.681916][ T5915] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 252.707165][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.750531][ T9581] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.777250][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.784464][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.801505][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.808749][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.842523][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 252.851105][ T5915] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 252.859687][ T5915] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 252.870082][ T5915] usb 1-1: config 6 has no interface number 0 [ 252.888210][ T5915] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 252.903756][ T5915] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 252.918790][ T5915] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.936586][ T5915] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 252.957279][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.966297][ T5915] usb 1-1: Product: syz [ 252.970556][ T5915] usb 1-1: Manufacturer: syz [ 252.976221][ T5915] usb 1-1: SerialNumber: syz [ 252.998369][ T5915] hso 1-1:6.2: Failed to find INT IN ep [ 253.115449][ T5857] Bluetooth: hci5: command tx timeout [ 253.205819][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.227203][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.260024][ T5915] usb 1-1: USB disconnect, device number 48 [ 253.296632][ T1240] usb 2-1: USB disconnect, device number 54 [ 253.509741][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.625471][ T9663] sctp: [Deprecated]: syz.4.1353 (pid 9663) Use of int in max_burst socket option. [ 253.625471][ T9663] Use struct sctp_assoc_value instead [ 253.786119][ T9581] veth0_vlan: entered promiscuous mode [ 253.834061][ T9581] veth1_vlan: entered promiscuous mode [ 253.993647][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 254.170474][ T9581] veth0_macvtap: entered promiscuous mode [ 254.205100][ T9581] veth1_macvtap: entered promiscuous mode [ 254.338963][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.352498][ T5972] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 254.388882][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.431003][ T95] hsr_slave_0: left promiscuous mode [ 254.441334][ T95] hsr_slave_1: left promiscuous mode [ 254.455859][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.473627][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.493167][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.500602][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.525581][ T95] veth1_macvtap: left promiscuous mode [ 254.532809][ T95] veth0_macvtap: left promiscuous mode [ 254.538496][ T95] veth1_vlan: left promiscuous mode [ 254.543178][ T5972] usb 1-1: Using ep0 maxpacket: 32 [ 254.557524][ T5972] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 254.573448][ T5972] usb 1-1: config 0 has no interface number 0 [ 254.596309][ T5972] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 254.607689][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1365'. [ 254.647023][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.667236][ T5972] usb 1-1: Product: syz [ 254.692944][ T5972] usb 1-1: Manufacturer: syz [ 254.697629][ T5972] usb 1-1: SerialNumber: syz [ 254.724812][ T5972] usb 1-1: config 0 descriptor?? [ 255.021042][ T95] team0 (unregistering): Port device team_slave_1 removed [ 255.047468][ T95] team0 (unregistering): Port device team_slave_0 removed [ 255.145555][ T5972] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 255.157070][ T5972] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 255.192897][ T5857] Bluetooth: hci5: command tx timeout [ 255.268061][ T140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.277218][ T140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.307119][ T140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.329478][ T140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.369032][ T5972] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 255.387847][ T5972] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 255.628840][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.636146][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.701684][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.722312][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.801623][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.810685][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.857912][ T95] IPVS: stop unused estimator thread 0... [ 257.153409][ T5972] usb 1-1: USB disconnect, device number 49 [ 257.274720][ T5857] Bluetooth: hci5: command tx timeout [ 258.027877][ T9822] kvm: vcpu 0: requested 10 ns lapic timer period limited to 200000 ns [ 258.254060][ T9826] kvm: MONITOR instruction emulated as NOP! [ 259.566667][ T9852] KVM: debugfs: duplicate directory 9852-10 [ 259.912288][ T9859] kvm: pic: level sensitive irq not supported [ 259.913475][ T9859] kvm: pic: non byte write [ 259.952707][ T9859] kvm: pic: non byte write [ 259.957857][ T9859] kvm: pic: non byte write [ 259.963531][ T9859] kvm: pic: non byte write [ 259.968495][ T9859] kvm: pic: non byte write [ 259.986155][ T9859] kvm: pic: non byte write [ 259.997738][ T9859] kvm: pic: non byte write [ 260.010776][ T9859] kvm: pic: non byte write [ 260.025313][ T9859] kvm: pic: non byte write [ 260.036772][ T9859] kvm: pic: non byte write [ 260.807662][ T9896] ptrace attach of "./syz-executor exec"[9900] was attempted by "./syz-executor exec"[9896] [ 262.601261][ T9980] kvm: user requested TSC rate below hardware speed [ 267.161700][T10183] [ 267.164093][T10183] ====================================================== [ 267.171140][T10183] WARNING: possible circular locking dependency detected [ 267.178203][T10183] syzkaller #0 Not tainted [ 267.182648][T10183] ------------------------------------------------------ [ 267.189690][T10183] syz.2.1569/10183 is trying to acquire lock: [ 267.195953][T10183] ffff88807e1bdab8 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 267.204895][T10183] [ 267.204895][T10183] but task is already holding lock: [ 267.212290][T10183] ffff888078e1b8f0 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 267.222098][T10183] [ 267.222098][T10183] which lock already depends on the new lock. [ 267.222098][T10183] [ 267.232524][T10183] [ 267.232524][T10183] the existing dependency chain (in reverse order) is: [ 267.241550][T10183] [ 267.241550][T10183] -> #1 (&ctx->map_changing_lock){++++}-{4:4}: [ 267.249980][T10183] down_write+0x96/0x200 [ 267.254790][T10183] userfaultfd_unmap_prep+0x24b/0x3e0 [ 267.260719][T10183] vms_gather_munmap_vmas+0x9c6/0x1370 [ 267.266750][T10183] mmap_region+0x85b/0x2240 [ 267.271800][T10183] do_mmap+0xc39/0x10c0 [ 267.276504][T10183] vm_mmap_pgoff+0x2c9/0x4f0 [ 267.281631][T10183] do_syscall_64+0x14d/0xf80 [ 267.286757][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.293194][T10183] [ 267.293194][T10183] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 267.300778][T10183] __lock_acquire+0x15a5/0x2cf0 [ 267.306171][T10183] lock_acquire+0xf0/0x2e0 [ 267.311135][T10183] __might_fault+0xcb/0x130 [ 267.316215][T10183] userfaultfd_ioctl+0x2c01/0x4c70 [ 267.321888][T10183] __se_sys_ioctl+0xfc/0x170 [ 267.327046][T10183] do_syscall_64+0x14d/0xf80 [ 267.332208][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.338644][T10183] [ 267.338644][T10183] other info that might help us debug this: [ 267.338644][T10183] [ 267.348970][T10183] Possible unsafe locking scenario: [ 267.348970][T10183] [ 267.356458][T10183] CPU0 CPU1 [ 267.361845][T10183] ---- ---- [ 267.367222][T10183] rlock(&ctx->map_changing_lock); [ 267.372440][T10183] lock(&mm->mmap_lock); [ 267.379302][T10183] lock(&ctx->map_changing_lock); [ 267.386942][T10183] rlock(&mm->mmap_lock); [ 267.391369][T10183] [ 267.391369][T10183] *** DEADLOCK *** [ 267.391369][T10183] [ 267.399521][T10183] 2 locks held by syz.2.1569/10183: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 267.404730][T10183] #0: ffff88805c3c9808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 267.413989][T10183] #1: ffff888078e1b8f0 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 267.424200][T10183] [ 267.424200][T10183] stack backtrace: [ 267.430105][T10183] CPU: 1 UID: 0 PID: 10183 Comm: syz.2.1569 Not tainted syzkaller #0 PREEMPT(full) [ 267.430126][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.430152][T10183] Call Trace: [ 267.430158][T10183] [ 267.430165][T10183] dump_stack_lvl+0xe8/0x150 [ 267.430193][T10183] print_circular_bug+0x2e1/0x300 [ 267.430213][T10183] check_noncircular+0x12e/0x150 [ 267.430233][T10183] __lock_acquire+0x15a5/0x2cf0 [ 267.430259][T10183] ? __kernel_text_address+0xd/0x30 [ 267.430281][T10183] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 267.430306][T10183] lock_acquire+0xf0/0x2e0 [ 267.430328][T10183] ? __might_fault+0xaf/0x130 [ 267.430353][T10183] ? __might_fault+0xaf/0x130 [ 267.430374][T10183] __might_fault+0xcb/0x130 [ 267.430395][T10183] ? __might_fault+0xaf/0x130 [ 267.430417][T10183] userfaultfd_ioctl+0x2c01/0x4c70 [ 267.430439][T10183] ? __kasan_slab_free+0x5c/0x80 [ 267.430453][T10183] ? kfree+0x1c5/0x650 [ 267.430478][T10183] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 267.430510][T10183] ? kasan_quarantine_put+0xbb/0x1f0 [ 267.430538][T10183] ? tomoyo_path_number_perm+0x219/0x630 [ 267.430559][T10183] ? tomoyo_path_number_perm+0x219/0x630 [ 267.430579][T10183] ? do_vfs_ioctl+0x1166/0x1530 [ 267.430596][T10183] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 267.430616][T10183] ? do_futex+0x333/0x420 [ 267.430646][T10183] ? __fget_files+0x2a/0x420 [ 267.430667][T10183] ? __fget_files+0x2a/0x420 [ 267.430687][T10183] ? __fget_files+0x3a0/0x420 [ 267.430706][T10183] ? __fget_files+0x2a/0x420 [ 267.430727][T10183] ? bpf_lsm_file_ioctl+0x9/0x20 [ 267.430743][T10183] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 267.430764][T10183] __se_sys_ioctl+0xfc/0x170 [ 267.430781][T10183] do_syscall_64+0x14d/0xf80 [ 267.430796][T10183] ? trace_irq_disable+0x3b/0x150 [ 267.430815][T10183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.430831][T10183] ? clear_bhb_loop+0x40/0x90 [ 267.430849][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.430865][T10183] RIP: 0033:0x7f02d9f9c799 [ 267.430881][T10183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.430895][T10183] RSP: 002b:00007f02daf0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.430912][T10183] RAX: ffffffffffffffda RBX: 00007f02da215fa0 RCX: 00007f02d9f9c799 [ 267.430924][T10183] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 267.430935][T10183] RBP: 00007f02da032c99 R08: 0000000000000000 R09: 0000000000000000 [ 267.430946][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.430956][T10183] R13: 00007f02da216038 R14: 00007f02da215fa0 R15: 00007fff1b89cf08 [ 267.430974][T10183] [ 268.690480][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.762715][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.806733][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.896539][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.965206][ T48] bridge_slave_1: left allmulticast mode [ 268.970924][ T48] bridge_slave_1: left promiscuous mode [ 268.977629][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.986512][ T48] bridge_slave_0: left allmulticast mode [ 268.993081][ T48] bridge_slave_0: left promiscuous mode [ 268.998807][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.110948][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.121644][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.133180][ T48] bond0 (unregistering): Released all slaves [ 269.206969][ T48] tipc: Disabling bearer [ 269.218684][ T48] tipc: Left network mode [ 269.524779][ T48] hsr_slave_0: left promiscuous mode [ 269.530823][ T48] hsr_slave_1: left promiscuous mode [ 269.538377][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.546247][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.554354][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.562014][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.574097][ T48] veth1_macvtap: left promiscuous mode [ 269.579823][ T48] veth0_macvtap: left promiscuous mode [ 269.585671][ T48] veth1_vlan: left promiscuous mode [ 269.590918][ T48] veth0_vlan: left promiscuous mode [ 269.765016][ T48] team0 (unregistering): Port device team_slave_1 removed [ 269.794680][ T48] team0 (unregistering): Port device team_slave_0 removed [ 270.214023][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.278955][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.329616][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.379803][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.479969][ T48] bridge_slave_1: left allmulticast mode [ 270.493415][ T48] bridge_slave_1: left promiscuous mode [ 270.499194][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.508062][ T48] bridge_slave_0: left allmulticast mode [ 270.514754][ T48] bridge_slave_0: left promiscuous mode [ 270.520535][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.616262][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.627550][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.637926][ T48] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 270.648470][ T48] bond0 (unregistering): Released all slaves [ 270.723661][ T48] IPVS: stopping master sync thread 8801 ... [ 271.251745][ T48] hsr_slave_0: left promiscuous mode [ 271.257667][ T48] hsr_slave_1: left promiscuous mode [ 271.264222][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.271651][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.280335][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.291888][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.304710][ T48] veth1_macvtap: left promiscuous mode [ 271.311115][ T48] veth0_macvtap: left promiscuous mode [ 271.317074][ T48] veth1_vlan: left promiscuous mode [ 271.322448][ T48] veth0_vlan: left promiscuous mode [ 271.451603][ T48] team0 (unregistering): Port device team_slave_1 removed [ 271.463954][ T48] team0 (unregistering): Port device team_slave_0 removed [ 271.769730][ T48] IPVS: stop unused estimator thread 0...