last executing test programs: 4m53.063621085s ago: executing program 4 (id=9473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000700000008000340000000f508000140000000130800064000000002080004400000006a0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 4m50.466663069s ago: executing program 4 (id=9501): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, 0x0) 4m48.917743498s ago: executing program 4 (id=9518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfa, {{}, {@val={0x8, 0x1, 0x18}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 4m48.206742958s ago: executing program 4 (id=9526): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcea06e1050000000000", 0x18}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124f", 0x29}], 0x2}, 0x40000) 4m45.459885188s ago: executing program 4 (id=9559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r1, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 4m40.8812689s ago: executing program 4 (id=9610): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b35070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d8160f94e35f2d2d12913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1943cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 4m36.055749552s ago: executing program 2 (id=9659): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)='e', 0x1}], 0x2, 0xf, 0x0) 4m35.732598049s ago: executing program 2 (id=9661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m35.55254298s ago: executing program 2 (id=9662): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x1000000000, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000004, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0x2fc3d, 0x8, 0x2, 0x377, 0x0, r0}, 0x1) 4m35.430641381s ago: executing program 2 (id=9663): r0 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x1000000) sigaltstack(&(0x7f00000000c0)={0x0}, 0x0) 4m35.192266717s ago: executing program 2 (id=9667): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x0) 4m34.960011872s ago: executing program 2 (id=9670): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x3, 0x200, 0xe042c7f9, 0x54, 0x7, "0a571920a0055b6b960422e2b2d2771891fda2", 0x0, 0x6}) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 4m34.246640926s ago: executing program 1 (id=9678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)) 4m33.806484913s ago: executing program 1 (id=9682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 4m33.572696099s ago: executing program 1 (id=9685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 4m33.309989128s ago: executing program 1 (id=9688): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 4m33.067645585s ago: executing program 1 (id=9690): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) 4m30.619928223s ago: executing program 1 (id=9705): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) 4m25.374577066s ago: executing program 32 (id=9610): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 4m19.812642784s ago: executing program 33 (id=9670): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x3, 0x200, 0xe042c7f9, 0x54, 0x7, "0a571920a0055b6b960422e2b2d2771891fda2", 0x0, 0x6}) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 4m15.467802356s ago: executing program 34 (id=9705): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) 16.571752299s ago: executing program 7 (id=10651): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) 13.626578926s ago: executing program 0 (id=10660): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {0x40, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x80, 0x5, 0x5, 0x7fffffff, 0x0, 0x46, 0x838, 0xffffff0c, 0x3, 0x9, 0x8, 0x2, 0x4, 0x3, 0x4, 0x3, 0x2, 0x0, 0x800, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x6, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0x3, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x40399, 0x101, 0x2, 0xdb, 0x1, 0xe, 0x7, 0xf, 0x2, 0x1, 0xffffffff, 0x800, 0x7f, 0x9, 0x3, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x9, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x27, 0x2, 0x9, 0x2, 0x4, 0x7, 0x2c85, 0xf77, 0x60, 0xb, 0x1, 0x8, 0x71e4, 0x0, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0xff6, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc7, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x3, 0x8, 0x80000001, 0x0, 0x4000003d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d8, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x102, 0x1], [0x62e2adfb, 0x809f57, 0x4, 0x3, 0x4, 0x8, 0x1, 0xfffffff7, 0x1, 0x2, 0x4, 0x4, 0x6, 0x4800001, 0x0, 0x2e, 0x7, 0x2, 0x5, 0x7, 0x1, 0x7, 0xffff8000, 0x8, 0x3, 0x6, 0x10001, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x9, 0x8, 0x5, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x200, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x1d7, 0x5, 0xfe, 0x7ff, 0x2, 0x5, 0x6, 0x4, 0x5, 0x9d, 0x1, 0x7825], [0x3, 0x0, 0x4, 0x4, 0x400002, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x9, 0x5, 0x5, 0x2, 0xffffff7f, 0x8, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0x1, 0x4, 0x5, 0x40, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x7, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0xffffffff, 0x4, 0x4, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xb9, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x8) 12.687030216s ago: executing program 7 (id=10662): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x8c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x50, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xef}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x5a}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8891}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 12.513113482s ago: executing program 0 (id=10664): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x46ec, 0xf, 0x1, 0x1}) 12.138627132s ago: executing program 7 (id=10666): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001380)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x81, 0x1, "d2"}, 0x0, 0x0, 0x0, 0x0}) 11.832938404s ago: executing program 0 (id=10668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 11.417641538s ago: executing program 5 (id=10671): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000500)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x2060, 0x0) 10.929290628s ago: executing program 0 (id=10674): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={r1}, &(0x7f00000001c0)=0x8) 10.678677588s ago: executing program 6 (id=10675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) 10.297225765s ago: executing program 5 (id=10677): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl(r0, 0x8b01, &(0x7f0000000040)) 10.147643623s ago: executing program 6 (id=10678): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) 10.131254934s ago: executing program 0 (id=10679): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 9.775606874s ago: executing program 7 (id=10681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]}) 9.658667s ago: executing program 6 (id=10682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cb592dfd47ed2b9c9fc28b14ccfedf0d4a91629124888ffa"}]]}, 0x38}}, 0x0) 9.581749958s ago: executing program 5 (id=10683): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 9.116914703s ago: executing program 6 (id=10685): memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 8.780484079s ago: executing program 7 (id=10686): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) 8.620980591s ago: executing program 5 (id=10688): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000b00)=""/223, 0xdf}, {&(0x7f0000001d00)=""/131, 0x83}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000001f40)=""/175, 0xaf}], 0x9}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 8.61249014s ago: executing program 6 (id=10689): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) ioctl$FS_IOC_SETFSLABEL(r1, 0x4c02, &(0x7f0000000280)="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") 8.197369178s ago: executing program 3 (id=10690): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) copy_file_range(r1, 0x0, r0, &(0x7f0000000580)=0x9, 0x7fff, 0x0) 8.041104792s ago: executing program 5 (id=10691): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000002, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(0xffffffffffffffff, 0x0, 0x0) 5.320273925s ago: executing program 6 (id=10692): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 4.519296465s ago: executing program 7 (id=10693): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 4.494820198s ago: executing program 3 (id=10694): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 3.381284545s ago: executing program 5 (id=10695): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) 2.414270114s ago: executing program 3 (id=10696): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.098544757s ago: executing program 0 (id=10697): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) 789.551058ms ago: executing program 3 (id=10698): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) 311.09103ms ago: executing program 3 (id=10699): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xd, 0x3a, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0xfffffffc, 0xdc67}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 3 (id=10700): syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 0:d8:96:fc, vlan:0) [ 935.555924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 935.568497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 936.548921][ T5914] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 936.760366][ T5914] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.788857][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 936.809679][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 936.839224][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.874070][ T5914] usb 1-1: config 0 descriptor?? [ 936.888870][ T5469] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 937.074650][ T5469] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 937.114859][ T5469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.138266][ T5469] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.185447][ T5469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.217463][ T5469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.247444][ T5469] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.288131][ T5469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.325481][ T5469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.375059][ T5469] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.442980][ T5469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.481940][ T5469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.512046][ T5469] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.550433][ T5469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.565517][ T5914] usb 1-1: USB disconnect, device number 53 [ 937.588307][ T5469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.633646][ T5469] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.664788][ T5469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.692982][ T5469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.723392][ T5469] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.767151][ T5469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.791882][ T5469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.825701][ T5469] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.869352][ T5469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.888174][ T5469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.913987][ T5469] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.959299][ T5469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.991749][ T5469] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 938.013583][ T5469] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 938.045050][ T5469] usb 4-1: Product: syz [ 938.045075][ T5469] usb 4-1: Manufacturer: syz [ 938.045094][ T5469] usb 4-1: SerialNumber: syz [ 938.064749][ T5469] usb 4-1: config 0 descriptor?? [ 938.093168][ T5469] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 938.405614][ T5469] usb 4-1: USB disconnect, device number 46 [ 938.408389][ T5469] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 939.352651][ T5914] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 939.510929][ T5914] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 939.510964][ T5914] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 939.510988][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 939.511035][ T5914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 939.511065][ T5914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 939.512797][ T5914] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 939.512829][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 939.512852][ T5914] usb 3-1: Product: syz [ 939.512869][ T5914] usb 3-1: Manufacturer: syz [ 939.525257][ T5914] cdc_wdm 3-1:1.0: skipping garbage [ 939.525283][ T5914] cdc_wdm 3-1:1.0: skipping garbage [ 939.537623][ T5914] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 939.537651][ T5914] cdc_wdm 3-1:1.0: Unknown control protocol [ 939.770666][ T5469] usb 3-1: USB disconnect, device number 56 [ 939.800046][ T5914] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 939.949944][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 939.955735][ T5914] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 939.955814][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 939.955853][ T5914] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 939.955880][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.958903][ T5914] usb 4-1: config 0 descriptor?? [ 940.430677][ T5914] hid-u2fzero 0003:20A0:4287.003A: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 940.433875][ T5914] hid-u2fzero 0003:20A0:4287.003A: NitroKey U2F LED initialised [ 940.434021][ T5914] hid-u2fzero 0003:20A0:4287.003A: NitroKey U2F RNG initialised [ 940.458957][ C0] net_ratelimit: 12222 callbacks suppressed [ 940.458980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.459427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.459842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.460279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.460686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.461104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.461536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.461961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.462398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.462801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 940.595365][ T5914] usb 4-1: USB disconnect, device number 47 [ 940.712754][T26610] fido_id[26610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 941.118683][T26624] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9664'. [ 941.839898][T26641] xt_l2tp: v2 tid > 0xffff: 1114244 [ 942.047247][T26648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9676'. [ 942.047287][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9676'. [ 942.047317][T26648] netlink: 'syz.1.9676': attribute type 13 has an invalid length. [ 942.047335][T26648] netlink: 'syz.1.9676': attribute type 11 has an invalid length. [ 943.081701][T26669] usb usb8: usbfs: process 26669 (syz.3.9686) did not claim interface 5 before use [ 943.289167][T26675] sg_write: data in/out 134217696/14 bytes for SCSI command 0x0-- guessing data in; [ 943.289167][T26675] program syz.3.9689 not setting count and/or reply_len properly [ 943.361267][ T7279] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 943.526768][ T7279] usb 1-1: unable to get BOS descriptor or descriptor too short [ 943.530183][ T7279] usb 1-1: config 3 has an invalid interface number: 8 but max is 3 [ 943.530216][ T7279] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 943.530238][ T7279] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 943.530261][ T7279] usb 1-1: config 3 has no interface number 0 [ 943.530305][ T7279] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 943.530335][ T7279] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 943.530364][ T7279] usb 1-1: config 3 interface 8 has no altsetting 0 [ 943.546538][ T7279] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 943.546574][ T7279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.546627][ T7279] usb 1-1: Product: syz [ 943.546646][ T7279] usb 1-1: Manufacturer: syz [ 943.546663][ T7279] usb 1-1: SerialNumber: syz [ 943.817681][ T7279] appledisplay 1-1:3.8: Error while getting initial brightness: -71 [ 943.851437][ T7279] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -71 [ 943.863473][ T7279] usbhid 1-1:3.8: can't add hid device: -22 [ 943.863592][ T7279] usbhid 1-1:3.8: probe with driver usbhid failed with error -22 [ 943.883837][ T7279] usb 1-1: USB disconnect, device number 54 [ 945.468812][ C0] net_ratelimit: 12469 callbacks suppressed [ 945.468837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.469376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.469858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.470339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.470815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.471292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.471767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.472276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.472748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 945.473237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 946.103362][ T5932] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 946.875743][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 946.957481][ T5932] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 947.253802][ T5932] usb 1-1: string descriptor 0 read error: -22 [ 947.253964][ T5932] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 947.253991][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.609725][ T5932] usb 1-1: reset high-speed USB device number 55 using dummy_hcd [ 948.283490][ T5932] usb 1-1: device descriptor read/64, error -71 [ 948.671476][ T5932] usb 1-1: reset high-speed USB device number 55 using dummy_hcd [ 948.984575][T26722] Bluetooth: hci3: command 0x0406 tx timeout [ 950.218896][ T5914] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 950.375744][ T5914] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 950.376733][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.376786][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.376817][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.377762][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.377813][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.377842][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.379869][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.379920][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.379950][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.381125][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.381174][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.381204][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.383715][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.383767][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.383796][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.385943][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.385993][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.386022][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.391673][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.391726][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.391755][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.395588][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.395641][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.395673][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.400717][ T5914] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 950.400748][ T5914] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 950.400773][ T5914] usb 4-1: Product: syz [ 950.400790][ T5914] usb 4-1: Manufacturer: syz [ 950.400807][ T5914] usb 4-1: SerialNumber: syz [ 950.403921][ T5914] usb 4-1: config 0 descriptor?? [ 950.426481][ T5914] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 950.479065][ C0] net_ratelimit: 11612 callbacks suppressed [ 950.479086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.479542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.479987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.480437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.480935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.481385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.481856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.482302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.482751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.483222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 950.692769][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 950.695978][ T5914] usb 4-1: USB disconnect, device number 48 [ 950.700693][ T5914] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 951.539082][ T5932] usb 1-1: device not accepting address 55, error -71 [ 951.730740][T26722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.735000][T26722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.735996][T26722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.737169][T26722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.738948][T26722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.348180][T26756] chnl_net:caif_netlink_parms(): no params data found [ 952.943322][T26756] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.943447][T26756] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.943669][T26756] bridge_slave_0: entered allmulticast mode [ 952.963488][T26756] bridge_slave_0: entered promiscuous mode [ 952.971429][T26756] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.971594][T26756] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.972050][T26756] bridge_slave_1: entered allmulticast mode [ 952.984991][T26756] bridge_slave_1: entered promiscuous mode [ 953.213794][T26756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.247765][T26756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.359069][ T5932] usb 1-1: USB disconnect, device number 55 [ 953.586927][T26756] team0: Port device team_slave_0 added [ 953.672305][T26756] team0: Port device team_slave_1 added [ 953.779366][T26722] Bluetooth: hci5: command tx timeout [ 953.791852][T26756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.791875][T26756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.791906][T26756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.794343][T26756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.794362][T26756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.794402][T26756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.462990][T26756] hsr_slave_0: entered promiscuous mode [ 954.470978][T26756] hsr_slave_1: entered promiscuous mode [ 954.471879][T26756] debugfs: 'hsr0' already exists in 'hsr' [ 954.471904][T26756] Cannot create hsr debugfs directory [ 955.489031][ C0] net_ratelimit: 11609 callbacks suppressed [ 955.489054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.489458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.489808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.490213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.490623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.491032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.491494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.491911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.492356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.492788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 955.663427][T26756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 955.682336][T26792] vivid-006: disconnect [ 955.689943][T26756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 955.715072][T26756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 955.745597][T26756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 955.860483][T26722] Bluetooth: hci5: command tx timeout [ 955.959650][ T7279] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 956.115787][T26756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.118172][ T7279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 956.118208][ T7279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.118250][ T7279] usb 1-1: New USB device found, idVendor=05f6, idProduct=3201, bcdDevice= 0.00 [ 956.118276][ T7279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.122070][ T7279] usb 1-1: config 0 descriptor?? [ 956.196490][T26756] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.228311][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.228481][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.270489][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.270629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.428357][T26791] vivid-006: reconnect [ 956.587910][ T7279] hid-generic 0003:05F6:3201.003B: hidraw0: USB HID v1.01 Device [HID 05f6:3201] on usb-dummy_hcd.0-1/input0 [ 956.631981][T26756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.786371][ T7279] usb 1-1: USB disconnect, device number 56 [ 956.846105][T26756] veth0_vlan: entered promiscuous mode [ 956.894852][T26756] veth1_vlan: entered promiscuous mode [ 956.945024][T26802] fido_id[26802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 957.034259][T26756] veth0_macvtap: entered promiscuous mode [ 957.053419][T26756] veth1_macvtap: entered promiscuous mode [ 957.176249][T26756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.220973][T26756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.230901][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.231319][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.231676][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.232005][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.766368][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.766397][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.940838][ T5147] Bluetooth: hci5: command tx timeout [ 957.974250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.974278][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.968672][T26722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 958.971523][T26722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 958.972396][T26722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 958.983043][T26722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 958.983920][T26722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 959.117599][T26822] kvm: kvm [26821]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 959.238844][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 959.400402][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 959.416367][ T5914] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 959.416400][ T5914] usb 6-1: config 0 has no interface number 0 [ 959.416446][ T5914] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 959.416494][ T5914] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 959.416519][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.424472][ T5914] usb 6-1: config 0 descriptor?? [ 959.480632][ T5914] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 960.024349][T26722] Bluetooth: hci5: command tx timeout [ 960.186763][ T981] usb 6-1: USB disconnect, device number 2 [ 960.498811][ C0] net_ratelimit: 11261 callbacks suppressed [ 960.498834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.499242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.499655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.500061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.500470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.500880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.501307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.501726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.502192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.502636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 960.577064][T26825] chnl_net:caif_netlink_parms(): no params data found [ 961.062728][T26722] Bluetooth: hci6: command tx timeout [ 961.175448][T26843] input: syz0 as /devices/virtual/input/input103 [ 961.790929][T26825] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.791051][T26825] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.791274][T26825] bridge_slave_0: entered allmulticast mode [ 961.811160][T26825] bridge_slave_0: entered promiscuous mode [ 962.528313][ T5147] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 962.533574][ T5147] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 962.534555][ T5147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 962.535711][ T5147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 962.536515][ T5147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 962.639322][T26825] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.639442][T26825] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.639664][T26825] bridge_slave_1: entered allmulticast mode [ 962.650649][T26825] bridge_slave_1: entered promiscuous mode [ 963.150178][ T5147] Bluetooth: hci6: command tx timeout [ 964.647118][T26825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.660730][ T5147] Bluetooth: hci7: command tx timeout [ 964.717616][T26825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.984834][T26825] team0: Port device team_slave_0 added [ 965.069047][ T43] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 965.219289][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 965.220093][ T5147] Bluetooth: hci6: command tx timeout [ 965.239215][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 965.239250][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 965.239279][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 965.239306][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.239361][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 965.239387][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.352248][T26825] team0: Port device team_slave_1 added [ 965.494470][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 965.494526][ T43] usbtmc 1-1:16.0: can't read capabilities [ 965.508845][ C0] net_ratelimit: 12428 callbacks suppressed [ 965.508865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.509310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.509750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.510202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.510641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.511104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.511555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.512020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.512495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.512958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 965.717938][ T43] usb 1-1: USB disconnect, device number 57 [ 965.950685][T26825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.950708][T26825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.950740][T26825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.952963][T26825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.952991][T26825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.953022][T26825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.018891][ T981] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 966.194938][ T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.194972][ T981] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 966.195026][ T981] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 966.195053][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.198168][ T981] usb 4-1: config 0 descriptor?? [ 966.203545][ T981] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 966.203595][ T981] dvb-usb: bulk message failed: -22 (3/0) [ 966.225814][ T981] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 966.229424][ T981] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 966.229484][ T981] usb 4-1: media controller created [ 966.236806][T26825] hsr_slave_0: entered promiscuous mode [ 966.241946][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.245753][T26825] hsr_slave_1: entered promiscuous mode [ 966.246608][T26825] debugfs: 'hsr0' already exists in 'hsr' [ 966.246633][T26825] Cannot create hsr debugfs directory [ 966.287670][ T981] dvb-usb: bulk message failed: -22 (6/0) [ 966.287762][ T981] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 966.306324][ T981] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input104 [ 966.367615][ T981] dvb-usb: schedule remote query interval to 150 msecs. [ 966.367645][ T981] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 966.523633][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 966.523695][ T981] dvb-usb: error while querying for an remote control event. [ 966.679049][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 966.679090][ T981] dvb-usb: error while querying for an remote control event. [ 966.743679][ T5147] Bluetooth: hci7: command tx timeout [ 966.838879][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 966.838920][ T981] dvb-usb: error while querying for an remote control event. [ 966.999675][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 966.999716][ T981] dvb-usb: error while querying for an remote control event. [ 967.159167][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 967.159205][ T5914] dvb-usb: error while querying for an remote control event. [ 967.301288][ T5147] Bluetooth: hci6: command tx timeout [ 967.319541][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 967.319582][ T5914] dvb-usb: error while querying for an remote control event. [ 967.479591][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 967.479631][ T5914] dvb-usb: error while querying for an remote control event. [ 967.509750][ T5914] usb 4-1: USB disconnect, device number 49 [ 967.570763][T26875] netlink: 'syz.5.9764': attribute type 2 has an invalid length. [ 967.570792][T26875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9764'. [ 967.617411][ T5914] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 967.744687][T26856] chnl_net:caif_netlink_parms(): no params data found [ 968.703873][T26856] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.703995][T26856] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.704178][T26856] bridge_slave_0: entered allmulticast mode [ 968.706247][T26856] bridge_slave_0: entered promiscuous mode [ 968.716449][T26856] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.729237][T26856] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.729482][T26856] bridge_slave_1: entered allmulticast mode [ 968.755607][T26856] bridge_slave_1: entered promiscuous mode [ 968.765992][T26825] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 968.831217][ T5147] Bluetooth: hci7: command tx timeout [ 969.000852][T26825] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 969.032510][T26825] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 969.068892][ T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 969.069637][T26856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.090947][T26856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.097958][T26825] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 969.236248][ T43] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 969.236281][ T43] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 969.236304][ T43] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 969.236326][ T43] usb 4-1: config 220 has no interface number 2 [ 969.236395][ T43] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 969.236425][ T43] usb 4-1: config 220 interface 0 has no altsetting 0 [ 969.236446][ T43] usb 4-1: config 220 interface 76 has no altsetting 0 [ 969.236467][ T43] usb 4-1: config 220 interface 1 has no altsetting 0 [ 969.246895][ T43] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 969.246932][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.246955][ T43] usb 4-1: Product: syz [ 969.246972][ T43] usb 4-1: Manufacturer: syz [ 969.246990][ T43] usb 4-1: SerialNumber: syz [ 969.488512][ T43] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 969.488553][ T43] uvcvideo 4-1:220.0: No valid video chain found. [ 969.488612][ T43] usb 4-1: selecting invalid altsetting 0 [ 969.537454][ T43] usb 4-1: selecting invalid altsetting 0 [ 969.537488][ T43] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 969.560009][ T43] usb 4-1: USB disconnect, device number 50 [ 970.518846][ C0] net_ratelimit: 12188 callbacks suppressed [ 970.518870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.519288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.519703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.520135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.520592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.521004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.521426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.521836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.522252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.522684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 970.899140][ T5147] Bluetooth: hci7: command tx timeout [ 975.529076][ C0] net_ratelimit: 12530 callbacks suppressed [ 975.529102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.529508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.529940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.530357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.530773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.531188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.531608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.532026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.532460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 975.532877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 977.733496][T26856] team0: Port device team_slave_0 added [ 977.768493][T26856] team0: Port device team_slave_1 added [ 978.133014][T26856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.133038][T26856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.133068][T26856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.180643][T26856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.180666][T26856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.180707][T26856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.664751][T26856] hsr_slave_0: entered promiscuous mode [ 978.671224][T26856] hsr_slave_1: entered promiscuous mode [ 978.672197][T26856] debugfs: 'hsr0' already exists in 'hsr' [ 978.672222][T26856] Cannot create hsr debugfs directory [ 979.640595][T26825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.815146][T26825] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.971121][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.971272][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.973838][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.973960][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.257505][T26856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 980.318801][T26856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 980.397037][T26856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 980.434176][T26856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 980.538867][ C0] net_ratelimit: 11886 callbacks suppressed [ 980.538889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.539349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.539806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.540258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.540713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.541163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.541648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.542096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.542549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.543000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 980.871064][T26825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.205739][T26856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.211259][T26825] veth0_vlan: entered promiscuous mode [ 981.285980][ T43] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 981.304008][T26825] veth1_vlan: entered promiscuous mode [ 981.399539][T26856] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.428861][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 981.492915][ T43] usb 4-1: config 0 has an invalid interface number: 209 but max is 0 [ 981.492950][ T43] usb 4-1: config 0 has no interface number 0 [ 981.492982][ T43] usb 4-1: config 0 interface 209 has no altsetting 0 [ 981.536561][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.536700][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.540729][ T43] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 981.540764][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.540788][ T43] usb 4-1: Product: syz [ 981.540807][ T43] usb 4-1: Manufacturer: syz [ 981.540824][ T43] usb 4-1: SerialNumber: syz [ 981.544933][ T43] usb 4-1: config 0 descriptor?? [ 981.645982][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.646105][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.675445][T26825] veth0_macvtap: entered promiscuous mode [ 981.724663][T26825] veth1_macvtap: entered promiscuous mode [ 981.967117][T26825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.046452][T26825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.129205][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.129279][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.129366][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.129442][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.267794][ T43] usb 4-1: USB disconnect, device number 51 [ 982.597561][T26856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.791743][ T5126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.791772][ T5126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.145324][ T5126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.145350][ T5126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.223731][T26856] veth0_vlan: entered promiscuous mode [ 983.333965][T26856] veth1_vlan: entered promiscuous mode [ 983.566513][T26856] veth0_macvtap: entered promiscuous mode [ 983.619449][ T43] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 983.662654][T26856] veth1_macvtap: entered promiscuous mode [ 983.791744][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 983.801884][T26856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.824729][ T43] usb 1-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 983.824766][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 983.857833][T26856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.914773][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 983.914808][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.914831][ T43] usb 1-1: Product: syz [ 983.914849][ T43] usb 1-1: Manufacturer: syz [ 983.914867][ T43] usb 1-1: SerialNumber: syz [ 983.970130][T26959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 983.974415][ T1116] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.974795][ T1116] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.975253][ T1116] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.975408][ T1116] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.440367][ T43] usb 1-1: USB disconnect, device number 58 [ 985.548853][ C0] net_ratelimit: 11540 callbacks suppressed [ 985.548876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.549385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.549844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.550298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.550746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.551220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.551669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.552172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.552627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 985.553094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 989.245852][T26987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9800'. [ 990.559039][ C0] net_ratelimit: 12430 callbacks suppressed [ 990.559062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.559371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.559708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.560034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.560338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.560671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.561135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.561597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.562111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.562458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 990.819578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 990.868737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 991.177298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 991.242376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 991.254965][T23950] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 991.419672][T23950] usb 7-1: Using ep0 maxpacket: 16 [ 991.426678][T23950] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 991.469082][T23950] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 991.469118][T23950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.469141][T23950] usb 7-1: Product: syz [ 991.469158][T23950] usb 7-1: Manufacturer: syz [ 991.469175][T23950] usb 7-1: SerialNumber: syz [ 991.472698][T23950] usb 7-1: config 0 descriptor?? [ 991.473901][T26992] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 991.567008][T23950] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 991.569743][T26895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.569766][T26895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.929583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 992.032908][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 992.033009][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 992.042527][ T7279] usb 7-1: USB disconnect, device number 2 [ 992.151905][ T7279] mcba_usb 7-1:0.0 can0: device disconnected [ 992.420928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 992.430203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 992.488676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 992.899258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 992.920789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 993.303864][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.303933][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.877055][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.877083][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.242733][T27021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.568981][ C0] net_ratelimit: 13567 callbacks suppressed [ 995.569006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.569445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.569901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.570450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.570919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.571422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.571873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.572321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.572797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 995.573260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 996.636928][T27049] macvlan2: entered promiscuous mode [ 996.636958][T27049] vlan0: entered promiscuous mode [ 997.087762][T27057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1000.420992][T27100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.421237][T27100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.428935][ T7279] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1000.578969][ C0] net_ratelimit: 12323 callbacks suppressed [ 1000.578993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.579401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.579799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.580250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.580649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.581019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.581332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.581703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.582043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.582426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1000.608990][ T7279] usb 7-1: config 0 has no interfaces? [ 1000.609035][ T7279] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1000.609060][ T7279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.616643][ T7279] usb 7-1: config 0 descriptor?? [ 1000.850256][T27095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.850664][T27095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.871484][ T7279] usb 7-1: USB disconnect, device number 3 [ 1000.994222][T27109] Attempt to restore checkpoint with obsolete wellknown handles [ 1001.375491][ T7279] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1001.539263][ T7279] usb 7-1: Using ep0 maxpacket: 8 [ 1001.547315][ T7279] usb 7-1: config index 0 descriptor too short (expected 72, got 36) [ 1001.547380][ T7279] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1001.550415][ T7279] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 1001.550449][ T7279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.550473][ T7279] usb 7-1: Product: syz [ 1001.550491][ T7279] usb 7-1: Manufacturer: syz [ 1001.550508][ T7279] usb 7-1: SerialNumber: syz [ 1003.106930][ T7279] usb 7-1: USB disconnect, device number 4 [ 1005.589050][ C0] net_ratelimit: 12338 callbacks suppressed [ 1005.589078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.589585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.590036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.590482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.590914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.591354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.591824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.592237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.598888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1005.599335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1006.819583][ T981] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1006.972720][ T981] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1006.987334][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.987400][ T981] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.987431][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1006.993217][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.993273][ T981] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.993304][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1006.994682][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.994733][ T981] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.994763][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1006.996089][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.996140][ T981] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.996170][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1006.997763][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.997815][ T981] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.997844][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.001299][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.001356][ T981] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.001395][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.003480][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.003529][ T981] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.003559][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.007476][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.007528][ T981] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.007558][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.012444][ T981] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1007.012477][ T981] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1007.012500][ T981] usb 1-1: Product: syz [ 1007.012517][ T981] usb 1-1: Manufacturer: syz [ 1007.012534][ T981] usb 1-1: SerialNumber: syz [ 1007.015657][ T981] usb 1-1: config 0 descriptor?? [ 1007.052736][ T981] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1007.396838][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 1007.397423][ T7279] usb 1-1: USB disconnect, device number 59 [ 1007.404034][ T7279] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1008.771522][ T7279] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1008.955475][ T7279] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1008.955512][ T7279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.965551][ T7279] usb 1-1: config 0 descriptor?? [ 1009.232803][ T7279] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1009.438183][ T7279] [drm:udl_init] *ERROR* Selecting channel failed [ 1009.494952][ T7279] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1009.494982][ T7279] [drm] Initialized udl on minor 2 [ 1009.533463][ T7279] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1009.533898][ T7279] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1009.544700][ T7279] usb 1-1: USB disconnect, device number 60 [ 1009.553518][ T981] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1009.554018][ T981] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1009.901797][ T981] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1010.068994][ T981] usb 8-1: Using ep0 maxpacket: 32 [ 1010.086332][ T981] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1010.088409][ T981] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 1010.088441][ T981] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.088465][ T981] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1010.088490][ T981] usb 8-1: config 128 has no interface number 0 [ 1010.088536][ T981] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1010.088568][ T981] usb 8-1: config 128 interface 127 has no altsetting 0 [ 1010.101600][ T981] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1010.101637][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.101660][ T981] usb 8-1: Product: syz [ 1010.101685][ T981] usb 8-1: Manufacturer: syz [ 1010.101702][ T981] usb 8-1: SerialNumber: syz [ 1010.115121][T27208] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1010.394319][ T981] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1010.549864][ T981] usb 8-1: USB disconnect, device number 2 [ 1010.599015][ C0] net_ratelimit: 12371 callbacks suppressed [ 1010.599039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.599461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.599870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.600311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.600719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.601129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.601535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.601963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.602448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.602922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1010.864712][T26999] udevd[26999]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.051055][T27235] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 1012.348848][ T981] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1012.508555][ T981] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1012.508589][ T981] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1012.508611][ T981] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.508633][ T981] usb 8-1: config 220 has no interface number 2 [ 1012.509528][ T981] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1012.509592][ T981] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1012.509615][ T981] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1012.509637][ T981] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1012.512984][ T981] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1012.513017][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.513040][ T981] usb 8-1: Product: syz [ 1012.513057][ T981] usb 8-1: Manufacturer: syz [ 1012.513075][ T981] usb 8-1: SerialNumber: syz [ 1012.763526][ T981] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1012.763566][ T981] uvcvideo 8-1:220.0: No valid video chain found. [ 1012.763635][ T981] usb 8-1: selecting invalid altsetting 0 [ 1012.818043][ T981] usb 8-1: selecting invalid altsetting 0 [ 1012.818079][ T981] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 1012.847399][ T981] usb 8-1: USB disconnect, device number 3 [ 1013.572071][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9902'. [ 1014.909741][ T7279] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1015.079271][ T7279] usb 7-1: Using ep0 maxpacket: 16 [ 1015.086904][ T7279] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1015.086951][ T7279] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1015.086978][ T7279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.092757][ T7279] usb 7-1: config 0 descriptor?? [ 1015.536682][ T7279] hid (null): bogus close delimiter [ 1015.609059][ C0] net_ratelimit: 12394 callbacks suppressed [ 1015.609082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.609487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.609894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.610310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.610741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.611163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.611573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.611982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.612399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.612835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1015.612966][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613008][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613039][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613069][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613098][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613128][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613157][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613187][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613217][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.613246][ T7279] hid-generic 0003:0DFC:0101.003C: unknown main item tag 0x0 [ 1015.644765][ T7279] hid-generic 0003:0DFC:0101.003C: item 0 4 0 9 parsing failed [ 1015.654001][ T7279] hid-generic 0003:0DFC:0101.003C: probe with driver hid-generic failed with error -22 [ 1015.710767][ T981] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1015.712368][ T7279] usb 7-1: USB disconnect, device number 5 [ 1015.881100][ T981] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1015.881136][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.881160][ T981] usb 4-1: Product: syz [ 1015.881178][ T981] usb 4-1: Manufacturer: syz [ 1015.881195][ T981] usb 4-1: SerialNumber: syz [ 1015.884414][ T981] usb 4-1: config 0 descriptor?? [ 1016.143112][ T7279] usb 4-1: USB disconnect, device number 52 [ 1017.066055][T23950] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1017.219801][T23950] usb 1-1: Using ep0 maxpacket: 8 [ 1017.234451][T23950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1017.237395][T23950] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1017.263369][T23950] usb 1-1: string descriptor 0 read error: -22 [ 1017.263524][T23950] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1017.263551][T23950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.277219][T23950] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1017.322076][T23950] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1017.322490][T23950] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1017.322544][T23950] usb 1-1: media controller created [ 1017.522778][T27271] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1017.538190][T23950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1017.765909][T23950] zl10353_read_register: readreg error (reg=127, ret==0) [ 1018.022812][T23950] usb 1-1: USB disconnect, device number 61 [ 1019.779213][T23950] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1019.928865][T23950] usb 6-1: Using ep0 maxpacket: 16 [ 1019.942569][T23950] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1019.942601][T23950] usb 6-1: config 0 has no interface number 0 [ 1019.942645][T23950] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1019.942674][T23950] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1019.942703][T23950] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1019.945367][T23950] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1019.945401][T23950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.945423][T23950] usb 6-1: Product: syz [ 1019.945448][T23950] usb 6-1: Manufacturer: syz [ 1019.945466][T23950] usb 6-1: SerialNumber: syz [ 1019.948195][T23950] usb 6-1: config 0 descriptor?? [ 1019.952191][T27312] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1019.952755][T27312] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.184175][T27312] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.184328][T27312] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.618869][ C0] net_ratelimit: 11655 callbacks suppressed [ 1020.618893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.619309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.619723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.620123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.620579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.621016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.621469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.621882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.622355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.622795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1020.654862][T23950] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1020.689272][T23950] usb 6-1: USB disconnect, device number 3 [ 1021.812050][ T5914] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1022.000536][ T5914] usb 8-1: Using ep0 maxpacket: 8 [ 1022.025970][ T5914] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1022.026006][ T5914] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1022.026030][ T5914] usb 8-1: Product: syz [ 1022.026047][ T5914] usb 8-1: Manufacturer: syz [ 1022.026065][ T5914] usb 8-1: SerialNumber: syz [ 1022.030042][ T5914] usb 8-1: config 0 descriptor?? [ 1022.034431][ T5914] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1022.658459][ T5914] input: gspca_zc3xx as /devices/platform/dummy_hcd.7/usb8/8-1/input/input106 [ 1022.912130][T23950] usb 8-1: USB disconnect, device number 4 [ 1024.080988][ T5914] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1024.160056][T23950] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1024.243153][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 1024.309981][ T5914] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1024.310017][ T5914] usb 6-1: config 0 has no interface number 0 [ 1024.310067][ T5914] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1024.310097][ T5914] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1024.341828][T23950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.341949][T23950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1024.341982][T23950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1024.342007][T23950] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1024.343701][T23950] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1024.343732][T23950] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1024.343755][T23950] usb 7-1: Manufacturer: syz [ 1024.347501][T23950] usb 7-1: config 0 descriptor?? [ 1024.347812][ T5914] usb 6-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 1024.347909][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.347933][ T5914] usb 6-1: Product: syz [ 1024.347951][ T5914] usb 6-1: Manufacturer: syz [ 1024.347968][ T5914] usb 6-1: SerialNumber: syz [ 1024.361321][ T5914] usb 6-1: config 0 descriptor?? [ 1024.663512][ T5914] iowarrior 6-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 1024.872261][ T981] usb 6-1: USB disconnect, device number 4 [ 1025.008823][T23950] rc_core: IR keymap rc-hauppauge not found [ 1025.008848][T23950] Registered IR keymap rc-empty [ 1025.008998][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.032554][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.050228][T23950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1025.052475][T23950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input107 [ 1025.096226][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.108859][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.129416][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.150384][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.169507][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.188943][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.212737][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.232076][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.249192][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.269754][T23950] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1025.292947][T23950] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1025.293166][T23950] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1025.414844][T23950] usb 7-1: USB disconnect, device number 6 [ 1025.501661][T27357] sctp: [Deprecated]: syz.0.9944 (pid 27357) Use of int in maxseg socket option. [ 1025.501661][T27357] Use struct sctp_assoc_value instead [ 1025.628831][ C0] net_ratelimit: 11769 callbacks suppressed [ 1025.628855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.629326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.629757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.630191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.630629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.631052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.631481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.631886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.632325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1025.632777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1027.232149][T27384] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9956'. [ 1027.259293][T27386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9958'. [ 1027.259358][T27386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9958'. [ 1027.259409][T27386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9958'. [ 1028.848841][T23950] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1029.013159][T23950] usb 4-1: Using ep0 maxpacket: 32 [ 1029.039044][T23950] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1029.039080][T23950] usb 4-1: config 0 has no interface number 0 [ 1029.039125][T23950] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.039155][T23950] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1029.049796][T23950] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1029.049830][T23950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.049853][T23950] usb 4-1: Product: syz [ 1029.049871][T23950] usb 4-1: Manufacturer: syz [ 1029.049888][T23950] usb 4-1: SerialNumber: syz [ 1029.055386][T23950] usb 4-1: config 0 descriptor?? [ 1029.681010][T23950] appletouch 4-1:0.85: Geyser mode initialized. [ 1029.686149][T23950] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input108 [ 1029.890355][ T981] usb 4-1: USB disconnect, device number 53 [ 1030.046459][ T981] appletouch 4-1:0.85: input: appletouch disconnected [ 1030.287559][T27425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9973'. [ 1030.638877][ C0] net_ratelimit: 10909 callbacks suppressed [ 1030.638903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.639357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.639772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.640193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.640648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.641082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.641553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.641997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.642434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1030.642875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1032.118956][T27449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9983'. [ 1034.008840][ T5914] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1034.189022][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 1034.199931][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.199967][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.199993][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1034.200031][ T5914] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1034.200057][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.203059][ T5914] usb 4-1: config 0 descriptor?? [ 1034.680475][ T5914] hid (null): report_id 3323596431 is invalid [ 1034.680508][ T5914] hid (null): unknown global tag 0xe [ 1034.680893][ T5914] hid (null): unknown global tag 0xe [ 1034.680922][ T5914] hid (null): unknown global tag 0xe [ 1034.681041][ T5914] hid (null): unknown global tag 0x63 [ 1034.681169][ T5914] hid (null): unknown global tag 0xd [ 1034.906513][ T5914] usb 4-1: USB disconnect, device number 54 [ 1035.024217][T27488] input: syz1 as /devices/virtual/input/input109 [ 1035.648921][ C0] net_ratelimit: 12326 callbacks suppressed [ 1035.648946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.649371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.649806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.650230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.650651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.651099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.651546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.651971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.652549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.653008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1035.690039][T27494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10006'. [ 1035.702965][T27494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10006'. [ 1036.719434][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10009'. [ 1040.249929][T27532] fuse: Invalid gid '00000000000000000003' [ 1040.658948][ C0] net_ratelimit: 11711 callbacks suppressed [ 1040.658972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.659554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.659978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.660443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.660891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.661321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.661738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.662158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.662590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.663029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1040.906296][T27545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10028'. [ 1040.906342][T27545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10028'. [ 1040.906424][T27545] macvlan0: entered allmulticast mode [ 1040.906448][T27545] veth1_vlan: entered allmulticast mode [ 1043.928953][T23950] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1044.080942][T23950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.081003][T23950] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1044.081031][T23950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.084104][T23950] usb 7-1: config 0 descriptor?? [ 1044.129495][T23950] pwc: Askey VC010 type 2 USB webcam detected. [ 1044.734695][T23950] pwc: recv_control_msg error -32 req 02 val 2700 [ 1044.744374][T23950] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1044.752988][T23950] pwc: recv_control_msg error -71 req 04 val 1000 [ 1044.802287][T23950] pwc: recv_control_msg error -71 req 04 val 1300 [ 1044.802890][T23950] pwc: recv_control_msg error -71 req 04 val 1400 [ 1044.808183][T23950] pwc: recv_control_msg error -71 req 02 val 2000 [ 1044.824921][T23950] pwc: recv_control_msg error -71 req 02 val 2100 [ 1044.832037][T23950] pwc: recv_control_msg error -71 req 04 val 1500 [ 1044.835582][T23950] pwc: recv_control_msg error -71 req 02 val 2500 [ 1044.837215][T23950] pwc: recv_control_msg error -71 req 02 val 2400 [ 1044.837946][T23950] pwc: recv_control_msg error -71 req 02 val 2600 [ 1044.841277][T23950] pwc: recv_control_msg error -71 req 02 val 2900 [ 1044.842536][T23950] pwc: recv_control_msg error -71 req 02 val 2800 [ 1044.845929][T23950] pwc: recv_control_msg error -71 req 04 val 1100 [ 1044.849589][T23950] pwc: recv_control_msg error -71 req 04 val 1200 [ 1044.869750][T23950] pwc: Registered as video103. [ 1044.872110][T23950] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input110 [ 1044.934611][T23950] usb 7-1: USB disconnect, device number 7 [ 1045.668775][ C0] net_ratelimit: 12226 callbacks suppressed [ 1045.668797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.669230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.669663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.670139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.670577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.671005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.671442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.671873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.672346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1045.672791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.678933][ C0] net_ratelimit: 12450 callbacks suppressed [ 1050.678958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.679409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.679820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.680232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.680650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.681060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.681499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.681936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.682344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1050.682761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1054.394679][T27673] cgroup: fork rejected by pids controller in /syz3 [ 1054.423951][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.424018][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.136985][ T5914] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1055.339653][ T5914] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1055.339695][ T5914] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1055.339741][ T5914] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1055.339769][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.343603][T27923] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1055.351457][ T5914] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1055.688908][ C0] net_ratelimit: 11395 callbacks suppressed [ 1055.688931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.689340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.689748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.690162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.690575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.691075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.691483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.692117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.692570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.693056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1055.734189][ T5914] usb 6-1: USB disconnect, device number 5 [ 1057.149110][ C1] hrtimer: interrupt took 21022 ns [ 1058.180164][T23950] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1058.329541][T23950] usb 8-1: Using ep0 maxpacket: 32 [ 1058.343256][T23950] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1058.343289][T23950] usb 8-1: config 0 has no interface number 0 [ 1058.354636][T23950] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1058.354671][T23950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.354695][T23950] usb 8-1: Product: syz [ 1058.354712][T23950] usb 8-1: Manufacturer: syz [ 1058.354729][T23950] usb 8-1: SerialNumber: syz [ 1058.357700][T23950] usb 8-1: config 0 descriptor?? [ 1058.406182][T23950] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1058.725525][T23950] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1058.768196][T23950] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1058.970433][T28014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.970944][T28014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.194893][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1059.196130][T23950] usb 8-1: USB disconnect, device number 5 [ 1059.212741][T23950] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1059.248509][T23950] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1059.249420][T23950] quatech2 8-1:0.51: device disconnected [ 1059.432481][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.433233][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.339792][ T7279] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1060.372603][ T981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1060.490678][ T7279] usb 4-1: Using ep0 maxpacket: 16 [ 1060.503066][ T7279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.503123][ T7279] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1060.503150][ T7279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.506229][ T7279] usb 4-1: config 0 descriptor?? [ 1060.536379][ T981] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1060.536415][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.540181][ T981] usb 6-1: config 0 descriptor?? [ 1060.640861][T28022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.691474][T28022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.698933][ C0] net_ratelimit: 11975 callbacks suppressed [ 1060.698957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.699367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.699808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.700251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.700692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.701106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.701534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.701984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.702402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.702824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1060.965485][ T7279] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1061.344764][ T7279] usb 4-1: USB disconnect, device number 55 [ 1061.621886][ T981] ath6kl: Failed to submit usb control message: -110 [ 1061.621946][ T981] ath6kl: unable to send the bmi data to the device: -110 [ 1061.621965][ T981] ath6kl: Unable to send get target info: -110 [ 1061.634675][ T981] ath6kl: Failed to init ath6kl core: -110 [ 1061.635233][ T981] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1061.818496][T28047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10108'. [ 1062.302112][T27014] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.302222][T27014] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.302265][T27014] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.302306][T27014] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.317286][ T5914] usb 6-1: USB disconnect, device number 6 [ 1065.708694][ C0] net_ratelimit: 11677 callbacks suppressed [ 1065.708717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.709117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.709491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.709880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.710274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.710697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.718745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.719280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.719768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1065.720211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1067.709130][T28106] vivid-000: ================= START STATUS ================= [ 1067.709156][T28106] vivid-000: Radio HW Seek Mode: Bounded [ 1067.709234][T28106] vivid-000: Radio Programmable HW Seek: false [ 1067.709273][T28106] vivid-000: RDS Rx I/O Mode: Block I/O [ 1067.709300][T28106] vivid-000: Generate RBDS Instead of RDS: false [ 1067.709328][T28106] vivid-000: RDS Reception: false [ 1067.709353][T28106] vivid-000: RDS Program Type: 0 inactive [ 1067.709386][T28106] vivid-000: RDS PS Name: inactive [ 1067.709418][T28106] vivid-000: RDS Radio Text: inactive [ 1067.709450][T28106] vivid-000: RDS Traffic Announcement: false inactive [ 1067.709483][T28106] vivid-000: RDS Traffic Program: false inactive [ 1067.709515][T28106] vivid-000: RDS Music: false inactive [ 1067.709547][T28106] vivid-000: ================== END STATUS ================== [ 1068.289091][ T7279] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1068.450814][ T7279] usb 7-1: Using ep0 maxpacket: 32 [ 1068.454343][ T7279] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1068.457414][ T7279] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1068.457447][ T7279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.457471][ T7279] usb 7-1: Product: syz [ 1068.457488][ T7279] usb 7-1: Manufacturer: syz [ 1068.457505][ T7279] usb 7-1: SerialNumber: syz [ 1068.460817][ T7279] usb 7-1: config 0 descriptor?? [ 1068.909091][ T7279] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 1069.111417][ T7279] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1069.132979][ T7279] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 1069.330326][ T5914] usb 7-1: USB disconnect, device number 8 [ 1070.718714][ C0] net_ratelimit: 12398 callbacks suppressed [ 1070.718736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.719151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.719558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.719968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.720399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.720811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.721267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.721684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.722139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1070.722560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.728745][ C0] net_ratelimit: 16103 callbacks suppressed [ 1075.728768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.729059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.729336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.729614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.729887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.730175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.730467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.730735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.731006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1075.731273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1079.697252][T26722] Bluetooth: hci5: command 0x0406 tx timeout [ 1080.268991][ T30] audit: type=1326 audit(1761219225.961:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28160 comm="syz.3.10157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe858f8efc9 code=0x0 [ 1080.738834][ C0] net_ratelimit: 17923 callbacks suppressed [ 1080.738858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.739184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.739474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.739745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.740032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.740325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.740593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.740863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.741160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1080.741430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1082.227671][ T5147] Bluetooth: hci6: command 0x0406 tx timeout [ 1083.259050][T28181] netlink: 277 bytes leftover after parsing attributes in process `syz.6.10166'. [ 1083.962735][T28192] netlink: 'syz.5.10170': attribute type 10 has an invalid length. [ 1083.963506][T28192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.964246][T28192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.032391][T28193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10170'. [ 1084.046772][T28192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.046950][T28192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.047299][T28192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.047443][T28192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.085546][T28192] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1084.086560][T28193] bridge_slave_1: left allmulticast mode [ 1084.086585][T28193] bridge_slave_1: left promiscuous mode [ 1084.086815][T28193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.251926][T28193] bridge_slave_0: left allmulticast mode [ 1084.251960][T28193] bridge_slave_0: left promiscuous mode [ 1084.252212][T28193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.410124][T28193] bond0: (slave bridge0): Releasing backup interface [ 1085.088918][ T5914] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1085.246488][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.246527][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.246570][ T5914] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1085.246596][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.251039][ T5914] usb 1-1: config 0 descriptor?? [ 1085.329605][ T981] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1085.491694][ T981] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1085.491743][ T981] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1085.491771][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.495756][ T981] usb 6-1: config 0 descriptor?? [ 1085.730628][ T5914] hid_parser_main: 623 callbacks suppressed [ 1085.730657][ T5914] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1085.730697][ T5914] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1085.730770][ T5914] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1085.730803][ T5914] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1085.730832][ T5914] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1085.748957][ C0] net_ratelimit: 13191 callbacks suppressed [ 1085.748977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.749404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.749831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.750252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.750705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.751132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.751550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.751964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.752385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.752838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1085.754331][ T5914] playstation 0003:054C:0DF2.003F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1086.110276][ T5914] playstation 0003:054C:0DF2.003F: Failed to retrieve feature with reportID 32: -71 [ 1086.110323][ T5914] playstation 0003:054C:0DF2.003F: Failed to retrieve DualSense firmware info: -71 [ 1086.110406][ T5914] playstation 0003:054C:0DF2.003F: Failed to get firmware info from DualSense [ 1086.110431][ T5914] playstation 0003:054C:0DF2.003F: Failed to create dualsense. [ 1086.113323][ T5914] playstation 0003:054C:0DF2.003F: probe with driver playstation failed with error -71 [ 1086.151373][ T5914] usb 1-1: USB disconnect, device number 62 [ 1086.410509][ T981] video4linux radio48: keene_cmd_main failed (-71) [ 1086.410558][ T981] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 1086.424342][ T981] usb 6-1: USB disconnect, device number 7 [ 1086.541542][T28211] fido_id[28211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1087.222399][T18362] Bluetooth: hci7: command 0x0406 tx timeout [ 1087.373797][T28232] random: crng reseeded on system resumption [ 1090.005452][ T981] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1090.005517][ T981] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1090.005548][ T981] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1090.005578][ T981] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1090.005607][ T981] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1090.036985][T28279] UHID_CREATE from different security context by process 193 (syz.7.10204), this is not allowed. [ 1090.049835][ T981] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.43 Device [syz1] on syz1 [ 1090.758809][ C0] net_ratelimit: 11095 callbacks suppressed [ 1090.758834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.759316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.759789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.760266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.760734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.761200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.761700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.762165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.762623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.763073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1090.809861][T28280] fido_id[28280]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1091.340839][T24125] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1091.508525][T24125] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1091.508562][T24125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.512142][T24125] usb 1-1: config 0 descriptor?? [ 1091.515759][T24125] cp210x 1-1:0.0: cp210x converter detected [ 1091.739044][ T981] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1091.893143][ T981] usb 8-1: Using ep0 maxpacket: 8 [ 1091.924470][T24125] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1091.940433][ T981] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.940488][ T981] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1091.947166][ T981] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1091.947201][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.947263][ T981] usb 8-1: Product: syz [ 1091.947282][ T981] usb 8-1: Manufacturer: syz [ 1091.947300][ T981] usb 8-1: SerialNumber: syz [ 1092.133419][T24125] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1092.133480][T24125] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1092.140841][T24125] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1092.211523][T24125] usb 1-1: USB disconnect, device number 63 [ 1092.232586][T24125] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1092.233177][T24125] cp210x 1-1:0.0: device disconnected [ 1092.265474][ T981] cdc_ncm 8-1:1.0: bind() failure [ 1092.306033][ T981] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1092.306087][ T981] cdc_ncm 8-1:1.1: bind() failure [ 1092.358152][ T981] usb 8-1: USB disconnect, device number 6 [ 1093.727294][ T896] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1094.073543][ T896] usb 8-1: Using ep0 maxpacket: 8 [ 1094.228861][ T896] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1094.228898][ T896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.565855][ T896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1094.565878][ T896] pvrusb2: ********** [ 1094.565886][ T896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1094.565898][ T896] pvrusb2: Important functionality might not be entirely working. [ 1094.565908][ T896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1094.565920][ T896] pvrusb2: ********** [ 1094.736553][ T2345] pvrusb2: Invalid write control endpoint [ 1094.947152][T28310] pvrusb2: Invalid write control endpoint [ 1094.948179][ T981] usb 8-1: USB disconnect, device number 7 [ 1095.193375][ T2345] pvrusb2: Invalid write control endpoint [ 1095.193395][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1095.193432][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1095.193444][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1095.193458][ T2345] pvrusb2: Device being rendered inoperable [ 1095.195322][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1095.195391][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1095.197293][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1095.197319][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1095.197333][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1095.768786][ C0] net_ratelimit: 11133 callbacks suppressed [ 1095.768809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.769267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.769726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.770176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.770638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.771089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.771549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.772004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.772464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1095.772915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1096.856471][T28367] netlink: 'syz.3.10239': attribute type 25 has an invalid length. [ 1096.856502][T28367] netlink: 'syz.3.10239': attribute type 7 has an invalid length. [ 1097.308086][T28371] loop2: detected capacity change from 0 to 7 [ 1097.335934][T28371] Dev loop2: unable to read RDB block 7 [ 1097.336011][T28371] loop2: unable to read partition table [ 1097.336236][T28371] loop2: partition table beyond EOD, truncated [ 1097.336273][T28371] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1098.555400][ T30] audit: type=1326 audit(1761219244.281:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1098.555465][ T30] audit: type=1326 audit(1761219244.281:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1098.575801][ T30] audit: type=1326 audit(1761219244.301:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1098.575866][ T30] audit: type=1326 audit(1761219244.301:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1098.575914][ T30] audit: type=1326 audit(1761219244.301:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1098.612110][ T30] audit: type=1326 audit(1761219244.351:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1098.612173][ T30] audit: type=1326 audit(1761219244.351:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1098.622516][ T30] audit: type=1326 audit(1761219244.361:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1098.622578][ T30] audit: type=1326 audit(1761219244.361:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe858f8efc9 code=0x7ffc0000 [ 1099.315635][T28397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10253'. [ 1099.340572][ T981] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1099.498806][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 1099.500952][ T981] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1099.500989][ T981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1099.501026][ T981] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1099.501053][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.562520][ T981] usb 4-1: config 0 descriptor?? [ 1100.404066][ T981] hid_parser_main: 78 callbacks suppressed [ 1100.404092][ T981] corsair-cpro 0003:1B1C:0C10.0041: unknown main item tag 0x0 [ 1100.404128][ T981] corsair-cpro 0003:1B1C:0C10.0041: unknown main item tag 0x0 [ 1100.404159][ T981] corsair-cpro 0003:1B1C:0C10.0041: unknown main item tag 0x0 [ 1100.404188][ T981] corsair-cpro 0003:1B1C:0C10.0041: unknown main item tag 0x0 [ 1100.404218][ T981] corsair-cpro 0003:1B1C:0C10.0041: unknown main item tag 0x0 [ 1100.432400][ T981] corsair-cpro 0003:1B1C:0C10.0041: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1100.592083][ T5914] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1100.714860][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10261'. [ 1100.742171][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 1100.749814][ T5914] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1100.749872][ T5914] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1100.749930][ T5914] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1100.749961][ T5914] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1100.749991][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1100.760046][ T5914] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1100.760081][ T5914] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1100.760106][ T5914] usb 6-1: Product: syz [ 1100.760123][ T5914] usb 6-1: Manufacturer: syz [ 1100.760141][ T5914] usb 6-1: SerialNumber: syz [ 1100.763644][ T5914] usb 6-1: config 0 descriptor?? [ 1100.778926][ C0] net_ratelimit: 11775 callbacks suppressed [ 1100.778949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.779340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.779730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.780103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.780511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.780904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.781281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.781688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.782078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.782480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1100.802060][ T981] corsair-cpro 0003:1B1C:0C10.0041: probe with driver corsair-cpro failed with error -110 [ 1100.807422][ T5914] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1100.837536][ T5914] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1100.842115][ T981] usb 4-1: USB disconnect, device number 56 [ 1101.096386][T28415] fido_id[28415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1101.633351][ T981] usb 6-1: USB disconnect, device number 8 [ 1101.636101][ T981] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1102.062502][T28440] input: syz1 as /devices/virtual/input/input112 [ 1102.818039][T28449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1104.339827][ T31] INFO: task kworker/1:3:5469 blocked for more than 143 seconds. [ 1104.339859][ T31] Not tainted syzkaller #0 [ 1104.339873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1104.339887][ T31] task:kworker/1:3 state:D stack:20184 pid:5469 tgid:5469 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1104.339954][ T31] Workqueue: events console_callback [ 1104.340039][ T31] Call Trace: [ 1104.340050][ T31] [ 1104.340068][ T31] __schedule+0x1798/0x4cc0 [ 1104.340115][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1104.340152][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1104.340189][ T31] ? __pfx___schedule+0x10/0x10 [ 1104.340237][ T31] ? schedule+0x91/0x360 [ 1104.340270][ T31] schedule+0x165/0x360 [ 1104.340301][ T31] schedule_timeout+0x9a/0x270 [ 1104.340327][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1104.340374][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1104.340402][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.340436][ T31] __down_common+0x319/0x6a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1104.340486][ T31] ? __pfx___down_common+0x10/0x10 [ 1104.340519][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1104.340562][ T31] down+0x80/0xd0 [ 1104.340593][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1104.340622][ T31] console_lock+0x58/0x90 [ 1104.340651][ T31] console_callback+0x69/0x440 [ 1104.340685][ T31] ? __pfx_console_callback+0x10/0x10 [ 1104.340721][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1104.340747][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1104.340773][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1104.340802][ T31] process_scheduled_works+0xae1/0x17b0 [ 1104.340860][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1104.340907][ T31] worker_thread+0x8a0/0xda0 [ 1104.340963][ T31] kthread+0x711/0x8a0 [ 1104.341000][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1104.341026][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.341061][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1104.341088][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.341115][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.341146][ T31] ret_from_fork+0x4bc/0x870 [ 1104.341174][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1104.341213][ T31] ? __switch_to_asm+0x39/0x70 [ 1104.341235][ T31] ? __switch_to_asm+0x33/0x70 [ 1104.341255][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.341289][ T31] ret_from_fork_asm+0x1a/0x30 [ 1104.341338][ T31] [ 1104.341401][ T31] INFO: task syz.1.9705:26709 blocked for more than 143 seconds. [ 1104.341419][ T31] Not tainted syzkaller #0 [ 1104.341432][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1104.341450][ T31] task:syz.1.9705 state:D stack:27368 pid:26709 tgid:26708 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 1104.341522][ T31] Call Trace: [ 1104.341533][ T31] [ 1104.341549][ T31] __schedule+0x1798/0x4cc0 [ 1104.341603][ T31] ? __lock_acquire+0xab9/0xd20 [ 1104.341629][ T31] ? __pfx___schedule+0x10/0x10 [ 1104.341676][ T31] ? schedule+0x91/0x360 [ 1104.341709][ T31] schedule+0x165/0x360 [ 1104.341740][ T31] schedule_timeout+0x9a/0x270 [ 1104.341766][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1104.341805][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1104.341833][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.341867][ T31] __down_common+0x319/0x6a0 [ 1104.341911][ T31] ? __pfx___down_common+0x10/0x10 [ 1104.341942][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1104.341974][ T31] ? rcu_is_watching+0x15/0xb0 [ 1104.342003][ T31] ? trace_kmalloc+0x1f/0xd0 [ 1104.342034][ T31] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1104.342074][ T31] down+0x80/0xd0 [ 1104.342109][ T31] console_lock+0x58/0x90 [ 1104.342137][ T31] con_font_op+0x443/0xfd0 [ 1104.342175][ T31] ? __lock_acquire+0xab9/0xd20 [ 1104.342200][ T31] ? __pfx_con_font_op+0x10/0x10 [ 1104.342239][ T31] ? __might_fault+0xb0/0x130 [ 1104.342297][ T31] vt_ioctl+0x1a89/0x1f20 [ 1104.342358][ T31] ? __pfx_vt_ioctl+0x10/0x10 [ 1104.342404][ T31] ? __fget_files+0x2a/0x420 [ 1104.342433][ T31] ? tty_jobctrl_ioctl+0x369/0xb70 [ 1104.342465][ T31] ? __fget_files+0x3a0/0x420 [ 1104.342488][ T31] ? __fget_files+0x2a/0x420 [ 1104.342514][ T31] tty_ioctl+0x929/0xde0 [ 1104.342548][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1104.342581][ T31] __se_sys_ioctl+0xfc/0x170 [ 1104.342617][ T31] do_syscall_64+0xfa/0xfa0 [ 1104.342647][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.342677][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.342702][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1104.342731][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.342764][ T31] RIP: 0033:0x7f4d0a78efc9 [ 1104.342791][ T31] RSP: 002b:00007f4d0b62b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.342818][ T31] RAX: ffffffffffffffda RBX: 00007f4d0a9e5fa0 RCX: 00007f4d0a78efc9 [ 1104.342837][ T31] RDX: 0000200000000100 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1104.342854][ T31] RBP: 00007f4d0a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1104.342871][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.342887][ T31] R13: 00007f4d0a9e6038 R14: 00007f4d0a9e5fa0 R15: 00007f4d0ab0fa28 [ 1104.342926][ T31] [ 1104.342970][ T31] [ 1104.342970][ T31] Showing all locks held in the system: [ 1104.342982][ T31] 1 lock held by pool_workqueue_/3: [ 1104.342997][ T31] #0: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1104.343072][ T31] 1 lock held by khungtaskd/31: [ 1104.343088][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1104.343173][ T31] 2 locks held by kworker/1:3/5469: [ 1104.343187][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1104.343253][ T31] #1: ffffc90003407ba0 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1104.343318][ T31] 2 locks held by getty/5587: [ 1104.343341][ T31] #0: ffff88802f9a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1104.343411][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1104.343476][ T31] 4 locks held by syz-executor/5845: [ 1104.343499][ T31] 6 locks held by syz.4.9610/26552: [ 1104.343514][ T31] 1 lock held by syz.2.9670/26634: [ 1104.343531][ T31] 7 locks held by kworker/u8:3/26895: [ 1104.343547][ T31] 4 locks held by kworker/u8:8/26971: [ 1104.343569][ T31] 2 locks held by syz.6.10269/28466: [ 1104.343584][ T31] 1 lock held by syz.7.10282/28465: [ 1104.343598][ T31] #0: ffff88807c4f9760 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 1104.343667][ T31] 4 locks held by syz.7.10282/28470: [ 1104.343682][ T31] [ 1104.343690][ T31] ============================================= [ 1104.343690][ T31] [ 1104.343709][ T31] NMI backtrace for cpu 1 [ 1104.343730][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1104.343754][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1104.343768][ T31] Call Trace: [ 1104.343777][ T31] [ 1104.343786][ T31] dump_stack_lvl+0x189/0x250 [ 1104.343821][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1104.343851][ T31] ? __pfx__printk+0x10/0x10 [ 1104.343887][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1104.343914][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1104.343939][ T31] ? __pfx__printk+0x10/0x10 [ 1104.343967][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1104.344004][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1104.344030][ T31] watchdog+0xf60/0xfa0 [ 1104.344058][ T31] ? watchdog+0x1e2/0xfa0 [ 1104.344087][ T31] kthread+0x711/0x8a0 [ 1104.344120][ T31] ? __pfx_watchdog+0x10/0x10 [ 1104.344141][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.344174][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1104.344198][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.344224][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.344255][ T31] ret_from_fork+0x4bc/0x870 [ 1104.344281][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1104.344312][ T31] ? __switch_to_asm+0x39/0x70 [ 1104.344337][ T31] ? __switch_to_asm+0x33/0x70 [ 1104.344355][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.344386][ T31] ret_from_fork_asm+0x1a/0x30 [ 1104.344423][ T31] [ 1104.344433][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1104.344463][ C0] NMI backtrace for cpu 0 [ 1104.344478][ C0] CPU: 0 UID: 0 PID: 26895 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1104.344498][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1104.344511][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1104.344534][ C0] RIP: 0010:check_preemption_disabled+0x40/0x120 [ 1104.344562][ C0] Code: 08 65 8b 05 e6 f4 27 07 65 8b 0d db f4 27 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d bb f4 27 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 04 24 00 00 [ 1104.344585][ C0] RSP: 0018:ffffc90000007858 EFLAGS: 00000246 [ 1104.344601][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 785ba94a2dba1800 [ 1104.344613][ C0] RDX: ffff8880480c8000 RSI: ffffffff8bbf0440 RDI: ffffffff8bbf0400 [ 1104.344627][ C0] RBP: ffffc90000007990 R08: ffff8880480c8000 R09: 0000000000000002 [ 1104.344640][ C0] R10: 00000000fffffff5 R11: ffffffff89f522a0 R12: dffffc0000000000 [ 1104.344658][ C0] R13: ffff888032882000 R14: 0000000000000001 R15: ffff88802853a000 [ 1104.344672][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 1104.344687][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1104.344699][ C0] CR2: 00007f231373c44a CR3: 0000000077272000 CR4: 00000000003526f0 [ 1104.344716][ C0] Call Trace: [ 1104.344723][ C0] [ 1104.344733][ C0] rcu_is_watching+0x15/0xb0 [ 1104.344755][ C0] rcu_read_lock_held+0x15/0x50 [ 1104.344778][ C0] ip6_mc_input+0x17c/0xb70 [ 1104.344809][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1104.344837][ C0] ? skb_dst+0x71/0xd0 [ 1104.344863][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 1104.344890][ C0] NF_HOOK+0x30c/0x3a0 [ 1104.344915][ C0] ? skb_orphan+0xaf/0xd0 [ 1104.344942][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1104.344967][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1104.344991][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1104.345018][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1104.345050][ C0] __netif_receive_skb+0xd3/0x380 [ 1104.345075][ C0] ? process_backlog+0x2d5/0x14f0 [ 1104.345102][ C0] process_backlog+0x60e/0x14f0 [ 1104.345136][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1104.345161][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1104.345187][ C0] __napi_poll+0xc7/0x360 [ 1104.345209][ C0] ? skb_defer_free_flush+0x229/0x250 [ 1104.345235][ C0] net_rx_action+0x5f7/0xdf0 [ 1104.345269][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1104.345297][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1104.345323][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1104.345352][ C0] handle_softirqs+0x286/0x870 [ 1104.345374][ C0] ? do_softirq+0xec/0x180 [ 1104.345395][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1104.345417][ C0] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 1104.345439][ C0] do_softirq+0xec/0x180 [ 1104.345456][ C0] [ 1104.345463][ C0] [ 1104.345470][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1104.345487][ C0] ? devlink_trap_report+0x216/0x6a0 [ 1104.345512][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1104.345530][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1104.345549][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1104.345569][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1104.345602][ C0] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 1104.345624][ C0] nsim_dev_trap_report_work+0x7c7/0xb80 [ 1104.345653][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1104.345673][ C0] process_scheduled_works+0xae1/0x17b0 [ 1104.345707][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1104.345735][ C0] worker_thread+0x8a0/0xda0 [ 1104.345768][ C0] kthread+0x711/0x8a0 [ 1104.345793][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1104.345812][ C0] ? __pfx_kthread+0x10/0x10 [ 1104.345837][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1104.345857][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.345878][ C0] ? __pfx_kthread+0x10/0x10 [ 1104.345902][ C0] ret_from_fork+0x4bc/0x870 [ 1104.345921][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1104.345943][ C0] ? __switch_to_asm+0x39/0x70 [ 1104.345957][ C0] ? __switch_to_asm+0x33/0x70 [ 1104.345972][ C0] ? __pfx_kthread+0x10/0x10 [ 1104.345996][ C0] ret_from_fork_asm+0x1a/0x30 [ 1104.346020][ C0] [ 1105.210203][T28484] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.10290'. [ 1105.469131][ T5914] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1105.512899][T28490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10291'. [ 1105.668792][ T5914] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1105.668827][ T5914] usb 1-1: config 0 has no interface number 0 [ 1105.668871][ T5914] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1105.668899][ T5914] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1105.668928][ T5914] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1105.674222][ T5914] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1105.674257][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1105.674281][ T5914] usb 1-1: Product: syz [ 1105.674298][ T5914] usb 1-1: SerialNumber: syz [ 1105.677694][ T5914] usb 1-1: config 0 descriptor?? [ 1105.682572][ T5914] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1105.692771][ T5914] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input113 [ 1105.722258][ T981] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1105.788761][ C0] net_ratelimit: 11670 callbacks suppressed [ 1105.788782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.789282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.789765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.790253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.790764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.791262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.791756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.792256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.792739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.793270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1105.882300][ T981] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1105.882364][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.886362][ T981] usb 7-1: config 0 descriptor?? [ 1105.938259][ T981] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1106.704004][ T981] gspca_sunplus: reg_w_riv err -71 [ 1106.704125][ T981] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1106.706939][ T981] usb 7-1: USB disconnect, device number 9 [ 1107.741293][T28506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10300'. [ 1108.301159][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.304591][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.304814][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.305032][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.305262][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.305471][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.305677][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.305886][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.306096][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.306320][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1108.311260][ T981] usb 1-1: USB disconnect, device number 64 [ 1108.311374][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1108.353258][ T981] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1110.500817][T28543] netlink: 324 bytes leftover after parsing attributes in process `syz.5.10315'. [ 1110.798732][ C0] net_ratelimit: 11516 callbacks suppressed [ 1110.798757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.799272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.799715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.800179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.800649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.801142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.801624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.802113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.802567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1110.803014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1111.184095][T28554] vivid-004: disconnect [ 1111.219426][T28553] vivid-004: reconnect [ 1115.808889][ C0] net_ratelimit: 11954 callbacks suppressed [ 1115.808917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.809406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.809834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.810295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.810735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.811178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.811650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.812077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.812492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.812954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1115.875935][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.876002][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.461203][ T5914] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1116.626301][ T5914] usb 7-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1116.626339][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.626361][ T5914] usb 7-1: Product: syz [ 1116.626379][ T5914] usb 7-1: Manufacturer: syz [ 1116.626396][ T5914] usb 7-1: SerialNumber: syz [ 1116.641781][ T5914] usb 7-1: config 0 descriptor?? [ 1116.672294][ T5914] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1116.889146][ T5914] pwc: Failed to set LED on/off time (-71) [ 1116.899947][ T5914] pwc: send_video_command error -71 [ 1116.899973][ T5914] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1116.900086][ T5914] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1116.919856][ T5914] usb 7-1: USB disconnect, device number 10 [ 1118.420273][T28605] kthread_run failed with err -4 [ 1119.255232][ T5914] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1119.443013][ T5914] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1119.443049][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.443073][ T5914] usb 1-1: Product: syz [ 1119.443090][ T5914] usb 1-1: Manufacturer: syz [ 1119.443108][ T5914] usb 1-1: SerialNumber: syz [ 1119.446437][ T5914] usb 1-1: config 0 descriptor?? [ 1119.683522][ T5914] usb 1-1: ignoring: probably an ADSL modem [ 1120.095751][ T5914] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1120.252306][T28660] tap0: tun_chr_ioctl cmd 21731 [ 1120.298059][ T5914] usb 1-1: USB disconnect, device number 65 [ 1120.818900][ C0] net_ratelimit: 11959 callbacks suppressed [ 1120.818923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.819331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.819741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.820153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.820572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.821009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.821495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.821903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.822322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1120.822735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1123.289565][ T981] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1123.469861][ T981] usb 8-1: Using ep0 maxpacket: 16 [ 1123.474070][ T981] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.474125][ T981] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1123.474156][ T981] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1123.474180][ T981] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1123.474206][ T981] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1123.491797][ T981] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1123.491831][ T981] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1123.491854][ T981] usb 8-1: Manufacturer: syz [ 1123.494961][ T981] usb 8-1: config 0 descriptor?? [ 1124.058919][ T981] rc_core: IR keymap rc-hauppauge not found [ 1124.058943][ T981] Registered IR keymap rc-empty [ 1124.059088][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.078955][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.103762][ T981] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1124.116345][ T981] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input114 [ 1124.159884][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.179642][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.200763][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.219703][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.246234][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.260734][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.279637][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.300170][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.318912][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.348934][ T981] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1124.383860][ T981] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1124.383892][ T981] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1124.443646][ T981] usb 8-1: USB disconnect, device number 8 [ 1124.835525][ T31] INFO: task kworker/1:3:5469 blocked for more than 163 seconds. [ 1124.835555][ T31] Not tainted syzkaller #0 [ 1124.835569][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1124.835583][ T31] task:kworker/1:3 state:D stack:20184 pid:5469 tgid:5469 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1124.835649][ T31] Workqueue: events console_callback [ 1124.835688][ T31] Call Trace: [ 1124.835699][ T31] [ 1124.835715][ T31] __schedule+0x1798/0x4cc0 [ 1124.835762][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1124.835800][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1124.835837][ T31] ? __pfx___schedule+0x10/0x10 [ 1124.835895][ T31] ? schedule+0x91/0x360 [ 1124.835928][ T31] schedule+0x165/0x360 [ 1124.835959][ T31] schedule_timeout+0x9a/0x270 [ 1124.835985][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1124.836025][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1124.836053][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.836087][ T31] __down_common+0x319/0x6a0 [ 1124.836132][ T31] ? __pfx___down_common+0x10/0x10 [ 1124.836165][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1124.836208][ T31] down+0x80/0xd0 [ 1124.836238][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1124.836269][ T31] console_lock+0x58/0x90 [ 1124.836298][ T31] console_callback+0x69/0x440 [ 1124.836331][ T31] ? __pfx_console_callback+0x10/0x10 [ 1124.836368][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1124.836395][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1124.836420][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1124.836449][ T31] process_scheduled_works+0xae1/0x17b0 [ 1124.836507][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1124.836554][ T31] worker_thread+0x8a0/0xda0 [ 1124.836610][ T31] kthread+0x711/0x8a0 [ 1124.836646][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1124.836673][ T31] ? __pfx_kthread+0x10/0x10 [ 1124.836708][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1124.836736][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.836764][ T31] ? __pfx_kthread+0x10/0x10 [ 1124.836798][ T31] ret_from_fork+0x4bc/0x870 [ 1124.836827][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.836861][ T31] ? __switch_to_asm+0x39/0x70 [ 1124.836890][ T31] ? __switch_to_asm+0x33/0x70 [ 1124.836911][ T31] ? __pfx_kthread+0x10/0x10 [ 1124.836944][ T31] ret_from_fork_asm+0x1a/0x30 [ 1124.836985][ T31] [ 1124.837043][ T31] INFO: task syz.1.9705:26709 blocked for more than 163 seconds. [ 1124.837062][ T31] Not tainted syzkaller #0 [ 1124.837076][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1124.837088][ T31] task:syz.1.9705 state:D stack:27368 pid:26709 tgid:26708 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 1124.837162][ T31] Call Trace: [ 1124.837172][ T31] [ 1124.837187][ T31] __schedule+0x1798/0x4cc0 [ 1124.837241][ T31] ? __lock_acquire+0xab9/0xd20 [ 1124.837267][ T31] ? __pfx___schedule+0x10/0x10 [ 1124.837313][ T31] ? schedule+0x91/0x360 [ 1124.837345][ T31] schedule+0x165/0x360 [ 1124.837377][ T31] schedule_timeout+0x9a/0x270 [ 1124.837402][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1124.837440][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1124.837469][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.837502][ T31] __down_common+0x319/0x6a0 [ 1124.837547][ T31] ? __pfx___down_common+0x10/0x10 [ 1124.837579][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1124.837610][ T31] ? rcu_is_watching+0x15/0xb0 [ 1124.837638][ T31] ? trace_kmalloc+0x1f/0xd0 [ 1124.837670][ T31] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1124.837711][ T31] down+0x80/0xd0 [ 1124.837746][ T31] console_lock+0x58/0x90 [ 1124.837774][ T31] con_font_op+0x443/0xfd0 [ 1124.837812][ T31] ? __lock_acquire+0xab9/0xd20 [ 1124.837837][ T31] ? __pfx_con_font_op+0x10/0x10 [ 1124.837875][ T31] ? __might_fault+0xb0/0x130 [ 1124.837941][ T31] vt_ioctl+0x1a89/0x1f20 [ 1124.837977][ T31] ? __pfx_vt_ioctl+0x10/0x10 [ 1124.838022][ T31] ? __fget_files+0x2a/0x420 [ 1124.838050][ T31] ? tty_jobctrl_ioctl+0x369/0xb70 [ 1124.838078][ T31] ? __fget_files+0x3a0/0x420 [ 1124.838101][ T31] ? __fget_files+0x2a/0x420 [ 1124.838127][ T31] tty_ioctl+0x929/0xde0 [ 1124.838162][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1124.838195][ T31] __se_sys_ioctl+0xfc/0x170 [ 1124.838229][ T31] do_syscall_64+0xfa/0xfa0 [ 1124.838259][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.838289][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.838314][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1124.838344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.838368][ T31] RIP: 0033:0x7f4d0a78efc9 [ 1124.838389][ T31] RSP: 002b:00007f4d0b62b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.838416][ T31] RAX: ffffffffffffffda RBX: 00007f4d0a9e5fa0 RCX: 00007f4d0a78efc9 [ 1124.838435][ T31] RDX: 0000200000000100 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1124.838453][ T31] RBP: 00007f4d0a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1124.838469][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.838485][ T31] R13: 00007f4d0a9e6038 R14: 00007f4d0a9e5fa0 R15: 00007f4d0ab0fa28 [ 1124.838525][ T31] [ 1124.838562][ T31] [ 1124.838562][ T31] Showing all locks held in the system: [ 1124.838577][ T31] 1 lock held by khungtaskd/31: [ 1124.838591][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1124.868911][ T31] 4 locks held by kworker/1:2/981: [ 1124.868929][ T31] #0: ffff8880216c9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1124.868997][ T31] #1: ffffc90003a67ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1124.869061][ T31] #2: ffff888027b01198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1124.869135][ T31] #3: ffff888022294198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 1124.869205][ T31] 2 locks held by kworker/u8:6/1116: [ 1124.869220][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1124.869292][ T31] #1: ffffc90003f8fba0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1124.869379][ T31] 2 locks held by kworker/1:3/5469: [ 1124.869395][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1124.869459][ T31] #1: ffffc90003407ba0 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1124.869523][ T31] 2 locks held by getty/5587: [ 1124.869538][ T31] #0: ffff88802f9a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1124.869606][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1124.869670][ T31] 4 locks held by syz-executor/5845: [ 1124.869690][ T31] 7 locks held by kworker/0:6/5932: [ 1124.869704][ T31] 2 locks held by kworker/0:8/5983: [ 1124.869724][ T31] 6 locks held by syz.4.9610/26552: [ 1124.869739][ T31] 1 lock held by syz.2.9670/26634: [ 1124.869755][ T31] 4 locks held by syz-executor/26756: [ 1124.869774][ T31] 2 locks held by kworker/u8:8/26971: [ 1124.869789][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1124.869858][ T31] #1: ffffc9000bbf7ba0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1124.869931][ T31] 1 lock held by udevd/27003: [ 1124.869945][ T31] 1 lock held by udevd/27007: [ 1124.869961][ T31] 2 locks held by syz.6.10381/28704: [ 1124.869977][ T31] 2 locks held by syz.3.10384/28711: [ 1124.869994][ T31] [ 1124.870002][ T31] ============================================= [ 1124.870002][ T31] [ 1124.870015][ T31] NMI backtrace for cpu 1 [ 1124.870029][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1124.870053][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1124.870067][ T31] Call Trace: [ 1124.870077][ T31] [ 1124.870086][ T31] dump_stack_lvl+0x189/0x250 [ 1124.870122][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1124.870149][ T31] ? __pfx__printk+0x10/0x10 [ 1124.870186][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1124.870211][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1124.870236][ T31] ? __pfx__printk+0x10/0x10 [ 1124.870264][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1124.870302][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1124.870328][ T31] watchdog+0xf60/0xfa0 [ 1124.870357][ T31] ? watchdog+0x1e2/0xfa0 [ 1124.870385][ T31] kthread+0x711/0x8a0 [ 1124.870418][ T31] ? __pfx_watchdog+0x10/0x10 [ 1124.870439][ T31] ? __pfx_kthread+0x10/0x10 [ 1124.870470][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1124.870496][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.870522][ T31] ? __pfx_kthread+0x10/0x10 [ 1124.870553][ T31] ret_from_fork+0x4bc/0x870 [ 1124.870579][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.870610][ T31] ? __switch_to_asm+0x39/0x70 [ 1124.870629][ T31] ? __switch_to_asm+0x33/0x70 [ 1124.870646][ T31] ? __pfx_kthread+0x10/0x10 [ 1124.870677][ T31] ret_from_fork_asm+0x1a/0x30 [ 1124.870715][ T31] [ 1124.870724][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1124.870753][ C0] NMI backtrace for cpu 0 [ 1124.870767][ C0] CPU: 0 UID: 0 PID: 5932 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 1124.870787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1124.870800][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 1124.870830][ C0] RIP: 0010:ebt_do_table+0x101/0x2820 [ 1124.870858][ C0] Code: e8 54 ea 20 01 48 83 eb 80 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ca f7 fd f7 4c 89 b4 24 80 00 00 00 48 8b 1b <48> 8d 7b 04 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 0f 26 [ 1124.870874][ C0] RSP: 0000:ffffc900000068e0 EFLAGS: 00000246 [ 1124.870890][ C0] RAX: 1ffff1100ede86f0 RBX: ffffc9000333d000 RCX: ffffffff819dfcad [ 1124.870905][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888076f43740 [ 1124.870917][ C0] RBP: ffffc90000006ac0 R08: ffff888076f43743 R09: 1ffff1100ede86e8 [ 1124.870931][ C0] R10: dffffc0000000000 R11: ffffed100ede86e9 R12: ffffc90000006a20 [ 1124.870945][ C0] R13: ffff88807c88d888 R14: ffffc90000006b80 R15: dffffc0000000000 [ 1124.870960][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 1124.870974][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1124.870987][ C0] CR2: 0000001b30e23ffc CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1124.871005][ C0] Call Trace: [ 1124.871011][ C0] [ 1124.871025][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1124.871045][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.871069][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1124.871090][ C0] ? __lock_acquire+0xab9/0xd20 [ 1124.871108][ C0] ? __pfx_ebt_do_table+0x10/0x10 [ 1124.871142][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1124.871162][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1124.871181][ C0] ? __pfx_ebt_do_table+0x10/0x10 [ 1124.871208][ C0] nf_hook_slow+0xc5/0x220 [ 1124.871226][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1124.871247][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1124.871267][ C0] NF_HOOK+0x215/0x3c0 [ 1124.871288][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1124.871306][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1124.871324][ C0] ? net_generic+0x1e/0x240 [ 1124.871346][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1124.871370][ C0] ? net_generic+0x1e/0x240 [ 1124.871393][ C0] br_forward_finish+0xd3/0x130 [ 1124.871411][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1124.871433][ C0] br_nf_forward_finish+0xa40/0xe60 [ 1124.871462][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1124.871488][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.871510][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1124.871532][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1124.871553][ C0] NF_HOOK+0x61b/0x6b0 [ 1124.871577][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1124.871600][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1124.871629][ C0] br_nf_forward_ip+0x647/0x7e0 [ 1124.871654][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1124.871682][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1124.871705][ C0] nf_hook_slow+0xc5/0x220 [ 1124.871722][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.871742][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.871761][ C0] NF_HOOK+0x215/0x3c0 [ 1124.871781][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1124.871800][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1124.871820][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.871845][ C0] __br_forward+0x41e/0x600 [ 1124.871864][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.871887][ C0] ? __pfx___br_forward+0x10/0x10 [ 1124.871908][ C0] ? skb_clone+0x246/0x3a0 [ 1124.871930][ C0] maybe_deliver+0xb5/0x160 [ 1124.871951][ C0] br_flood+0x31a/0x6a0 [ 1124.871976][ C0] br_handle_frame_finish+0x15a3/0x1c50 [ 1124.872007][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.872036][ C0] ? ip6t_do_table+0x1db/0x1560 [ 1124.872063][ C0] ? nf_hook_slow+0x176/0x220 [ 1124.872081][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.872104][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 1124.872137][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1124.872162][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.872184][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 1124.872215][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 1124.872241][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.872268][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 1124.872293][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 1124.872320][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1124.872346][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1124.872372][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 1124.872399][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1124.872420][ C0] br_handle_frame+0x982/0x14c0 [ 1124.872448][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1124.872473][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.872500][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1124.872524][ C0] __netif_receive_skb_core+0x10b9/0x4380 [ 1124.872548][ C0] ? ip6_mc_input+0x8de/0xb70 [ 1124.872575][ C0] ? kmem_cache_free+0x19b/0x690 [ 1124.872605][ C0] ? ip6_mc_input+0x8de/0xb70 [ 1124.872634][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1124.872663][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1124.872687][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 1124.872714][ C0] ? NF_HOOK+0x30c/0x3a0 [ 1124.872738][ C0] ? skb_orphan+0xaf/0xd0 [ 1124.872767][ C0] ? __lock_acquire+0xab9/0xd20 [ 1124.872787][ C0] ? process_backlog+0x2d5/0x14f0 [ 1124.872813][ C0] ? process_backlog+0x2d5/0x14f0 [ 1124.872841][ C0] __netif_receive_skb+0x72/0x380 [ 1124.872869][ C0] ? process_backlog+0x2d5/0x14f0 [ 1124.872897][ C0] process_backlog+0x60e/0x14f0 [ 1124.872931][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1124.872956][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1124.872978][ C0] ? sched_clock_cpu+0x74/0x430 [ 1124.872999][ C0] __napi_poll+0xc7/0x360 [ 1124.873021][ C0] ? skb_defer_free_flush+0x229/0x250 [ 1124.873046][ C0] net_rx_action+0x5f7/0xdf0 [ 1124.873080][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1124.873108][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1124.873139][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1124.873167][ C0] handle_softirqs+0x286/0x870 [ 1124.873188][ C0] ? do_softirq+0xec/0x180 [ 1124.873209][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1124.873231][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 1124.873258][ C0] do_softirq+0xec/0x180 [ 1124.873275][ C0] [ 1124.873282][ C0] [ 1124.873289][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1124.873312][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1124.873329][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1124.873349][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1124.873369][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 1124.873396][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 1124.873422][ C0] neigh_periodic_work+0xc28/0xe50 [ 1124.873451][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1124.873471][ C0] process_scheduled_works+0xae1/0x17b0 [ 1124.873505][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1124.873533][ C0] worker_thread+0x8a0/0xda0 [ 1124.873554][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1124.873580][ C0] ? __kthread_parkme+0x7b/0x200 [ 1124.873606][ C0] kthread+0x711/0x8a0 [ 1124.873631][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1124.873651][ C0] ? __pfx_kthread+0x10/0x10 [ 1124.873675][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1124.873695][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.873716][ C0] ? __pfx_kthread+0x10/0x10 [ 1124.873741][ C0] ret_from_fork+0x4bc/0x870 [ 1124.873761][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.873783][ C0] ? __switch_to_asm+0x39/0x70 [ 1124.873798][ C0] ? __switch_to_asm+0x33/0x70 [ 1124.873812][ C0] ? __pfx_kthread+0x10/0x10 [ 1124.873837][ C0] ret_from_fork_asm+0x1a/0x30 [ 1124.873861][ C0] [ 1125.734528][ T5914] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1125.829013][ C0] net_ratelimit: 12598 callbacks suppressed [ 1125.829041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.829461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.829885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.830321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.830733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.831141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.831548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.831964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.832393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.832799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1125.888865][ T5914] usb 8-1: Using ep0 maxpacket: 8 [ 1125.903046][ T5914] usb 8-1: config 0 has no interfaces? [ 1125.903097][ T5914] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1125.903123][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.906174][ T5914] usb 8-1: config 0 descriptor?? [ 1126.182185][T24125] usb 8-1: USB disconnect, device number 9 [ 1130.839081][ C0] net_ratelimit: 12618 callbacks suppressed [ 1130.839105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.839539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.839976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.840393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.840845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.841266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.841716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.842141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.842556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1130.842982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1133.851897][T28806] netem: incorrect gi model size [ 1133.851998][T28806] netem: change failed [ 1134.383621][T28817] veth1_to_bond: entered allmulticast mode [ 1134.384018][T28815] veth1_to_bond: left allmulticast mode [ 1134.609932][T28819] netlink: 'syz.6.10432': attribute type 1 has an invalid length. [ 1134.609962][T28819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10432'. [ 1135.053475][ T5914] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1135.215519][ T5914] usb 8-1: Using ep0 maxpacket: 8 [ 1135.221276][ T5914] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1135.221307][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.221329][ T5914] usb 8-1: config 0 has no interfaces? [ 1135.225470][ T5914] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1135.225543][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.225568][ T5914] usb 8-1: Product: syz [ 1135.225585][ T5914] usb 8-1: Manufacturer: syz [ 1135.225603][ T5914] usb 8-1: SerialNumber: syz [ 1135.229701][ T5914] usb 8-1: config 0 descriptor?? [ 1135.696777][ T30] audit: type=1800 audit(1761219281.431:929): pid=28838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10438" name="file0" dev="tmpfs" ino=10628 res=0 errno=0 [ 1135.848975][ C0] net_ratelimit: 12322 callbacks suppressed [ 1135.848996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.849399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.849820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.850212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.850599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.850981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.851372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.851755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.852161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.852539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1135.960541][ T7279] usb 8-1: USB disconnect, device number 10 [ 1136.900288][T28858] cgroup: fork rejected by pids controller in /syz5 [ 1139.613825][T26895] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.203652][T28894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10461'. [ 1140.595473][T26895] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.694102][T28896] syz.3.10463 (28896) used greatest stack depth: 18232 bytes left [ 1140.858714][ C0] net_ratelimit: 11498 callbacks suppressed [ 1140.858739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.859168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.859578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.860006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.860407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.860821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.861257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.861670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.862083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.862495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1140.997699][T28906] misc userio: Can't change port type on an already running userio instance [ 1141.085347][T26895] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.306402][T26895] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.000329][T28915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10471'. [ 1142.200662][T18362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1142.218322][T18362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1142.239453][T18362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1142.240620][T18362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1142.241402][T18362] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1143.706754][T28947] hub 9-0:1.0: USB hub found [ 1143.707236][T28947] hub 9-0:1.0: 1 port detected [ 1144.338968][T18362] Bluetooth: hci5: command tx timeout [ 1144.749041][ T981] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1145.004203][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 1145.007279][ T981] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 1145.037956][ T981] usb 4-1: config 0 has no interfaces? [ 1145.127793][ T981] usb 4-1: config 0 has no interfaces? [ 1145.160150][ T981] usb 4-1: config 0 has no interfaces? [ 1145.181180][ T981] usb 4-1: config 0 has no interfaces? [ 1145.190468][ T981] usb 4-1: config 0 has no interfaces? [ 1145.249924][ T981] usb 4-1: config 0 has no interfaces? [ 1145.313823][ T31] INFO: task kworker/1:3:5469 blocked for more than 184 seconds. [ 1145.313856][ T31] Not tainted syzkaller #0 [ 1145.313873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1145.313885][ T31] task:kworker/1:3 state:D stack:20184 pid:5469 tgid:5469 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1145.313952][ T31] Workqueue: events console_callback [ 1145.313993][ T31] Call Trace: [ 1145.314003][ T31] [ 1145.314021][ T31] __schedule+0x1798/0x4cc0 [ 1145.314068][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1145.314107][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1145.314144][ T31] ? __pfx___schedule+0x10/0x10 [ 1145.314192][ T31] ? schedule+0x91/0x360 [ 1145.314224][ T31] schedule+0x165/0x360 [ 1145.314257][ T31] schedule_timeout+0x9a/0x270 [ 1145.314283][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1145.314322][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.314350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.314385][ T31] __down_common+0x319/0x6a0 [ 1145.314429][ T31] ? __pfx___down_common+0x10/0x10 [ 1145.314462][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1145.314505][ T31] down+0x80/0xd0 [ 1145.314542][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1145.314571][ T31] console_lock+0x58/0x90 [ 1145.314599][ T31] console_callback+0x69/0x440 [ 1145.314632][ T31] ? __pfx_console_callback+0x10/0x10 [ 1145.314669][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.314703][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1145.314728][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1145.314756][ T31] process_scheduled_works+0xae1/0x17b0 [ 1145.314814][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1145.314867][ T31] worker_thread+0x8a0/0xda0 [ 1145.314923][ T31] kthread+0x711/0x8a0 [ 1145.314960][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1145.314986][ T31] ? __pfx_kthread+0x10/0x10 [ 1145.315020][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.315047][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.315075][ T31] ? __pfx_kthread+0x10/0x10 [ 1145.315109][ T31] ret_from_fork+0x4bc/0x870 [ 1145.315136][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1145.315169][ T31] ? __switch_to_asm+0x39/0x70 [ 1145.315190][ T31] ? __switch_to_asm+0x33/0x70 [ 1145.315210][ T31] ? __pfx_kthread+0x10/0x10 [ 1145.315243][ T31] ret_from_fork_asm+0x1a/0x30 [ 1145.315285][ T31] [ 1145.315345][ T31] INFO: task syz.1.9705:26709 blocked for more than 184 seconds. [ 1145.315364][ T31] Not tainted syzkaller #0 [ 1145.315377][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1145.315389][ T31] task:syz.1.9705 state:D stack:27368 pid:26709 tgid:26708 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 1145.315460][ T31] Call Trace: [ 1145.315470][ T31] [ 1145.315486][ T31] __schedule+0x1798/0x4cc0 [ 1145.315540][ T31] ? __lock_acquire+0xab9/0xd20 [ 1145.315565][ T31] ? __pfx___schedule+0x10/0x10 [ 1145.315612][ T31] ? schedule+0x91/0x360 [ 1145.315645][ T31] schedule+0x165/0x360 [ 1145.315676][ T31] schedule_timeout+0x9a/0x270 [ 1145.315708][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1145.315746][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.315776][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.315809][ T31] __down_common+0x319/0x6a0 [ 1145.315854][ T31] ? __pfx___down_common+0x10/0x10 [ 1145.315886][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1145.315918][ T31] ? rcu_is_watching+0x15/0xb0 [ 1145.315947][ T31] ? trace_kmalloc+0x1f/0xd0 [ 1145.315978][ T31] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1145.316018][ T31] down+0x80/0xd0 [ 1145.316054][ T31] console_lock+0x58/0x90 [ 1145.316082][ T31] con_font_op+0x443/0xfd0 [ 1145.316121][ T31] ? __lock_acquire+0xab9/0xd20 [ 1145.316145][ T31] ? __pfx_con_font_op+0x10/0x10 [ 1145.316185][ T31] ? __might_fault+0xb0/0x130 [ 1145.316245][ T31] vt_ioctl+0x1a89/0x1f20 [ 1145.316280][ T31] ? __pfx_vt_ioctl+0x10/0x10 [ 1145.316326][ T31] ? __fget_files+0x2a/0x420 [ 1145.316355][ T31] ? tty_jobctrl_ioctl+0x369/0xb70 [ 1145.316381][ T31] ? __fget_files+0x3a0/0x420 [ 1145.316404][ T31] ? __fget_files+0x2a/0x420 [ 1145.316438][ T31] tty_ioctl+0x929/0xde0 [ 1145.316474][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1145.316507][ T31] __se_sys_ioctl+0xfc/0x170 [ 1145.316542][ T31] do_syscall_64+0xfa/0xfa0 [ 1145.316572][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.316602][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.316627][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1145.316658][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.316682][ T31] RIP: 0033:0x7f4d0a78efc9 [ 1145.316709][ T31] RSP: 002b:00007f4d0b62b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1145.316734][ T31] RAX: ffffffffffffffda RBX: 00007f4d0a9e5fa0 RCX: 00007f4d0a78efc9 [ 1145.316753][ T31] RDX: 0000200000000100 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1145.316769][ T31] RBP: 00007f4d0a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1145.316785][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.316799][ T31] R13: 00007f4d0a9e6038 R14: 00007f4d0a9e5fa0 R15: 00007f4d0ab0fa28 [ 1145.316834][ T31] [ 1145.316877][ T31] [ 1145.316877][ T31] Showing all locks held in the system: [ 1145.316892][ T31] 1 lock held by khungtaskd/31: [ 1145.316907][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1145.316975][ T31] 3 locks held by kworker/1:2/981: [ 1145.316990][ T31] #0: ffff8880216c9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1145.317053][ T31] #1: ffffc90003a67ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1145.317116][ T31] #2: ffff888144fed198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1145.317203][ T31] 2 locks held by kworker/1:3/5469: [ 1145.317217][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1145.317278][ T31] #1: ffffc90003407ba0 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1145.317341][ T31] 2 locks held by getty/5587: [ 1145.317355][ T31] #0: ffff88802f9a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1145.317422][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1145.317497][ T31] 2 locks held by kworker/0:8/5983: [ 1145.317517][ T31] 6 locks held by syz.4.9610/26552: [ 1145.317532][ T31] 1 lock held by syz.2.9670/26634: [ 1145.317550][ T31] 4 locks held by kworker/u8:3/26895: [ 1145.317568][ T31] 3 locks held by syz.3.10448/28863: [ 1145.317582][ T31] 2 locks held by syz-executor/28922: [ 1145.317597][ T31] #0: ffffffff8f2be2b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1145.317668][ T31] #1: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1145.317750][ T31] 2 locks held by syz.0.10478/28959: [ 1145.317765][ T31] 2 locks held by syz.7.10480/28943: [ 1145.317780][ T31] #0: ffff8881442b06e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1145.317860][ T31] #1: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1145.317932][ T31] 1 lock held by syz.6.10485/28963: [ 1145.317947][ T31] 4 locks held by dhcpcd-run-hook/28965: [ 1145.317962][ T31] [ 1145.317971][ T31] ============================================= [ 1145.317971][ T31] [ 1145.317983][ T31] NMI backtrace for cpu 0 [ 1145.317997][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1145.318022][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1145.318036][ T31] Call Trace: [ 1145.318045][ T31] [ 1145.318054][ T31] dump_stack_lvl+0x189/0x250 [ 1145.318089][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1145.318119][ T31] ? __pfx__printk+0x10/0x10 [ 1145.318155][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1145.318182][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1145.318206][ T31] ? __pfx__printk+0x10/0x10 [ 1145.318234][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1145.318272][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1145.318298][ T31] watchdog+0xf60/0xfa0 [ 1145.318327][ T31] ? watchdog+0x1e2/0xfa0 [ 1145.318356][ T31] kthread+0x711/0x8a0 [ 1145.318389][ T31] ? __pfx_watchdog+0x10/0x10 [ 1145.318410][ T31] ? __pfx_kthread+0x10/0x10 [ 1145.318441][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.318466][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.318492][ T31] ? __pfx_kthread+0x10/0x10 [ 1145.318522][ T31] ret_from_fork+0x4bc/0x870 [ 1145.318548][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1145.318578][ T31] ? __switch_to_asm+0x39/0x70 [ 1145.318606][ T31] ? __switch_to_asm+0x33/0x70 [ 1145.318622][ T31] ? __pfx_kthread+0x10/0x10 [ 1145.318651][ T31] ret_from_fork_asm+0x1a/0x30 [ 1145.318694][ T31] [ 1145.332166][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1145.332204][ C1] NMI backtrace for cpu 1 [ 1145.332219][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1145.332240][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1145.332253][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1145.332279][ C1] RIP: 0010:lockdep_softirqs_off+0x5d/0x120 [ 1145.332300][ C1] Code: 20 6e 92 83 b8 2c 0b 00 00 00 75 63 83 3d 0a 24 dc 17 00 75 15 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 5e <83> b8 10 0b 00 00 00 74 3c c7 80 10 0b 00 00 00 00 00 00 48 89 b8 [ 1145.332316][ C1] RSP: 0018:ffffc90000a08d68 EFLAGS: 00000046 [ 1145.332332][ C1] RAX: ffff88801c6ddac0 RBX: 0000000000000100 RCX: 933abdc81a94b400 [ 1145.332346][ C1] RDX: 0000000000010000 RSI: 0000000000000100 RDI: ffffffff8184cc7a [ 1145.332358][ C1] RBP: ffffc90000a08e30 R08: ffffffff8f7cd377 R09: 1ffffffff1ef9a6e [ 1145.332372][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a6f R12: 1ffff920001411b0 [ 1145.332386][ C1] R13: 0000000000000000 R14: 0000000000000046 R15: dffffc0000000000 [ 1145.332399][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 1145.332414][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1145.332427][ C1] CR2: 0000001b30e20ff8 CR3: 000000004c440000 CR4: 00000000003526f0 [ 1145.332451][ C1] Call Trace: [ 1145.332458][ C1] [ 1145.332467][ C1] __local_bh_disable_ip+0xb2/0x190 [ 1145.332488][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1145.332514][ C1] handle_softirqs+0x106/0x870 [ 1145.332534][ C1] ? lapic_next_event+0x11/0x20 [ 1145.332552][ C1] ? clockevents_program_event+0x24d/0x360 [ 1145.332581][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1145.332603][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1145.332624][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1145.332652][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1145.332670][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1145.332695][ C1] irq_exit_rcu+0x9/0x30 [ 1145.332713][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1145.332735][ C1] [ 1145.332742][ C1] [ 1145.332749][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1145.332769][ C1] RIP: 0010:crng_make_state+0x406/0x700 [ 1145.332788][ C1] Code: 77 8e e8 2d aa 30 06 e9 56 fe ff ff e8 d3 07 a8 fc e8 ee 15 2e 06 4d 85 f6 74 8c e8 c4 07 a8 fc fb 48 c7 44 24 40 0e 36 e0 45 <48> 8b 44 24 38 4a c7 04 20 00 00 00 00 66 42 c7 44 20 09 00 00 42 [ 1145.332803][ C1] RSP: 0018:ffffc90000117720 EFLAGS: 00000293 [ 1145.332818][ C1] RAX: ffffffff8517fc2c RBX: 0000000000000000 RCX: ffff88801c6ddac0 [ 1145.332831][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1145.332842][ C1] RBP: ffffc90000117810 R08: ffffffff8f7cd377 R09: 1ffffffff1ef9a6e [ 1145.332856][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a6f R12: dffffc0000000000 [ 1145.332870][ C1] R13: ffff8880b8936390 R14: 0000000000000200 R15: ffff8880b89363e0 [ 1145.332888][ C1] ? crng_make_state+0x3fc/0x700 [ 1145.332911][ C1] ? crng_make_state+0x13a/0x700 [ 1145.332929][ C1] ? __pfx_crng_make_state+0x10/0x10 [ 1145.332955][ C1] _get_random_bytes+0xd5/0x210 [ 1145.332972][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 1145.333002][ C1] ? __alloc_skb+0x142/0x2d0 [ 1145.333040][ C1] nsim_dev_trap_report_work+0x69e/0xb80 [ 1145.333069][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1145.333090][ C1] process_scheduled_works+0xae1/0x17b0 [ 1145.333124][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1145.333152][ C1] worker_thread+0x8a0/0xda0 [ 1145.333185][ C1] kthread+0x711/0x8a0 [ 1145.333210][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1145.333230][ C1] ? __pfx_kthread+0x10/0x10 [ 1145.333254][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.333275][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.333296][ C1] ? __pfx_kthread+0x10/0x10 [ 1145.333321][ C1] ret_from_fork+0x4bc/0x870 [ 1145.333341][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1145.333363][ C1] ? __switch_to_asm+0x39/0x70 [ 1145.333378][ C1] ? __switch_to_asm+0x33/0x70 [ 1145.333392][ C1] ? __pfx_kthread+0x10/0x10 [ 1145.333416][ C1] ret_from_fork_asm+0x1a/0x30 [ 1145.333447][ C1] [ 1145.338431][ T981] usb 4-1: config 0 has no interfaces? [ 1145.350233][ T981] usb 4-1: config 0 has no interfaces? [ 1145.600746][T28955] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1145.600780][T28955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1145.600888][T28955] vhci_hcd vhci_hcd.0: Device attached [ 1145.649968][ T981] usb 4-1: string descriptor 0 read error: -71 [ 1145.650126][ T981] usb 4-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 1145.650167][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 1145.653055][ T981] usb 4-1: config 0 descriptor?? [ 1145.655265][ T981] usb 4-1: can't set config #0, error -71 [ 1145.656967][ T981] usb 4-1: USB disconnect, device number 57 [ 1145.662789][T28967] vhci_hcd: connection closed [ 1145.688965][T26971] vhci_hcd: stop threads [ 1145.689005][T26971] vhci_hcd: release socket [ 1145.689026][T26971] vhci_hcd: disconnect device [ 1145.873400][ C0] net_ratelimit: 11200 callbacks suppressed [ 1145.873423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.873886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.874327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.874762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.875181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.875619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.876067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.876539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.876991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1145.877433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1146.421520][T18362] Bluetooth: hci5: command tx timeout [ 1146.472661][ T5914] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1146.626986][ T5914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.627018][ T5914] usb 7-1: config 0 has no interfaces? [ 1146.627053][ T5914] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1146.627080][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.631547][ T5914] usb 7-1: config 0 descriptor?? [ 1146.660187][T28978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10489'. [ 1146.700527][T26895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.716475][T26895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.732034][T26895] bond0 (unregistering): Released all slaves [ 1146.890153][ T5914] usb 7-1: USB disconnect, device number 11 [ 1148.499706][T18362] Bluetooth: hci5: command tx timeout [ 1150.139931][T26895] hsr_slave_0: left promiscuous mode [ 1150.236555][T26895] hsr_slave_1: left promiscuous mode [ 1150.237540][T26895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.237619][T26895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.268297][T26895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.268327][T26895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.528398][T26895] veth1_macvtap: left promiscuous mode [ 1150.528556][T26895] veth0_macvtap: left promiscuous mode [ 1150.537943][T26895] veth1_vlan: left allmulticast mode [ 1150.537994][T26895] veth1_vlan: left promiscuous mode [ 1150.538300][T26895] veth0_vlan: left promiscuous mode [ 1150.580958][T18362] Bluetooth: hci5: command tx timeout [ 1150.879032][ C0] net_ratelimit: 12016 callbacks suppressed [ 1150.879056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.879469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.879903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.880320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.880728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.881138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.881577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.882007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.882425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1150.882836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1152.810660][ T5914] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1152.977280][ T5914] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 1152.977314][ T5914] usb 7-1: config 0 has no interface number 0 [ 1153.012923][ T5914] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1153.012960][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.012984][ T5914] usb 7-1: Product: syz [ 1153.013001][ T5914] usb 7-1: Manufacturer: syz [ 1153.013019][ T5914] usb 7-1: SerialNumber: syz [ 1153.016003][ T5914] usb 7-1: config 0 descriptor?? [ 1153.494229][ T5914] usb 7-1: Firmware: major: 0, minor: 255, hardware type: UNKNOWN (145) [ 1153.702994][ T5914] usb 7-1: failed to fetch extended address, random address set [ 1153.703028][ T5914] usb 7-1: atusb_probe: initialization failed, error = -524 [ 1153.703258][ T5914] atusb 7-1:0.128: probe with driver atusb failed with error -524 [ 1153.727959][ T5914] usb 7-1: USB disconnect, device number 12 [ 1154.290036][ T5914] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1154.439433][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 1154.443185][ T5914] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1154.443217][ T5914] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1154.443240][ T5914] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1154.443264][ T5914] usb 1-1: config 1 has no interface number 0 [ 1154.443314][ T5914] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1154.443343][ T5914] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1154.443389][ T5914] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1154.443415][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.454117][ T5914] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1154.663186][ T5914] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1155.163903][ T5914] usb 1-1: USB disconnect, device number 66 [ 1155.165563][ T5914] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1155.889032][ C0] net_ratelimit: 12528 callbacks suppressed [ 1155.889055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.889496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.889945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.890312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.890672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.891075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.891437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.891812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.892257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1155.892655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1159.387643][T29098] netlink: 'syz.7.10531': attribute type 11 has an invalid length. [ 1159.439291][T26895] team0 (unregistering): Port device team_slave_1 removed [ 1159.663609][T26895] team0 (unregistering): Port device team_slave_0 removed [ 1160.740125][ T981] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1160.898851][ C0] net_ratelimit: 12426 callbacks suppressed [ 1160.898876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.899275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.899713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.900129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.900537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.900599][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 1160.900950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.901380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.901843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.902274][ T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1160.902302][ T981] usb 4-1: config 0 has no interface number 0 [ 1160.902321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.902346][ T981] usb 4-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.902376][ T981] usb 4-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.902401][ T981] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1160.902437][ T981] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 1160.902463][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.902785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1160.905342][ T981] usb 4-1: config 0 descriptor?? [ 1161.356149][ T981] chicony 0003:04F2:0418.0042: item fetching failed at offset 0/4 [ 1161.356943][ T981] chicony 0003:04F2:0418.0042: Chicony hid parse failed: -22 [ 1161.357022][ T981] chicony 0003:04F2:0418.0042: probe with driver chicony failed with error -22 [ 1161.558329][ T981] usb 4-1: USB disconnect, device number 58 [ 1162.012168][T29085] netlink: 'syz.6.10525': attribute type 14 has an invalid length. [ 1162.140212][T29099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10530'. [ 1162.901979][T28922] chnl_net:caif_netlink_parms(): no params data found [ 1164.297017][T28922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.298987][T28922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.299215][T28922] bridge_slave_0: entered allmulticast mode [ 1164.328938][T28922] bridge_slave_0: entered promiscuous mode [ 1164.374744][T28922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.374865][T28922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.375087][T28922] bridge_slave_1: entered allmulticast mode [ 1164.397368][T28922] bridge_slave_1: entered promiscuous mode [ 1164.681242][T24125] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1164.802186][T28922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.806022][T28922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.838755][T24125] usb 7-1: Using ep0 maxpacket: 16 [ 1164.846591][T24125] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1164.846629][T24125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1164.851009][T24125] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1164.851044][T24125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.851067][T24125] usb 7-1: Product: syz [ 1164.851084][T24125] usb 7-1: Manufacturer: syz [ 1164.851102][T24125] usb 7-1: SerialNumber: syz [ 1164.854212][T24125] usb 7-1: config 0 descriptor?? [ 1164.863336][T24125] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1164.863376][T24125] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1165.143072][T28922] team0: Port device team_slave_0 added [ 1165.195205][T28922] team0: Port device team_slave_1 added [ 1165.502923][T24125] em28xx 7-1:0.0: chip ID is em2860 [ 1165.614747][T28922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.614797][T28922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.614829][T28922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.677680][T28922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.677704][T28922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.677735][T28922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.704596][T24125] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1165.708882][T24125] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1165.708908][T24125] em28xx 7-1:0.0: No AC97 audio processor [ 1165.719938][T24125] usb 7-1: USB disconnect, device number 13 [ 1165.721398][T24125] em28xx 7-1:0.0: Disconnecting em28xx [ 1165.776575][T24125] em28xx 7-1:0.0: Freeing device [ 1165.859364][ T31] INFO: task kworker/1:3:5469 blocked for more than 204 seconds. [ 1165.859394][ T31] Not tainted syzkaller #0 [ 1165.859409][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1165.859423][ T31] task:kworker/1:3 state:D stack:20184 pid:5469 tgid:5469 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1165.859490][ T31] Workqueue: events console_callback [ 1165.859528][ T31] Call Trace: [ 1165.859539][ T31] [ 1165.859556][ T31] __schedule+0x1798/0x4cc0 [ 1165.859603][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1165.859641][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1165.859678][ T31] ? __pfx___schedule+0x10/0x10 [ 1165.859725][ T31] ? schedule+0x91/0x360 [ 1165.859758][ T31] schedule+0x165/0x360 [ 1165.859788][ T31] schedule_timeout+0x9a/0x270 [ 1165.859814][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1165.859853][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.859880][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.859914][ T31] __down_common+0x319/0x6a0 [ 1165.859954][ T31] ? __pfx___down_common+0x10/0x10 [ 1165.859995][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1165.860039][ T31] down+0x80/0xd0 [ 1165.860069][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1165.860098][ T31] console_lock+0x58/0x90 [ 1165.860132][ T31] console_callback+0x69/0x440 [ 1165.860166][ T31] ? __pfx_console_callback+0x10/0x10 [ 1165.860201][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.860228][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1165.860253][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1165.860282][ T31] process_scheduled_works+0xae1/0x17b0 [ 1165.860340][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1165.860386][ T31] worker_thread+0x8a0/0xda0 [ 1165.860443][ T31] kthread+0x711/0x8a0 [ 1165.860480][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1165.860507][ T31] ? __pfx_kthread+0x10/0x10 [ 1165.860542][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.860570][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.860597][ T31] ? __pfx_kthread+0x10/0x10 [ 1165.860631][ T31] ret_from_fork+0x4bc/0x870 [ 1165.860660][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.860694][ T31] ? __switch_to_asm+0x39/0x70 [ 1165.860716][ T31] ? __switch_to_asm+0x33/0x70 [ 1165.860735][ T31] ? __pfx_kthread+0x10/0x10 [ 1165.860769][ T31] ret_from_fork_asm+0x1a/0x30 [ 1165.860810][ T31] [ 1165.860870][ T31] INFO: task syz.1.9705:26709 blocked for more than 204 seconds. [ 1165.860889][ T31] Not tainted syzkaller #0 [ 1165.860903][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1165.860915][ T31] task:syz.1.9705 state:D stack:27368 pid:26709 tgid:26708 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 1165.860995][ T31] Call Trace: [ 1165.861004][ T31] [ 1165.861018][ T31] __schedule+0x1798/0x4cc0 [ 1165.861066][ T31] ? __lock_acquire+0xab9/0xd20 [ 1165.861091][ T31] ? __pfx___schedule+0x10/0x10 [ 1165.861138][ T31] ? schedule+0x91/0x360 [ 1165.861170][ T31] schedule+0x165/0x360 [ 1165.861201][ T31] schedule_timeout+0x9a/0x270 [ 1165.861227][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1165.861266][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.861294][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.861327][ T31] __down_common+0x319/0x6a0 [ 1165.861373][ T31] ? __pfx___down_common+0x10/0x10 [ 1165.861405][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1165.861436][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.861465][ T31] ? trace_kmalloc+0x1f/0xd0 [ 1165.861496][ T31] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1165.861536][ T31] down+0x80/0xd0 [ 1165.861571][ T31] console_lock+0x58/0x90 [ 1165.861600][ T31] con_font_op+0x443/0xfd0 [ 1165.861638][ T31] ? __lock_acquire+0xab9/0xd20 [ 1165.861663][ T31] ? __pfx_con_font_op+0x10/0x10 [ 1165.861701][ T31] ? __might_fault+0xb0/0x130 [ 1165.861765][ T31] vt_ioctl+0x1a89/0x1f20 [ 1165.861801][ T31] ? __pfx_vt_ioctl+0x10/0x10 [ 1165.861846][ T31] ? __fget_files+0x2a/0x420 [ 1165.861874][ T31] ? tty_jobctrl_ioctl+0x369/0xb70 [ 1165.861901][ T31] ? __fget_files+0x3a0/0x420 [ 1165.861923][ T31] ? __fget_files+0x2a/0x420 [ 1165.861949][ T31] tty_ioctl+0x929/0xde0 [ 1165.861983][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1165.862024][ T31] __se_sys_ioctl+0xfc/0x170 [ 1165.862058][ T31] do_syscall_64+0xfa/0xfa0 [ 1165.862088][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.862117][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.862143][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1165.862173][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.862198][ T31] RIP: 0033:0x7f4d0a78efc9 [ 1165.862218][ T31] RSP: 002b:00007f4d0b62b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.862246][ T31] RAX: ffffffffffffffda RBX: 00007f4d0a9e5fa0 RCX: 00007f4d0a78efc9 [ 1165.862264][ T31] RDX: 0000200000000100 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1165.862282][ T31] RBP: 00007f4d0a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1165.862298][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.862314][ T31] R13: 00007f4d0a9e6038 R14: 00007f4d0a9e5fa0 R15: 00007f4d0ab0fa28 [ 1165.862353][ T31] [ 1165.862391][ T31] [ 1165.862391][ T31] Showing all locks held in the system: [ 1165.862406][ T31] 1 lock held by khungtaskd/31: [ 1165.862421][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1165.862488][ T31] 3 locks held by kworker/u8:2/36: [ 1165.862503][ T31] #0: ffff88802ee62948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1165.862568][ T31] #1: ffffc90000ac7ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1165.862634][ T31] #2: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 1165.862708][ T31] 3 locks held by kworker/1:2/981: [ 1165.862722][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1165.862786][ T31] #1: ffffc90003a67ba0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1165.862851][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1165.862922][ T31] 2 locks held by kworker/u8:5/1094: [ 1165.862937][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1165.863015][ T31] #1: ffffc90003f2fba0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1165.863080][ T31] 2 locks held by kworker/u8:6/1116: [ 1165.863095][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1165.863166][ T31] #1: ffffc90003f8fba0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1165.863244][ T31] 3 locks held by kworker/u8:7/5126: [ 1165.863259][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1165.863331][ T31] #1: ffffc9000e447ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1165.863394][ T31] #2: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1165.863460][ T31] 2 locks held by kworker/1:3/5469: [ 1165.863474][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1165.863538][ T31] #1: ffffc90003407ba0 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1165.863603][ T31] 2 locks held by getty/5587: [ 1165.863618][ T31] #0: ffff88802f9a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1165.863687][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1165.863757][ T31] 9 locks held by kworker/0:6/5932: [ 1165.863773][ T31] 3 locks held by kworker/0:9/15161: [ 1165.863790][ T31] 3 locks held by kworker/1:4/24125: [ 1165.863805][ T31] #0: ffff8880216c9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1165.863869][ T31] #1: ffffc9000497fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1165.863936][ T31] #2: ffff888027ad8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1165.864070][ T31] 6 locks held by syz.4.9610/26552: [ 1165.864086][ T31] 1 lock held by syz.2.9670/26634: [ 1165.864103][ T31] 4 locks held by syz-executor/26856: [ 1165.864120][ T31] 1 lock held by udevd/27003: [ 1165.864135][ T31] 3 locks held by udevd/27007: [ 1165.864151][ T31] 4 locks held by syz-executor/28922: [ 1165.864167][ T31] 1 lock held by syz.3.10548/29146: [ 1165.864181][ T31] #0: ffff88801a05cd20 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 1165.864248][ T31] 2 locks held by syz.3.10548/29147: [ 1165.864264][ T31] 2 locks held by dhcpcd-run-hook/29153: [ 1165.864279][ T31] [ 1165.864287][ T31] ============================================= [ 1165.864287][ T31] [ 1165.864300][ T31] NMI backtrace for cpu 1 [ 1165.864315][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1165.864339][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1165.864352][ T31] Call Trace: [ 1165.864361][ T31] [ 1165.864370][ T31] dump_stack_lvl+0x189/0x250 [ 1165.864405][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1165.864436][ T31] ? __pfx__printk+0x10/0x10 [ 1165.864472][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1165.864498][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1165.864522][ T31] ? __pfx__printk+0x10/0x10 [ 1165.864550][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1165.864587][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1165.864613][ T31] watchdog+0xf60/0xfa0 [ 1165.864641][ T31] ? watchdog+0x1e2/0xfa0 [ 1165.864670][ T31] kthread+0x711/0x8a0 [ 1165.864707][ T31] ? __pfx_watchdog+0x10/0x10 [ 1165.864728][ T31] ? __pfx_kthread+0x10/0x10 [ 1165.864760][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.864785][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.864811][ T31] ? __pfx_kthread+0x10/0x10 [ 1165.864841][ T31] ret_from_fork+0x4bc/0x870 [ 1165.864867][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.864898][ T31] ? __switch_to_asm+0x39/0x70 [ 1165.864916][ T31] ? __switch_to_asm+0x33/0x70 [ 1165.864933][ T31] ? __pfx_kthread+0x10/0x10 [ 1165.864963][ T31] ret_from_fork_asm+0x1a/0x30 [ 1165.865009][ T31] [ 1165.865059][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1165.865093][ C0] NMI backtrace for cpu 0 [ 1165.865108][ C0] CPU: 0 UID: 0 PID: 5932 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 1165.865128][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1165.865142][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 1165.865166][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x18/0x90 [ 1165.865186][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 20 6e 92 65 8b 0d e8 17 ae 10 <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 7c 16 00 00 [ 1165.865202][ C0] RSP: 0018:ffffc90000006500 EFLAGS: 00000246 [ 1165.865217][ C0] RAX: ffffffff89f8c2bc RBX: 000000000000000d RCX: 0000000080000101 [ 1165.865230][ C0] RDX: ffff888025a25ac0 RSI: 000000000000000d RDI: 0000000000000000 [ 1165.865249][ C0] RBP: 0000000000000003 R08: ffffc90000006840 R09: ffffc90000006850 [ 1165.865262][ C0] R10: ffffc900000066a0 R11: fffff52000000cd6 R12: dffffc0000000000 [ 1165.865275][ C0] R13: dffffc0000000000 R14: ffff8880577dc0c8 R15: 0000000000000001 [ 1165.865288][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 1165.865302][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.865315][ C0] CR2: 00002000000001c0 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1165.865331][ C0] Call Trace: [ 1165.865338][ C0] [ 1165.865345][ C0] rt6_score_route+0x2c/0x380 [ 1165.865366][ C0] find_match+0x1b0/0xc90 [ 1165.865389][ C0] __find_rr_leaf+0x23a/0x6d0 [ 1165.865423][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 1165.865451][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1165.865474][ C0] ? ip6_multipath_l3_keys+0x16c/0x4b0 [ 1165.865498][ C0] ? __pfx_ip6_multipath_l3_keys+0x10/0x10 [ 1165.865525][ C0] fib6_table_lookup+0x39f/0xa80 [ 1165.865559][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1165.865585][ C0] ? ip6_pol_route+0x162/0x1180 [ 1165.865605][ C0] ip6_pol_route+0x222/0x1180 [ 1165.865629][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 1165.865652][ C0] ? fib_rules_lookup+0x96/0xe90 [ 1165.865671][ C0] ? fib_rules_lookup+0x96/0xe90 [ 1165.865689][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1165.865710][ C0] fib6_rule_action+0x674/0x7d0 [ 1165.865734][ C0] ? __pfx_fib6_rule_action+0x10/0x10 [ 1165.865758][ C0] fib_rules_lookup+0x767/0xe90 [ 1165.865779][ C0] ? fib_rules_lookup+0x96/0xe90 [ 1165.865797][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1165.865813][ C0] ? l3mdev_update_flow+0x29/0x640 [ 1165.865840][ C0] ? l3mdev_update_flow+0x4d1/0x640 [ 1165.865868][ C0] fib6_rule_lookup+0x18e/0x6f0 [ 1165.865891][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1165.865913][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1165.865936][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1165.865957][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1165.865977][ C0] ? NF_HOOK+0x329/0x3c0 [ 1165.865995][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1165.866019][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1165.866037][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1165.866055][ C0] ? net_generic+0x1e/0x240 [ 1165.866080][ C0] ip6_route_input+0x6de/0xad0 [ 1165.866105][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 1165.866125][ C0] ? br_forward_finish+0xd3/0x130 [ 1165.866155][ C0] ? __lock_acquire+0xab9/0xd20 [ 1165.866174][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 1165.866202][ C0] ip6_rcv_finish+0x141/0x2e0 [ 1165.866229][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1165.866261][ C0] ip_sabotage_in+0x1e1/0x270 [ 1165.866283][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1165.866307][ C0] nf_hook_slow+0xc5/0x220 [ 1165.866326][ C0] NF_HOOK+0x206/0x3a0 [ 1165.866351][ C0] ? skb_orphan+0xaf/0xd0 [ 1165.866377][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1165.866402][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1165.866427][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1165.866454][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1165.866485][ C0] __netif_receive_skb+0xd3/0x380 [ 1165.866513][ C0] ? netif_receive_skb+0x115/0x790 [ 1165.866535][ C0] netif_receive_skb+0x1cb/0x790 [ 1165.866558][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1165.866583][ C0] ? br_netif_receive_skb+0x126/0x190 [ 1165.866609][ C0] NF_HOOK+0xa0/0x390 [ 1165.866630][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1165.866654][ C0] ? NF_HOOK+0x102/0x390 [ 1165.866676][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1165.866699][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1165.866726][ C0] ? br_pass_frame_up+0x275/0x420 [ 1165.866751][ C0] br_handle_frame_finish+0x15c6/0x1c50 [ 1165.866780][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1165.866809][ C0] ? ip6t_do_table+0x1db/0x1560 [ 1165.866837][ C0] ? nf_hook_slow+0x176/0x220 [ 1165.866854][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1165.866877][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 1165.866904][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1165.866928][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1165.866950][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 1165.866980][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 1165.867006][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1165.867034][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 1165.867060][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 1165.867086][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1165.867112][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1165.867137][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 1165.867163][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1165.867185][ C0] br_handle_frame+0x982/0x14c0 [ 1165.867212][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1165.867241][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1165.867268][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1165.867291][ C0] __netif_receive_skb_core+0x10b9/0x4380 [ 1165.867315][ C0] ? ip6_mc_input+0x8de/0xb70 [ 1165.867341][ C0] ? kmem_cache_free+0x19b/0x690 [ 1165.867371][ C0] ? ip6_mc_input+0x8de/0xb70 [ 1165.867400][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1165.867429][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1165.867452][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 1165.867479][ C0] ? NF_HOOK+0x30c/0x3a0 [ 1165.867503][ C0] ? skb_orphan+0xaf/0xd0 [ 1165.867531][ C0] ? __lock_acquire+0xab9/0xd20 [ 1165.867551][ C0] ? process_backlog+0x2d5/0x14f0 [ 1165.867589][ C0] ? process_backlog+0x2d5/0x14f0 [ 1165.867617][ C0] __netif_receive_skb+0x72/0x380 [ 1165.867642][ C0] ? process_backlog+0x2d5/0x14f0 [ 1165.867668][ C0] process_backlog+0x60e/0x14f0 [ 1165.867693][ C0] ? rcu_is_watching+0x15/0xb0 [ 1165.867721][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1165.867746][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1165.867772][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1165.867798][ C0] __napi_poll+0xc7/0x360 [ 1165.867820][ C0] ? skb_defer_free_flush+0x229/0x250 [ 1165.867845][ C0] net_rx_action+0x5f7/0xdf0 [ 1165.867878][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1165.867922][ C0] handle_softirqs+0x286/0x870 [ 1165.867944][ C0] ? do_softirq+0xec/0x180 [ 1165.867965][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1165.867987][ C0] ? kernel_fpu_end+0xc8/0x120 [ 1165.868013][ C0] do_softirq+0xec/0x180 [ 1165.868030][ C0] [ 1165.868037][ C0] [ 1165.868044][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1165.868067][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1165.868086][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1165.868105][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1165.868127][ C0] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 1165.868154][ C0] kernel_fpu_end+0xd2/0x120 [ 1165.868178][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 1165.868208][ C0] blake2s_compress+0xe9/0x1b80 [ 1165.868240][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1165.868261][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1165.868280][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1165.868299][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1165.868323][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 1165.868345][ C0] ? kernel_fpu_end+0xd2/0x120 [ 1165.868368][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 1165.868397][ C0] ? blake2s_compress+0x1b00/0x1b80 [ 1165.868422][ C0] ? blake2s_update+0x255/0x450 [ 1165.868448][ C0] blake2s_final+0x116/0x260 [ 1165.868472][ C0] hmac+0x1c6/0x330 [ 1165.868497][ C0] ? __pfx_hmac+0x10/0x10 [ 1165.868526][ C0] ? curve25519_generate_public+0x2f84/0x3010 [ 1165.868559][ C0] ? blake2s_update+0x255/0x450 [ 1165.868583][ C0] ? __asan_memset+0x22/0x50 [ 1165.868617][ C0] message_ephemeral+0x1c0/0x280 [ 1165.868651][ C0] ? __pfx_message_ephemeral+0x10/0x10 [ 1165.868699][ C0] ? down_read+0x1ad/0x2e0 [ 1165.868730][ C0] wg_noise_handshake_create_response+0x24d/0x8f0 [ 1165.868766][ C0] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 1165.868797][ C0] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1165.868825][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.868850][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1165.868885][ C0] ? __pfx___up_read+0x10/0x10 [ 1165.868917][ C0] ? wg_noise_handshake_consume_initiation+0x7b4/0x900 [ 1165.868951][ C0] ? __lock_acquire+0xab9/0xd20 [ 1165.868984][ C0] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1165.869013][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.869038][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1165.869066][ C0] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 1165.869093][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1165.869130][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 1165.869160][ C0] wg_packet_send_handshake_response+0xf6/0x2d0 [ 1165.869184][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 1165.869206][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 1165.869248][ C0] wg_packet_handshake_receive_worker+0x629/0xfd0 [ 1165.869282][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 1165.869306][ C0] ? register_lock_class+0x51/0x320 [ 1165.869330][ C0] ? __lock_acquire+0xab9/0xd20 [ 1165.869356][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1165.869381][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.869403][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1165.869422][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1165.869442][ C0] process_scheduled_works+0xae1/0x17b0 [ 1165.869476][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1165.869504][ C0] worker_thread+0x8a0/0xda0 [ 1165.869526][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1165.869551][ C0] ? __kthread_parkme+0x7b/0x200 [ 1165.869577][ C0] kthread+0x711/0x8a0 [ 1165.869602][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1165.869622][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.869647][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.869667][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.869689][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.869713][ C0] ret_from_fork+0x4bc/0x870 [ 1165.869732][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.869754][ C0] ? __switch_to_asm+0x39/0x70 [ 1165.869770][ C0] ? __switch_to_asm+0x33/0x70 [ 1165.869784][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.869808][ C0] ret_from_fork_asm+0x1a/0x30 [ 1165.869833][ C0] [ 1165.908754][ C0] net_ratelimit: 12469 callbacks suppressed [ 1165.908774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.909250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.909741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.910217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.910689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.911153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.911624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.912113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.912588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1165.913054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1167.209749][T28922] hsr_slave_0: entered promiscuous mode [ 1167.220034][T28922] hsr_slave_1: entered promiscuous mode [ 1167.221004][T28922] debugfs: 'hsr0' already exists in 'hsr' [ 1167.221028][T28922] Cannot create hsr debugfs directory [ 1168.625092][T29180] loop7: detected capacity change from 0 to 7 [ 1168.639734][T29180] Dev loop7: unable to read RDB block 7 [ 1168.639792][T29180] loop7: AHDI p1 p2 [ 1168.639828][T29180] loop7: partition table partially beyond EOD, truncated [ 1168.640037][T29180] loop7: p1 start 1702000233 is beyond EOD, truncated [ 1168.760673][T29182] binder: 29181:29182 ioctl c0306201 200000000040 returned -14 [ 1170.918904][ C0] net_ratelimit: 11389 callbacks suppressed [ 1170.918928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.919342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.919757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.920191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.920621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.921048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.921464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.921888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.922328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1170.922743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b5:f0:d8:96:fc, vlan:0) [ 1172.300360][T29225] netlink: 200 bytes leftover after parsing attributes in process `syz.6.10571'. [ 1172.988352][T28922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1173.021930][T28922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1173.092322][T28922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1173.125954][T28922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1174.078404][T28922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.288229][T28922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.351404][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.351531][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.371362][ T981] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1174.421533][T26895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.421657][T26895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.552050][ T981] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1174.552084][ T981] usb 1-1: config 0 has no interface number 0 [ 1174.552129][ T981] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.552158][ T981] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.552199][ T981] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1174.552225][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.555089][ T981] usb 1-1: config 0 descriptor??