last executing test programs: 5.74772761s ago: executing program 2 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x40, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20408c0}, 0x40000004) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x1, 0x41b}}}, 0x7) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xed81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xbe, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0xf95}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x40, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x10, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6, 0x40, 0x7, 0x20, 0x9}, 0x1c, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b7c5719f38ac88412f4442d343c1b2c6"}]}, 0x5, [{0xb1, &(0x7f00000001c0)=@string={0xb1, 0x3, "63ee1c6fb94b3b5b09d2c51039a271b24cf2949992fc724fc1468cd762e705d22e9a9d487feb7713d063c46c89da2189bba476545f9fec2e610c8309650d1ed1ac2bbc79345d385f8813fa928bdde505617ca53cb342234f766e9a87c28cf6518bb1240bcd9b162f64e379d260b669f755657dc9e1eeca2e8b75d1eb783baac242dcfc3e00fe9308452e2fc82edb81d83d7848f256f4f5e7eb515e6fee3dfc82b9d741026006f1e61a3c6c38ad4f72"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c73}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xdc, &(0x7f0000000340)=@string={0xdc, 0x3, "d63b09750392d2ebb61751b5a7668e984baa11a1439b73788f0a8c1b8abadddd32b5840dedeaba2df402ca5c316fa35e8d6ced7cae13c6b543c980a02c051c5ce1193d961c4be06bad2aaed6f484f1cecb994983f4b9a01e5c306d554c16bb63603e3b970f6b05ebaa1e26c58efc2de1983573aa6a2aeb7cc5def3e2ceda16fdc0593be31fcb44c89378fec46cad630cc95305ccb1cd43aec0825038b0dcbcb46e69eaaeb4959e8a292152e76194c20bdc45c4009b583bf3dca19f2b8e6bd9dd0fbacbb675b02ae54fb85ba3a6b7446f6c4aa961ffe5fd1f4029"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io(r4, &(0x7f0000000840)={0x18, &(0x7f0000000580)={0x0, 0x11, 0x8f, {0x8f, 0x21, "e69db402b9e07e93300454d822daa9cef40eca6d0fbf7cff0af0f88acbe9c80bc556bcbc63eab4a38d74be571014af56ac604aa28af9a9e2a859b645c4fc903aa712e45a0a40df73382b8546710c636857da93ae9d503ff64269d7460cbd39f44d9d9a6995b679e20c2cbf546ab3ebec0f7a0e74867b784551435d0d714890e3acf8e5b9e3e2ff6b84d1355945"}}, &(0x7f0000000640)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "fbeb9a6f2e4f09a0a6a9e82d97f9c9bc2aff8f849003ef82d1897ce6057d7b9ff8604b5f4020104396c4883fa3b94197844bfd1489013cf2b6accd1d9c2c66006876f0b8dae00a02acae97d1e6fbe167f772eee4881eaf406f9d3843215471ab25073c984042909f3cf5fc2ba4ef21879ef3aebdc2951eb1a6806a0c63016c3c0232cc9bce48c2bb7926c49a15539036eac6ab0fbd10074f1e2752f9c549e303cf05aebadfa98b79c51cc6fe52acd965378ba4ea009ac9c296237e724c02ea1c055f4a2b9f82acfaf08022695bcdfc5b1d4d0580f44d8cf93140ef759375fec2a12d3b816c9134c2d325e202fe96fe"}}, &(0x7f0000000740)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x0, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d975e0fb32bab1c677557b4bb29fc7fe"}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x0, 0x880, 0x63}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x32, 0x8, 0x0, 0x0, 0x5}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x8, 0x0, "d66cc265", "03b403ce"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x10, 0x2d, 0x1, 0x4, 0xb}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000880)={0x20, 0x31, 0x25, "3d8584fc2ab88059cbbb7f0418f024fa05f219e33a9159aaf6485448a391e1b3dd88b29214"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x80, 0x8, [0x8f]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "eefc"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "a55e"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x61}}) 4.708324913s ago: executing program 0 (id=301): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pidfd_send_signal(r0, 0x19, &(0x7f0000000480)={0x1d, 0x9, 0x2}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x1, 0x3, 0x0, 0x1000}, 0x6}) 4.660772112s ago: executing program 0 (id=302): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x583}], 0x1, 0x0, 0x0, 0x32}, 0x44004) 4.535503463s ago: executing program 0 (id=304): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000005c0)={0x2a, 0x1, 0x7ffa}, 0xc) writev(r0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_CACHEINFO={0x14}]}, 0x54}}, 0x0) syz_usbip_server_init(0x4) syz_usb_control_io(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 4.340324637s ago: executing program 2 (id=309): socket$packet(0x11, 0x2, 0x300) gettid() request_key(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$misdntimer(0xffffff9c, &(0x7f0000000240), 0x600, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x20, 0x2fffffbff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) unshare(0x2040600) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r4, 0xb0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendto$inet6(r2, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r2, 0x8871b000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x937, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c) r5 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) fadvise64(r5, 0x4, 0x6, 0x1) 3.996139684s ago: executing program 2 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x881}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000050000000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38) 3.653783339s ago: executing program 2 (id=318): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b405000000000000711065000000000095000000000020000000000000000000c38f8c11a73f0d056f6ddd102edad9e46e373114b98b0660f22ce35b8ebb6ce1def4c13ad6f7e948a3fc13f842062d2d639faa4581b1aa106c225b01195f1a2f4958fd37d66c3af5c57b7dceefd47e35a725ca6391f7051ec4d9d0742f6018231f48b50a190e61"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x3f0, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00050000000000000000001c14bc"], 0x1c}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x80000000, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) 2.350517558s ago: executing program 4 (id=326): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) 2.203544124s ago: executing program 2 (id=327): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000740), 0xfffffd9d) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) sendfile(r2, r1, 0x0, 0x8000002d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0xcd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, 0x0, 0x0, r7) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r8, 0x0) syz_clone3(&(0x7f00000004c0)={0x8000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xe, 0x9, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x4009, 0xfffffff6, 0x7fb, 0x1, 0x2, 0x2, 0x80000001, 0x91, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x40, 0x3, 0xfd}}) 2.203089552s ago: executing program 4 (id=328): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000008c0), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000b00)=r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000900)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @multicast1}, 0x10) syz_usb_connect(0x3, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000052233720f003070201000102030109022d00010000000f0904"], 0x0) 2.157129859s ago: executing program 3 (id=329): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xbb1}}}, 0x118) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003ec0)={0x2020}, 0x2020) pwrite64(r2, 0x0, 0x0, 0x80) r5 = openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x42000, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000120005010000010000000000050019000000000028001a00ac1e0001000000000000000000000000ffffffff0000000000000000000000000200"], 0x40}}, 0x0) 1.896111896s ago: executing program 3 (id=331): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 1.814992565s ago: executing program 3 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r4, 0xee72) sendfile(r3, r4, 0x0, 0x8000fffffffe) read$FUSE(r4, &(0x7f0000000740)={0x2020}, 0x2020) fcntl$getown(r4, 0x9) timer_create(0x2, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={&(0x7f0000000000)="d8553f2d2b3a37732011a716b2def7f5e10be0835f960e14b99300828600174d8029381b158613142cd83651d849b7691413b45d7b82b7a57ea715eee1c1595b3ecfb9d8d8c7417a942efbad04bd460659e7bcf0dfe7c8110132fa2fc1871d8793fd97bb94e239c776b67ac222935096000000", &(0x7f0000000080)="0f4f822f9aab079cd633c34536faf0c645ef9724e42a60446e08fe93fcd2249bd473f7"}}, &(0x7f0000000100)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x48) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r6, r7+60000000}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) r8 = openat$nullb(0xffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$BLKGETSIZE64(r8, 0x80041272, &(0x7f0000000000)) openat(r4, &(0x7f0000000380)='.\x00', 0x41, 0x122) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000140)={@remote, 0x0}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x41041}, 0x81) 1.39175192s ago: executing program 1 (id=335): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x800) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}}], 0x1, 0x34000, 0x0) 1.333048558s ago: executing program 0 (id=336): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc040aed4, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000fe8000/0x2000)=nil}) 1.151866984s ago: executing program 1 (id=337): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x14, r4, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x9, 0xfffffff9, r2}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x50bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240400a1}, 0x4004080) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r8, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r10 = syz_clone(0x31733d54f183f2e2, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r11, 0x5452, &(0x7f0000000180)=0x401) listen(r11, 0x0) accept4(r11, 0x0, 0x0, 0x0) shutdown(r11, 0x0) ptrace(0x10, r10) set_tid_address(0x0) ptrace$peeksig(0x4209, r10, &(0x7f0000000240), 0x0) 1.148160153s ago: executing program 0 (id=347): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xe, 0x9, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x4009, 0xfffffff6, 0x7fb, 0x1, 0x2, 0x2, 0x80000001, 0x91, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x40, 0x3, 0xfd}}) (fail_nth: 7) 1.09388754s ago: executing program 2 (id=338): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) openat(r0, &(0x7f0000004400)='./bus\x00', 0x6b942, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x10) move_pages(0x0, 0x3f, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000178c1640240418cff9d40000000109021b0001ff0000000904b910011c1625f8090585014000000000c9873b68f6ef81705faca694d3cb283db2af68c80238063d1f1007eba1d9ca"], 0x0) 902.289607ms ago: executing program 1 (id=339): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) 643.963886ms ago: executing program 3 (id=340): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x9, @empty, 0x3ff}}, 0x0, 0x0, 0xa, 0x0, "cdd34509adf48ba1eef6238cbe237e1acfa7a646e3751a7951203f9cf7b0c794e7633d08ba316fd8fecfab5b612327e716057b80dbb7ca06959e18da1229553e0a9b7a651d00cc0a69b9857d9f31c5bb"}, 0xd8) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) listen(r5, 0x71e4) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f0009"], 0x0) 643.757723ms ago: executing program 0 (id=341): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e) listen(r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, "b46c"}, @main=@item_012={0x1, 0x0, 0xb, "db"}, @global=@item_012={0x1, 0x1, 0x1, "81"}]}}, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x88adfda5}, [@IFLA_TXQLEN={0x8, 0xd, 0x80}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x38}}, 0x0) 615.079846ms ago: executing program 3 (id=342): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 558.849398ms ago: executing program 1 (id=343): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb09", 0x65}], 0x1, 0x0, 0x0, 0x7400}, 0x4824) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)) r1 = syz_open_dev$media(&(0x7f0000002d80), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f00000058c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000000)="a3cf449f35e5b125c89196ce5009b9b8933f6fb9ca64383fa909222e2e94fba4d30e3724692f92fbaea42b97c6a27f58b0f5aa5f7ff2209757cc0a71f57aa1d3c436fca6fbbdb2b3b2bf0b2c8f936348e490", 0x52) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x0, 0x8, r7, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) r9 = openat(r7, &(0x7f0000000840)='./file0\x00', 0x284000, 0x194) io_submit(r8, 0x7, &(0x7f0000000800)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x10, r3, &(0x7f0000000200)="b3e794fcaa6adc7b882be1b916042520be4f870f4da9c0adac5df185e61d554594c2d82b4927d097809074656df049cb2a6df81aa1c6858142bcd4bee42e7e241e7102baaa13e5394ca616bfdcc971c8ffbac1b7c5e14108068ae231563775f7fdace8a205e753c6dfc4c5a4a2eaaa3a5e68716c6567a6033a73bf7298b30c9176b50440d6d965d0c17d656698aa48514d1d1cbf55d191", 0x97, 0x7, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x8e1, r2, &(0x7f0000000300)="d30b0ecb41da1751f002cb10737672f5e136296e3b", 0x15, 0x6, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x73, r4, &(0x7f0000000440)="42ee873e2bf84eeead1d50dbf8a40ca6aa71c3cbc6cc163d923d2f9225a4e57be72ef686cd0c5b2f822c467ce7f7066b6e3e8192c72e88418806c56c716edff870c43fae9a027e25b200a8c4caa499019e6643b667c4c4e804cd9ddd880b98243bfe8525a333b921ed13f96f60ae2145a40fcad9094560f26b78e7", 0x7b, 0xffffffffffff8001, 0x0, 0x2, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x3b, r6, &(0x7f0000000500)="299db19ef9b370cc6c68cdfba57cbe22acb15fc6b42d28507e286b0a8e1c0176423d0169e003ff5bbee9ebbcbb0fe9519fa1bb739d2f0140ec506bf1af2e71807b0c44d3769c5d1613905468c0a22976c195bec6a5ae0d396d18a0b9e0efe61165dc93d27f16c4abcffb5de84ab2dee7504050914f55833f074d422be1b056a39dc90add1da9da1d19f4db8274fd8da3", 0x90, 0x200, 0x0, 0x1, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000001480)="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", 0x1000, 0x5, 0x0, 0x2, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0xffff, r4, &(0x7f0000000680)="26a2a58fd6336ac08548c28e52064deae0abc9da772d069a6a26afd6d77b2ad63b786a7169671277d411e77a4e7665f68b2a021a211f4474092a411cadf9d250bf0456594cf6bcb53ade", 0x4a, 0xfff, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000740)="3f795f41e6c56f997f8d357cc41826b75aa9e68a06d22c4c2c3aac63aec0f197a0dcdf177ba2b0e9fe19deaa94c3a313a1b13e2b312a30e564686c6194e4954e07c0c935", 0x44, 0xaf0, 0x0, 0x1, r9}]) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000600)={{&(0x7f0000957000/0x4000)=nil, 0x4000}, 0x1}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0684113, &(0x7f0000000380)={0x1, 0xa, 0x0, 0x1001, 0x8000, 0x0, 0x4, 0xd0d, 0x0, 0x0, 0xfffffff9, 0x1}) openat$sequencer2(0xffffff9c, &(0x7f0000000180), 0x494040, 0x0) 507.940708ms ago: executing program 3 (id=344): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000005c0)={0x10, &(0x7f0000000440)={0x0, 0x17, 0x49, "2b5576037a734b45a7fb824c69183ff31bf87e06b77c77db8f8b88d919d5ab1d09e7510d029db0dad43c81ed3a5f16e8c0fd6172952d79f6f59670ed3a84278c4a389e8d85a786d5b0"}, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x2007ff3) lseek(r2, 0x8000000000000001, 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) unshare(0x22020600) bind$alg(r4, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100080000000000000000d43b010203010902240001000080000904050b01000406027209050c0040020f04010000000000000000"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 393.32571ms ago: executing program 1 (id=345): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "b51c27035a2f7304", "2d0309172d05da5d2ace61795d0526e8", "e7b2bae0", "dabb1a5d151dfea2"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 317.681696ms ago: executing program 1 (id=346): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000005c0)={0x2a, 0x1, 0x7ffa}, 0xc) writev(r0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_CACHEINFO={0x14}]}, 0x54}}, 0x0) syz_usbip_server_init(0x4) syz_usb_control_io(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 232.00136ms ago: executing program 4 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0xffffffff) 207.129316ms ago: executing program 4 (id=349): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0) 107.993048ms ago: executing program 4 (id=350): syz_emit_ethernet(0x3a, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}}}, 0x0) 0s ago: executing program 4 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000024000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30"], 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 52.315551][ T5815] cgroup: Unknown subsys name 'net' [ 52.458373][ T5815] cgroup: Unknown subsys name 'cpuset' [ 52.465997][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.757929][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.872285][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.912381][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.926943][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.934575][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.936290][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.942279][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.950083][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.957920][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.963815][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.971351][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.977546][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.985367][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.992788][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.006015][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.013725][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.014714][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.021681][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.036048][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.040067][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.044423][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.050999][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.065597][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.098643][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.106140][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.113676][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.113684][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.115671][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.136138][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.137473][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.165564][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.573300][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 56.633892][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 56.649102][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 56.700390][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 56.748319][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 56.930508][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.938460][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.945897][ T5844] bridge_slave_0: entered allmulticast mode [ 56.952475][ T5844] bridge_slave_0: entered promiscuous mode [ 56.960491][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.969902][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.977571][ T5845] bridge_slave_0: entered allmulticast mode [ 56.984093][ T5845] bridge_slave_0: entered promiscuous mode [ 56.992124][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.999345][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.006575][ T5845] bridge_slave_1: entered allmulticast mode [ 57.013074][ T5845] bridge_slave_1: entered promiscuous mode [ 57.020263][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.027481][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.034588][ T5847] bridge_slave_0: entered allmulticast mode [ 57.041333][ T5847] bridge_slave_0: entered promiscuous mode [ 57.049138][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.056276][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.063402][ T5847] bridge_slave_1: entered allmulticast mode [ 57.070312][ T5847] bridge_slave_1: entered promiscuous mode [ 57.079809][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.087099][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.094224][ T5843] bridge_slave_0: entered allmulticast mode [ 57.101019][ T5843] bridge_slave_0: entered promiscuous mode [ 57.108674][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.116011][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.123116][ T5843] bridge_slave_1: entered allmulticast mode [ 57.129763][ T5843] bridge_slave_1: entered promiscuous mode [ 57.137130][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.144223][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.151437][ T5844] bridge_slave_1: entered allmulticast mode [ 57.158742][ T5844] bridge_slave_1: entered promiscuous mode [ 57.229319][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.236669][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.243788][ T5846] bridge_slave_0: entered allmulticast mode [ 57.250783][ T5846] bridge_slave_0: entered promiscuous mode [ 57.274351][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.286684][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.296310][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.303439][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.310807][ T5846] bridge_slave_1: entered allmulticast mode [ 57.317711][ T5846] bridge_slave_1: entered promiscuous mode [ 57.326167][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.338545][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.350644][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.362351][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.373009][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.391643][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.457995][ T5847] team0: Port device team_slave_0 added [ 57.480878][ T5844] team0: Port device team_slave_0 added [ 57.489248][ T5845] team0: Port device team_slave_0 added [ 57.499303][ T5847] team0: Port device team_slave_1 added [ 57.507666][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.519007][ T5843] team0: Port device team_slave_0 added [ 57.526708][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.536935][ T5844] team0: Port device team_slave_1 added [ 57.543728][ T5845] team0: Port device team_slave_1 added [ 57.567955][ T5843] team0: Port device team_slave_1 added [ 57.624771][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.632185][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.658527][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.678057][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.685093][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.711049][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.723717][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.730754][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.756988][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.780243][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.787282][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.813353][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.829982][ T5846] team0: Port device team_slave_0 added [ 57.836283][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.843241][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.869320][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.881164][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.888411][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.914731][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.931601][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.938700][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.964696][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.982276][ T5846] team0: Port device team_slave_1 added [ 57.992887][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.999876][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.025842][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.080275][ T5847] hsr_slave_0: entered promiscuous mode [ 58.087168][ T5847] hsr_slave_1: entered promiscuous mode [ 58.094423][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.101741][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.128145][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.145904][ T5143] Bluetooth: hci4: command tx timeout [ 58.155115][ T55] Bluetooth: hci1: command tx timeout [ 58.161378][ T5143] Bluetooth: hci2: command tx timeout [ 58.178498][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.185836][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.211764][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.225122][ T5143] Bluetooth: hci0: command tx timeout [ 58.225248][ T55] Bluetooth: hci3: command tx timeout [ 58.252797][ T5843] hsr_slave_0: entered promiscuous mode [ 58.260060][ T5843] hsr_slave_1: entered promiscuous mode [ 58.266374][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.274061][ T5843] Cannot create hsr debugfs directory [ 58.297885][ T5844] hsr_slave_0: entered promiscuous mode [ 58.304137][ T5844] hsr_slave_1: entered promiscuous mode [ 58.310854][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.318506][ T5844] Cannot create hsr debugfs directory [ 58.361349][ T5845] hsr_slave_0: entered promiscuous mode [ 58.368902][ T5845] hsr_slave_1: entered promiscuous mode [ 58.376321][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.383903][ T5845] Cannot create hsr debugfs directory [ 58.439221][ T5846] hsr_slave_0: entered promiscuous mode [ 58.447013][ T5846] hsr_slave_1: entered promiscuous mode [ 58.453143][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.461122][ T5846] Cannot create hsr debugfs directory [ 58.754835][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.767258][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.778180][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.799280][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.834574][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.844260][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.869251][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.881773][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.941338][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.950838][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.981751][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.999397][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.029765][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.040582][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.053581][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.062806][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.143703][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.168188][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.178352][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.190270][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.207005][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.240009][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.263259][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.270493][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.299601][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.306727][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.363828][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.393636][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.423312][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.454328][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.478131][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.485259][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.514287][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.530030][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.541539][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.548657][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.559027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.566122][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.603982][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.616279][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.623357][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.646737][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.662673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.669758][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.688271][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.707043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.714118][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.783711][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.802568][ T5847] veth0_vlan: entered promiscuous mode [ 59.812736][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.819871][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.844834][ T5847] veth1_vlan: entered promiscuous mode [ 59.861221][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.868340][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.921936][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.936533][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.967982][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.993657][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.014312][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.031055][ T5847] veth0_macvtap: entered promiscuous mode [ 60.055821][ T5847] veth1_macvtap: entered promiscuous mode [ 60.124843][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.137469][ T5845] veth0_vlan: entered promiscuous mode [ 60.150810][ T5846] veth0_vlan: entered promiscuous mode [ 60.167422][ T5845] veth1_vlan: entered promiscuous mode [ 60.176539][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.193901][ T5843] veth0_vlan: entered promiscuous mode [ 60.208438][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.218066][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.227782][ T55] Bluetooth: hci2: command tx timeout [ 60.227805][ T5143] Bluetooth: hci1: command tx timeout [ 60.233170][ T5836] Bluetooth: hci4: command tx timeout [ 60.247696][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.256598][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.273051][ T5843] veth1_vlan: entered promiscuous mode [ 60.302029][ T5846] veth1_vlan: entered promiscuous mode [ 60.306018][ T5836] Bluetooth: hci0: command tx timeout [ 60.312508][ T5844] veth0_vlan: entered promiscuous mode [ 60.312893][ T55] Bluetooth: hci3: command tx timeout [ 60.371143][ T5844] veth1_vlan: entered promiscuous mode [ 60.398840][ T5843] veth0_macvtap: entered promiscuous mode [ 60.421049][ T5845] veth0_macvtap: entered promiscuous mode [ 60.431347][ T5845] veth1_macvtap: entered promiscuous mode [ 60.447484][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.452875][ T5844] veth0_macvtap: entered promiscuous mode [ 60.469141][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.480048][ T5843] veth1_macvtap: entered promiscuous mode [ 60.505452][ T5844] veth1_macvtap: entered promiscuous mode [ 60.528513][ T5846] veth0_macvtap: entered promiscuous mode [ 60.539403][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.552246][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.564682][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.588689][ T5846] veth1_macvtap: entered promiscuous mode [ 60.594874][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.603940][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.610339][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.623173][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.633451][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.644174][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.662589][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.670906][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.682568][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.693762][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.714363][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.727770][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.738055][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.748792][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.759569][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.770348][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.787221][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.803835][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.804261][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.830323][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.840325][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.851231][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.862409][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.875998][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.886725][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.898361][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.909276][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.919410][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.930104][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.939993][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.952194][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.962999][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.978488][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.990392][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.002399][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.013564][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.024819][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.055179][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.069810][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.078576][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.087729][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.096795][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108316][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.121477][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.132260][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.142181][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.152659][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.163677][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.174449][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.184486][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.195132][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.205981][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.221666][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.230444][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.239807][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.248545][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.261280][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.272919][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.282595][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.291318][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.304061][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.313047][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.321901][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.330673][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.355657][ T52] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.475117][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.486228][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.494068][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.508672][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.513364][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.523914][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 61.532620][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.555522][ T52] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 61.564549][ T52] usb 4-1: config 0 has no interface number 0 [ 61.580004][ T52] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 61.589757][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.599576][ T52] usb 4-1: Product: syz [ 61.603791][ T52] usb 4-1: Manufacturer: syz [ 61.611081][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.622699][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.631597][ T52] usb 4-1: SerialNumber: syz [ 61.651396][ T52] usb 4-1: config 0 descriptor?? [ 61.671730][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.678765][ T52] as10x_usb: device has been detected [ 61.686072][ T52] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 61.735227][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.738862][ T52] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 61.756302][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.769964][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.784080][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.800731][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.817190][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.840326][ T52] as10x_usb: error during firmware upload part1 [ 61.866387][ T52] Registered device PCTV Systems picoStick (74e) [ 61.888813][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.948406][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.176392][ T5893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4'. [ 62.187465][ T5894] kvm: kvm [5890]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 62.311479][ T55] Bluetooth: hci2: command tx timeout [ 62.311502][ T5836] Bluetooth: hci1: command tx timeout [ 62.322663][ T5143] Bluetooth: hci4: command tx timeout [ 62.334079][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 62.384155][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 62.395692][ T5143] Bluetooth: hci3: command tx timeout [ 62.401131][ T5143] Bluetooth: hci0: command tx timeout [ 62.410263][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 62.421192][ T1205] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.468099][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 62.535262][ T5882] usb 4-1: USB disconnect, device number 2 [ 62.606619][ T1205] usb 1-1: Using ep0 maxpacket: 16 [ 62.609056][ T5882] Unregistered device PCTV Systems picoStick (74e) [ 62.626130][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.626522][ T5882] as10x_usb: device has been disconnected [ 62.632657][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.632706][ T1205] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 62.695061][ T5878] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.710908][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.733058][ T1205] usb 1-1: config 0 descriptor?? [ 62.868331][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.882782][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.893961][ T5878] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 62.912820][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.921517][ T5878] usb 2-1: SerialNumber: syz [ 62.926347][ T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.075096][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 63.083149][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.085091][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.100773][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.118487][ T52] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 63.127752][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.157488][ T5907] netlink: 'syz.1.6': attribute type 33 has an invalid length. [ 63.174273][ T52] usb 5-1: config 0 descriptor?? [ 63.252193][ T5914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.266044][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 63.272138][ T5913] netlink: 'syz.0.1': attribute type 11 has an invalid length. [ 63.293100][ T5914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.369069][ T5913] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 63.375757][ T5913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.475873][ T5913] vhci_hcd vhci_hcd.0: Device attached [ 63.498338][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.519834][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.539800][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.584431][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.634555][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.662730][ T5881] usb 3-1: config 0 descriptor?? [ 63.675126][ T5889] vhci_hcd: vhci_device speed not set [ 63.725164][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 63.745633][ T5889] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 63.851774][ T5923] netlink: 'syz.4.7': attribute type 11 has an invalid length. [ 63.875550][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 63.882731][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.907283][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.916221][ T5923] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 63.923533][ T5923] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.940319][ T25] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 63.965080][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.976248][ T25] usb 4-1: config 0 descriptor?? [ 64.007583][ T5923] vhci_hcd vhci_hcd.0: Device attached [ 64.118210][ T5878] usb 2-1: 0:2 : does not exist [ 64.145471][ T5881] usbhid 3-1:0.0: can't add hid device: -71 [ 64.175165][ T8] vhci_hcd: vhci_device speed not set [ 64.181259][ T5881] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 64.226379][ T5881] usb 3-1: USB disconnect, device number 2 [ 64.235386][ T8] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 64.261432][ T5878] usb 2-1: USB disconnect, device number 2 [ 64.391028][ T5143] Bluetooth: hci1: command tx timeout [ 64.397108][ T55] Bluetooth: hci4: command tx timeout [ 64.397144][ T5836] Bluetooth: hci2: command tx timeout [ 64.416137][ T5930] udevd[5930]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 64.467828][ T5836] Bluetooth: hci0: command tx timeout [ 64.467842][ T5143] Bluetooth: hci3: command tx timeout [ 64.535148][ T5930] udevd[5930]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 64.683083][ T5934] netlink: 'syz.3.9': attribute type 11 has an invalid length. [ 64.725098][ T5878] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 64.793187][ T5934] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 64.799748][ T5934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.819200][ T5934] vhci_hcd vhci_hcd.0: Device attached [ 64.885119][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 64.904287][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.936420][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.967284][ T5878] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 64.995091][ T5881] vhci_hcd: vhci_device speed not set [ 64.995134][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.027649][ T5878] usb 2-1: config 0 descriptor?? [ 65.070258][ T5881] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 65.525226][ T5943] netlink: 'syz.1.10': attribute type 11 has an invalid length. [ 65.570960][ T5943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 65.577519][ T5943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.686034][ T5927] vhci_hcd: connection reset by peer [ 65.702787][ T35] vhci_hcd: stop threads [ 65.708261][ T5943] vhci_hcd vhci_hcd.0: Device attached [ 65.718386][ T35] vhci_hcd: release socket [ 65.746231][ T35] vhci_hcd: disconnect device [ 65.858962][ T52] usbhid 5-1:0.0: can't add hid device: -71 [ 65.880915][ T52] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.919460][ T5880] vhci_hcd: vhci_device speed not set [ 65.949369][ T52] usb 5-1: USB disconnect, device number 2 [ 66.018628][ T5880] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 66.132711][ T5918] vhci_hcd: connection reset by peer [ 66.144308][ T73] vhci_hcd: stop threads [ 66.168492][ T73] vhci_hcd: release socket [ 66.194876][ T73] vhci_hcd: disconnect device [ 66.245065][ T1205] usbhid 1-1:0.0: can't add hid device: -71 [ 66.269355][ T1205] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 66.307746][ T1205] usb 1-1: USB disconnect, device number 2 [ 66.874574][ T29] audit: type=1326 audit(1734590177.034:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 66.933015][ T29] audit: type=1326 audit(1734590177.034:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 66.988437][ T29] audit: type=1326 audit(1734590177.064:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 67.029454][ T29] audit: type=1326 audit(1734590177.064:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 67.088546][ T29] audit: type=1326 audit(1734590177.064:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 67.159994][ T29] audit: type=1326 audit(1734590177.064:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 67.250469][ T29] audit: type=1326 audit(1734590177.064:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 67.339345][ T5946] vhci_hcd: connection reset by peer [ 67.352970][ T29] audit: type=1326 audit(1734590177.064:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 67.377240][ T35] vhci_hcd: stop threads [ 67.381562][ T35] vhci_hcd: release socket [ 67.386290][ T5939] vhci_hcd: connection reset by peer [ 67.414680][ T35] vhci_hcd: disconnect device [ 67.437844][ T35] vhci_hcd: stop threads [ 67.445341][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 67.451372][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 67.466763][ T35] vhci_hcd: release socket [ 67.471321][ T35] vhci_hcd: disconnect device [ 67.476676][ T29] audit: type=1326 audit(1734590177.064:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 67.511166][ T25] usb 4-1: USB disconnect, device number 3 [ 67.517683][ T5878] usbhid 2-1:0.0: can't add hid device: -71 [ 67.550560][ T5878] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 67.573756][ T5878] usb 2-1: USB disconnect, device number 3 [ 67.581260][ T29] audit: type=1326 audit(1734590177.064:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 67.650161][ T5964] fuse: Unknown parameter '' [ 67.672451][ T5967] Cannot find add_set index 0 as target [ 67.775686][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.045121][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 68.207348][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 68.227429][ T9] usb 1-1: config 0 has no interface number 0 [ 68.234251][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 68.274120][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 68.301981][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 68.335717][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 68.349760][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.371884][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 68.401464][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.444115][ T9] usb 1-1: config 0 descriptor?? [ 68.490174][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 68.653396][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'. [ 68.678427][ T5987] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 68.737035][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.768226][ T9] usb 1-1: USB disconnect, device number 3 [ 68.790795][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 68.855282][ T5889] vhci_hcd: vhci_device speed not set [ 69.155411][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 69.195082][ T1205] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.347429][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.361824][ T1205] usb 5-1: Using ep0 maxpacket: 8 [ 69.432690][ T8] vhci_hcd: vhci_device speed not set [ 69.438766][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.452192][ T1205] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 69.464604][ T5929] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 69.474494][ T1205] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 69.485768][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.493769][ T1205] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.504302][ T1205] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 69.514769][ T5929] usb 4-1: config 0 descriptor?? [ 69.522929][ T1205] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 69.534860][ T1205] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.571191][ T1205] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.590674][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.639679][ T1205] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 69.870751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.944059][ T5929] ntrig 0003:1B96:0003.0001: unknown main item tag 0x0 [ 69.965887][ T5929] ntrig 0003:1B96:0003.0001: unknown main item tag 0x0 [ 70.004815][ T5929] ntrig 0003:1B96:0003.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0003] on usb-dummy_hcd.3-1/input0 [ 70.029555][ T25] usb 5-1: USB disconnect, device number 3 [ 70.135230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.143450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.164397][ T5929] usb 4-1: USB disconnect, device number 4 [ 70.226213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.234715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.236662][ T5881] vhci_hcd: vhci_device speed not set [ 70.243154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 70.333555][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 70.515111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.896647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 71.065283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.073727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.235236][ T5880] vhci_hcd: vhci_device speed not set [ 71.240814][ T6024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 71.247345][ T6024] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.344142][ T6024] vhci_hcd vhci_hcd.0: Device attached [ 71.495647][ T6028] vhci_hcd: connection closed [ 71.498375][ T35] vhci_hcd: stop threads [ 71.517295][ T35] vhci_hcd: release socket [ 71.554192][ T35] vhci_hcd: disconnect device [ 71.559082][ T5880] vhci_hcd: vhci_device speed not set [ 71.618974][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.625839][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.802722][ T6005] syz.0.28 (6005): drop_caches: 2 [ 72.005183][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.165495][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 72.186059][ T5881] usb 5-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 72.205333][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 78, changing to 10 [ 72.233582][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57694, setting to 1024 [ 72.269675][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.294866][ T5881] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 72.304459][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.314262][ T5881] usb 5-1: Product: syz [ 72.324397][ T5881] usb 5-1: Manufacturer: syz [ 72.334580][ T5881] usb 5-1: SerialNumber: syz [ 72.336936][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.367186][ T5881] usb 5-1: config 0 descriptor?? [ 72.388493][ T5881] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 72.513709][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.546416][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.575319][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.612733][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.641597][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.668874][ T25] usb 1-1: config 0 descriptor?? [ 73.014881][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 73.131401][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.163631][ T25] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 73.214415][ T25] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 73.467406][ T5881] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 73.543402][ T5880] usb 1-1: USB disconnect, device number 4 [ 73.705435][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 73.774938][ T6058] netlink: 96 bytes leftover after parsing attributes in process `syz.1.45'. [ 73.794481][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'. [ 73.885027][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 73.894648][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 73.904857][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.919561][ T25] usb 4-1: Product: syz [ 73.923831][ T25] usb 4-1: Manufacturer: syz [ 73.930529][ T25] usb 4-1: SerialNumber: syz [ 73.949334][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 73.955966][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 74.047997][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.205141][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 74.221513][ T5880] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 74.231358][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.246119][ T5880] usb 2-1: Product: syz [ 74.250341][ T5880] usb 2-1: Manufacturer: syz [ 74.255367][ T5880] usb 2-1: SerialNumber: syz [ 74.281916][ T5880] usb 2-1: config 0 descriptor?? [ 74.320579][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.327544][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.334423][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.341359][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.348422][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.355375][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.362236][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.369127][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.385544][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.392731][ T8] usb 5-1: USB disconnect, device number 4 [ 74.399037][ C0] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 74.399057][ C0] gspca_main: Resubmit URB failed with error -19 [ 74.422834][ T5880] cdc_ether 2-1:0.0: More than one union descriptor, skipping ... [ 74.434023][ T5880] usb 2-1: bad CDC descriptors [ 74.440108][ T5880] usb 2-1: unsupported MDLM descriptors [ 74.556417][ T25] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 74.663265][ T5878] usb 2-1: USB disconnect, device number 4 [ 74.816148][ T5880] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.930063][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 74.944813][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 74.956812][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 74.965808][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 75.013504][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.027146][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.037014][ T5880] usb 3-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 75.046413][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.057088][ T5880] usb 3-1: config 0 descriptor?? [ 75.490614][ T5880] ntrig 0003:1B96:0003.0003: unknown main item tag 0x0 [ 75.495046][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 75.498263][ T5880] ntrig 0003:1B96:0003.0003: unknown main item tag 0x0 [ 75.530305][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.535231][ T5880] ntrig 0003:1B96:0003.0003: hidraw0: USB HID v0.00 Device [HID 1b96:0003] on usb-dummy_hcd.2-1/input0 [ 75.695168][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 75.701806][ T5886] usb 5-1: config 0 has an invalid interface number: 24 but max is 0 [ 75.715196][ T5880] usb 3-1: USB disconnect, device number 3 [ 75.725048][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.745659][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.775826][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.794139][ T5886] usb 5-1: config 0 has no interface number 0 [ 75.817063][ T5886] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=61.bd [ 75.841600][ T5878] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 75.850909][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.862838][ T5886] usb 5-1: Product: syz [ 75.867429][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.880001][ T5886] usb 5-1: Manufacturer: syz [ 75.888582][ T5886] usb 5-1: SerialNumber: syz [ 75.895977][ T5878] usb 4-1: config 0 descriptor?? [ 75.938105][ T5886] usb 5-1: config 0 descriptor?? [ 75.953350][ T5886] usb 5-1: selecting invalid altsetting 3 [ 75.959701][ T5886] comedi comedi0: could not set alternate setting 3 in high speed [ 75.967858][ T5886] usbdux 5-1:0.24: driver 'usbdux' failed to auto-configure device. [ 75.982627][ T5886] usbdux 5-1:0.24: probe with driver usbdux failed with error -22 [ 76.258784][ T25] usb 5-1: USB disconnect, device number 5 [ 76.445137][ T6084] netlink: 'syz.3.51': attribute type 11 has an invalid length. [ 76.614084][ T6084] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 76.620656][ T6084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.708913][ T910] cfg80211: failed to load regulatory.db [ 76.794886][ T6084] vhci_hcd vhci_hcd.0: Device attached [ 76.985364][ T910] vhci_hcd: vhci_device speed not set [ 77.055279][ T910] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 77.120503][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.275089][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 77.281998][ T8] usb 3-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 77.308753][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 78, changing to 10 [ 77.335022][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.353509][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57694, setting to 1024 [ 77.390587][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.442143][ T8] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 77.461228][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.491066][ T8] usb 3-1: Product: syz [ 77.504236][ T8] usb 3-1: Manufacturer: syz [ 77.515378][ T8] usb 3-1: SerialNumber: syz [ 77.528496][ T8] usb 3-1: config 0 descriptor?? [ 77.535194][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 77.549139][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.579357][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.589939][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 77.645192][ T5886] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 77.675037][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.723860][ T5886] usb 5-1: config 0 descriptor?? [ 77.999902][ T5929] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.102486][ T6109] netlink: 'syz.4.60': attribute type 11 has an invalid length. [ 78.123278][ T6109] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 78.129816][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.144127][ T6109] vhci_hcd vhci_hcd.0: Device attached [ 78.167838][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 78.190221][ T5929] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.207889][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.220371][ T5929] usb 1-1: Product: syz [ 78.224584][ T5929] usb 1-1: Manufacturer: syz [ 78.234074][ T5929] usb 1-1: SerialNumber: syz [ 78.238959][ T6089] vhci_hcd: connection reset by peer [ 78.256730][ T35] vhci_hcd: stop threads [ 78.258737][ T5929] r8152-cfgselector 1-1: Unknown version 0x0000 [ 78.261026][ T35] vhci_hcd: release socket [ 78.279408][ T5929] r8152-cfgselector 1-1: config 0 descriptor?? [ 78.285685][ T35] vhci_hcd: disconnect device [ 78.329928][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 78.336486][ T5878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 78.345070][ T52] vhci_hcd: vhci_device speed not set [ 78.359458][ T5878] usb 4-1: USB disconnect, device number 6 [ 78.413685][ T8] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 78.415113][ T52] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 78.446430][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 78.446445][ T29] audit: type=1326 audit(1734590188.614:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 78.511122][ T6115] netlink: 96 bytes leftover after parsing attributes in process `syz.3.63'. [ 78.544159][ T29] audit: type=1326 audit(1734590188.644:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 78.620287][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 78.659121][ T29] audit: type=1326 audit(1734590188.654:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 78.748192][ T29] audit: type=1326 audit(1734590188.654:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 78.832027][ T29] audit: type=1326 audit(1734590188.654:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 78.865623][ T5929] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 78.904017][ T29] audit: type=1326 audit(1734590188.654:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 78.937132][ T29] audit: type=1326 audit(1734590188.654:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 78.965618][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 78.968603][ T29] audit: type=1326 audit(1734590188.654:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 79.002912][ T29] audit: type=1326 audit(1734590188.664:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=170 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 79.033157][ T29] audit: type=1326 audit(1734590188.664:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 79.155047][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 79.173250][ T25] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 79.193203][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.212295][ T25] usb 4-1: Product: syz [ 79.222341][ T25] usb 4-1: Manufacturer: syz [ 79.232648][ T25] usb 4-1: SerialNumber: syz [ 79.259403][ T25] usb 4-1: config 0 descriptor?? [ 79.263617][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 79.271392][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 79.277471][ T25] cdc_ether 4-1:0.0: More than one union descriptor, skipping ... [ 79.278323][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 79.295338][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 79.302617][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 79.305037][ T25] usb 4-1: bad CDC descriptors [ 79.309469][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 79.321341][ T8] usb 3-1: USB disconnect, device number 4 [ 79.327233][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 79.327251][ C0] gspca_main: Resubmit URB failed with error -19 [ 79.380588][ T25] usb 4-1: unsupported MDLM descriptors [ 79.585243][ T25] usb 4-1: USB disconnect, device number 7 [ 79.678768][ T6129] FAULT_INJECTION: forcing a failure. [ 79.678768][ T6129] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.721389][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz.1.66 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 79.731940][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 79.742018][ T6129] Call Trace: [ 79.745309][ T6129] [ 79.748248][ T6129] dump_stack_lvl+0x241/0x360 [ 79.752958][ T6129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.758181][ T6129] ? __wake_up_klogd+0xcc/0x110 [ 79.763058][ T6129] should_fail_ex+0x3b0/0x4e0 [ 79.767775][ T6129] _copy_to_user+0x31/0xb0 [ 79.772215][ T6129] drm_ioctl+0x635/0xad0 [ 79.776474][ T6129] ? __pfx_drm_mode_page_flip_ioctl+0x10/0x10 [ 79.782566][ T6129] ? __pfx_drm_ioctl+0x10/0x10 [ 79.787357][ T6129] ? __fget_files+0x2a/0x410 [ 79.791969][ T6129] ? drm_compat_ioctl+0x11c/0x340 [ 79.797017][ T6129] __se_compat_sys_ioctl+0x502/0xc10 [ 79.802322][ T6129] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 79.808145][ T6129] ? __fget_files+0x2a/0x410 [ 79.812761][ T6129] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.818753][ T6129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.825094][ T6129] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 79.831692][ T6129] ? lockdep_hardirqs_on+0x99/0x150 [ 79.836895][ T6129] __do_fast_syscall_32+0xb4/0x110 [ 79.842009][ T6129] ? exc_page_fault+0x590/0x8b0 [ 79.846861][ T6129] do_fast_syscall_32+0x34/0x80 [ 79.851712][ T6129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.858045][ T6129] RIP: 0023:0xf7f65579 [ 79.862119][ T6129] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 79.881717][ T6129] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 79.890128][ T6129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864b0 [ 79.898106][ T6129] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.906069][ T6129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.914037][ T6129] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 79.922004][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.929978][ T6129] [ 80.049009][ T6110] vhci_hcd: connection reset by peer [ 80.075090][ T54] vhci_hcd: stop threads [ 80.079390][ T54] vhci_hcd: release socket [ 80.125073][ T54] vhci_hcd: disconnect device [ 80.158909][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 80.165278][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 80.189263][ T5886] usb 5-1: USB disconnect, device number 6 [ 80.305845][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.413036][ T6147] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 80.484841][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.497122][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.509662][ T25] usb 1-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 80.518805][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.531280][ T25] usb 1-1: config 0 descriptor?? [ 80.555132][ T5929] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.710914][ T5929] usb 2-1: config 0 has an invalid interface number: 24 but max is 0 [ 80.719652][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.730544][ T8] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 80.740225][ T5929] usb 2-1: config 0 has no interface number 0 [ 80.748861][ T5929] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=61.bd [ 80.758452][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.768324][ T5929] usb 2-1: Product: syz [ 80.772513][ T5929] usb 2-1: Manufacturer: syz [ 80.777248][ T5929] usb 2-1: SerialNumber: syz [ 80.783903][ T5929] usb 2-1: config 0 descriptor?? [ 80.795759][ T5929] usb 2-1: selecting invalid altsetting 3 [ 80.801737][ T5929] comedi comedi0: could not set alternate setting 3 in high speed [ 80.809694][ T5929] usbdux 2-1:0.24: driver 'usbdux' failed to auto-configure device. [ 80.819777][ T5929] usbdux 2-1:0.24: probe with driver usbdux failed with error -22 [ 80.896523][ T8] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 80.904739][ T8] usb 5-1: config 0 has no interface number 0 [ 80.914819][ T8] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.932314][ T8] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 80.942504][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.950904][ T8] usb 5-1: Product: syz [ 80.955160][ T8] usb 5-1: Manufacturer: syz [ 80.957885][ T25] ntrig 0003:1B96:0003.0004: unknown main item tag 0x0 [ 80.959750][ T8] usb 5-1: SerialNumber: syz [ 80.972564][ T25] ntrig 0003:1B96:0003.0004: unknown main item tag 0x0 [ 80.974090][ T8] usb 5-1: config 0 descriptor?? [ 80.987516][ T8] ums-karma 5-1:0.46: USB Mass Storage device detected [ 81.008064][ T25] ntrig 0003:1B96:0003.0004: hidraw0: USB HID v0.00 Device [HID 1b96:0003] on usb-dummy_hcd.0-1/input0 [ 81.043516][ T5929] usb 2-1: USB disconnect, device number 5 [ 81.070033][ T8] ums-karma 5-1:0.46: probe with driver ums-karma failed with error -5 [ 81.196230][ T25] usb 1-1: USB disconnect, device number 6 [ 81.210485][ T5929] usb 5-1: USB disconnect, device number 7 [ 81.524167][ T6164] program syz.3.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.215198][ T910] vhci_hcd: vhci_device speed not set [ 82.237266][ T6190] FAULT_INJECTION: forcing a failure. [ 82.237266][ T6190] name failslab, interval 1, probability 0, space 0, times 1 [ 82.334231][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.0.89 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 82.344786][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 82.354861][ T6190] Call Trace: [ 82.358166][ T6190] [ 82.361114][ T6190] dump_stack_lvl+0x241/0x360 [ 82.365807][ T6190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.371015][ T6190] ? __pfx__printk+0x10/0x10 [ 82.375604][ T6190] ? __kmalloc_cache_noprof+0x48/0x390 [ 82.381060][ T6190] ? __pfx___might_resched+0x10/0x10 [ 82.386344][ T6190] should_fail_ex+0x3b0/0x4e0 [ 82.391026][ T6190] should_failslab+0xac/0x100 [ 82.395703][ T6190] __kmalloc_cache_noprof+0x70/0x390 [ 82.400984][ T6190] ? device_create+0x121/0x2e0 [ 82.405745][ T6190] device_create+0x121/0x2e0 [ 82.410334][ T6190] ? vsnprintf+0x184/0x1da0 [ 82.414829][ T6190] ? __pfx_device_create+0x10/0x10 [ 82.419938][ T6190] ? __pfx_laptop_mode_timer_fn+0x10/0x10 [ 82.425658][ T6190] bdi_register_va+0x8b/0x760 [ 82.430339][ T6190] super_setup_bdi_name+0xe4/0x200 [ 82.435445][ T6190] ? __pfx_lock_release+0x10/0x10 [ 82.440468][ T6190] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 82.446189][ T6190] ? do_raw_spin_unlock+0x13c/0x8b0 [ 82.451386][ T6190] fuse_fill_super_common+0x63c/0x1100 [ 82.456844][ T6190] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 82.462738][ T6190] ? __init_swait_queue_head+0xae/0x150 [ 82.468281][ T6190] ? shrinker_register+0x160/0x230 [ 82.473388][ T6190] ? sget_fc+0x909/0x9c0 [ 82.477638][ T6190] fuse_fill_super+0x173/0x1e0 [ 82.482397][ T6190] ? __pfx_fuse_fill_super+0x10/0x10 [ 82.487679][ T6190] get_tree_nodev+0xb7/0x140 [ 82.492265][ T6190] fuse_get_tree+0x347/0x4b0 [ 82.496853][ T6190] vfs_get_tree+0x90/0x2b0 [ 82.501269][ T6190] do_new_mount+0x2be/0xb40 [ 82.505771][ T6190] ? __pfx_do_new_mount+0x10/0x10 [ 82.510798][ T6190] __se_sys_mount+0x2d6/0x3c0 [ 82.515474][ T6190] ? __pfx___se_sys_mount+0x10/0x10 [ 82.520671][ T6190] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 82.527256][ T6190] ? __ia32_sys_mount+0x20/0xc0 [ 82.532105][ T6190] __do_fast_syscall_32+0xb4/0x110 [ 82.537213][ T6190] ? exc_page_fault+0x590/0x8b0 [ 82.542061][ T6190] do_fast_syscall_32+0x34/0x80 [ 82.546909][ T6190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.553230][ T6190] RIP: 0023:0xf7f27579 [ 82.557292][ T6190] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 82.576896][ T6190] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 82.585310][ T6190] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000000 [ 82.593277][ T6190] RDX: 0000000020002100 RSI: 0000000000000000 RDI: 0000000020000200 [ 82.601243][ T6190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.609205][ T6190] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 82.617167][ T6190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.625140][ T6190] [ 82.628264][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.250507][ T6208] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.274890][ T6222] binder: 6220:6222 ioctl 8933 20000140 returned -22 [ 83.575046][ T52] vhci_hcd: vhci_device speed not set [ 83.822114][ T6231] capability: warning: `syz.1.101' uses deprecated v2 capabilities in a way that may be insecure [ 84.149812][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 84.375825][ T6240] netlink: 'syz.0.105': attribute type 1 has an invalid length. [ 84.408325][ T6240] netlink: 112 bytes leftover after parsing attributes in process `syz.0.105'. [ 84.541573][ T6247] syz.0.105 uses obsolete (PF_INET,SOCK_PACKET) [ 85.060075][ T6259] netlink: 72 bytes leftover after parsing attributes in process `syz.4.110'. [ 85.145308][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.295100][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 85.310076][ T25] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 85.323986][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.352437][ T25] usb 3-1: Product: syz [ 85.364991][ T25] usb 3-1: Manufacturer: syz [ 85.377675][ T25] usb 3-1: SerialNumber: syz [ 85.398942][ T25] r8152-cfgselector 3-1: Unknown version 0x0000 [ 85.408929][ T25] r8152-cfgselector 3-1: config 0 descriptor?? [ 85.767826][ T6273] dccp_invalid_packet: P.Data Offset(10) too large [ 85.773722][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'. [ 85.817101][ T6275] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 85.829187][ T6275] mmap: syz.4.119 (6275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.904797][ T5929] IPVS: starting estimator thread 0... [ 86.028961][ T6283] xt_recent: hitcount (3221225469) is larger than allowed maximum (65535) [ 86.035262][ T6276] IPVS: using max 22 ests per chain, 52800 per kthread [ 86.095672][ T5929] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 86.280720][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.486488][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.497718][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.528002][ T8] usb 5-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 86.541535][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.560945][ T8] usb 5-1: config 0 descriptor?? [ 86.590652][ T6294] bond0: entered promiscuous mode [ 86.595880][ T6294] bond_slave_0: entered promiscuous mode [ 86.601747][ T6294] bond_slave_1: entered promiscuous mode [ 86.609802][ T6294] batadv0: entered promiscuous mode [ 86.617562][ T6294] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 86.981203][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 86.988796][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 87.007427][ T8] usb 5-1: USB disconnect, device number 8 [ 87.085142][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.132'. [ 87.085163][ T5881] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 87.099606][ T6313] vlan2: entered promiscuous mode [ 87.110561][ T6313] batadv0: entered promiscuous mode [ 87.255585][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 87.263668][ T5881] usb 4-1: config 252 has an invalid interface number: 217 but max is 0 [ 87.274082][ T5881] usb 4-1: config 252 has no interface number 0 [ 87.281424][ T5881] usb 4-1: config 252 interface 217 has no altsetting 0 [ 87.289652][ T5881] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b7.76 [ 87.307821][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.332404][ T5881] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 87.344122][ T5881] dvb-usb: bulk message failed: -22 (2/0) [ 87.350682][ T5881] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 87.361823][ T5881] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 87.388360][ T5881] usb 4-1: media controller created [ 87.396137][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.441083][ T5881] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 87.488694][ T5881] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 87.669605][ T6331] x_tables: duplicate underflow at hook 1 [ 87.705039][ T5881] rc_core: IR keymap rc-dtt200u not found [ 87.721963][ T5881] Registered IR keymap rc-empty [ 87.740579][ T5881] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 87.772157][ T5881] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 87.808039][ T5881] dvb-usb: schedule remote query interval to 300 msecs. [ 87.845137][ T5881] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 87.878941][ T6338] netlink: 'syz.1.141': attribute type 3 has an invalid length. [ 87.885338][ T5881] usb 4-1: USB disconnect, device number 8 [ 87.908257][ T6338] netlink: 666 bytes leftover after parsing attributes in process `syz.1.141'. [ 87.971656][ T5881] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 88.106381][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 88.459966][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 88.495136][ T5878] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 88.497388][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 88.670469][ T5878] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 88.692773][ T5878] usb 1-1: config 0 has no interface number 0 [ 88.699899][ T5878] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 88.727342][ T5878] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 88.748617][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 88.748632][ T29] audit: type=1326 audit(1734590198.914:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 88.755053][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.776827][ T5880] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 88.800912][ T6367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.152'. [ 88.809261][ T5878] usb 1-1: config 0 descriptor?? [ 88.831194][ T29] audit: type=1326 audit(1734590198.964:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 88.878089][ T5878] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input8 [ 88.914064][ T29] audit: type=1326 audit(1734590198.964:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 88.965029][ T29] audit: type=1326 audit(1734590198.964:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 88.995162][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.015112][ T29] audit: type=1326 audit(1734590198.964:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 89.018368][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.116073][ T29] audit: type=1326 audit(1734590198.964:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 89.164272][ T5880] usb 2-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 89.191144][ T25] usb 1-1: USB disconnect, device number 7 [ 89.210171][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.218827][ T29] audit: type=1326 audit(1734590198.964:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 89.242364][ T29] audit: type=1326 audit(1734590198.964:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 89.244057][ T5880] usb 2-1: config 0 descriptor?? [ 89.265009][ T29] audit: type=1326 audit(1734590198.964:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 89.291811][ T29] audit: type=1326 audit(1734590198.964:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 89.577784][ T6380] process 'syz.4.157' launched './file0' with NULL argv: empty string added [ 89.722520][ T5880] usbhid 2-1:0.0: can't add hid device: -71 [ 89.740421][ T5880] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 89.764388][ T5880] usb 2-1: USB disconnect, device number 6 [ 89.845136][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.015357][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 90.025151][ T5878] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.040072][ T25] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 90.054545][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.071571][ T25] usb 5-1: Product: syz [ 90.083114][ T25] usb 5-1: Manufacturer: syz [ 90.092153][ T25] usb 5-1: SerialNumber: syz [ 90.110839][ T25] usb 5-1: config 0 descriptor?? [ 90.122334][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 90.188256][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 90.195894][ T5878] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 90.204109][ T5878] usb 3-1: config 0 has no interface number 0 [ 90.210863][ T5878] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 90.217326][ T6395] xt_nat: multiple ranges no longer supported [ 90.222466][ T5878] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 90.245909][ T5878] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 90.256971][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.265554][ T5878] usb 3-1: Product: syz [ 90.269773][ T5878] usb 3-1: Manufacturer: syz [ 90.274412][ T5878] usb 3-1: SerialNumber: syz [ 90.282484][ T5878] usb 3-1: config 0 descriptor?? [ 90.288479][ T6382] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.296144][ T6382] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.312115][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 90.485278][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 90.493728][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 90.503119][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.511260][ T8] usb 1-1: Product: syz [ 90.512773][ T6382] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.523505][ T6382] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.530015][ T8] usb 1-1: Manufacturer: syz [ 90.540134][ T8] usb 1-1: SerialNumber: syz [ 90.553605][ T8] usb 1-1: config 0 descriptor?? [ 90.569844][ T8] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 90.592740][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.603060][ T910] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 90.611319][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.756884][ T910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.768880][ T910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.779262][ T910] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 90.794691][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.805573][ T910] usb 4-1: config 0 descriptor?? [ 90.839232][ T25] gspca_ov534_9: reg_w failed -71 [ 90.947245][ T5878] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 90.960625][ T5878] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 90.974830][ T5878] asix 3-1:0.251: probe with driver asix failed with error -71 [ 90.993798][ T5878] usb 3-1: USB disconnect, device number 6 [ 91.155392][ T25] gspca_ov534_9: Unknown sensor 0000 [ 91.155491][ T25] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 91.172175][ T25] usb 5-1: USB disconnect, device number 9 [ 91.205714][ T6403] support for cryptoloop has been removed. Use dm-crypt instead. [ 91.297837][ T910] sony 0003:1345:3008.0005: item fetching failed at offset 4/5 [ 91.306450][ T910] sony 0003:1345:3008.0005: parse failed [ 91.312184][ T910] sony 0003:1345:3008.0005: probe with driver sony failed with error -22 [ 91.486117][ T8] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 91.558343][ T6411] xt_CT: No such helper "netbios-ns" [ 91.575394][ T25] usb 4-1: USB disconnect, device number 9 [ 92.095077][ T5881] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.115813][ T5929] usb 1-1: USB disconnect, device number 8 [ 92.135664][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 92.245241][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 92.263141][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.283756][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 92.305088][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 92.318027][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.335107][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.345529][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 92.361091][ T8] usb 2-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 92.370351][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 92.395237][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.404712][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 92.416199][ T8] usb 2-1: config 0 descriptor?? [ 92.421371][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.447912][ T5881] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 92.469160][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.490382][ T5881] usb 5-1: Product: syz [ 92.494605][ T5881] usb 5-1: Manufacturer: syz [ 92.503381][ T5881] usb 5-1: SerialNumber: syz [ 92.524360][ T5881] usb 5-1: config 0 descriptor?? [ 92.536912][ T6426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.715854][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 92.789315][ T5881] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 92.808611][ T5881] hdpvr 5-1:0.0: device init failed [ 92.814493][ T5881] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 92.845107][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 92.859721][ T5881] usb 5-1: USB disconnect, device number 10 [ 92.866401][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 92.884848][ T8] usb 2-1: USB disconnect, device number 7 [ 92.896740][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 222, using maximum allowed: 30 [ 92.925135][ T25] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 222 [ 92.946133][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.959281][ T25] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 92.968704][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.977231][ T25] usb 4-1: Product: syz [ 92.982686][ T25] usb 4-1: Manufacturer: syz [ 92.987408][ T25] usb 4-1: SerialNumber: syz [ 92.995146][ T25] usb 4-1: config 0 descriptor?? [ 93.002903][ T25] dvb-usb: found a 'DTV-DVB UDTT7049' in cold state, will try to load a firmware [ 93.019532][ T25] usb 4-1: Direct firmware load for dvb-usb-vp7049-0.95.fw failed with error -2 [ 93.029597][ T25] usb 4-1: Falling back to sysfs fallback for: dvb-usb-vp7049-0.95.fw [ 93.085121][ T5878] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 93.227878][ T6457] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 93.245312][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 93.256311][ T5878] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.272997][ T5878] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 93.294524][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.302043][ T5878] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 93.318024][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.330964][ T5878] usb 3-1: config 0 descriptor?? [ 93.755067][ T5881] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.769977][ T6446] fuse: Bad value for 'user_id' [ 93.781750][ T6446] fuse: Bad value for 'user_id' [ 93.798445][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 93.798459][ T29] audit: type=1326 audit(1734590203.964:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.182" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x0 [ 93.885147][ T5886] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 93.913477][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.939693][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.949892][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.968999][ T5881] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.978476][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.997032][ T5881] usb 5-1: config 0 descriptor?? [ 94.047674][ T5886] usb 2-1: config 150 has an invalid interface number: 128 but max is 0 [ 94.056388][ T5886] usb 2-1: config 150 has no interface number 0 [ 94.062666][ T5886] usb 2-1: config 150 interface 128 has no altsetting 0 [ 94.072656][ T5886] usb 2-1: New USB device found, idVendor=68fb, idProduct=681f, bcdDevice=36.43 [ 94.082451][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.090903][ T5886] usb 2-1: Product: syz [ 94.095151][ T5886] usb 2-1: Manufacturer: syz [ 94.099962][ T5886] usb 2-1: SerialNumber: syz [ 94.491502][ T6471] __nla_validate_parse: 1 callbacks suppressed [ 94.491518][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.192'. [ 94.573022][ T5886] usb-storage 2-1:150.128: USB Mass Storage device detected [ 94.583496][ T5881] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.591336][ T5881] plantronics 0003:047F:FFFF.0006: unbalanced delimiter at end of report description [ 94.612855][ T5881] plantronics 0003:047F:FFFF.0006: parse failed [ 94.619932][ T5881] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 94.656089][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020770c00: rx timeout, send abort [ 94.669100][ T5886] usb 2-1: USB disconnect, device number 8 [ 94.790417][ T910] usb 5-1: USB disconnect, device number 11 [ 95.165436][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020770c00: abort rx timeout. Force session deactivation [ 95.455134][ T5886] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 95.496600][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 95.617980][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.633747][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.644567][ T5886] usb 2-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 95.653974][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.665670][ T5886] usb 2-1: config 0 descriptor?? [ 95.856827][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 95.862902][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.896325][ T5878] usb 3-1: USB disconnect, device number 7 [ 96.005099][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 96.095693][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 96.131022][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 96.175414][ T5886] usb 2-1: USB disconnect, device number 9 [ 96.941025][ T8] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 96.972074][ T8] usb 1-1: config 0 has no interface number 0 [ 96.999463][ T8] usb 1-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=ef.48 [ 97.044462][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.081822][ T8] usb 1-1: config 0 descriptor?? [ 97.104016][ T8] cdc_subset 1-1:0.114: probe with driver cdc_subset failed with error -22 [ 97.200830][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 97.345462][ T8] usb 1-1: USB disconnect, device number 9 [ 98.049634][ T6571] xt_nat: multiple ranges no longer supported [ 98.385264][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 98.568889][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.637813][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.661542][ T5886] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 98.702266][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.731628][ T5886] usb 5-1: config 0 descriptor?? [ 98.734892][ T6587] netlink: 'syz.0.232': attribute type 322 has an invalid length. [ 99.045080][ T5878] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 99.224619][ T5886] sony 0003:1345:3008.0007: item fetching failed at offset 4/5 [ 99.232624][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 99.238008][ T910] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 99.246453][ T5886] sony 0003:1345:3008.0007: parse failed [ 99.252134][ T5886] sony 0003:1345:3008.0007: probe with driver sony failed with error -22 [ 99.266021][ T5878] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 99.276043][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.284060][ T5878] usb 3-1: Product: syz [ 99.288508][ T5878] usb 3-1: Manufacturer: syz [ 99.293126][ T5878] usb 3-1: SerialNumber: syz [ 99.302375][ T5878] usb 3-1: config 0 descriptor?? [ 99.310418][ T5878] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 99.435178][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 99.447074][ T910] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 99.451699][ T5880] usb 5-1: USB disconnect, device number 12 [ 99.456191][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.456216][ T910] usb 2-1: Product: syz [ 99.456231][ T910] usb 2-1: Manufacturer: syz [ 99.456246][ T910] usb 2-1: SerialNumber: syz [ 99.471405][ T910] usb 2-1: config 0 descriptor?? [ 99.493536][ T910] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 99.585177][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 99.591982][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.608836][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 99.621701][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 99.638817][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 99.651119][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 99.671142][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 99.684603][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.710498][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 99.723545][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.731882][ T8] usb 1-1: Product: syz [ 99.736492][ T8] usb 1-1: Manufacturer: syz [ 99.741107][ T8] usb 1-1: SerialNumber: syz [ 99.755819][ T8] usb 1-1: config 0 descriptor?? [ 99.766494][ T6605] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 100.001565][ T8] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 100.014315][ T8] hdpvr 1-1:0.0: device init failed [ 100.024898][ T8] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 100.066993][ T8] usb 1-1: USB disconnect, device number 10 [ 100.299986][ T5878] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 100.362103][ T5878] usb 2-1: USB disconnect, device number 10 [ 100.429635][ T6620] xt_CT: No such helper "netbios-ns" [ 100.536352][ T52] usb 3-1: USB disconnect, device number 8 [ 100.652992][ T6627] FAULT_INJECTION: forcing a failure. [ 100.652992][ T6627] name failslab, interval 1, probability 0, space 0, times 0 [ 100.666099][ T6627] CPU: 0 UID: 0 PID: 6627 Comm: syz.0.248 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 100.676718][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 100.686793][ T6627] Call Trace: [ 100.690093][ T6627] [ 100.693047][ T6627] dump_stack_lvl+0x241/0x360 [ 100.697760][ T6627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.702978][ T6627] ? __pfx__printk+0x10/0x10 [ 100.707585][ T6627] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 100.713507][ T6627] ? __pfx___might_resched+0x10/0x10 [ 100.718828][ T6627] should_fail_ex+0x3b0/0x4e0 [ 100.723537][ T6627] should_failslab+0xac/0x100 [ 100.728252][ T6627] ? __d_alloc+0x31/0x700 [ 100.732605][ T6627] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 100.738359][ T6627] __d_alloc+0x31/0x700 [ 100.742550][ T6627] d_alloc_parallel+0xdf/0x1600 [ 100.747430][ T6627] ? __asan_memset+0x23/0x50 [ 100.752041][ T6627] ? __asan_memset+0x23/0x50 [ 100.756639][ T6627] ? lockdep_init_map_type+0xa1/0x910 [ 100.762017][ T6627] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 100.767848][ T6627] ? __pfx_d_alloc_parallel+0x10/0x10 [ 100.773251][ T6627] ? __init_waitqueue_head+0xae/0x150 [ 100.778650][ T6627] proc_fill_cache+0x296/0x420 [ 100.783440][ T6627] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 100.789097][ T6627] ? __pfx_proc_fill_cache+0x10/0x10 [ 100.794406][ T6627] ? snprintf+0xda/0x120 [ 100.798686][ T6627] ? fget_task_next+0x5aa/0x620 [ 100.803561][ T6627] proc_readfd_common+0x483/0x820 [ 100.808603][ T6627] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 100.814246][ T6627] ? __pfx_proc_readfd_common+0x10/0x10 [ 100.819883][ T6627] ? end_current_label_crit_section+0x151/0x180 [ 100.826145][ T6627] ? common_file_perm+0x1a6/0x210 [ 100.831190][ T6627] iterate_dir+0x571/0x800 [ 100.835638][ T6627] __se_sys_getdents64+0x1e2/0x4b0 [ 100.840778][ T6627] ? __pfx___se_sys_getdents64+0x10/0x10 [ 100.846430][ T6627] ? __pfx_filldir64+0x10/0x10 [ 100.851222][ T6627] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 100.857840][ T6627] ? lockdep_hardirqs_on+0x99/0x150 [ 100.863062][ T6627] __do_fast_syscall_32+0xb4/0x110 [ 100.868209][ T6627] ? exc_page_fault+0x590/0x8b0 [ 100.873090][ T6627] do_fast_syscall_32+0x34/0x80 [ 100.877968][ T6627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.884315][ T6627] RIP: 0023:0xf7f27579 [ 100.888404][ T6627] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 100.908035][ T6627] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 00000000000000dc [ 100.916472][ T6627] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002140 [ 100.924462][ T6627] RDX: 00000000000000f5 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.932467][ T6627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.940461][ T6627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.948453][ T6627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.956459][ T6627] [ 100.959532][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.017568][ T6629] Zero length message leads to an empty skb [ 101.202755][ T6634] warning: `syz.1.251' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.251640][ T6636] team_slave_0: entered promiscuous mode [ 101.257602][ T6636] team_slave_1: entered promiscuous mode [ 101.266043][ T6636] vlan2: entered promiscuous mode [ 101.280268][ T6636] team0: entered promiscuous mode [ 101.286580][ T6636] vlan2: entered allmulticast mode [ 101.291859][ T6636] team0: entered allmulticast mode [ 101.297985][ T6636] team_slave_0: entered allmulticast mode [ 101.304098][ T6636] team_slave_1: entered allmulticast mode [ 101.356691][ T6636] team0: left allmulticast mode [ 101.361764][ T6636] team_slave_0: left allmulticast mode [ 101.369320][ T6636] team_slave_1: left allmulticast mode [ 101.375633][ T6636] team0: left promiscuous mode [ 101.381398][ T6636] team_slave_0: left promiscuous mode [ 101.386928][ T6636] team_slave_1: left promiscuous mode [ 101.540161][ T6638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.738379][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 101.913259][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 101.926863][ T8] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 101.939547][ T8] usb 3-1: config 0 has no interface number 0 [ 101.947322][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 101.957601][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 101.967730][ T8] usb 3-1: config 0 interface 41 has no altsetting 0 [ 101.978048][ T8] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 101.987863][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.005051][ T8] usb 3-1: Product: syz [ 102.009270][ T8] usb 3-1: Manufacturer: syz [ 102.013877][ T8] usb 3-1: SerialNumber: syz [ 102.022414][ T8] usb 3-1: config 0 descriptor?? [ 102.035411][ T5878] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 102.040855][ T6643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.066182][ T6643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.185628][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 102.200066][ T5878] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 102.220894][ T5878] usb 1-1: config 150 has no interface number 0 [ 102.242676][ T5878] usb 1-1: config 150 interface 204 has no altsetting 0 [ 102.256322][ T5878] usb 1-1: config 150 interface 1 has no altsetting 0 [ 102.269481][ T5878] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 102.282695][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.297396][ T5878] usb 1-1: Product: syz [ 102.301585][ T5878] usb 1-1: Manufacturer: syz [ 102.314413][ T5878] usb 1-1: SerialNumber: syz [ 102.338808][ T6673] FAULT_INJECTION: forcing a failure. [ 102.338808][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 102.351755][ T6673] CPU: 1 UID: 0 PID: 6673 Comm: syz.1.265 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 102.362366][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 102.372415][ T6673] Call Trace: [ 102.375709][ T6673] [ 102.378643][ T6673] dump_stack_lvl+0x241/0x360 [ 102.383371][ T6673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.388601][ T6673] ? __pfx__printk+0x10/0x10 [ 102.393218][ T6673] ? __kmalloc_noprof+0xb5/0x4c0 [ 102.398186][ T6673] ? __pfx___might_resched+0x10/0x10 [ 102.403493][ T6673] ? tomoyo_path_number_perm+0x679/0x860 [ 102.409168][ T6673] should_fail_ex+0x3b0/0x4e0 [ 102.413870][ T6673] should_failslab+0xac/0x100 [ 102.418543][ T6673] __kmalloc_noprof+0xdd/0x4c0 [ 102.423313][ T6673] ? video_usercopy+0x1f0/0x1180 [ 102.428265][ T6673] video_usercopy+0x1f0/0x1180 [ 102.433059][ T6673] ? __pfx___video_do_ioctl+0x10/0x10 [ 102.438449][ T6673] ? __pfx_video_usercopy+0x10/0x10 [ 102.443689][ T6673] v4l2_ioctl+0x189/0x1e0 [ 102.448040][ T6673] v4l2_compat_ioctl32+0x1d7/0x260 [ 102.453154][ T6673] __se_compat_sys_ioctl+0x502/0xc10 [ 102.458471][ T6673] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 102.464283][ T6673] ? __fget_files+0x2a/0x410 [ 102.465150][ T5880] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 102.468873][ T6673] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.468904][ T6673] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.468931][ T6673] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 102.495300][ T6673] ? lockdep_hardirqs_on+0x99/0x150 [ 102.500511][ T6673] __do_fast_syscall_32+0xb4/0x110 [ 102.505624][ T6676] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.505627][ T6673] ? exc_page_fault+0x590/0x8b0 [ 102.505657][ T6673] do_fast_syscall_32+0x34/0x80 [ 102.512841][ T6676] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.517569][ T6673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.535841][ T6673] RIP: 0023:0xf7f65579 [ 102.539925][ T6673] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.559545][ T6673] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 102.567966][ T6673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 102.575949][ T6673] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.583931][ T6673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.591911][ T6673] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.599888][ T6673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.607876][ T6673] [ 102.625186][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 102.625295][ T5878] xr_serial 1-1:150.204: xr_serial converter detected [ 102.634297][ T5880] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 102.647998][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.656618][ T5880] usb 5-1: Product: syz [ 102.660830][ T5880] usb 5-1: Manufacturer: syz [ 102.665991][ T5880] usb 5-1: SerialNumber: syz [ 102.673543][ T5880] usb 5-1: config 0 descriptor?? [ 102.681963][ T5880] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 102.754092][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.765333][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.795141][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.811926][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.223821][ T5878] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 103.232705][ T5878] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 103.249717][ T5878] usb 1-1: USB disconnect, device number 11 [ 103.285806][ T5878] xr_serial 1-1:150.204: device disconnected [ 103.478680][ T8] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 103.488466][ T8] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 103.508887][ T8] usb 3-1: USB disconnect, device number 9 [ 103.605096][ T6692] xt_CT: No such helper "netbios-ns" [ 103.605433][ T5880] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 103.778498][ T8] usb 5-1: USB disconnect, device number 13 [ 103.872686][ T6697] bridge1: entered promiscuous mode [ 103.878508][ T6697] bridge1: entered allmulticast mode [ 104.068027][ T6708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.406811][ T6714] input: syz1 as /devices/virtual/input/input9 [ 105.019862][ T6739] vimc link validate: Scaler:src:16x16 (0x33424752, 4, 0, 0, 2) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 105.125067][ T5886] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 105.345874][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 105.354238][ T5886] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 105.363440][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.371581][ T5886] usb 2-1: Product: syz [ 105.375891][ T5886] usb 2-1: Manufacturer: syz [ 105.380501][ T5886] usb 2-1: SerialNumber: syz [ 105.392381][ T5886] r8152-cfgselector 2-1: Unknown version 0x0000 [ 105.398876][ T5886] r8152-cfgselector 2-1: config 0 descriptor?? [ 105.545595][ T52] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 105.650544][ T6756] ip6t_srh: unknown srh invflags 4000 [ 105.660727][ T6756] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.667582][ T6756] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 105.725250][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 105.737715][ T52] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 105.747200][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.757932][ T52] usb 3-1: config 0 descriptor?? [ 105.775005][ T52] as10x_usb: device has been detected [ 105.784350][ T52] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 105.832635][ T52] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 105.835287][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.284'. [ 105.859507][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.284'. [ 105.859512][ T52] as10x_usb: error during firmware upload part1 [ 105.879076][ T52] Registered device nBox DVB-T Dongle [ 105.907462][ T6733] team0: entered promiscuous mode [ 105.932110][ T6761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.956785][ T6733] team_slave_0: entered promiscuous mode [ 105.981093][ T6733] team_slave_1: entered promiscuous mode [ 105.991152][ T6733] batadv_slave_1: entered promiscuous mode [ 105.998060][ T6733] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 106.007161][ T6733] Cannot create hsr debugfs directory [ 106.012740][ T6733] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 106.030046][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.040694][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.056458][ T52] usb 3-1: USB disconnect, device number 10 [ 106.063770][ T8] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 106.130444][ T52] Unregistered device nBox DVB-T Dongle [ 106.133712][ T52] as10x_usb: device has been disconnected [ 106.165130][ T6771] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 106.180221][ T6771] batman_adv: batadv0: Adding interface: gretap1 [ 106.187065][ T6771] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.215688][ T6771] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 106.774149][ T6787] tipc: Started in network mode [ 106.784541][ T6787] tipc: Node identity ac14140f, cluster identity 4711 [ 106.785145][ T5880] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 106.797109][ T6787] tipc: Enabled bearer , priority 10 [ 107.008237][ T6801] FAULT_INJECTION: forcing a failure. [ 107.008237][ T6801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.030202][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.3.314 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 107.040844][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 107.050921][ T6801] Call Trace: [ 107.054212][ T6801] [ 107.057164][ T6801] dump_stack_lvl+0x241/0x360 [ 107.061881][ T6801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.067108][ T6801] ? __pfx__printk+0x10/0x10 [ 107.071730][ T6801] ? snprintf+0xda/0x120 [ 107.076000][ T6801] should_fail_ex+0x3b0/0x4e0 [ 107.080711][ T6801] _copy_to_user+0x31/0xb0 [ 107.085156][ T6801] simple_read_from_buffer+0xca/0x150 [ 107.090550][ T6801] proc_fail_nth_read+0x1e9/0x250 [ 107.095596][ T6801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.101166][ T6801] ? rw_verify_area+0x55e/0x6f0 [ 107.106047][ T6801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.111618][ T6801] vfs_read+0x1fc/0xb70 [ 107.115804][ T6801] ? __pfx___mutex_lock+0x10/0x10 [ 107.120870][ T6801] ? __pfx_vfs_read+0x10/0x10 [ 107.125568][ T6801] ? __fget_files+0x2a/0x410 [ 107.130179][ T6801] ? __fget_files+0x395/0x410 [ 107.134876][ T6801] ? __fget_files+0x2a/0x410 [ 107.139507][ T6801] ksys_read+0x18f/0x2b0 [ 107.143771][ T6801] ? __pfx_ksys_read+0x10/0x10 [ 107.148552][ T6801] ? __secure_computing+0x125/0x370 [ 107.153785][ T6801] __do_fast_syscall_32+0xb4/0x110 [ 107.158928][ T6801] ? exc_page_fault+0x590/0x8b0 [ 107.163803][ T6801] do_fast_syscall_32+0x34/0x80 [ 107.168685][ T6801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.175037][ T6801] RIP: 0023:0xf706d579 [ 107.179121][ T6801] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 107.198745][ T6801] RSP: 002b:00000000f505f590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 107.202703][ T6808] veth0_to_bridge: entered promiscuous mode [ 107.207171][ T6801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f505f620 [ 107.207207][ T6801] RDX: 000000000000000f RSI: 00000000f73a3ff4 RDI: 0000000000000000 [ 107.207220][ T6801] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 107.207231][ T6801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.207243][ T6801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.207273][ T6801] [ 107.207296][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.214365][ T6808] macsec1: entered promiscuous mode [ 107.223797][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 107.246848][ T6808] macsec1: entered allmulticast mode [ 107.289310][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.300560][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.310515][ T6808] veth0_to_bridge: entered allmulticast mode [ 107.327403][ T5880] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 107.347982][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.379835][ T6808] veth0_to_bridge: left allmulticast mode [ 107.385802][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 107.402325][ T6808] veth0_to_bridge: left promiscuous mode [ 107.407408][ T5880] usb 1-1: config 0 descriptor?? [ 107.545273][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 107.559098][ T8] usb 2-1: config 1 has an invalid interface number: 124 but max is 0 [ 107.567875][ T8] usb 2-1: config 1 has no interface number 0 [ 107.574025][ T8] usb 2-1: config 1 interface 124 has no altsetting 0 [ 107.581012][ T8] usb 2-1: New USB device found, idVendor=1c0c, idProduct=0102, bcdDevice=23.0b [ 107.592844][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.685790][ T5881] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 107.715448][ T6817] netlink: 'syz.0.304': attribute type 11 has an invalid length. [ 107.738824][ T6817] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 107.745386][ T6817] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.754441][ T6817] vhci_hcd vhci_hcd.0: Device attached [ 107.786651][ T52] tipc: Node number set to 2886997007 [ 107.809708][ T6799] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 107.857649][ T5881] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 107.871277][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.893072][ T6799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.900009][ T5881] usb 3-1: config 0 has no interface number 0 [ 107.906267][ T5881] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 107.918104][ T5881] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 107.922963][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.929287][ T5881] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 107.929315][ T5881] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 107.970133][ T5878] vhci_hcd: vhci_device speed not set [ 107.995267][ T5881] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 108.004491][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.012639][ T5881] usb 3-1: Product: syz [ 108.017002][ T5881] usb 3-1: Manufacturer: syz [ 108.021663][ T5881] usb 3-1: SerialNumber: syz [ 108.029918][ T5881] usb 3-1: config 0 descriptor?? [ 108.038763][ T5881] symbolserial 3-1:0.175: symbol converter detected [ 108.051423][ T5881] usb 3-1: symbol converter now attached to ttyUSB0 [ 108.054847][ T6826] bond1: (slave batadv1): making interface the new active one [ 108.067141][ T5878] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 108.120821][ T6826] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 108.248042][ T8] usb 2-1: string descriptor 0 read error: -71 [ 108.251166][ T5886] usb 3-1: USB disconnect, device number 11 [ 108.264162][ T8] ftdi_sio 2-1:1.124: FTDI USB Serial Device converter detected [ 108.341866][ T5886] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 108.342439][ T8] ftdi_sio ttyUSB1: unknown device type: 0x230b [ 108.366625][ T5886] symbolserial 3-1:0.175: device disconnected [ 108.395857][ T8] usb 2-1: USB disconnect, device number 12 [ 108.408852][ T8] ftdi_sio 2-1:1.124: device disconnected [ 108.430502][ T6832] program syz.3.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.635315][ T6838] tipc: Started in network mode [ 108.646260][ T6838] tipc: Node identity ac14140f, cluster identity 4711 [ 108.662191][ T6838] tipc: Enabled bearer , priority 10 [ 109.023278][ T6844] dvmrp0: entered allmulticast mode [ 109.090025][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 109.171425][ T6849] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 109.278137][ T6849] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 109.295115][ T5886] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 109.455665][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 109.478705][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.510862][ T5886] usb 5-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 109.521765][ T6820] vhci_hcd: connection reset by peer [ 109.530158][ T54] vhci_hcd: stop threads [ 109.534573][ T54] vhci_hcd: release socket [ 109.547077][ T54] vhci_hcd: disconnect device [ 109.566761][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.596363][ T5886] usb 5-1: Product: syz [ 109.611999][ T5886] usb 5-1: Manufacturer: syz [ 109.624028][ T5886] usb 5-1: SerialNumber: syz [ 109.629586][ T5880] usbhid 1-1:0.0: can't add hid device: -71 [ 109.637237][ T5880] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 109.646670][ T5886] usb 5-1: config 0 descriptor?? [ 109.661918][ T5880] usb 1-1: USB disconnect, device number 12 [ 109.667042][ T5886] ums-usbat 5-1:0.0: USB Mass Storage device detected [ 109.785176][ T910] tipc: Node number set to 2886997007 [ 109.903519][ T6870] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 109.930159][ T6870] batman_adv: batadv0: Adding interface: gretap1 [ 109.944390][ T6870] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.978190][ T6870] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 110.001256][ T6872] FAULT_INJECTION: forcing a failure. [ 110.001256][ T6872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.037108][ T6872] CPU: 0 UID: 0 PID: 6872 Comm: syz.0.347 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 110.047761][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 110.057809][ T6872] Call Trace: [ 110.061087][ T6872] [ 110.064007][ T6872] dump_stack_lvl+0x241/0x360 [ 110.068685][ T6872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.073885][ T6872] ? __pfx__printk+0x10/0x10 [ 110.078468][ T6872] ? __pfx_lock_release+0x10/0x10 [ 110.083505][ T6872] ? dev_ifsioc+0xaec/0xe70 [ 110.088036][ T6872] should_fail_ex+0x3b0/0x4e0 [ 110.092743][ T6872] _copy_to_user+0x31/0xb0 [ 110.097189][ T6872] put_user_ifreq+0xe8/0x130 [ 110.101803][ T6872] sock_ioctl+0x84a/0x8e0 [ 110.106155][ T6872] ? __pfx_sock_ioctl+0x10/0x10 [ 110.111044][ T6872] compat_sock_ioctl+0x291/0xf20 [ 110.116009][ T6872] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 110.121498][ T6872] ? __fget_files+0x2a/0x410 [ 110.126124][ T6872] ? __fget_files+0x2a/0x410 [ 110.130748][ T6872] __se_compat_sys_ioctl+0x502/0xc10 [ 110.136061][ T6872] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 110.141883][ T6872] ? __fget_files+0x2a/0x410 [ 110.146490][ T6872] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.152486][ T6872] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.158822][ T6872] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 110.165412][ T6872] ? lockdep_hardirqs_on+0x99/0x150 [ 110.170616][ T6872] __do_fast_syscall_32+0xb4/0x110 [ 110.175730][ T6872] ? exc_page_fault+0x590/0x8b0 [ 110.180581][ T6872] do_fast_syscall_32+0x34/0x80 [ 110.185438][ T6872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.191766][ T6872] RIP: 0023:0xf7f27579 [ 110.195833][ T6872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 110.215441][ T6872] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 110.223862][ T6872] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0 [ 110.231833][ T6872] RDX: 0000000020000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.239803][ T6872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.247767][ T6872] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 110.255747][ T6872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.263726][ T6872] [ 110.545263][ T5880] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 110.632606][ T5881] usb 5-1: USB disconnect, device number 14 [ 110.642515][ T6844] dvmrp0: left allmulticast mode [ 110.686914][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 110.704113][ T5880] usb 3-1: config 255 has an invalid interface number: 185 but max is 0 [ 110.714710][ T5880] usb 3-1: config 255 has no interface number 0 [ 110.731413][ T5880] usb 3-1: config 255 interface 185 altsetting 16 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 110.750572][ T5880] usb 3-1: config 255 interface 185 has no altsetting 0 [ 110.759802][ T5880] usb 3-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=d4.f9 [ 110.789563][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.845262][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 110.856063][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.867369][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.877707][ T8] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 110.887851][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.905875][ T8] usb 1-1: config 0 descriptor?? [ 110.981482][ T5886] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 111.004723][ T5880] usb 3-1: string descriptor 0 read error: -71 [ 111.029600][ T5880] usb 3-1: USB disconnect, device number 12 [ 111.044029][ T5880] ================================================================== [ 111.052120][ T5880] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 111.059773][ T5880] Read of size 8 at addr ffff888020731898 by task kworker/0:3/5880 [ 111.067661][ T5880] [ 111.069970][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:3 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 111.080721][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 111.085990][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 111.090770][ T5880] Workqueue: usb_hub_wq hub_event [ 111.090802][ T5880] Call Trace: [ 111.090810][ T5880] [ 111.090819][ T5880] dump_stack_lvl+0x241/0x360 [ 111.115541][ T5880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.120762][ T5880] ? __pfx__printk+0x10/0x10 [ 111.125369][ T5880] ? _printk+0xd5/0x120 [ 111.129517][ T5880] ? __virt_addr_valid+0x183/0x530 [ 111.134619][ T5880] ? __virt_addr_valid+0x183/0x530 [ 111.139723][ T5880] print_report+0x169/0x550 [ 111.144241][ T5880] ? __virt_addr_valid+0x183/0x530 [ 111.149355][ T5880] ? __virt_addr_valid+0x183/0x530 [ 111.154475][ T5880] ? __virt_addr_valid+0x45f/0x530 [ 111.159585][ T5880] ? __phys_addr+0xba/0x170 [ 111.164108][ T5880] ? hdm_disconnect+0x10d/0x1c0 [ 111.168966][ T5880] kasan_report+0x143/0x180 [ 111.173475][ T5880] ? kobject_put+0x272/0x480 [ 111.178059][ T5880] ? hdm_disconnect+0x10d/0x1c0 [ 111.182900][ T5880] hdm_disconnect+0x10d/0x1c0 [ 111.187570][ T5880] usb_unbind_interface+0x25b/0x940 [ 111.192761][ T5880] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 111.198483][ T5880] ? __pfx_usb_unbind_interface+0x10/0x10 [ 111.204214][ T5880] device_release_driver_internal+0x503/0x7c0 [ 111.210283][ T5880] bus_remove_device+0x34f/0x420 [ 111.215218][ T5880] device_del+0x57a/0x9b0 [ 111.219534][ T5880] ? kobject_put+0x272/0x480 [ 111.224121][ T5880] ? __pfx_device_del+0x10/0x10 [ 111.228982][ T5880] ? kobject_put+0x44d/0x480 [ 111.233568][ T5880] usb_disable_device+0x3bf/0x850 [ 111.238584][ T5880] usb_disconnect+0x340/0x950 [ 111.243258][ T5880] hub_event+0x1ebc/0x5150 [ 111.247682][ T5880] ? debug_object_deactivate+0x2d5/0x390 [ 111.252642][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 111.253321][ T5880] ? do_raw_spin_unlock+0x13c/0x8b0 [ 111.260290][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.263596][ T5880] ? __pfx_hub_event+0x10/0x10 [ 111.263624][ T5880] ? __pfx_lock_acquire+0x10/0x10 [ 111.263647][ T5880] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.277964][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.279213][ T5880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.279245][ T5880] ? process_scheduled_works+0x976/0x1840 [ 111.284347][ T5886] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 111.290204][ T5880] process_scheduled_works+0xa66/0x1840 [ 111.290240][ T5880] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.290261][ T5880] ? assign_work+0x364/0x3d0 [ 111.290282][ T5880] worker_thread+0x870/0xd30 [ 111.290304][ T5880] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 111.309471][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.311996][ T5880] ? __kthread_parkme+0x169/0x1d0 [ 111.312024][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 111.312045][ T5880] kthread+0x2f0/0x390 [ 111.369657][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 111.374758][ T5880] ? __pfx_kthread+0x10/0x10 [ 111.379337][ T5880] ret_from_fork+0x4b/0x80 [ 111.383742][ T5880] ? __pfx_kthread+0x10/0x10 [ 111.388317][ T5880] ret_from_fork_asm+0x1a/0x30 [ 111.393069][ T5880] [ 111.396079][ T5880] [ 111.398407][ T5880] Allocated by task 5880: [ 111.402739][ T5880] kasan_save_track+0x3f/0x80 [ 111.407418][ T5880] __kasan_kmalloc+0x98/0xb0 [ 111.411996][ T5880] __kmalloc_cache_noprof+0x243/0x390 [ 111.417356][ T5880] hdm_probe+0x98/0x13e0 [ 111.421596][ T5880] usb_probe_interface+0x641/0xbb0 [ 111.426719][ T5880] really_probe+0x2b8/0xad0 [ 111.431215][ T5880] __driver_probe_device+0x1a2/0x390 [ 111.436485][ T5880] driver_probe_device+0x50/0x430 [ 111.441496][ T5880] __device_attach_driver+0x2d6/0x530 [ 111.446867][ T5880] bus_for_each_drv+0x24e/0x2e0 [ 111.451738][ T5880] __device_attach+0x333/0x520 [ 111.456514][ T5880] bus_probe_device+0x189/0x260 [ 111.456704][ T5886] usb 2-1: config 0 descriptor?? [ 111.461372][ T5880] device_add+0x856/0xbf0 [ 111.461391][ T5880] usb_set_configuration+0x1976/0x1fb0 [ 111.461413][ T5880] usb_generic_driver_probe+0x88/0x140 [ 111.461429][ T5880] usb_probe_device+0x1b8/0x380 [ 111.486376][ T5880] really_probe+0x2b8/0xad0 [ 111.490885][ T5880] __driver_probe_device+0x1a2/0x390 [ 111.496168][ T5880] driver_probe_device+0x50/0x430 [ 111.501203][ T5880] __device_attach_driver+0x2d6/0x530 [ 111.506590][ T5880] bus_for_each_drv+0x24e/0x2e0 [ 111.511439][ T5880] __device_attach+0x333/0x520 [ 111.516212][ T5880] bus_probe_device+0x189/0x260 [ 111.521076][ T5880] device_add+0x856/0xbf0 [ 111.525409][ T5880] usb_new_device+0x104a/0x19a0 [ 111.530255][ T5880] hub_event+0x2d6d/0x5150 [ 111.534678][ T5880] process_scheduled_works+0xa66/0x1840 [ 111.540233][ T5880] worker_thread+0x870/0xd30 [ 111.544809][ T5880] kthread+0x2f0/0x390 [ 111.548888][ T5880] ret_from_fork+0x4b/0x80 [ 111.553316][ T5880] ret_from_fork_asm+0x1a/0x30 [ 111.558091][ T5880] [ 111.560416][ T5880] Freed by task 5880: [ 111.564381][ T5880] kasan_save_track+0x3f/0x80 [ 111.569054][ T5880] kasan_save_free_info+0x40/0x50 [ 111.574074][ T5880] __kasan_slab_free+0x59/0x70 [ 111.578828][ T5880] kfree+0x196/0x430 [ 111.582719][ T5880] device_release+0x99/0x1c0 [ 111.587309][ T5880] kobject_put+0x22f/0x480 [ 111.591728][ T5880] hdm_disconnect+0xf3/0x1c0 [ 111.596316][ T5880] usb_unbind_interface+0x25b/0x940 [ 111.601508][ T5880] device_release_driver_internal+0x503/0x7c0 [ 111.607575][ T5880] bus_remove_device+0x34f/0x420 [ 111.612508][ T5880] device_del+0x57a/0x9b0 [ 111.616831][ T5880] usb_disable_device+0x3bf/0x850 [ 111.621845][ T5880] usb_disconnect+0x340/0x950 [ 111.626531][ T5880] hub_event+0x1ebc/0x5150 [ 111.630936][ T5880] process_scheduled_works+0xa66/0x1840 [ 111.636475][ T5880] worker_thread+0x870/0xd30 [ 111.641064][ T5880] kthread+0x2f0/0x390 [ 111.645134][ T5880] ret_from_fork+0x4b/0x80 [ 111.649542][ T5880] ret_from_fork_asm+0x1a/0x30 [ 111.654296][ T5880] [ 111.656610][ T5880] The buggy address belongs to the object at ffff888020730000 [ 111.656610][ T5880] which belongs to the cache kmalloc-8k of size 8192 [ 111.670652][ T5880] The buggy address is located 6296 bytes inside of [ 111.670652][ T5880] freed 8192-byte region [ffff888020730000, ffff888020732000) [ 111.684614][ T5880] [ 111.686932][ T5880] The buggy address belongs to the physical page: [ 111.693330][ T5880] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20730 [ 111.702080][ T5880] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 111.710564][ T5880] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 111.718091][ T5880] page_type: f5(slab) [ 111.722064][ T5880] raw: 00fff00000000040 ffff88801ac42280 ffffea0001f4de00 dead000000000006 [ 111.730638][ T5880] raw: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 111.739217][ T5880] head: 00fff00000000040 ffff88801ac42280 ffffea0001f4de00 dead000000000006 [ 111.747876][ T5880] head: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 111.756539][ T5880] head: 00fff00000000003 ffffea000081cc01 ffffffffffffffff 0000000000000000 [ 111.765200][ T5880] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 111.773857][ T5880] page dumped because: kasan: bad access detected [ 111.780264][ T5880] page_owner tracks the page as allocated [ 111.785962][ T5880] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6009, tgid 6008 (syz.1.30), ts 70224500475, free_ts 70073170500 [ 111.806968][ T5880] post_alloc_hook+0x1f3/0x230 [ 111.811731][ T5880] get_page_from_freelist+0x365c/0x37a0 [ 111.817268][ T5880] __alloc_pages_noprof+0x292/0x710 [ 111.822456][ T5880] alloc_pages_mpol_noprof+0x3e8/0x680 [ 111.827914][ T5880] alloc_slab_page+0x6a/0x110 [ 111.832579][ T5880] allocate_slab+0x5a/0x2b0 [ 111.837074][ T5880] ___slab_alloc+0xc27/0x14a0 [ 111.841743][ T5880] __slab_alloc+0x58/0xa0 [ 111.846076][ T5880] __kmalloc_cache_noprof+0x27b/0x390 [ 111.851441][ T5880] audit_log_d_path+0xbb/0x310 [ 111.856196][ T5880] audit_log_d_path_exe+0x42/0x70 [ 111.861221][ T5880] audit_log_task+0x254/0x320 [ 111.865891][ T5880] audit_seccomp+0x7b/0x1f0 [ 111.870390][ T5880] __seccomp_filter+0xb38/0x1fe0 [ 111.875325][ T5880] syscall_trace_enter+0xa8/0x150 [ 111.880338][ T5880] __do_fast_syscall_32+0x9b/0x110 [ 111.885447][ T5880] page last free pid 5844 tgid 5844 stack trace: [ 111.891761][ T5880] free_unref_page+0xd3f/0x1010 [ 111.896615][ T5880] __slab_free+0x2c2/0x380 [ 111.901026][ T5880] qlist_free_all+0x9a/0x140 [ 111.905611][ T5880] kasan_quarantine_reduce+0x14f/0x170 [ 111.911064][ T5880] __kasan_slab_alloc+0x23/0x80 [ 111.915906][ T5880] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 111.921793][ T5880] alloc_vmap_area+0x24f/0x2400 [ 111.926635][ T5880] __get_vm_area_node+0x1c8/0x2d0 [ 111.931651][ T5880] __vmalloc_node_range_noprof+0x344/0x1380 [ 111.937608][ T5880] vmalloc_noprof+0x79/0x90 [ 111.942113][ T5880] xt_compat_init_offsets+0xe2/0x1c0 [ 111.947410][ T5880] compat_table_info+0x82/0xa60 [ 111.952258][ T5880] do_ip6t_get_ctl+0xaee/0x1820 [ 111.957102][ T5880] nf_getsockopt+0x299/0x2c0 [ 111.961683][ T5880] ipv6_getsockopt+0x23e/0x360 [ 111.966448][ T5880] tcp_getsockopt+0x163/0x1c0 [ 111.971146][ T5880] [ 111.973465][ T5880] Memory state around the buggy address: [ 111.979082][ T5880] ffff888020731780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.987134][ T5880] ffff888020731800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.995181][ T5880] >ffff888020731880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.003241][ T5880] ^ [ 112.008088][ T5880] ffff888020731900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.016145][ T5880] ffff888020731980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.024197][ T5880] ================================================================== [ 112.061456][ T5880] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.068686][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:3 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 112.079459][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 112.089529][ T5880] Workqueue: usb_hub_wq hub_event [ 112.094580][ T5880] Call Trace: [ 112.097871][ T5880] [ 112.100813][ T5880] dump_stack_lvl+0x241/0x360 [ 112.105512][ T5880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.110723][ T5880] ? __pfx__printk+0x10/0x10 [ 112.115320][ T5880] ? vscnprintf+0x5d/0x90 [ 112.119644][ T5880] panic+0x349/0x880 [ 112.123532][ T5880] ? check_panic_on_warn+0x21/0xb0 [ 112.128638][ T5880] ? __pfx_panic+0x10/0x10 [ 112.133066][ T5880] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 112.139052][ T5880] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 112.145384][ T5880] ? print_report+0x502/0x550 [ 112.150066][ T5880] check_panic_on_warn+0x86/0xb0 [ 112.155006][ T5880] ? hdm_disconnect+0x10d/0x1c0 [ 112.159860][ T5880] end_report+0x77/0x160 [ 112.164103][ T5880] kasan_report+0x154/0x180 [ 112.168607][ T5880] ? kobject_put+0x272/0x480 [ 112.173204][ T5880] ? hdm_disconnect+0x10d/0x1c0 [ 112.178070][ T5880] hdm_disconnect+0x10d/0x1c0 [ 112.182762][ T5880] usb_unbind_interface+0x25b/0x940 [ 112.187966][ T5880] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 112.193687][ T5880] ? __pfx_usb_unbind_interface+0x10/0x10 [ 112.199416][ T5880] device_release_driver_internal+0x503/0x7c0 [ 112.205485][ T5880] bus_remove_device+0x34f/0x420 [ 112.210429][ T5880] device_del+0x57a/0x9b0 [ 112.214756][ T5880] ? kobject_put+0x272/0x480 [ 112.219352][ T5880] ? __pfx_device_del+0x10/0x10 [ 112.224196][ T5880] ? kobject_put+0x44d/0x480 [ 112.228785][ T5880] usb_disable_device+0x3bf/0x850 [ 112.233807][ T5880] usb_disconnect+0x340/0x950 [ 112.238490][ T5880] hub_event+0x1ebc/0x5150 [ 112.242908][ T5880] ? debug_object_deactivate+0x2d5/0x390 [ 112.248543][ T5880] ? do_raw_spin_unlock+0x13c/0x8b0 [ 112.253735][ T5880] ? __pfx_hub_event+0x10/0x10 [ 112.258498][ T5880] ? __pfx_lock_acquire+0x10/0x10 [ 112.263522][ T5880] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.269514][ T5880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.275842][ T5880] ? process_scheduled_works+0x976/0x1840 [ 112.281560][ T5880] process_scheduled_works+0xa66/0x1840 [ 112.287103][ T5880] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.293075][ T5880] ? assign_work+0x364/0x3d0 [ 112.297653][ T5880] worker_thread+0x870/0xd30 [ 112.302243][ T5880] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 112.308132][ T5880] ? __kthread_parkme+0x169/0x1d0 [ 112.313147][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 112.318253][ T5880] kthread+0x2f0/0x390 [ 112.322317][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 112.327422][ T5880] ? __pfx_kthread+0x10/0x10 [ 112.332004][ T5880] ret_from_fork+0x4b/0x80 [ 112.336416][ T5880] ? __pfx_kthread+0x10/0x10 [ 112.341004][ T5880] ret_from_fork_asm+0x1a/0x30 [ 112.345770][ T5880] [ 112.349042][ T5880] Kernel Offset: disabled [ 112.353359][ T5880] Rebooting in 86400 seconds..