last executing test programs: 48.329981827s ago: executing program 0 (id=339): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x40}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.015249006s ago: executing program 0 (id=375): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000280)="ae45", 0x2}], 0x2, 0x0, 0x0, 0x2400e044}, 0x890) 45.887195088s ago: executing program 0 (id=378): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455941fccee465ff611f05df90d63", 0x78}, {&(0x7f00000008c0)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5521f3a9d63ffde6682c5ecfe50122e579f88d4", 0x48}], 0x2, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x12043, 0x0) 45.723528433s ago: executing program 0 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 45.663633158s ago: executing program 0 (id=384): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x9, 0x9, 0x0, {0xb, 0x2, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r1}) 45.388009197s ago: executing program 0 (id=390): writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffff", 0x45}], 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8000000) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 45.096372527s ago: executing program 32 (id=390): writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffff", 0x45}], 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8000000) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 11.579015614s ago: executing program 3 (id=703): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r1 = syz_io_uring_setup(0x2646, &(0x7f0000000240)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0) 11.47597716s ago: executing program 3 (id=704): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x4}) 11.380593625s ago: executing program 3 (id=705): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x64040011, 0x1}) 10.862627564s ago: executing program 3 (id=709): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3.944148073s ago: executing program 3 (id=776): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = syz_io_uring_setup(0x1866, &(0x7f00000000c0)={0x0, 0x31db, 0x10, 0x40000000, 0x295}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3406}, 0x1}) io_uring_enter(r1, 0x47f6, 0x1000, 0x2, 0x0, 0x0) 3.462828842s ago: executing program 3 (id=782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000003080)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}], 0x1, 0x8000) 3.35601072s ago: executing program 1 (id=784): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x9) 3.057817252s ago: executing program 2 (id=788): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.953680143s ago: executing program 1 (id=789): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r3, 0x0, 0x2, 0x35f2c8, 0x0, 0x0, 0x10000}) 2.730988072s ago: executing program 1 (id=791): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000}, 0x4000840) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 2.686480408s ago: executing program 2 (id=793): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x50, 0xf, 0xc7, 0xc}, {0x20, 0x1f, 0xf6, 0xfffff010}, {0x6, 0x7c, 0x1, 0x267c}]}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f00000001c0)=0x9c) 1.743575823s ago: executing program 4 (id=799): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x398}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 1.675453897s ago: executing program 1 (id=800): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x1, 0x20, 0x0) 1.670240492s ago: executing program 5 (id=801): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/5, 0x5}], 0x1}, 0x0) 1.669787265s ago: executing program 2 (id=802): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x4, 0x1, 0x2, 0x7]}, &(0x7f0000000200)=0x78) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x0, [0x1, 0x1000, 0x8, 0x5, 0x100, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 1.509439657s ago: executing program 1 (id=803): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000095a800882"], 0x0}, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 1.434281415s ago: executing program 4 (id=804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.391857943s ago: executing program 5 (id=805): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000000340)={{@my=0x0, 0x6}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 1.185616793s ago: executing program 5 (id=806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)="2c562023c11cde11b0f50093f47f75476ad5cae2b18657c14210e5b45190d093ce742799ceaddea45d6167166c7d8fa9546212fefd8c32363e2c8e", 0x3b}], 0x2}, 0x8000) 1.047979346s ago: executing program 4 (id=807): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) io_setup(0xdda, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2016}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000040801"], 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x4008044) 1.000125125s ago: executing program 5 (id=808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="b9040100400f32360f01d1f2f0ff89bcd55e76673e3e98286000c4c271bacdc4c101e883008000000f5acd440f20c0350c000000440f22c0f2dd7420bf", 0x3d}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 806.979625ms ago: executing program 4 (id=809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 565.217034ms ago: executing program 5 (id=810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @multicast1}}, [0x2, 0x7ff, 0x8, 0x3, 0x200, 0x2, 0x1000, 0xe4, 0x100, 0x152a0e78, 0x0, 0xf, 0x80, 0x0, 0x6dad]}, &(0x7f00000000c0)=0x100) 417.181324ms ago: executing program 2 (id=811): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 380.497035ms ago: executing program 5 (id=812): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 319.845348ms ago: executing program 1 (id=813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x1000002, 0x0, 0x44}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) 281.407311ms ago: executing program 2 (id=814): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x7}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x100, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x80, 0x54, 0x7fffdfff, 0x2, 0x9, 0x8, 0x9, 0x9, 0x3, 0x7, 0x40000, 0x1a, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x200, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xd, 0x7, 0x9, 0x80000000, 0x9, 0xb50, 0x40, 0x800, 0x3, 0x0, 0xff, 0xfffffffe, 0x5, 0x8, 0x2, 0x7fff, 0x8, 0xffffffff, 0x1, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffffa, 0x3, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x6, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x3ff, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x7, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x7f, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xf3, 0x8e, 0x10001, 0x2004, 0x401, 0x80000001, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc7, 0x2, 0xe87, 0x0, 0x2, 0x8003, 0xc, 0x5, 0xb10, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x200, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xfdff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0xa, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x16], [0x10000010, 0x7, 0x7, 0x2, 0xa5e, 0xfe, 0xff, 0x8, 0x7ffffffe, 0x0, 0xe, 0x2, 0x4, 0x3, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xfffffff7, 0x4, 0x3, 0x103, 0x6, 0xd0, 0x6, 0x4000400, 0xffffffff, 0xfffffffa, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0xa, 0xffffffff, 0x0, 0x7, 0x6, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 210.869412ms ago: executing program 4 (id=815): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) r1 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r1, &(0x7f00000003c0)=""/100, 0x64, 0xfffffffffffffff8, &(0x7f0000000280)={0x77359400}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 81.586865ms ago: executing program 2 (id=816): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000900)="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", 0x148}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b432d4bce477d5aa2407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f0000000200)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="25bbf953d9e63a86502326a91bcb452d049906b8663a98ffd6eb4a9471a6b34a725ae193d99db3d460f7bc4aed2217ef4f96211bcb85f3c5b29b0357cb5526a2bf026fce752e9453032fe77673f0bf89cdb90d842e437d5d7c0a6af5493a6160e4019655e7ec27c1566b7e5c625149dc633e4c132a9118796e0dae4b094d7030d37e3b268c2da4c0716e9c9da8be9ad79d176059ed950c425404eee5c70a91acb3a80fa82c61d5637be14a66056edc33e8111e50e43eadc326d80dd63563cf75b7dc86f5aa26ac30bc812b0a42446257", 0xd0}, {&(0x7f00000002c0)="c88b24d13e46650476bd62b2a4a9e5258baaa2b1b66b01e3187aa58a5113890ed7917a083d5b4cc77aca9afa9e", 0x2d}, {&(0x7f0000000a80)="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", 0x18c}, {&(0x7f0000000600)="28af22ee5579386fc97a788ae2cb0a93652970304dd5154e567b867e4fc749d42f1bb962067560f20849897defddcc9d10bae0452d478880ba507183c78b5c1efe9f45f0e7a4ef0b76e656c836f13aab1d6dc20a979f369d0138ae25598c12691ae036ea88f7795caa2de286d76cd09ed58bfaa4c19d5ffa7504ae8da3e6cf4ba524ffd11c8235c0e5759bfd1bb1cc82c61e63a1316e3e6ae0acf6c9b445316d617d300df440817a4e505915ce6d77f883da6173830838af380d13e9c78300aad57a78d4408c4e2a55d011be914c1b93659eb7bbaf94c63636e2c14334e77699a4d77138aa08a37f9fc2", 0xea}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000001600)="f42c4605c67ee384355f82157ab402915c2fd866cfdf099bae9615ccb82fb7fe2c1d4c029e39a419a1c9154d78f58959de0bbb5b723889036ba847e82ceb79a8e3af36d606342991573c1007497cdbaef91206abe5d049d3dfbf3ce22c700f7d42cc89c341a27aece9d4c83e5f0cc9a4699805b64c13f8542f57292d59b418726fd51c3cb145af26584af447ed6e6e6daa8d5d7d524f3e476d9f102e9ac53df371e7f53480f94d8fe8d781468796e26bbcf8738ef3f3bfd989013d33631161e70ded1bc8658f2bbdddc42f39eed27b574f5f3f5cac26cedd1fa1f45d99fa672198f6b8eb7e297f5540bf44ec1ada06844ad2562a897f973ca43d5e0560a88d5c7e6f3ebc21e22368a48975fbc0d9326e723a5eb36744aef17875e0fd63ca0d1860caa7d0e9aa407d1eb6cfc505c543a0c6b01ef7d818b178592d1740a3490748eb2a274ec110f045b2006e7e1e0eacbcddcb25d07bdda6623b5fe08fa70c6454aad9ec3b8ed34e2467806e2954c946d93b223dfadc367105bbd149470b57382fb6dee5b395adcdea2f15a1fc2c5c0d7694bbcd79d4c893afdb13ccf658016ee32437560041f080f140c40e757a227cbb418681bb246a9a675b664230705db2991c871cd66558ce9dca469177d34a9e6afab63937085b99a19cd55b2222dd2d416bf88274e0928cf88d5a3371110e7c714a2f65f758c9e40e4d068d8b5d02ce739bbbc6a9a37321f48bcb2989107f7f883e9bb76026d4274961407610c8f1cf059b65cba34a59da596d7965ae82fe8b9701ad7345549a2a6262105ba41dfc6d2e27a494788f43a06ca19ea84b3202acc5ba2586eb0e88840b7c43df9bbac3cda1e923d1ec4e5e61dbc2be745b43aa9dc083823fbc1a976efcba7d4c26590cc773f78725db34805013cfd11fc13c95b1173b713a58eb1eb1399377fecde7a504f125cb92d3aefe5aebebeb1b167234b068f52be33bd18bc460b17da73be6899fbe87cb4ac35d9f57833c23a5a23d39011c32223d69ea5eacfdf4f374eb2cecbd0d4017f2eb7cb782f1eb911c4891914bd8cfc975d4c31ed9f9979d89ce374e02ed593f64e5f1a559cce5ce4c1422406e8a6b0e4ab99d634daaf5c8ff8c9b71678c7559631def5292040d907a65e343481f64dbc178c91936fafa61d7fea8e91f248db998f26fd3ef6a22a7fd757e2381b8007dcf1ef8278044a900a408f3bf5f2a35f8e1a8cd32f12895f13f9f74ec313fdb47d63831fd50d951a3bcd82651c3fd8b2a5229665b158db38a4251ec9cac8e23157efdf4e6f9a940e711c20b44de9c4162bffc69dc64643902f51cdc9462e1bd4a9b0db05461954bcc7ac322d7885a41e166710e1faf2ce11fa7fb042c63dae1c4c626facfa41254856ab1f97669b7fb17d5d216b749dc1396f0a1473a6251c90d90c7b410675d05b887744aff746f0f25cab7c544101abea61303f0b3094374dbfb88508b0db43228ffbd72d5da8b1288e5b0126b0017f18740d2d73adc6142af916c7889f32fda68b29d431184b417e74fa20a5611c3542ed3e80d245b6954f3b1f1bb53e23c71af325a784d961c74c7277291191b0b10d38ab48772479dc5ed58087df57b52690b02079144f1cda5a7eb21910c56bd53b6513ed6b2e9c4aafe6fa7c390be779e0f2f5f4e5acad433b78e0e4194529b48e83243c5b70998c1c84dce84ede7e0a8189dafdfa9354b058e37ea6c11302354c028be6dbf980bdd819d81097d1b6aa92e460007cca05a6206a0faa74ae274e47447a747aa8ea429356fc1f1c8f1dc531163d7464c2b871d5ce03ec60efc534821cefaa8fa68699af3609b428aa5c19865e2f98d9072900ebe9e5827a70e4ad8d8ca3df773f10cad4ff2cf0ebe69f50b66726dbe94481c78359b0e23fa7bdec0f7b1442e8ee9547e8dbc13c1e450a961defc0a360f11b4a9b8d8a297151fc80bbdc4559be7d8022bbe80c4d5dec411d40f602626eeffbdf7290a485a0ffa89e2e471e54ada6356a8661fb43ac806501f2ab5f927f6d6767e43f1de7bb3fbe01f9b85ae82cf12cb5102d58635c1d8fc9becf1260324e23f91a3701b0075167dd2e7b8129c11e91193dbc668e7bceb82c710984e1030bd23362faa04dc1e0bcff4eb80329db45ac370e10494e0a0f4235bf53653eb2547d006e831d89d552c2ade492e406ca92ee9d1b869919327a4471fc3e4f0d13054a94b00656ebaf2b686e03f61e626f16b5355d4e59928ccba63d04389c3b3602bec2483220987579b7d8bfb07baa721e6122909fd4f1f8b588096476bfb43a2fdf97948458158d1ff0e4f74e2edbe4053858fa440292da5ca52f00a7b362a7572ea8b116e932fd6f6b59915e237610250426c899583d14d3ed5f19581b4f6cf8f7a3ef7092a0a4c8c5b7ef213c21d825f2a692f35ad325eef6c9052f6fdfb19ec8792787467a050cde9cf26a178984ac2a72ceaaced117cc88089d4ee49568ede8eb97efd58743e7a3f38184e6e00f9f56722a6d76e959a96a9de234ace8c67888d7bfeef4629333b3d0c8d39fb0bf5bd099854b7b6c68535d4427cf90eeaa1f5337709a3d6a2c34bf807488252b0693c322ae8826eecd65c5fb5264069b3c64ccd5af5cf8ce40b419ed718ead06e41055422944413d17933ef8eefd34d07d3a8036f0a48c35e1bdea1a2644214f6ac0c98ecd9e4880bfd939774316e707e30d062442dfd68d13cf0a22aba4772a91b821f3a7de17d5299cb011b0b82a1ccaa1fc9770797b97e4c2cffcca3d9b043df230d08fa0bca0e5af5ee397bfc4ad22f3709e242d2ccc25126fb2a55a791e4d41c1845133d4a456462a2f82f4cc8679807bad1373206fc0b05ab64fab93924bae586f5d93237217a8f996aee117665d77073ab13855321917bb64563d1cd9e9f33da8f50852408012fd629fdb43c20ed344ead086fb82bdc0208bcfa8e951fd3b3880f3e718b938e4512099f9692836d8c7362d5ed5e8df7a5504a3559dd1e0e89bcaf5e8ab02cd82e9c940e6bd6f6b5120b3d546de268fea31238bd2f3ff735bc7abcd99bdbea0362fd64865513454b55579951489e7ac18473d7d6189461e98326362ac726358b9fc0e5b47efbd3d508a6a25c8769d4ed1657fd22c62ac2b3bd49d37457b644d6cdc247389f1d5240d89d564d7c639c0d6945621c69ba8a25b5c6ad236c00728ca41705a68bd10756bea729b4a66d213b1afbb7db67aecbb8da744366bb04543be1f740e6aeb008b335237efe033d84add50d8b7db02ff9c401d9a2e0c0b75204b82575d5ebfefdcb764d87e395613859f68134f45c8bdcaa44e524fd626d060c97e5c90dce7e2a570e978c78d5ae19394482f924a184739504e645a69c04ba9ea4b3e367153b2ace0a76cbb3bfaa5ff40a33679ed3e58e32cb19e1ec69338360af3e", 0x978}], 0x6}}], 0x2, 0x8058) 0s ago: executing program 4 (id=817): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): 249 > 4 [ 79.287225][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.304164][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.857979][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 79.911124][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 80.258021][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.265807][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.273668][ T5849] bridge_slave_0: entered allmulticast mode [ 80.280958][ T5849] bridge_slave_0: entered promiscuous mode [ 80.294005][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.301144][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.309050][ T5851] bridge_slave_0: entered allmulticast mode [ 80.316176][ T5851] bridge_slave_0: entered promiscuous mode [ 80.323903][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 80.335093][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 80.353277][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.361036][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.368780][ T5849] bridge_slave_1: entered allmulticast mode [ 80.376103][ T5849] bridge_slave_1: entered promiscuous mode [ 80.399269][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 80.410777][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.418083][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.425866][ T5851] bridge_slave_1: entered allmulticast mode [ 80.432944][ T5851] bridge_slave_1: entered promiscuous mode [ 80.515129][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.531595][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.562155][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.605119][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.706926][ T5851] team0: Port device team_slave_0 added [ 80.726709][ T5849] team0: Port device team_slave_0 added [ 80.744982][ T5851] team0: Port device team_slave_1 added [ 80.751249][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.758953][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.766358][ T5855] bridge_slave_0: entered allmulticast mode [ 80.774232][ T5855] bridge_slave_0: entered promiscuous mode [ 80.783157][ T5849] team0: Port device team_slave_1 added [ 80.837364][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.844972][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.852143][ T5855] bridge_slave_1: entered allmulticast mode [ 80.860375][ T5855] bridge_slave_1: entered promiscuous mode [ 80.902220][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.909550][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.936533][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.949896][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.957656][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.984049][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.028001][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.035388][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.043020][ T5852] bridge_slave_0: entered allmulticast mode [ 81.050075][ T5852] bridge_slave_0: entered promiscuous mode [ 81.076852][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.084019][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.110715][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.124449][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.131441][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.157469][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.169113][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.176806][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.184315][ T5854] bridge_slave_0: entered allmulticast mode [ 81.191443][ T5854] bridge_slave_0: entered promiscuous mode [ 81.199226][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.206948][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.214398][ T5852] bridge_slave_1: entered allmulticast mode [ 81.221425][ T5852] bridge_slave_1: entered promiscuous mode [ 81.242035][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.253274][ T5844] Bluetooth: hci3: command tx timeout [ 81.259807][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.267089][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.274788][ T5854] bridge_slave_1: entered allmulticast mode [ 81.281887][ T5854] bridge_slave_1: entered promiscuous mode [ 81.326834][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.336436][ T5844] Bluetooth: hci4: command tx timeout [ 81.336443][ T52] Bluetooth: hci1: command tx timeout [ 81.347483][ T52] Bluetooth: hci2: command tx timeout [ 81.368366][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.380701][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.413084][ T5844] Bluetooth: hci0: command tx timeout [ 81.426894][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.437927][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.477939][ T5849] hsr_slave_0: entered promiscuous mode [ 81.484931][ T5849] hsr_slave_1: entered promiscuous mode [ 81.496077][ T5851] hsr_slave_0: entered promiscuous mode [ 81.502585][ T5851] hsr_slave_1: entered promiscuous mode [ 81.508724][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 81.515184][ T5851] Cannot create hsr debugfs directory [ 81.543227][ T5855] team0: Port device team_slave_0 added [ 81.551530][ T5855] team0: Port device team_slave_1 added [ 81.574254][ T5852] team0: Port device team_slave_0 added [ 81.582225][ T5854] team0: Port device team_slave_0 added [ 81.629191][ T5852] team0: Port device team_slave_1 added [ 81.636826][ T5854] team0: Port device team_slave_1 added [ 81.660635][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.668276][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.694649][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.745864][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.753090][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.779070][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.867780][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.875789][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.902907][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.916540][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.923894][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.950403][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.963929][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.970904][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.998133][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.076317][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.083528][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.109831][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.203502][ T5852] hsr_slave_0: entered promiscuous mode [ 82.209934][ T5852] hsr_slave_1: entered promiscuous mode [ 82.216285][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 82.222022][ T5852] Cannot create hsr debugfs directory [ 82.246095][ T5855] hsr_slave_0: entered promiscuous mode [ 82.252417][ T5855] hsr_slave_1: entered promiscuous mode [ 82.258974][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 82.264889][ T5855] Cannot create hsr debugfs directory [ 82.316317][ T5854] hsr_slave_0: entered promiscuous mode [ 82.322987][ T5854] hsr_slave_1: entered promiscuous mode [ 82.329701][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 82.335662][ T5854] Cannot create hsr debugfs directory [ 82.744033][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.756737][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.776454][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.787444][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.837516][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.858171][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.871156][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.897599][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.981350][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.993439][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.007533][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.018628][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.126735][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.137551][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.147725][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.158435][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.202856][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.256129][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.278974][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.286353][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.311052][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.332868][ T5844] Bluetooth: hci3: command tx timeout [ 83.339107][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.349763][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.364082][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.371408][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.384532][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.413415][ T5844] Bluetooth: hci2: command tx timeout [ 83.413849][ T5152] Bluetooth: hci1: command tx timeout [ 83.425902][ T52] Bluetooth: hci4: command tx timeout [ 83.444382][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.483529][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.495378][ T52] Bluetooth: hci0: command tx timeout [ 83.530975][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.538481][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.569159][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.576351][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.610390][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.649562][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.667420][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.719254][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.726401][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.735893][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.743029][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.766794][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.837946][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.878411][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.921621][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.949020][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.956502][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.968144][ T5851] veth0_vlan: entered promiscuous mode [ 83.997772][ T5851] veth1_vlan: entered promiscuous mode [ 84.016771][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.023899][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.038090][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.071621][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.078795][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.101616][ T5851] veth0_macvtap: entered promiscuous mode [ 84.117737][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.130145][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.140318][ T5851] veth1_macvtap: entered promiscuous mode [ 84.169659][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.176906][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.216462][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.263952][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.311948][ T5852] veth0_vlan: entered promiscuous mode [ 84.336124][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.347272][ T5852] veth1_vlan: entered promiscuous mode [ 84.386706][ T3514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.396325][ T3514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.413866][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.430980][ T5849] veth0_vlan: entered promiscuous mode [ 84.437996][ T3514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.447941][ T3514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.481104][ T5849] veth1_vlan: entered promiscuous mode [ 84.491536][ T5852] veth0_macvtap: entered promiscuous mode [ 84.515025][ T5852] veth1_macvtap: entered promiscuous mode [ 84.596842][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.615067][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.633205][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.654780][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.688984][ T5849] veth0_macvtap: entered promiscuous mode [ 84.704679][ T3524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.714990][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.715089][ T3495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.733473][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.735548][ T5849] veth1_macvtap: entered promiscuous mode [ 84.766525][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.774129][ T3495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.783255][ T3495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.794505][ T5854] veth0_vlan: entered promiscuous mode [ 84.818760][ T5854] veth1_vlan: entered promiscuous mode [ 84.841898][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.882152][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.884084][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.941475][ T3514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.951138][ T3514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.985476][ T3514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.995558][ T3514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.109504][ T5854] veth0_macvtap: entered promiscuous mode [ 85.129998][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.143445][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.153823][ T5854] veth1_macvtap: entered promiscuous mode [ 85.165902][ T5855] veth0_vlan: entered promiscuous mode [ 85.221844][ T5855] veth1_vlan: entered promiscuous mode [ 85.249677][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.254025][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.274916][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.278963][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.315519][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.358099][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.362210][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.368931][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.389950][ T3457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.418492][ T3457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.427301][ T52] Bluetooth: hci3: command tx timeout [ 85.451513][ T5855] veth0_macvtap: entered promiscuous mode [ 85.460793][ T3457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.471956][ T3457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.489802][ T5855] veth1_macvtap: entered promiscuous mode [ 85.493061][ T52] Bluetooth: hci4: command tx timeout [ 85.496511][ T5152] Bluetooth: hci1: command tx timeout [ 85.500983][ T52] Bluetooth: hci2: command tx timeout [ 85.573403][ T52] Bluetooth: hci0: command tx timeout [ 85.619300][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.716421][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.753110][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.770424][ T3524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.780136][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.789307][ T3524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.831544][ T3524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.848213][ T3524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.933629][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.966665][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.278868][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.352995][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.361026][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.432724][ T5839] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.544939][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.562863][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.613303][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 86.648061][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.708211][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.716329][ T5839] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.736917][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.761060][ T5924] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.797986][ T5839] usb 2-1: config 0 descriptor?? [ 86.957809][ T9] cfg80211: failed to load regulatory.db [ 87.055749][ T5839] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 87.493506][ T52] Bluetooth: hci3: command tx timeout [ 87.505828][ T5971] syz.4.17 uses obsolete (PF_INET,SOCK_PACKET) [ 87.572883][ T52] Bluetooth: hci2: command tx timeout [ 87.578395][ T52] Bluetooth: hci1: command tx timeout [ 87.583811][ T5152] Bluetooth: hci4: command tx timeout [ 87.588553][ T5924] usb 2-1: USB disconnect, device number 2 [ 87.652791][ T52] Bluetooth: hci0: command tx timeout [ 88.252073][ T5917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.432720][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 88.444143][ T5917] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 88.457071][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.479314][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.493070][ T5917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.508733][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.525779][ T5917] usb 5-1: Product: syz [ 88.535636][ T5917] usb 5-1: Manufacturer: syz [ 88.545910][ T5917] usb 5-1: SerialNumber: syz [ 88.972010][ T5917] usb 5-1: 0:2 : does not exist [ 88.972558][ T5932] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.161875][ T5932] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 89.176016][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.185750][ T5932] usb 2-1: Product: syz [ 89.190278][ T5932] usb 2-1: Manufacturer: syz [ 89.201599][ T5932] usb 2-1: SerialNumber: syz [ 89.619691][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 89.643390][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 89.904100][ T5917] usb 5-1: USB disconnect, device number 2 [ 89.958189][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.079473][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 90.105241][ T1211] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.115526][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 90.149918][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 90.184758][ T5932] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 90.232670][ T5932] usb 2-1: USB disconnect, device number 3 [ 90.284273][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 90.295600][ T1211] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.382572][ T1211] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 90.421323][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.453329][ T1211] usb 1-1: Product: syz [ 90.458333][ T1211] usb 1-1: Manufacturer: syz [ 90.473229][ T1211] usb 1-1: SerialNumber: syz [ 90.497870][ T1211] usb 1-1: config 0 descriptor?? [ 90.525962][ T1211] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 90.749593][ T1211] gspca_sunplus: reg_r err -32 [ 92.012535][ T1211] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 92.342893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.351964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.361032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.369819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.072837][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.184126][ T5917] usb 1-1: USB disconnect, device number 2 [ 93.252484][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 93.269928][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.287397][ T10] usb 5-1: config 1 has no interface number 1 [ 93.298241][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.311410][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 93.327385][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.342983][ T5925] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.391860][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.418836][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.473747][ T10] usb 5-1: Product: syz [ 93.478398][ T10] usb 5-1: Manufacturer: syz [ 93.484912][ T10] usb 5-1: SerialNumber: syz [ 93.512541][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 93.536645][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.555977][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 93.574317][ T5925] usb 2-1: can't read configurations, error -71 [ 93.772503][ T5932] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 93.938702][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.952853][ T10] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 93.982894][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.991821][ T5932] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 94.004608][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.036375][ T5932] usb 1-1: config 0 descriptor?? [ 94.059765][ T5932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 94.077104][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 94.108245][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 94.124822][ T5932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 94.171902][ T5932] usb 1-1: media controller created [ 94.197591][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.263910][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 94.307486][ T5932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 94.362644][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 94.423789][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 94.440007][ T5932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 94.596327][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 94.611228][ T5932] dvb-usb: error while querying for an remote control event. [ 94.805936][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 94.833083][ T5932] dvb-usb: error while querying for an remote control event. [ 94.851151][ T10] usb 5-1: USB disconnect, device number 3 [ 94.931826][ T5925] usb 1-1: USB disconnect, device number 3 [ 94.968677][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.006190][ T5925] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.082032][ T6128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.162493][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.322625][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 95.331358][ T5932] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 95.352649][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 95.380549][ T5932] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 95.411447][ T5932] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 95.446535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.455872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.522006][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.545133][ T5932] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 95.562705][ T5932] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 95.581830][ T5932] usb 2-1: Product: syz [ 95.586556][ T5932] usb 2-1: Manufacturer: syz [ 95.591179][ T5932] usb 2-1: SerialNumber: syz [ 95.613152][ T5932] usb 2-1: config 0 descriptor?? [ 95.625387][ T5932] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 95.661618][ T5932] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 95.758685][ T6144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.896042][ T5932] usb 2-1: USB disconnect, device number 6 [ 95.902109][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 95.918129][ T30] audit: type=1326 audit(1763107239.478:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc18f6c9 code=0x7ffc0000 [ 95.977211][ T5932] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 96.017569][ T30] audit: type=1326 audit(1763107239.478:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc18f6c9 code=0x7ffc0000 [ 96.042631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.059698][ T30] audit: type=1326 audit(1763107239.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc18f6c9 code=0x7ffc0000 [ 96.089975][ T30] audit: type=1326 audit(1763107239.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc12b779 code=0x7ffc0000 [ 96.133117][ T30] audit: type=1326 audit(1763107239.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc18f6c9 code=0x7ffc0000 [ 96.156604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.172210][ T30] audit: type=1326 audit(1763107239.518:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc12b779 code=0x7ffc0000 [ 96.206885][ T30] audit: type=1326 audit(1763107239.518:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc12b779 code=0x7ffc0000 [ 96.232459][ T30] audit: type=1326 audit(1763107239.518:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc12b779 code=0x7ffc0000 [ 96.255850][ T30] audit: type=1326 audit(1763107239.518:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc12b779 code=0x7ffc0000 [ 96.281143][ T30] audit: type=1326 audit(1763107239.518:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc12b779 code=0x7ffc0000 [ 96.283614][ T6158] fuse: Bad value for 'fd' [ 97.069593][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.173002][ T5925] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.386951][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.404591][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.446938][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.475156][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.484557][ T5925] usb 3-1: Product: syz [ 98.502485][ T5925] usb 3-1: Manufacturer: syz [ 98.507128][ T5925] usb 3-1: SerialNumber: syz [ 98.542695][ T5932] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.712996][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 98.731244][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.743674][ T5932] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.756515][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.769972][ T5932] usb 4-1: config 0 descriptor?? [ 99.029578][ T5932] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 99.485202][ T6265] binder: 6264:6265 ioctl c06c4124 0 returned -22 [ 99.494614][ T5932] usb 4-1: USB disconnect, device number 2 [ 99.542518][ T5925] cdc_ncm 3-1:1.0: bind() failure [ 99.558782][ T5925] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 99.565992][ T5925] cdc_ncm 3-1:1.1: bind() failure [ 99.763199][ T10] usb 3-1: USB disconnect, device number 2 [ 99.822477][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.974202][ T24] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 99.982464][ T24] usb 1-1: config 1 has no interface number 0 [ 99.988683][ T24] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 99.998836][ T24] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 100.011703][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 100.022052][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.032043][ T24] usb 1-1: Product: syz [ 100.036733][ T24] usb 1-1: Manufacturer: syz [ 100.042481][ T24] usb 1-1: SerialNumber: syz [ 100.055621][ T6269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.072629][ T6269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.095097][ T24] usb 1-1: Expected 3 endpoints, found: 2 [ 100.411469][ T6279] Zero length message leads to an empty skb [ 100.460031][ T5932] usb 1-1: USB disconnect, device number 4 [ 100.883625][ T6297] vivid-004: ================= START STATUS ================= [ 100.899741][ T6297] vivid-004: Radio HW Seek Mode: Bounded [ 100.917003][ T6297] vivid-004: Radio Programmable HW Seek: false [ 100.923688][ T6297] vivid-004: RDS Rx I/O Mode: Block I/O [ 100.929263][ T6297] vivid-004: Generate RBDS Instead of RDS: false [ 100.945034][ T6297] vivid-004: RDS Reception: true [ 100.950242][ T6297] vivid-004: RDS Program Type: 0 inactive [ 100.957375][ T6297] vivid-004: RDS PS Name: inactive [ 100.963021][ T6297] vivid-004: RDS Radio Text: inactive [ 100.968816][ T6297] vivid-004: RDS Traffic Announcement: false inactive [ 101.012166][ T6297] vivid-004: RDS Traffic Program: false inactive [ 101.050016][ T6297] vivid-004: RDS Music: false inactive [ 101.069671][ T6297] vivid-004: ================== END STATUS ================== [ 101.172548][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.334633][ T6310] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.346638][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 101.355806][ T10] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 101.364854][ T5932] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.373429][ T10] usb 5-1: config 0 has no interface number 0 [ 101.379652][ T10] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 101.420107][ T10] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 101.466298][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.485258][ T10] usb 5-1: Product: syz [ 101.491549][ T10] usb 5-1: Manufacturer: syz [ 101.507955][ T10] usb 5-1: SerialNumber: syz [ 101.544130][ T10] usb 5-1: config 0 descriptor?? [ 101.558337][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 101.579568][ T5932] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 101.588508][ T5932] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 101.606505][ T5932] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 101.616470][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.626798][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.649241][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.671130][ T5932] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 101.680648][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.697032][ T5932] usb 4-1: config 0 descriptor?? [ 101.918645][ T5932] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 101.929319][ T5925] IPVS: starting estimator thread 0... [ 101.952755][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.022626][ T6325] IPVS: using max 32 ests per chain, 76800 per kthread [ 102.122545][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.133506][ C0] usblp0: nonzero read bulk status received: -71 [ 102.137953][ T5932] usb 4-1: USB disconnect, device number 3 [ 102.159956][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.175337][ T10] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 102.180598][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.209790][ T6331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.226915][ T10] usb 5-1: USB disconnect, device number 4 [ 102.264165][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.297705][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.325197][ T24] usb 2-1: config 0 descriptor?? [ 102.335437][ T6303] usblp0: removed [ 102.553589][ T6343] input: syz0 as /devices/virtual/input/input7 [ 102.796107][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 102.952975][ T6354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.978232][ T6354] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 103.056145][ T10] usb 2-1: USB disconnect, device number 7 [ 103.106307][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 103.144151][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 103.163297][ T5932] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.330507][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 103.342129][ T5932] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 103.372656][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.380695][ T5932] usb 5-1: Product: syz [ 103.406687][ T5932] usb 5-1: Manufacturer: syz [ 103.411432][ T5932] usb 5-1: SerialNumber: syz [ 103.444057][ T5932] usb 5-1: config 0 descriptor?? [ 103.471459][ T6369] netlink: 'syz.2.179': attribute type 19 has an invalid length. [ 103.503329][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 103.519976][ T6369] netlink: 'syz.2.179': attribute type 19 has an invalid length. [ 103.534570][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 103.673710][ T5932] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 103.731494][ T5932] usb 5-1: USB disconnect, device number 5 [ 103.827500][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 103.839618][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 104.098216][ T855] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.232475][ T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 104.264987][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.277730][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.288460][ T855] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.309376][ T855] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.329898][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.346895][ T855] usb 1-1: config 0 descriptor?? [ 104.393972][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 104.405200][ T24] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 104.418256][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.425083][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 104.436317][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.448143][ T24] usb 3-1: config 0 descriptor?? [ 104.453952][ T6383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 104.572489][ T5925] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.681597][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.694326][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.722308][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 104.730697][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 104.740738][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 104.760603][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.779452][ T24] usb 3-1: USB disconnect, device number 3 [ 104.794051][ T5925] usb 5-1: config 0 has no interface number 0 [ 104.810555][ T855] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 104.830765][ T5925] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 104.858455][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.878632][ T5925] usb 5-1: Product: syz [ 104.883635][ T5925] usb 5-1: Manufacturer: syz [ 104.888466][ T5925] usb 5-1: SerialNumber: syz [ 104.970989][ T5925] usb 5-1: config 0 descriptor?? [ 105.004026][ T5925] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 105.102477][ T1211] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.272721][ T1211] usb 4-1: Using ep0 maxpacket: 8 [ 105.283822][ T1211] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 105.292707][ T1211] usb 4-1: config 179 has no interface number 0 [ 105.299500][ T1211] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 105.311148][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.319160][ T1211] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 105.342308][ T1211] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.362470][ T1211] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 105.374532][ T1211] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 105.391206][ T1211] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 105.400735][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.417533][ T6394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 105.482691][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 105.491824][ T24] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 105.505278][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.512062][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 105.521459][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.532949][ T24] usb 3-1: config 0 descriptor?? [ 105.545695][ T24] hub 3-1:0.0: USB hub found [ 105.658206][ T1211] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 105.744360][ T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 105.852652][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.861486][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.952755][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 105.958883][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 105.988993][ T24] usb 3-1: USB disconnect, device number 4 [ 106.234032][ T5925] gspca_spca1528: reg_w err -71 [ 106.252775][ T5925] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 106.283225][ T5925] usb 5-1: USB disconnect, device number 6 [ 106.322257][ T855] usb 4-1: USB disconnect, device number 4 [ 106.322341][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 106.337215][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 106.770958][ T5932] usb 1-1: USB disconnect, device number 5 [ 106.967796][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 106.967815][ T30] audit: type=1326 audit(1763107250.528:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c98f6c9 code=0x7ffc0000 [ 107.011191][ T30] audit: type=1326 audit(1763107250.558:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9c4c98f6c9 code=0x7ffc0000 [ 107.062585][ T30] audit: type=1326 audit(1763107250.568:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c98f6c9 code=0x7ffc0000 [ 107.109364][ T30] audit: type=1326 audit(1763107250.568:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f9c4c98f6c9 code=0x7ffc0000 [ 107.137443][ T30] audit: type=1326 audit(1763107250.568:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c98f6c9 code=0x7ffc0000 [ 107.167680][ T30] audit: type=1326 audit(1763107250.568:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f9c4c98f6c9 code=0x7ffc0000 [ 107.223292][ T30] audit: type=1326 audit(1763107250.658:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c98f6c9 code=0x7ffc0000 [ 107.322652][ T30] audit: type=1326 audit(1763107250.658:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c98f6c9 code=0x7ffc0000 [ 107.388576][ T6428] warning: `syz.2.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.847408][ T6436] process 'syz.1.205' launched './file0' with NULL argv: empty string added [ 107.873834][ T6438] pim6reg1: entered promiscuous mode [ 107.885279][ T6438] pim6reg1: entered allmulticast mode [ 108.139542][ T5903] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.312709][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 108.333094][ T5903] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 108.351927][ T5903] usb 3-1: config 0 has no interface number 0 [ 108.363280][ T5903] usb 3-1: config 0 interface 12 has no altsetting 0 [ 108.406402][ T5903] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 108.422545][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.430661][ T5903] usb 3-1: Product: syz [ 108.453422][ T5903] usb 3-1: Manufacturer: syz [ 108.458118][ T5903] usb 3-1: SerialNumber: syz [ 108.475320][ T5903] usb 3-1: config 0 descriptor?? [ 108.539983][ T5932] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.732634][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 108.756283][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.782442][ T5932] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 108.791120][ T30] audit: type=1326 audit(1763107252.348:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.4.210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbaf38f6c9 code=0x0 [ 108.803600][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.824792][ T5932] usb 2-1: config 0 descriptor?? [ 109.132481][ T983] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 109.248927][ T5932] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 109.314861][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 109.497990][ T983] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.519225][ T5932] usb 2-1: USB disconnect, device number 8 [ 109.529443][ T983] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 109.552130][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.594744][ T983] usb 1-1: config 0 descriptor?? [ 109.606824][ T6455] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 109.717696][ T5903] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 109.742663][ T5903] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 109.752458][ T5903] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 109.767143][ T5903] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 109.808793][ T5903] usb 3-1: USB disconnect, device number 5 [ 110.060307][ T983] hid-multitouch 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 110.325068][ T5932] usb 1-1: USB disconnect, device number 6 [ 110.442537][ T983] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.622828][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.634161][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.643959][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.658596][ T983] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.668871][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.685116][ T983] usb 2-1: config 0 descriptor?? [ 111.123206][ T983] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 111.956053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.092468][ T983] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 112.264731][ T983] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.281671][ T6535] capability: warning: `syz.2.239' uses deprecated v2 capabilities in a way that may be insecure [ 112.309374][ T983] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.379918][ T983] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.391247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.425733][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.449242][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 112.468176][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 112.661304][ T983] usb 5-1: usb_control_msg returned -32 [ 112.681196][ T983] usbtmc 5-1:16.0: can't read capabilities [ 113.245416][ T5925] usb 2-1: USB disconnect, device number 9 [ 113.752508][ T24] delete_channel: no stack [ 113.872460][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.932453][ T5932] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.032829][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 114.058574][ T5925] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.060224][ T6588] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.258'. [ 114.072506][ T5925] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.098828][ T5932] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 114.109369][ T5925] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.114919][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.132284][ T5925] usb 3-1: config 1 interface 0 has no altsetting 0 [ 114.145832][ T5932] usb 1-1: config 0 descriptor?? [ 114.156418][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 114.172857][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.180902][ T5925] usb 3-1: Product: syz [ 114.187176][ T5925] usb 3-1: Manufacturer: syz [ 114.192029][ T5925] usb 3-1: SerialNumber: syz [ 114.437262][ T5925] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 114.661890][ T983] usb 3-1: USB disconnect, device number 6 [ 114.685099][ T983] usblp0: removed [ 114.881907][ T5917] usb 5-1: USB disconnect, device number 7 [ 115.188658][ T5932] usb 1-1: Cannot set autoneg [ 115.216856][ T5932] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 115.323870][ T5932] usb 1-1: USB disconnect, device number 7 [ 116.124955][ T6629] input: syz1 as /devices/virtual/input/input9 [ 116.316169][ T30] audit: type=1326 audit(1763107259.868:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.412476][ T30] audit: type=1326 audit(1763107259.878:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.474868][ T30] audit: type=1326 audit(1763107259.878:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.540031][ T30] audit: type=1326 audit(1763107259.878:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.552451][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.592181][ T30] audit: type=1326 audit(1763107259.878:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.651772][ T30] audit: type=1326 audit(1763107259.878:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.712424][ T30] audit: type=1326 audit(1763107259.878:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.766846][ T24] usb 4-1: config 4 has an invalid interface number: 28 but max is 0 [ 116.800310][ T24] usb 4-1: config 4 has no interface number 0 [ 116.809131][ T30] audit: type=1326 audit(1763107259.908:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.816185][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 116.895085][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.920272][ T30] audit: type=1326 audit(1763107259.908:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 116.932526][ T24] usb 4-1: Product: syz [ 116.962479][ T24] usb 4-1: Manufacturer: syz [ 116.977549][ T24] usb 4-1: SerialNumber: syz [ 117.029697][ T30] audit: type=1326 audit(1763107259.908:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cbed8f6c9 code=0x7ffc0000 [ 117.126703][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.28/input/input10 [ 117.172056][ T6658] input: syz0 as /devices/virtual/input/input11 [ 117.294653][ T5187] bcm5974 4-1:4.28: could not read from device [ 117.320873][ T5187] bcm5974 4-1:4.28: could not read from device [ 117.334727][ T24] bcm5974 4-1:4.28: could not read from device [ 117.377576][ T24] input: failed to attach handler mousedev to device input10, error: -5 [ 117.401845][ T5187] bcm5974 4-1:4.28: could not read from device [ 117.409673][ T24] usb 4-1: USB disconnect, device number 5 [ 117.526213][ T6669] input: syz0 as /devices/virtual/input/input12 [ 117.546393][ T5835] udevd[5835]: Error opening device "/dev/input/event4": No such file or directory [ 117.569548][ T5835] udevd[5835]: Unable to EVIOCGABS device "/dev/input/event4" [ 117.584283][ T5835] udevd[5835]: Unable to EVIOCGABS device "/dev/input/event4" [ 117.595751][ T5835] udevd[5835]: Unable to EVIOCGABS device "/dev/input/event4" [ 117.603563][ T5835] udevd[5835]: Unable to EVIOCGABS device "/dev/input/event4" [ 117.712812][ T5917] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.875219][ T5917] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 117.888856][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.901137][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.912260][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 117.943243][ T5917] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 117.955920][ T5917] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 117.968621][ T5917] usb 2-1: Manufacturer: syz [ 117.986743][ T5917] usb 2-1: config 0 descriptor?? [ 118.237996][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 118.250663][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 118.421630][ T5917] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 118.480945][ T5917] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 118.603372][ T5932] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.786680][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 118.805046][ T5932] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 118.813635][ T5932] usb 5-1: config 0 has no interface number 0 [ 118.820026][ T5932] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.833629][ T5932] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 118.846014][ T5932] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 118.869456][ T5932] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.899855][ T5932] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 118.909694][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.927978][ T5932] usb 5-1: Product: syz [ 118.937955][ T5932] usb 5-1: Manufacturer: syz [ 118.948502][ T5932] usb 5-1: SerialNumber: syz [ 118.965650][ T5932] usb 5-1: config 0 descriptor?? [ 119.099403][ T6719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.195582][ T5932] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 119.314646][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 119.671931][ T5932] usb 5-1: USB disconnect, device number 8 [ 120.389948][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 120.609763][ T6738] ip6gretap0: entered promiscuous mode [ 120.702954][ T983] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 120.875232][ T983] usb 2-1: device firmware changed [ 120.888747][ T5903] usb 2-1: USB disconnect, device number 10 [ 120.914149][ T6753] loop9: detected capacity change from 0 to 7 [ 120.934197][ T6753] Dev loop9: unable to read RDB block 7 [ 120.940068][ T6753] loop9: AHDI p4 [ 120.948194][ T6753] loop9: partition table partially beyond EOD, truncated [ 121.072427][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 121.244085][ T5903] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.258009][ T5903] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 121.286242][ T5903] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.318353][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.358200][ T5903] usb 2-1: Product: syz [ 121.367874][ T5903] usb 2-1: Manufacturer: syz [ 121.373476][ T5903] usb 2-1: SerialNumber: syz [ 121.588253][ T6736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.032460][ T5926] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.070806][ T6798] sctp: [Deprecated]: syz.3.347 (pid 6798) Use of int in max_burst socket option. [ 122.070806][ T6798] Use struct sctp_assoc_value instead [ 122.177361][ T6800] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.196347][ T5926] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 122.205942][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.206148][ T6736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.214849][ T5926] usb 1-1: Product: syz [ 122.228127][ T5926] usb 1-1: Manufacturer: syz [ 122.247255][ T5926] usb 1-1: SerialNumber: syz [ 122.255377][ T5926] usb 1-1: config 0 descriptor?? [ 122.272289][ T5926] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 122.430037][ T5903] cdc_ncm 2-1:1.0: failed to get mac address [ 122.630698][ T5903] cdc_ncm 2-1:1.0: bind() failure [ 122.651318][ T5903] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 122.662583][ T5903] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 122.686295][ T5903] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 122.708331][ T5903] usb 2-1: USB disconnect, device number 11 [ 123.486694][ T5926] gspca_sunplus: reg_w_riv err -71 [ 123.491995][ T5926] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 123.537123][ T5926] usb 1-1: USB disconnect, device number 8 [ 123.969404][ T6855] syzkaller1: entered promiscuous mode [ 123.980886][ T6855] syzkaller1: entered allmulticast mode [ 124.741566][ T3457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.900532][ T3457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.944217][ T5932] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 124.984320][ T3457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.124269][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.149215][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.178082][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.201884][ T5932] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.208658][ T3457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.222524][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.247771][ T5932] usb 2-1: config 0 descriptor?? [ 125.490579][ T3457] bridge_slave_1: left allmulticast mode [ 125.497159][ T3457] bridge_slave_1: left promiscuous mode [ 125.505916][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.518636][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.530268][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.539995][ T3457] bridge_slave_0: left allmulticast mode [ 125.546089][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.554236][ T3457] bridge_slave_0: left promiscuous mode [ 125.559994][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.561208][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.576271][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.685063][ T5932] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 125.722491][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.884519][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.895783][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.907306][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.916583][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.924780][ T24] usb 5-1: SerialNumber: syz [ 125.969164][ T5932] usb 2-1: USB disconnect, device number 12 [ 126.069193][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.081009][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.091537][ T3457] bond0 (unregistering): Released all slaves [ 126.162856][ T24] usb 5-1: 0:2 : does not exist [ 126.181173][ T24] usb 5-1: unit 2 not found! [ 126.240613][ T24] usb 5-1: USB disconnect, device number 9 [ 126.337424][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.363154][ T6925] loop9: detected capacity change from 0 to 7 [ 126.388063][ T5835] Dev loop9: unable to read RDB block 7 [ 126.407591][ T5835] loop9: unable to read partition table [ 126.420531][ T5835] loop9: partition table beyond EOD, truncated [ 126.431517][ T6925] Dev loop9: unable to read RDB block 7 [ 126.443451][ T6925] loop9: unable to read partition table [ 126.453366][ T6925] loop9: partition table beyond EOD, truncated [ 126.460161][ T6925] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 127.028437][ T6917] chnl_net:caif_netlink_parms(): no params data found [ 127.063607][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 127.063624][ T30] audit: type=1326 audit(1763107270.628:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.2.409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cbed8f6c9 code=0x0 [ 127.258414][ T3457] hsr_slave_0: left promiscuous mode [ 127.333234][ T3457] hsr_slave_1: left promiscuous mode [ 127.374201][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.400226][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.439940][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.467383][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.534283][ T6965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.540250][ T3457] veth1_macvtap: left promiscuous mode [ 127.549728][ T3457] veth0_macvtap: left promiscuous mode [ 127.560941][ T3457] veth1_vlan: left promiscuous mode [ 127.567293][ T3457] veth0_vlan: left promiscuous mode [ 127.652518][ T5844] Bluetooth: hci0: command tx timeout [ 127.682902][ T5932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.869029][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 127.884038][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.904439][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.942429][ T5932] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 127.963730][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.003681][ T5932] usb 4-1: config 0 descriptor?? [ 128.279046][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 128.644013][ T5932] usb 4-1: language id specifier not provided by device, defaulting to English [ 128.684367][ T6986] binder: 6985:6986 ioctl c0306201 200000001a80 returned -14 [ 128.751523][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 128.817329][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 129.048316][ T5932] letsketch 0003:6161:4D15.0009: Device info: à° [ 129.285493][ T5932] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 129.295139][ T5932] letsketch 0003:6161:4D15.0009: probe with driver letsketch failed with error -71 [ 129.323961][ T5932] usb 4-1: USB disconnect, device number 6 [ 129.549715][ T6984] hsr_slave_0: left promiscuous mode [ 129.557619][ T6984] hsr_slave_1: left promiscuous mode [ 129.733664][ T5844] Bluetooth: hci0: command tx timeout [ 129.915880][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.964805][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.002987][ T6917] bridge_slave_0: entered allmulticast mode [ 130.034203][ T6917] bridge_slave_0: entered promiscuous mode [ 130.054912][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.067615][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.077798][ T6917] bridge_slave_1: entered allmulticast mode [ 130.103021][ T6917] bridge_slave_1: entered promiscuous mode [ 130.339415][ T6917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.388103][ T6917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.392603][ T5932] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 130.495733][ T30] audit: type=1326 audit(1763107274.058:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c4c98f6c9 code=0x0 [ 130.534276][ T6917] team0: Port device team_slave_0 added [ 130.563294][ T6917] team0: Port device team_slave_1 added [ 130.616416][ T5932] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 130.648730][ T5932] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 130.664882][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.674866][ T5932] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.682798][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.698346][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.745889][ T6917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.749439][ T7031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.767001][ T7031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.791277][ T5932] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.809081][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.825397][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.892262][ T6917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.034176][ T6917] hsr_slave_0: entered promiscuous mode [ 131.040908][ T6917] hsr_slave_1: entered promiscuous mode [ 131.057459][ T6917] debugfs: 'hsr0' already exists in 'hsr' [ 131.067463][ T6917] Cannot create hsr debugfs directory [ 131.068367][ T5932] usb 5-1: USB disconnect, device number 10 [ 131.778320][ T6917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.812265][ T6917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.816452][ T5844] Bluetooth: hci0: command tx timeout [ 132.042852][ T6917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.086271][ T6917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.391473][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 132.502286][ T6917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.607132][ T6917] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.677045][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.684342][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.755977][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.763492][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.890756][ T6917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.996065][ T6917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.017427][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.025767][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033580][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.148812][ T6917] veth0_vlan: entered promiscuous mode [ 133.190218][ T6917] veth1_vlan: entered promiscuous mode [ 133.202620][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 133.215438][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.242501][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.275293][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.281947][ T6917] veth0_macvtap: entered promiscuous mode [ 133.305701][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.322539][ T6917] veth1_macvtap: entered promiscuous mode [ 133.353131][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.380861][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.426783][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.494205][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.538192][ T3514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.567750][ T3514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.632028][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.651028][ T5917] usb 3-1: GET_CAPABILITIES returned 0 [ 133.659833][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.679281][ T5917] usbtmc 3-1:16.0: can't read capabilities [ 133.846910][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.882779][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.891924][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.901310][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.910516][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.921840][ T5844] Bluetooth: hci0: command tx timeout [ 133.932829][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.941956][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.951152][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.960448][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.996604][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.004495][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.033714][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.052041][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.065748][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.074886][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.084086][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.109365][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.118635][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.127831][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.136932][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.220796][ T5917] usb 3-1: USB disconnect, device number 7 [ 134.691840][ T5917] IPVS: starting estimator thread 0... [ 134.797553][ T7165] IPVS: using max 28 ests per chain, 67200 per kthread [ 135.102442][ T983] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.239931][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 135.284784][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 135.293626][ T983] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 135.316247][ T983] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.352539][ T983] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.352778][ T7192] netlink: 'syz.1.480': attribute type 10 has an invalid length. [ 135.375806][ T983] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.384348][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.394149][ T983] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.394621][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.408227][ T983] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.431527][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.468470][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.475717][ T7192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.484207][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.491759][ T7192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.514143][ T7192] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.656901][ T983] usb 4-1: usb_control_msg returned -32 [ 135.666438][ T983] usbtmc 4-1:16.0: can't read capabilities [ 135.897566][ T5917] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.968357][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.064973][ T5917] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 136.073605][ T5917] usb 5-1: config 0 has no interface number 0 [ 136.079853][ T5917] usb 5-1: config 0 interface 101 has no altsetting 0 [ 136.087251][ T5917] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.103098][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.126897][ T5917] usb 5-1: config 0 descriptor?? [ 136.160085][ T5917] cp210x 5-1:0.101: cp210x converter detected [ 136.171844][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.298624][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.471934][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.583271][ T5917] cp210x 5-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 136.675419][ T1211] usb 4-1: USB disconnect, device number 7 [ 136.709395][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.721200][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.729732][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.738091][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.746176][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.802125][ T5917] cp210x 5-1:0.101: GPIO initialisation failed: -19 [ 136.823010][ T5903] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 136.833317][ T5917] usb 5-1: cp210x converter now attached to ttyUSB0 [ 136.980083][ T7236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.027481][ T5917] usb 5-1: USB disconnect, device number 11 [ 137.037575][ T5903] usb 2-1: config 0 has no interfaces? [ 137.057018][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.081348][ T5903] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 137.110137][ T5917] cp210x 5-1:0.101: device disconnected [ 137.130025][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.157935][ T5903] usb 2-1: Product: syz [ 137.162655][ T5903] usb 2-1: Manufacturer: syz [ 137.167308][ T5903] usb 2-1: SerialNumber: syz [ 137.177843][ T5903] usb 2-1: config 0 descriptor?? [ 137.187494][ T7228] chnl_net:caif_netlink_parms(): no params data found [ 137.348790][ T36] bridge_slave_1: left allmulticast mode [ 137.360733][ T36] bridge_slave_1: left promiscuous mode [ 137.374926][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.398124][ T36] bridge_slave_0: left allmulticast mode [ 137.426127][ T36] bridge_slave_0: left promiscuous mode [ 137.452679][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.322266][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.351183][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.403568][ T36] bond0 (unregistering): Released all slaves [ 138.568209][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.592659][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.600158][ T7228] bridge_slave_0: entered allmulticast mode [ 138.611416][ T7228] bridge_slave_0: entered promiscuous mode [ 138.686330][ T983] usb 2-1: USB disconnect, device number 13 [ 138.745972][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.753553][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.760793][ T7228] bridge_slave_1: entered allmulticast mode [ 138.771722][ T7228] bridge_slave_1: entered promiscuous mode [ 138.777816][ T52] Bluetooth: hci0: command tx timeout [ 138.964799][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.060338][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.140438][ T36] hsr_slave_0: left promiscuous mode [ 139.149423][ T36] hsr_slave_1: left promiscuous mode [ 139.158690][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.167941][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.178886][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.187676][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.224066][ T36] veth1_macvtap: left promiscuous mode [ 139.236537][ T36] veth0_macvtap: left promiscuous mode [ 139.246486][ T36] veth1_vlan: left promiscuous mode [ 139.252069][ T36] veth0_vlan: left promiscuous mode [ 139.309172][ T7308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.902791][ T983] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 140.362437][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 140.378507][ T983] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 140.390391][ T983] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 140.401352][ T983] usb 2-1: Product: syz [ 140.411978][ T983] usb 2-1: Manufacturer: syz [ 140.419168][ T983] usb 2-1: SerialNumber: syz [ 140.437185][ T983] usb 2-1: config 0 descriptor?? [ 140.536006][ T36] team0 (unregistering): Port device team_slave_1 removed [ 140.693625][ T36] team0 (unregistering): Port device team_slave_0 removed [ 140.793106][ T7320] syz.2.518: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 140.812598][ T7320] CPU: 1 UID: 0 PID: 7320 Comm: syz.2.518 Not tainted syzkaller #0 PREEMPT(full) [ 140.812620][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.812635][ T7320] Call Trace: [ 140.812649][ T7320] [ 140.812657][ T7320] dump_stack_lvl+0x189/0x250 [ 140.812685][ T7320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.812705][ T7320] ? __pfx__printk+0x10/0x10 [ 140.812721][ T7320] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 140.812742][ T7320] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 140.812763][ T7320] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 140.812785][ T7320] warn_alloc+0x214/0x310 [ 140.812813][ T7320] ? __pfx_warn_alloc+0x10/0x10 [ 140.812842][ T7320] ? __get_vm_area_node+0x28f/0x300 [ 140.812864][ T7320] ? vb2_vmalloc_alloc+0xef/0x340 [ 140.812885][ T7320] __vmalloc_node_range_noprof+0x690/0x12d0 [ 140.812933][ T7320] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.812957][ T7320] ? __kasan_kmalloc+0x93/0xb0 [ 140.812984][ T7320] vmalloc_user_noprof+0xad/0xf0 [ 140.813005][ T7320] ? vb2_vmalloc_alloc+0xef/0x340 [ 140.813022][ T7320] vb2_vmalloc_alloc+0xef/0x340 [ 140.813039][ T7320] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 140.813057][ T7320] __vb2_queue_alloc+0x9c2/0x15a0 [ 140.813100][ T7320] vb2_core_reqbufs+0xc31/0x1420 [ 140.813134][ T7320] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 140.813148][ T7320] ? vb2_verify_memory_type+0x1fc/0x570 [ 140.813167][ T7320] ? vb2_reqbufs+0x3a9/0x630 [ 140.813190][ T7320] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 140.813214][ T7320] __video_do_ioctl+0xa59/0xc10 [ 140.813241][ T7320] ? __pfx___video_do_ioctl+0x10/0x10 [ 140.813271][ T7320] video_usercopy+0x82d/0x1450 [ 140.813298][ T7320] ? __pfx___video_do_ioctl+0x10/0x10 [ 140.813315][ T7320] ? __pfx_video_usercopy+0x10/0x10 [ 140.813349][ T7320] ? __fget_files+0x3a0/0x420 [ 140.813367][ T7320] v4l2_ioctl+0x18d/0x1e0 [ 140.813385][ T7320] ? __pfx_v4l2_ioctl+0x10/0x10 [ 140.813402][ T7320] __se_sys_ioctl+0xfc/0x170 [ 140.813424][ T7320] do_syscall_64+0xfa/0xfa0 [ 140.813445][ T7320] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.813466][ T7320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.813481][ T7320] ? clear_bhb_loop+0x60/0xb0 [ 140.813501][ T7320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.813516][ T7320] RIP: 0033:0x7f2cbed8f6c9 [ 140.813539][ T7320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.813552][ T7320] RSP: 002b:00007f2cbfcd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.813569][ T7320] RAX: ffffffffffffffda RBX: 00007f2cbefe5fa0 RCX: 00007f2cbed8f6c9 [ 140.813580][ T7320] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 140.813590][ T7320] RBP: 00007f2cbee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.813600][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.813609][ T7320] R13: 00007f2cbefe6038 R14: 00007f2cbefe5fa0 R15: 00007f2cbf10fa28 [ 140.813637][ T7320] [ 140.813727][ T7320] Mem-Info: [ 140.852567][ T52] Bluetooth: hci0: command tx timeout [ 140.875176][ T7320] active_anon:14030 inactive_anon:0 isolated_anon:0 [ 140.875176][ T7320] active_file:3278 inactive_file:39925 isolated_file:0 [ 140.875176][ T7320] unevictable:768 dirty:350 writeback:0 [ 140.875176][ T7320] slab_reclaimable:10736 slab_unreclaimable:95257 [ 140.875176][ T7320] mapped:33040 shmem:7103 pagetables:1383 [ 140.875176][ T7320] sec_pagetables:0 bounce:0 [ 140.875176][ T7320] kernel_misc_reclaimable:0 [ 140.875176][ T7320] free:1297123 free_pcp:10728 free_cma:0 [ 141.171124][ T7320] Node 0 active_anon:56128kB inactive_anon:0kB active_file:13112kB inactive_file:159500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132160kB dirty:1420kB writeback:0kB shmem:26944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12536kB pagetables:5960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.203318][ T7320] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.235108][ T7320] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.268232][ T7320] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 141.276207][ T7320] Node 0 DMA32 free:1280436kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56128kB inactive_anon:0kB active_file:13112kB inactive_file:159500kB unevictable:1536kB writepending:1420kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:23620kB local_pcp:11280kB free_cma:0kB [ 141.330464][ T7320] lowmem_reserve[]: 0 0 0 0 0 [ 141.339180][ T7320] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.376907][ T7320] lowmem_reserve[]: 0 0 0 0 0 [ 141.381688][ T7320] Node 1 Normal free:3892680kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17792kB local_pcp:11488kB free_cma:0kB [ 141.414317][ T7320] lowmem_reserve[]: 0 0 0 0 0 [ 141.419085][ T7320] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 141.435019][ T7320] Node 0 DMA32: 8*4kB (E) 2*8kB (ME) 1*16kB (E) 1*32kB (U) 1*64kB (M) 2*128kB (UM) 2*256kB (UM) 3*512kB (UME) 2*1024kB (M) 7*2048kB (UM) 308*4096kB (M) = 1280416kB [ 141.451981][ T7320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 141.466130][ T7320] Node 1 Normal: 186*4kB (UME) 58*8kB (UME) 45*16kB (UME) 88*32kB (UME) 27*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3892680kB [ 141.485267][ T7320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.495023][ T7320] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.504612][ T7320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.514312][ T7320] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.523885][ T7320] 50319 total pagecache pages [ 141.530029][ T7320] 0 pages in swap cache [ 141.534355][ T7320] Free swap = 124996kB [ 141.538685][ T7320] Total swap = 124996kB [ 141.543150][ T7320] 2097051 pages RAM [ 141.547019][ T7320] 0 pages HighMem/MovableOnly [ 141.551757][ T7320] 424121 pages reserved [ 141.556245][ T7320] 0 pages cma reserved [ 141.868570][ T7228] team0: Port device team_slave_0 added [ 141.903543][ T7228] team0: Port device team_slave_1 added [ 142.030385][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.039857][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.068955][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.083789][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.091520][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.149607][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.161330][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 142.195730][ T7347] netlink: 'syz.4.527': attribute type 15 has an invalid length. [ 142.204246][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 142.340367][ T3457] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.373728][ T3457] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.410624][ T7228] hsr_slave_0: entered promiscuous mode [ 142.445470][ T7228] hsr_slave_1: entered promiscuous mode [ 142.474549][ T7228] debugfs: 'hsr0' already exists in 'hsr' [ 142.509617][ T7228] Cannot create hsr debugfs directory [ 142.595090][ T3457] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.622521][ T3457] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.628897][ T855] usb 2-1: USB disconnect, device number 14 [ 142.695819][ T36] IPVS: stop unused estimator thread 0... [ 142.722664][ T5925] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 142.787525][ T7360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.912426][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 142.929473][ T5925] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 142.932639][ T52] Bluetooth: hci0: command tx timeout [ 142.953758][ T5925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.028747][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.082711][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.106681][ T5925] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.131449][ T5925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.143766][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.284126][ T983] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.391911][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.433056][ T5925] usb 5-1: GET_CAPABILITIES returned 0 [ 143.438611][ T5925] usbtmc 5-1:16.0: can't read capabilities [ 143.454335][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 143.470640][ T983] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 143.497437][ T983] usb 3-1: config 0 has no interface number 0 [ 143.504769][ T983] usb 3-1: config 0 interface 85 has no altsetting 0 [ 143.537069][ T983] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 143.551720][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.559252][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.567457][ T983] usb 3-1: Product: syz [ 143.581941][ T983] usb 3-1: Manufacturer: syz [ 143.591651][ T983] usb 3-1: SerialNumber: syz [ 143.614927][ T983] usb 3-1: config 0 descriptor?? [ 143.631608][ T983] appletouch 3-1:0.85: Could not find int-in endpoint [ 143.644802][ T983] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 143.666331][ T983] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 143.757762][ T7356] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 143.773064][ T5917] usb 5-1: USB disconnect, device number 12 [ 144.146805][ T7228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.186249][ T7400] vlan2: entered allmulticast mode [ 144.205198][ T7400] dummy0: entered allmulticast mode [ 144.261812][ T7228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.350517][ T7228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.385074][ T7228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.550802][ T983] usb 3-1: USB disconnect, device number 8 [ 144.768921][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.830261][ T7228] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.866023][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.873396][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.906317][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.913509][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.013587][ T52] Bluetooth: hci0: command tx timeout [ 145.079066][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.112470][ T5917] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.191111][ T7228] veth0_vlan: entered promiscuous mode [ 145.226119][ T7228] veth1_vlan: entered promiscuous mode [ 145.282427][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 145.290641][ T5917] usb 4-1: config 162 has an invalid interface number: 197 but max is 0 [ 145.302482][ T5917] usb 4-1: config 162 has no interface number 0 [ 145.305365][ T7228] veth0_macvtap: entered promiscuous mode [ 145.341304][ T7228] veth1_macvtap: entered promiscuous mode [ 145.369812][ T5917] usb 4-1: config 162 interface 197 has no altsetting 0 [ 145.407053][ T5917] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 145.414629][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.438622][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.465996][ T5917] usb 4-1: Product: syz [ 145.468722][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.478152][ T5917] usb 4-1: Manufacturer: syz [ 145.492453][ T5917] usb 4-1: SerialNumber: syz [ 145.494931][ T3514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.521805][ T3514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.531763][ T3514] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.568423][ T3514] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.685104][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.714390][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.785595][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.800876][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.925254][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.003057][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.128222][ T5917] usb 4-1: USB disconnect, device number 8 [ 147.064558][ T7505] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 147.134740][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 147.182617][ T7511] netlink: 2 bytes leftover after parsing attributes in process `syz.1.568'. [ 147.628912][ T7529] kvm: kvm [7528]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 147.764420][ T5917] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 147.924279][ T5917] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.942696][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.959804][ T5917] usb 5-1: config 0 descriptor?? [ 148.007012][ T5917] cp210x 5-1:0.0: cp210x converter detected [ 148.399507][ T5917] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 148.472063][ T5917] usb 5-1: cp210x converter now attached to ttyUSB0 [ 148.670314][ T5932] usb 5-1: USB disconnect, device number 13 [ 148.691171][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.753217][ T5932] cp210x 5-1:0.0: device disconnected [ 148.933208][ T5917] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 148.982491][ T855] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 149.097738][ T5917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.120131][ T5917] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 149.153392][ T5917] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.154179][ T855] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.170440][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.202403][ T855] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.213035][ T5917] usb 6-1: Product: syz [ 149.229829][ T5917] usb 6-1: Manufacturer: syz [ 149.232496][ T855] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.239963][ T5917] usb 6-1: SerialNumber: syz [ 149.268067][ T5917] cdc_mbim 6-1:1.0: skipping garbage [ 149.296585][ T855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.477685][ T7571] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 149.525465][ T855] usb 2-1: GET_CAPABILITIES returned 0 [ 149.544797][ T855] usbtmc 2-1:16.0: can't read capabilities [ 149.799099][ T1211] usb 2-1: USB disconnect, device number 15 [ 150.113618][ T7571] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 150.126422][ T5917] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 150.173619][ T5917] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 150.189174][ T5917] wwan wwan0: port wwan0mbim0 attached [ 150.273498][ T5917] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 72:d5:65:4b:cc:93 [ 150.363817][ T5917] usb 6-1: USB disconnect, device number 2 [ 150.386721][ T5917] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 150.603017][ T5917] wwan wwan0: port wwan0mbim0 disconnected [ 151.283793][ T7665] use of bytesused == 0 is deprecated and will be removed in the future, [ 151.292256][ T7665] use the actual size instead. [ 151.792512][ T855] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 151.967807][ T855] usb 2-1: config 0 has no interfaces? [ 151.994795][ T855] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 152.022221][ T855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.048308][ T855] usb 2-1: Product: syz [ 152.063225][ T855] usb 2-1: Manufacturer: syz [ 152.086185][ T855] usb 2-1: SerialNumber: syz [ 152.119471][ T855] usb 2-1: config 0 descriptor?? [ 152.371333][ T7677] netlink: 'syz.1.618': attribute type 16 has an invalid length. [ 152.402500][ T7677] netlink: 'syz.1.618': attribute type 17 has an invalid length. [ 152.485666][ T7677] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 152.544914][ T5926] usb 2-1: USB disconnect, device number 16 [ 152.882800][ T5932] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 153.002922][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 153.017887][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 153.043161][ T7730] erspan0: entered promiscuous mode [ 153.049836][ T7730] gretap0: entered promiscuous mode [ 153.085176][ T5932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.106478][ T5932] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.131034][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.142062][ T5932] usb 5-1: Product: syz [ 153.207061][ T5932] usb 5-1: Manufacturer: syz [ 153.224555][ T5932] usb 5-1: SerialNumber: syz [ 153.578271][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053f12000: rx timeout, send abort [ 153.588283][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053f12000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.866126][ T7749] netlink: 'syz.2.642': attribute type 5 has an invalid length. [ 153.903352][ T7749] batman_adv: batadv0: Adding interface: vxlan0 [ 153.929034][ T7749] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.958159][ T7749] batman_adv: batadv0: Interface activated: vxlan0 [ 153.969924][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.994719][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.034040][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.067399][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.285970][ T5932] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 154.297937][ T5932] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 154.545650][ T5932] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 154.610404][ T5932] usb 5-1: USB disconnect, device number 14 [ 154.627049][ T5932] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 154.774351][ T5925] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.922959][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.942454][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 154.949399][ T5925] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 154.960860][ T5925] usb 4-1: config 0 has no interface number 0 [ 154.967148][ T5925] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.980230][ T5925] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 154.991351][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.999699][ T5925] usb 4-1: Product: syz [ 155.005352][ T5925] usb 4-1: Manufacturer: syz [ 155.010052][ T5925] usb 4-1: SerialNumber: syz [ 155.025499][ T5925] usb 4-1: config 0 descriptor?? [ 155.050275][ T5925] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 155.081299][ T5925] em28xx 4-1:0.132: Video interface 132 found: [ 155.097813][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 155.108257][ T5917] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.122116][ T5917] usb 3-1: config 179 has no interface number 0 [ 155.132281][ T5917] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.144740][ T5917] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.158059][ T5917] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.169923][ T5917] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 155.191915][ T5917] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.211861][ T5917] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.225683][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.239221][ T7771] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.444220][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 155.473935][ T5925] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 155.499748][ T5917] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input13 [ 155.652502][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 155.674729][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.687066][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.697050][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.712063][ T5926] usb 3-1: USB disconnect, device number 9 [ 155.712063][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.712103][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 155.752505][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 155.770329][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.822907][ T24] usb 5-1: config 0 descriptor?? [ 156.167214][ T855] IPVS: starting estimator thread 0... [ 156.241572][ T7776] random: crng reseeded on system resumption [ 156.274341][ T7805] IPVS: using max 34 ests per chain, 81600 per kthread [ 156.279374][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 156.399988][ T24] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 156.427047][ T24] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 156.494418][ T1211] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 156.529377][ T24] usb 5-1: USB disconnect, device number 15 [ 156.540169][ T1211] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 156.583861][ T1211] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 156.619233][ T5925] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 156.642457][ T1211] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 156.655966][ T5925] em28xx 4-1:0.132: board has no eeprom [ 156.722438][ T5925] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 156.740832][ T5925] em28xx 4-1:0.132: analog set to bulk mode. [ 156.747398][ T30] audit: type=1326 audit(1763107300.298:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7823 comm="syz.5.676" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe71578f6c9 code=0x0 [ 156.774624][ T1211] em28xx 4-1:0.132: Registering V4L2 extension [ 156.802653][ T5925] usb 4-1: USB disconnect, device number 9 [ 156.814603][ T5925] em28xx 4-1:0.132: Disconnecting em28xx [ 156.943573][ T855] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.970676][ T1211] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 156.987898][ T1211] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 157.011655][ T1211] em28xx 4-1:0.132: No AC97 audio processor [ 157.026873][ T1211] usb 4-1: Decoder not found [ 157.031507][ T1211] em28xx 4-1:0.132: failed to create media graph [ 157.038466][ T1211] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 157.064976][ T1211] em28xx 4-1:0.132: Remote control support is not available for this card. [ 157.073904][ T5925] em28xx 4-1:0.132: Closing input extension [ 157.095492][ T5925] em28xx 4-1:0.132: Freeing device [ 157.112885][ T855] usb 3-1: Using ep0 maxpacket: 16 [ 157.139337][ T855] usb 3-1: config index 0 descriptor too short (expected 65307, got 27) [ 157.152025][ T855] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 157.161223][ T855] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 157.176929][ T855] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.187160][ T855] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.199067][ T855] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.250118][ T855] usb 3-1: config 1 interface 0 has no altsetting 0 [ 157.274758][ T855] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 157.294828][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.326697][ T855] usb 3-1: Product: syz [ 157.347894][ T855] usb 3-1: Manufacturer: syz [ 157.356502][ T855] usb 3-1: SerialNumber: syz [ 157.605135][ T855] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 157.610207][ T7852] netlink: 'syz.3.686': attribute type 8 has an invalid length. [ 157.624225][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 157.683347][ T7852] bond0: entered promiscuous mode [ 157.708810][ T7852] bond_slave_0: entered promiscuous mode [ 157.735962][ T7852] bond_slave_1: entered promiscuous mode [ 157.754812][ T7852] gretap0: entered promiscuous mode [ 157.773300][ T7852] veth0_to_batadv: entered promiscuous mode [ 157.780391][ T7852] debugfs: 'hsr1' already exists in 'hsr' [ 157.804532][ T7856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'. [ 157.842123][ T7852] Cannot create hsr debugfs directory [ 157.862682][ T7852] hsr1: entered promiscuous mode [ 158.029359][ T7868] loop4: detected capacity change from 0 to 7 [ 158.043596][ T6124] Dev loop4: unable to read RDB block 7 [ 158.049280][ T6124] loop4: unable to read partition table [ 158.059657][ T6124] loop4: partition table beyond EOD, truncated [ 158.077457][ T7868] Dev loop4: unable to read RDB block 7 [ 158.083577][ T7868] loop4: unable to read partition table [ 158.090322][ T7868] loop4: partition table beyond EOD, truncated [ 158.097554][ T7868] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.202598][ T855] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 158.330670][ T983] usb 3-1: USB disconnect, device number 10 [ 158.356759][ T983] usblp0: removed [ 158.362448][ T855] usb 6-1: Using ep0 maxpacket: 16 [ 158.392465][ T855] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 158.400855][ T855] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 158.430232][ T855] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 158.442403][ T855] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 158.450778][ T855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.460408][ T855] usb 6-1: config 0 has no interface number 0 [ 158.466902][ T855] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 158.480069][ T855] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.490940][ T5932] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 158.501958][ T855] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.512246][ T855] usb 6-1: config 0 interface 125 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 158.534384][ T855] usb 6-1: config 0 interface 125 has no altsetting 0 [ 158.554848][ T855] usb 6-1: config 0 interface 125 has no altsetting 1 [ 158.566718][ T855] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 158.582589][ T855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.601180][ T855] usb 6-1: Product: syz [ 158.611050][ T855] usb 6-1: Manufacturer: syz [ 158.628958][ T855] usb 6-1: SerialNumber: syz [ 158.648835][ T855] usb 6-1: config 0 descriptor?? [ 158.672749][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 158.684817][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.707622][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.722422][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 158.752826][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 158.772562][ T5932] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 158.781707][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.806369][ T5932] hub 2-1:1.0: bad descriptor, ignoring hub [ 158.814883][ T5932] hub 2-1:1.0: probe with driver hub failed with error -5 [ 158.838918][ T5932] cdc_wdm 2-1:1.0: skipping garbage [ 158.866790][ T5932] cdc_wdm 2-1:1.0: skipping garbage [ 158.884182][ T5932] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 158.892483][ T5932] cdc_wdm 2-1:1.0: Unknown control protocol [ 159.081524][ T5925] usb 6-1: USB disconnect, device number 3 [ 161.244926][ T855] usb 2-1: USB disconnect, device number 17 [ 161.361082][ T7945] loop9: detected capacity change from 0 to 7 [ 161.404301][ T7945] Dev loop9: unable to read RDB block 7 [ 161.409900][ T7945] loop9: AHDI p3 p4 [ 161.415556][ T7945] loop9: partition table partially beyond EOD, truncated [ 161.424746][ T7945] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 161.550684][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 161.600539][ T6124] udevd[6124]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 162.612942][ T983] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 162.819777][ T983] usb 5-1: config 0 has no interfaces? [ 162.954150][ T983] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 162.972909][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.980943][ T983] usb 5-1: Product: syz [ 163.019351][ T983] usb 5-1: Manufacturer: syz [ 163.044753][ T983] usb 5-1: SerialNumber: syz [ 163.066002][ T983] usb 5-1: config 0 descriptor?? [ 163.159021][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 163.193410][ T7991] netlink: 'syz.1.745': attribute type 13 has an invalid length. [ 163.241837][ T7991] vxlan0: entered promiscuous mode [ 163.268859][ T1139] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.311964][ T1139] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.342463][ T1139] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.375885][ T1139] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.395964][ T5932] usb 5-1: USB disconnect, device number 16 [ 163.422648][ T855] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 163.595257][ T855] usb 6-1: Using ep0 maxpacket: 16 [ 163.612735][ T855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.626978][ T855] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.640135][ T855] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.687543][ T855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.716343][ T855] usb 6-1: config 0 descriptor?? [ 164.201342][ T855] HID 045e:07da: Invalid code 65791 type 1 [ 164.230531][ T855] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input15 [ 164.309736][ T855] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 164.991810][ T855] usb 6-1: USB disconnect, device number 4 [ 165.407743][ T8048] netlink: 14 bytes leftover after parsing attributes in process `syz.1.769'. [ 165.658613][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.771'. [ 165.957306][ T8048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.985895][ T8048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.009997][ T8048] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 166.030176][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.037665][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.050801][ T8048] bond0 (unregistering): Released all slaves [ 166.052085][ T7905] Set syz1 is full, maxelem 65536 reached [ 167.193458][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 167.231050][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 167.508716][ T8101] trusted_key: syz.1.791 sent an empty control message without MSG_MORE. [ 168.690372][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.706670][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x2 [ 168.748839][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.777485][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.822513][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.829951][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.881699][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.949750][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.977554][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.018333][ T855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.062234][ T855] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 169.245812][ T8138] fido_id[8138]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.875776][ T8157] input: syz0 as /devices/virtual/input/input16 [ 169.962482][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 170.100102][ T8165] [ 170.102467][ T8165] ===================================================== [ 170.109410][ T8165] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 170.116887][ T8165] syzkaller #0 Not tainted [ 170.121392][ T8165] ----------------------------------------------------- [ 170.128329][ T8165] syz.4.817/8165 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 170.135971][ T8165] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 170.143626][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.144688][ T8165] [ 170.144688][ T8165] and this task is already holding: [ 170.144697][ T8165] ffff888054f22e20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 170.163519][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.172335][ T8165] which would create a new lock dependency: [ 170.172348][ T8165] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 170.172393][ T8165] [ 170.172393][ T8165] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 170.172401][ T8165] (&dev->event_lock#2){..-.}-{3:3} [ 170.172421][ T8165] [ 170.172421][ T8165] ... which became SOFTIRQ-irq-safe at: [ 170.172429][ T8165] lock_acquire+0x120/0x360 [ 170.172450][ T8165] _raw_spin_lock_irqsave+0xa7/0xf0 [ 170.193971][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.195582][ T8165] input_event+0x76/0xe0 [ 170.195612][ T8165] xpad360_process_packet+0x1fe/0xdd0 [ 170.214038][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.217935][ T8165] xpad_irq_in+0x1583/0x2590 [ 170.217958][ T8165] __usb_hcd_giveback_urb+0x376/0x540 [ 170.217977][ T8165] dummy_timer+0x85f/0x44c0 [ 170.217994][ T8165] __hrtimer_run_queues+0x52c/0xc60 [ 170.229324][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.240664][ T8165] hrtimer_run_softirq+0x187/0x2b0 [ 170.240692][ T8165] handle_softirqs+0x286/0x870 [ 170.240707][ T8165] __irq_exit_rcu+0xca/0x1f0 [ 170.240721][ T8165] irq_exit_rcu+0x9/0x30 [ 170.240734][ T8165] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 170.240754][ T8165] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.240771][ T8165] lock_acquire+0x175/0x360 [ 170.262710][ T24] usb 2-1: config 0 descriptor?? [ 170.264179][ T8165] unwind_next_frame+0xc2/0x2390 [ 170.333012][ T8165] arch_stack_walk+0x11c/0x150 [ 170.337874][ T8165] stack_trace_save+0x9c/0xe0 [ 170.342647][ T8165] save_stack+0xf5/0x1f0 [ 170.346986][ T8165] __set_page_owner+0x8d/0x4c0 [ 170.351839][ T8165] post_alloc_hook+0x240/0x2a0 [ 170.356696][ T8165] get_page_from_freelist+0x2365/0x2440 [ 170.366690][ T8165] __alloc_frozen_pages_noprof+0x181/0x370 [ 170.373068][ T8165] alloc_pages_mpol+0x232/0x4a0 [ 170.378028][ T8165] vma_alloc_folio_noprof+0xe4/0x200 [ 170.383662][ T8165] folio_prealloc+0x30/0x180 [ 170.388361][ T8165] __handle_mm_fault+0x2a8b/0x5400 [ 170.393738][ T8165] handle_mm_fault+0x40a/0x8e0 [ 170.398632][ T8165] do_user_addr_fault+0xa7c/0x1380 [ 170.403974][ T8165] exc_page_fault+0x82/0x100 [ 170.409038][ T8165] asm_exc_page_fault+0x26/0x30 [ 170.413996][ T8165] [ 170.413996][ T8165] to a SOFTIRQ-irq-unsafe lock: [ 170.421113][ T8165] (tasklist_lock){.+.+}-{3:3} [ 170.421146][ T8165] [ 170.421146][ T8165] ... which became SOFTIRQ-irq-unsafe at: [ 170.433823][ T8165] ... [ 170.433835][ T8165] lock_acquire+0x120/0x360 [ 170.441035][ T8165] _raw_read_lock+0x36/0x50 [ 170.445657][ T8165] __do_wait+0xde/0x740 [ 170.449922][ T8165] do_wait+0x1f8/0x510 [ 170.454096][ T8165] kernel_wait+0xab/0x170 [ 170.458531][ T8165] call_usermodehelper_exec_work+0xbe/0x230 [ 170.464908][ T8165] process_scheduled_works+0xae1/0x17b0 [ 170.470557][ T8165] worker_thread+0x8a0/0xda0 [ 170.475251][ T8165] kthread+0x711/0x8a0 [ 170.479415][ T8165] ret_from_fork+0x4bc/0x870 [ 170.484099][ T8165] ret_from_fork_asm+0x1a/0x30 [ 170.488953][ T8165] [ 170.488953][ T8165] other info that might help us debug this: [ 170.488953][ T8165] [ 170.499514][ T8165] Chain exists of: [ 170.499514][ T8165] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 170.499514][ T8165] [ 170.512612][ T8165] Possible interrupt unsafe locking scenario: [ 170.512612][ T8165] [ 170.520933][ T8165] CPU0 CPU1 [ 170.526400][ T8165] ---- ---- [ 170.531782][ T8165] lock(tasklist_lock); [ 170.536037][ T8165] local_irq_disable(); [ 170.543056][ T8165] lock(&dev->event_lock#2); [ 170.550273][ T8165] lock(&f_owner->lock); [ 170.557129][ T8165] [ 170.560725][ T8165] lock(&dev->event_lock#2); [ 170.565596][ T8165] [ 170.565596][ T8165] *** DEADLOCK *** [ 170.565596][ T8165] [ 170.573752][ T8165] 2 locks held by syz.4.817/8165: [ 170.578786][ T8165] #0: ffff88807bf4c258 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 170.587549][ T8165] #1: ffff888054f22e20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 170.596709][ T8165] [ 170.596709][ T8165] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 170.607116][ T8165] -> (&dev->event_lock#2){..-.}-{3:3} { [ 170.613058][ T8165] IN-SOFTIRQ-W at: [ 170.617316][ T8165] lock_acquire+0x120/0x360 [ 170.624001][ T8165] _raw_spin_lock_irqsave+0xa7/0xf0 [ 170.631382][ T8165] input_event+0x76/0xe0 [ 170.637814][ T8165] xpad360_process_packet+0x1fe/0xdd0 [ 170.645656][ T8165] xpad_irq_in+0x1583/0x2590 [ 170.652518][ T8165] __usb_hcd_giveback_urb+0x376/0x540 [ 170.660116][ T8165] dummy_timer+0x85f/0x44c0 [ 170.666824][ T8165] __hrtimer_run_queues+0x52c/0xc60 [ 170.674273][ T8165] hrtimer_run_softirq+0x187/0x2b0 [ 170.681633][ T8165] handle_softirqs+0x286/0x870 [ 170.688558][ T8165] __irq_exit_rcu+0xca/0x1f0 [ 170.695307][ T8165] irq_exit_rcu+0x9/0x30 [ 170.701743][ T8165] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 170.709542][ T8165] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.717683][ T8165] lock_acquire+0x175/0x360 [ 170.724356][ T8165] unwind_next_frame+0xc2/0x2390 [ 170.731543][ T8165] arch_stack_walk+0x11c/0x150 [ 170.738592][ T8165] stack_trace_save+0x9c/0xe0 [ 170.745432][ T8165] save_stack+0xf5/0x1f0 [ 170.751953][ T8165] __set_page_owner+0x8d/0x4c0 [ 170.758880][ T8165] post_alloc_hook+0x240/0x2a0 [ 170.765823][ T8165] get_page_from_freelist+0x2365/0x2440 [ 170.773543][ T8165] __alloc_frozen_pages_noprof+0x181/0x370 [ 170.781505][ T8165] alloc_pages_mpol+0x232/0x4a0 [ 170.788532][ T8165] vma_alloc_folio_noprof+0xe4/0x200 [ 170.795977][ T8165] folio_prealloc+0x30/0x180 [ 170.802732][ T8165] __handle_mm_fault+0x2a8b/0x5400 [ 170.810007][ T8165] handle_mm_fault+0x40a/0x8e0 [ 170.816941][ T8165] do_user_addr_fault+0xa7c/0x1380 [ 170.824216][ T8165] exc_page_fault+0x82/0x100 [ 170.830996][ T8165] asm_exc_page_fault+0x26/0x30 [ 170.838018][ T8165] INITIAL USE at: [ 170.842190][ T8165] lock_acquire+0x120/0x360 [ 170.848865][ T8165] _raw_spin_lock_irqsave+0xa7/0xf0 [ 170.856340][ T8165] input_inject_event+0xa5/0x340 [ 170.863367][ T8165] kbd_led_trigger_activate+0xbc/0x100 [ 170.870900][ T8165] led_trigger_set+0x52d/0x950 [ 170.877736][ T8165] led_trigger_set_default+0x260/0x2a0 [ 170.885358][ T8165] led_classdev_register_ext+0x73d/0x930 [ 170.893061][ T8165] input_leds_connect+0x517/0x790 [ 170.900186][ T8165] input_register_device+0xd00/0x1140 [ 170.907630][ T8165] atkbd_connect+0x72e/0xa00 [ 170.914295][ T8165] serio_driver_probe+0x82/0xd0 [ 170.921216][ T8165] really_probe+0x26d/0x9e0 [ 170.927795][ T8165] __driver_probe_device+0x18c/0x2f0 [ 170.935158][ T8165] driver_probe_device+0x4f/0x430 [ 170.942429][ T8165] __driver_attach+0x452/0x700 [ 170.949268][ T8165] bus_for_each_dev+0x233/0x2b0 [ 170.956361][ T8165] serio_handle_event+0x1f9/0x8d0 [ 170.963546][ T8165] process_scheduled_works+0xae1/0x17b0 [ 170.971170][ T8165] worker_thread+0x8a0/0xda0 [ 170.978049][ T8165] kthread+0x711/0x8a0 [ 170.984198][ T8165] ret_from_fork+0x4bc/0x870 [ 170.990893][ T8165] ret_from_fork_asm+0x1a/0x30 [ 170.997815][ T8165] } [ 171.000558][ T8165] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 171.009832][ T8165] -> (&client->buffer_lock){....}-{3:3} { [ 171.015748][ T8165] INITIAL USE at: [ 171.019800][ T8165] lock_acquire+0x120/0x360 [ 171.026218][ T8165] _raw_spin_lock+0x2e/0x40 [ 171.032827][ T8165] evdev_pass_values+0xb9/0xbd0 [ 171.039595][ T8165] evdev_events+0x1e6/0x340 [ 171.045998][ T8165] input_pass_values+0x288/0x890 [ 171.052835][ T8165] input_event_dispose+0x330/0x6b0 [ 171.059851][ T8165] input_inject_event+0x1dd/0x340 [ 171.066809][ T8165] evdev_write+0x2fc/0x480 [ 171.073128][ T8165] vfs_write+0x27e/0xb30 [ 171.079273][ T8165] ksys_write+0x145/0x250 [ 171.085496][ T8165] do_syscall_64+0xfa/0xfa0 [ 171.091914][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.099726][ T8165] } [ 171.102489][ T8165] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 171.110930][ T8165] ... acquired at: [ 171.115163][ T8165] lock_acquire+0x120/0x360 [ 171.119837][ T8165] _raw_spin_lock+0x2e/0x40 [ 171.124516][ T8165] evdev_pass_values+0xb9/0xbd0 [ 171.129646][ T8165] evdev_events+0x1e6/0x340 [ 171.134313][ T8165] input_pass_values+0x288/0x890 [ 171.139412][ T8165] input_event_dispose+0x330/0x6b0 [ 171.144692][ T8165] input_inject_event+0x1dd/0x340 [ 171.149882][ T8165] evdev_write+0x2fc/0x480 [ 171.154462][ T8165] vfs_write+0x27e/0xb30 [ 171.158877][ T8165] ksys_write+0x145/0x250 [ 171.163450][ T8165] do_syscall_64+0xfa/0xfa0 [ 171.168125][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.174187][ T8165] [ 171.176493][ T8165] -> (&new->fa_lock){....}-{3:3} { [ 171.181698][ T8165] INITIAL USE at: [ 171.185692][ T8165] lock_acquire+0x120/0x360 [ 171.191948][ T8165] _raw_write_lock_irq+0xa2/0xf0 [ 171.198615][ T8165] fasync_remove_entry+0xf1/0x1c0 [ 171.205367][ T8165] sock_fasync+0x85/0xf0 [ 171.211682][ T8165] __fput+0x8a2/0xa70 [ 171.217491][ T8165] task_work_run+0x1d4/0x260 [ 171.223822][ T8165] exit_to_user_mode_loop+0xe9/0x130 [ 171.230927][ T8165] do_syscall_64+0x2bd/0xfa0 [ 171.237313][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.245034][ T8165] INITIAL READ USE at: [ 171.249443][ T8165] lock_acquire+0x120/0x360 [ 171.256115][ T8165] _raw_read_lock_irqsave+0xaf/0x100 [ 171.263726][ T8165] kill_fasync+0x199/0x4d0 [ 171.270355][ T8165] evdev_pass_values+0x627/0xbd0 [ 171.277484][ T8165] evdev_events+0x1e6/0x340 [ 171.284163][ T8165] input_pass_values+0x288/0x890 [ 171.291260][ T8165] input_event_dispose+0x330/0x6b0 [ 171.298713][ T8165] input_inject_event+0x1dd/0x340 [ 171.305913][ T8165] evdev_write+0x2fc/0x480 [ 171.312515][ T8165] vfs_write+0x27e/0xb30 [ 171.318920][ T8165] ksys_write+0x145/0x250 [ 171.325408][ T8165] do_syscall_64+0xfa/0xfa0 [ 171.332071][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.340205][ T8165] } [ 171.342785][ T8165] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 171.351564][ T8165] ... acquired at: [ 171.355450][ T8165] lock_acquire+0x120/0x360 [ 171.360122][ T8165] _raw_read_lock_irqsave+0xaf/0x100 [ 171.365581][ T8165] kill_fasync+0x199/0x4d0 [ 171.370436][ T8165] evdev_pass_values+0x627/0xbd0 [ 171.375603][ T8165] evdev_events+0x1e6/0x340 [ 171.380370][ T8165] input_pass_values+0x288/0x890 [ 171.385491][ T8165] input_event_dispose+0x330/0x6b0 [ 171.390862][ T8165] input_inject_event+0x1dd/0x340 [ 171.396062][ T8165] evdev_write+0x2fc/0x480 [ 171.400741][ T8165] vfs_write+0x27e/0xb30 [ 171.405258][ T8165] ksys_write+0x145/0x250 [ 171.409764][ T8165] do_syscall_64+0xfa/0xfa0 [ 171.414438][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.420500][ T8165] [ 171.422811][ T8165] -> (&f_owner->lock){....}-{3:3} { [ 171.428014][ T8165] INITIAL USE at: [ 171.432017][ T8165] lock_acquire+0x120/0x360 [ 171.438094][ T8165] _raw_write_lock_irq+0xa2/0xf0 [ 171.444698][ T8165] __f_setown+0x67/0x370 [ 171.450511][ T8165] generic_setlease+0xd60/0x1240 [ 171.457023][ T8165] fcntl_setlease+0x3a2/0x4c0 [ 171.463272][ T8165] do_fcntl+0x6a9/0x1910 [ 171.469096][ T8165] __se_sys_fcntl+0xc8/0x150 [ 171.475258][ T8165] do_syscall_64+0xfa/0xfa0 [ 171.481330][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.488852][ T8165] INITIAL READ USE at: [ 171.493182][ T8165] lock_acquire+0x120/0x360 [ 171.500046][ T8165] _raw_read_lock_irqsave+0xaf/0x100 [ 171.507429][ T8165] send_sigio+0x38/0x370 [ 171.513665][ T8165] kill_fasync+0x24d/0x4d0 [ 171.520075][ T8165] lease_break_callback+0x26/0x30 [ 171.527083][ T8165] __break_lease+0x6a5/0x1620 [ 171.533780][ T8165] do_dentry_open+0x8b7/0x13f0 [ 171.540537][ T8165] vfs_open+0x3b/0x340 [ 171.546592][ T8165] path_openat+0x2ee5/0x3830 [ 171.553254][ T8165] do_filp_open+0x1fa/0x410 [ 171.559917][ T8165] do_sys_openat2+0x121/0x1c0 [ 171.566582][ T8165] __x64_sys_open+0x11e/0x150 [ 171.573242][ T8165] do_syscall_64+0xfa/0xfa0 [ 171.579730][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.587694][ T8165] } [ 171.590179][ T8165] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 171.599039][ T8165] ... acquired at: [ 171.602832][ T8165] lock_acquire+0x120/0x360 [ 171.607503][ T8165] _raw_read_lock_irqsave+0xaf/0x100 [ 171.612953][ T8165] send_sigio+0x38/0x370 [ 171.617441][ T8165] kill_fasync+0x24d/0x4d0 [ 171.622030][ T8165] lease_break_callback+0x26/0x30 [ 171.627212][ T8165] __break_lease+0x6a5/0x1620 [ 171.632053][ T8165] do_dentry_open+0x8b7/0x13f0 [ 171.637069][ T8165] vfs_open+0x3b/0x340 [ 171.641313][ T8165] path_openat+0x2ee5/0x3830 [ 171.646103][ T8165] do_filp_open+0x1fa/0x410 [ 171.651033][ T8165] do_sys_openat2+0x121/0x1c0 [ 171.655873][ T8165] __x64_sys_open+0x11e/0x150 [ 171.660803][ T8165] do_syscall_64+0xfa/0xfa0 [ 171.665469][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.671539][ T8165] [ 171.673947][ T8165] [ 171.673947][ T8165] the dependencies between the lock to be acquired [ 171.673955][ T8165] and SOFTIRQ-irq-unsafe lock: [ 171.687622][ T8165] -> (tasklist_lock){.+.+}-{3:3} { [ 171.692916][ T8165] HARDIRQ-ON-R at: [ 171.696880][ T8165] lock_acquire+0x120/0x360 [ 171.703024][ T8165] _raw_read_lock+0x36/0x50 [ 171.709168][ T8165] __do_wait+0xde/0x740 [ 171.714960][ T8165] do_wait+0x1f8/0x510 [ 171.720680][ T8165] kernel_wait+0xab/0x170 [ 171.726687][ T8165] call_usermodehelper_exec_work+0xbe/0x230 [ 171.734397][ T8165] process_scheduled_works+0xae1/0x17b0 [ 171.741669][ T8165] worker_thread+0x8a0/0xda0 [ 171.747922][ T8165] kthread+0x711/0x8a0 [ 171.753673][ T8165] ret_from_fork+0x4bc/0x870 [ 171.759932][ T8165] ret_from_fork_asm+0x1a/0x30 [ 171.766378][ T8165] SOFTIRQ-ON-R at: [ 171.770348][ T8165] lock_acquire+0x120/0x360 [ 171.776486][ T8165] _raw_read_lock+0x36/0x50 [ 171.782803][ T8165] __do_wait+0xde/0x740 [ 171.788606][ T8165] do_wait+0x1f8/0x510 [ 171.794315][ T8165] kernel_wait+0xab/0x170 [ 171.800303][ T8165] call_usermodehelper_exec_work+0xbe/0x230 [ 171.807861][ T8165] process_scheduled_works+0xae1/0x17b0 [ 171.815056][ T8165] worker_thread+0x8a0/0xda0 [ 171.821465][ T8165] kthread+0x711/0x8a0 [ 171.827256][ T8165] ret_from_fork+0x4bc/0x870 [ 171.833566][ T8165] ret_from_fork_asm+0x1a/0x30 [ 171.839969][ T8165] INITIAL USE at: [ 171.843857][ T8165] lock_acquire+0x120/0x360 [ 171.849926][ T8165] _raw_write_lock_irq+0xa2/0xf0 [ 171.856428][ T8165] copy_process+0x224f/0x3c00 [ 171.862682][ T8165] kernel_clone+0x21e/0x840 [ 171.868739][ T8165] user_mode_thread+0xdd/0x140 [ 171.875056][ T8165] rest_init+0x23/0x300 [ 171.880765][ T8165] start_kernel+0x3ae/0x410 [ 171.886844][ T8165] x86_64_start_reservations+0x24/0x30 [ 171.893939][ T8165] x86_64_start_kernel+0x143/0x1c0 [ 171.900599][ T8165] common_startup_64+0x13e/0x147 [ 171.907090][ T8165] INITIAL READ USE at: [ 171.911404][ T8165] lock_acquire+0x120/0x360 [ 171.917886][ T8165] _raw_read_lock+0x36/0x50 [ 171.924371][ T8165] __do_wait+0xde/0x740 [ 171.930556][ T8165] do_wait+0x1f8/0x510 [ 171.936611][ T8165] kernel_wait+0xab/0x170 [ 171.943109][ T8165] call_usermodehelper_exec_work+0xbe/0x230 [ 171.951076][ T8165] process_scheduled_works+0xae1/0x17b0 [ 171.958630][ T8165] worker_thread+0x8a0/0xda0 [ 171.965204][ T8165] kthread+0x711/0x8a0 [ 171.971259][ T8165] ret_from_fork+0x4bc/0x870 [ 171.977847][ T8165] ret_from_fork_asm+0x1a/0x30 [ 171.984693][ T8165] } [ 171.987185][ T8165] ... key at: [] tasklist_lock+0x18/0x40 [ 171.994909][ T8165] ... acquired at: [ 171.998707][ T8165] lock_acquire+0x120/0x360 [ 172.003463][ T8165] _raw_read_lock+0x36/0x50 [ 172.008126][ T8165] send_sigurg+0x12b/0x420 [ 172.012704][ T8165] sk_send_sigurg+0x6c/0x2e0 [ 172.017712][ T8165] queue_oob+0x420/0x4f0 [ 172.022135][ T8165] unix_stream_sendmsg+0xc3f/0xdf0 [ 172.027436][ T8165] __sock_sendmsg+0x21c/0x270 [ 172.032554][ T8165] ____sys_sendmsg+0x52d/0x830 [ 172.037507][ T8165] ___sys_sendmsg+0x21f/0x2a0 [ 172.042432][ T8165] __sys_sendmmsg+0x227/0x430 [ 172.047281][ T8165] __x64_sys_sendmmsg+0xa0/0xc0 [ 172.052296][ T8165] do_syscall_64+0xfa/0xfa0 [ 172.056972][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.063027][ T8165] [ 172.065344][ T8165] [ 172.065344][ T8165] stack backtrace: [ 172.071303][ T8165] CPU: 0 UID: 0 PID: 8165 Comm: syz.4.817 Not tainted syzkaller #0 PREEMPT(full) [ 172.071320][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.071328][ T8165] Call Trace: [ 172.071334][ T8165] [ 172.071340][ T8165] dump_stack_lvl+0x189/0x250 [ 172.071364][ T8165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.071383][ T8165] ? __pfx__printk+0x10/0x10 [ 172.071399][ T8165] validate_chain+0x1f05/0x2140 [ 172.071422][ T8165] __lock_acquire+0xab9/0xd20 [ 172.071436][ T8165] ? send_sigurg+0x12b/0x420 [ 172.071451][ T8165] lock_acquire+0x120/0x360 [ 172.071463][ T8165] ? send_sigurg+0x12b/0x420 [ 172.071478][ T8165] ? _raw_read_lock_irqsave+0xbb/0x100 [ 172.071506][ T8165] _raw_read_lock+0x36/0x50 [ 172.071521][ T8165] ? send_sigurg+0x12b/0x420 [ 172.071535][ T8165] send_sigurg+0x12b/0x420 [ 172.071551][ T8165] sk_send_sigurg+0x6c/0x2e0 [ 172.071569][ T8165] queue_oob+0x420/0x4f0 [ 172.071585][ T8165] ? __pfx_queue_oob+0x10/0x10 [ 172.071602][ T8165] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 172.071617][ T8165] unix_stream_sendmsg+0xc3f/0xdf0 [ 172.071634][ T8165] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.071655][ T8165] ? trace_sched_exit_tp+0x36/0x110 [ 172.071673][ T8165] ? __schedule+0x17ae/0x4cc0 [ 172.071690][ T8165] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 172.071706][ T8165] ? aa_sock_msg_perm+0xda/0x1d0 [ 172.071725][ T8165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.071737][ T8165] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 172.071752][ T8165] __sock_sendmsg+0x21c/0x270 [ 172.071773][ T8165] ____sys_sendmsg+0x52d/0x830 [ 172.071789][ T8165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.071805][ T8165] ? import_iovec+0x74/0xa0 [ 172.071822][ T8165] ___sys_sendmsg+0x21f/0x2a0 [ 172.071837][ T8165] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.071860][ T8165] ? __fget_files+0x2a/0x420 [ 172.071872][ T8165] ? __fget_files+0x3a0/0x420 [ 172.071886][ T8165] __sys_sendmmsg+0x227/0x430 [ 172.071904][ T8165] ? __pfx___sys_sendmmsg+0x10/0x10 [ 172.071921][ T8165] ? __pfx_do_futex+0x10/0x10 [ 172.071947][ T8165] __x64_sys_sendmmsg+0xa0/0xc0 [ 172.071961][ T8165] do_syscall_64+0xfa/0xfa0 [ 172.071979][ T8165] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.071995][ T8165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.072009][ T8165] ? clear_bhb_loop+0x60/0xb0 [ 172.072024][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.072039][ T8165] RIP: 0033:0x7ffbaf38f6c9 [ 172.072054][ T8165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.072066][ T8165] RSP: 002b:00007ffbad5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 172.072082][ T8165] RAX: ffffffffffffffda RBX: 00007ffbaf5e5fa0 RCX: 00007ffbaf38f6c9 [ 172.072092][ T8165] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 172.072101][ T8165] RBP: 00007ffbaf411f91 R08: 0000000000000000 R09: 0000000000000000 [ 172.072110][ T8165] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 172.072118][ T8165] R13: 00007ffbaf5e6038 R14: 00007ffbaf5e5fa0 R15: 00007ffbaf70fa28 [ 172.072133][ T8165] [ 172.401341][ T24] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 172.715954][ T5932] usb 2-1: USB disconnect, device number 18