last executing test programs: 5.318097702s ago: executing program 4 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 5.106464002s ago: executing program 4 (id=786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000440)=""/30, &(0x7f0000000380), &(0x7f0000000280), 0x1, r0}, 0x38) 4.89508534s ago: executing program 4 (id=788): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = dup2(r1, r2) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = gettid() ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xc, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(0x0, 0x8, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x538adaab, 0x353c) clock_gettime(0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) syz_emit_ethernet(0x14, 0x0, 0x0) tkill(r0, 0x13) 3.885981129s ago: executing program 4 (id=801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2000000000}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[], 0xff2e) close(r1) 3.248891234s ago: executing program 0 (id=812): r0 = socket$inet(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004840) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 3.115209382s ago: executing program 0 (id=814): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 2.913619963s ago: executing program 4 (id=816): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2.761030168s ago: executing program 4 (id=818): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x3, 0x1}}]}}]}}]}}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) 2.482409077s ago: executing program 1 (id=820): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) 2.402650915s ago: executing program 2 (id=822): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 2.344368921s ago: executing program 1 (id=823): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='signal_generate\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 2.199901203s ago: executing program 2 (id=825): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 2.190549155s ago: executing program 3 (id=826): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 2.084532998s ago: executing program 1 (id=827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1.979951675s ago: executing program 2 (id=828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 1.957832278s ago: executing program 0 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 1.942963856s ago: executing program 3 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) lsm_get_self_attr(0x66, &(0x7f0000000780)={0x0, 0x0, 0x63, 0x43, ""/67}, &(0x7f0000000700)=0x63, 0x0) 1.863993433s ago: executing program 1 (id=831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x27) 1.863725953s ago: executing program 2 (id=832): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.763958689s ago: executing program 3 (id=833): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, 0x0, 0x40482, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000280)=""/60, 0x0) io_uring_setup(0x109c, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x1, {[@timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) 1.73256086s ago: executing program 0 (id=834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62262bd8", "1e00040000000100"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(0xffffffffffffffff, r0, 0x0) 1.694571974s ago: executing program 1 (id=835): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/if_inet6\x00') io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#:#*-+((-}%$#\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 1.604332885s ago: executing program 3 (id=836): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r1, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}, 0x1, 0x0, 0x0, 0x80}, 0x24000005) sendmsg$can_j1939(r0, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r1, 0x0, {0x1, 0xfe, 0x2}, 0x1}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040850}, 0x24008005) 1.544011161s ago: executing program 0 (id=837): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f505cb103f00e10000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.473887845s ago: executing program 3 (id=838): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1.428016411s ago: executing program 0 (id=839): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000002c0)={0x73, 0x5, 0xfff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1.175850393s ago: executing program 3 (id=840): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 872.879398ms ago: executing program 2 (id=841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 659.787052ms ago: executing program 2 (id=842): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$sg(0x0, 0x0, 0x8401) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4000, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 0s ago: executing program 1 (id=843): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x68000) fcntl$setstatus(r0, 0x4, 0x2000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdc, 0x8}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): mpat=0 ip=0x7fa87058ebe9 code=0x7ffc0000 [ 128.304115][ T30] audit: type=1326 audit(1757324378.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fa87058ebe9 code=0x7ffc0000 [ 128.304195][ T30] audit: type=1326 audit(1757324378.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87058ebe9 code=0x7ffc0000 [ 128.304246][ T30] audit: type=1326 audit(1757324378.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87058ebe9 code=0x7ffc0000 [ 128.479642][ T6174] tty tty1: ldisc open failed (-12), clearing slot 0 [ 128.522661][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.839351][ T24] usb 5-1: USB disconnect, device number 6 [ 128.948691][ T5952] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.128715][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 129.162568][ T5952] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 129.172396][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.273643][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.544416][ T5952] usb 4-1: Product: syz [ 129.591751][ T5952] usb 4-1: Manufacturer: syz [ 129.607504][ T5952] usb 4-1: SerialNumber: syz [ 129.654394][ T5952] usb 4-1: config 0 descriptor?? [ 129.662889][ T5967] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.818872][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 129.830411][ T5967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.871405][ T5952] mcba_usb 4-1:0.0: Can't find endpoints [ 129.874298][ T5967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.972834][ T5967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.993904][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.051850][ T5967] usb 1-1: Product: syz [ 130.149116][ T5967] usb 1-1: Manufacturer: syz [ 130.167441][ T5967] usb 1-1: SerialNumber: syz [ 130.624775][ T5931] usb 3-1: device descriptor read/8, error -71 [ 131.378758][ T5931] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.416093][ T5931] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.474665][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.523671][ T5931] usb 3-1: Product: syz [ 131.568768][ T5931] usb 3-1: Manufacturer: syz [ 131.593379][ T5931] usb 3-1: SerialNumber: syz [ 132.328866][ T5967] usb 1-1: 0:2 : does not exist [ 132.394608][ T5967] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 132.576667][ T5967] usb 1-1: USB disconnect, device number 4 [ 132.726417][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.778028][ T24] usb 4-1: USB disconnect, device number 5 [ 132.939971][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949814][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.150671][ T5931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 133.748740][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.023897][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 134.111968][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.178098][ T24] usb 2-1: Product: syz [ 134.188286][ T24] usb 2-1: Manufacturer: syz [ 134.197128][ T24] usb 2-1: SerialNumber: syz [ 134.426194][ T5931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPIPE [ 134.444155][ T5931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 134.460998][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 134.466747][ T5931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 134.508948][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 134.514109][ T5931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.555351][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.557249][ T5931] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 134.592037][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 134.655482][ T5931] usb 3-1: USB disconnect, device number 8 [ 134.779983][ T6217] fuse: Bad value for 'group_id' [ 134.785212][ T6217] fuse: Bad value for 'group_id' [ 134.818896][ T5967] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.993101][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 135.010975][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.067394][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.114033][ T5967] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.146948][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.169410][ T5967] usb 1-1: config 0 descriptor?? [ 135.197715][ T5967] hub 1-1:0.0: USB hub found [ 135.455909][ T6228] ptrace attach of "./syz-executor exec"[5886] was attempted by "./syz-executor exec"[6228] [ 135.485035][ T5967] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 135.623660][ T5967] usbhid 1-1:0.0: can't add hid device: -71 [ 135.677263][ T5967] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.718680][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.730786][ T5967] usb 1-1: USB disconnect, device number 5 [ 135.808712][ T6234] netlink: 'syz.2.62': attribute type 13 has an invalid length. [ 135.918777][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 136.073506][ T9] usb 4-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 136.098745][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.144324][ T9] usb 4-1: config 1 has no interface number 1 [ 136.158083][ T9] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.309452][ T6234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.388595][ T24] usb 2-1: USB disconnect, device number 4 [ 136.792786][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.831254][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.083940][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.119126][ T9] usb 4-1: Product: syz [ 137.200387][ T9] usb 4-1: Manufacturer: syz [ 137.205732][ T9] usb 4-1: SerialNumber: syz [ 137.250526][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.263464][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.307681][ T24] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 137.357777][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.752928][ T24] usb 2-1: Product: syz [ 138.093778][ T24] usb 2-1: Manufacturer: syz [ 138.118188][ T24] usb 2-1: SerialNumber: syz [ 138.187840][ T24] usb 2-1: config 0 descriptor?? [ 138.205874][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 138.265627][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.299990][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 138.383422][ T24] usb 2-1: media controller created [ 138.504474][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.618895][ T5967] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.785196][ T5967] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 138.795622][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.806361][ T5967] usb 5-1: Product: syz [ 138.831732][ T5967] usb 5-1: Manufacturer: syz [ 138.846086][ T5967] usb 5-1: SerialNumber: syz [ 139.270228][ T24] DVB: Unable to find symbol tda10046_attach() [ 139.276680][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 139.358751][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 139.438880][ T24] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 139.498986][ T24] usb 2-1: USB disconnect, device number 5 [ 140.272906][ T9] usb 4-1: cannot find UAC_HEADER [ 140.370864][ T5967] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 140.386320][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.496881][ T9] usb 4-1: USB disconnect, device number 6 [ 140.611986][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.211479][ T5931] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.618663][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 141.673374][ T5931] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 141.723704][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.806515][ T5931] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.837946][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.856323][ T5931] usb 1-1: Product: syz [ 141.866511][ T5931] usb 1-1: Manufacturer: syz [ 141.877012][ T5931] usb 1-1: SerialNumber: syz [ 141.893819][ T5967] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 141.960848][ T5967] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 141.995255][ T5967] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 142.019573][ T5967] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 142.074374][ T5967] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 142.155504][ T5967] usb 5-1: USB disconnect, device number 7 [ 142.193702][ T5931] usb 1-1: 0:2 : does not exist [ 142.238107][ T5931] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 142.368758][ T5931] usb 1-1: USB disconnect, device number 6 [ 142.574793][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.467705][ T6282] pim6reg: entered allmulticast mode [ 145.158965][ T5955] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.198850][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.344248][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 145.361889][ T43] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 145.378399][ T5955] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.408656][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.449143][ T5955] usb 1-1: Product: syz [ 145.453966][ T5955] usb 1-1: Manufacturer: syz [ 145.471488][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.501103][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.528396][ T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.530064][ T5955] usb 1-1: SerialNumber: syz [ 145.547430][ T43] usb 2-1: Product: syz [ 145.555982][ T43] usb 2-1: Manufacturer: syz [ 145.576428][ T43] usb 2-1: SerialNumber: syz [ 145.595588][ T5955] usb 1-1: config 0 descriptor?? [ 145.623191][ T43] usb 2-1: config 0 descriptor?? [ 145.670331][ T43] usb 2-1: selecting invalid altsetting 0 [ 145.769088][ T6310] process 'syz.4.83' launched './file0' with NULL argv: empty string added [ 145.816405][ T5955] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 146.112112][ T43] usb 2-1: USB disconnect, device number 6 [ 148.332737][ T5955] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 148.394200][ T5955] usb 1-1: USB disconnect, device number 7 [ 151.139006][ T5955] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.319359][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 151.486187][ T5955] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.530294][ T5955] usb 2-1: config 0 has no interface number 0 [ 151.593952][ T5955] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.694686][ T5955] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 151.724192][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 151.806838][ T5955] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.883365][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 151.926043][ T1323] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.971123][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.013994][ T6365] bridge0: port 3(gretap0) entered blocking state [ 152.035458][ T6365] bridge0: port 3(gretap0) entered disabled state [ 152.049242][ T6365] gretap0: entered allmulticast mode [ 152.070274][ T6365] gretap0: entered promiscuous mode [ 152.090864][ T5955] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.164430][ T6365] bridge0: port 3(gretap0) entered blocking state [ 152.172048][ T6365] bridge0: port 3(gretap0) entered forwarding state [ 152.205211][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.268033][ T1323] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.322132][ T5955] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 152.383529][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.461153][ T5955] usb 2-1: config 0 descriptor?? [ 152.598786][ T5967] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.017853][ T6382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.155582][ T5953] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.231902][ T5955] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 153.351142][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 153.374499][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.384567][ T5967] usb 4-1: config 1 interface 0 has no altsetting 0 [ 153.408431][ T5967] usb 4-1: New USB device found, idVendor=24b8, idProduct=0020, bcdDevice= 0.40 [ 153.436719][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.458792][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.466848][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.488459][ T5967] usb 4-1: Product: ␉ [ 153.504274][ T5953] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.515312][ T5967] usb 4-1: Manufacturer: 䀊 [ 153.534134][ T5967] usb 4-1: SerialNumber: ཏ颞ꋑ諺尢߅뾞Ꜣ悽ઁ炥띒倁ࣄ鈸刞줧ᘫ剠鯶苲蚛弨⣢茨釸ֹ댬ﴥ잯궝༱“ [ 153.624623][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.653123][ T24] usb 5-1: device descriptor read/64, error -71 [ 153.711705][ T5953] usb 3-1: config 0 descriptor?? [ 153.749365][ T5953] hub 3-1:0.0: USB hub found [ 153.941780][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.040356][ T5967] usbhid 4-1:1.0: can't add hid device: -71 [ 154.048715][ T5967] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 154.088778][ T24] usb 5-1: device descriptor read/64, error -71 [ 154.110449][ T5967] usb 4-1: USB disconnect, device number 7 [ 154.185275][ T5953] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 154.219542][ T5953] usbhid 3-1:0.0: can't add hid device: -71 [ 154.227210][ T5953] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.256538][ T24] usb usb5-port1: attempt power cycle [ 154.302501][ T5953] usb 3-1: USB disconnect, device number 9 [ 154.711524][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 154.762064][ T24] usb 5-1: device descriptor read/8, error -71 [ 155.045029][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.092463][ T24] usb 5-1: device descriptor read/8, error -71 [ 155.264457][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 155.273854][ T5967] usb 2-1: USB disconnect, device number 7 [ 155.273962][ T24] usb usb5-port1: unable to enumerate USB device [ 155.300361][ T5967] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 155.737264][ T30] audit: type=1326 audit(1757324405.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ed8ebe9 code=0x0 [ 156.138652][ T5967] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.338790][ T5967] usb 2-1: Using ep0 maxpacket: 8 [ 156.517008][ T5967] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.575675][ T6433] netem: incorrect ge model size [ 156.581248][ T6433] netem: change failed [ 156.613628][ T5967] usb 2-1: config 0 has no interface number 0 [ 156.707903][ T5967] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.880622][ T5967] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 157.272399][ T6444] pim6reg: entered allmulticast mode [ 157.286590][ T5967] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.318129][ T5967] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.403032][ T5967] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 157.485514][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.623429][ T6450] pimreg: entered allmulticast mode [ 157.663725][ T6450] pimreg: left allmulticast mode [ 157.739913][ T5967] usb 2-1: config 0 descriptor?? [ 157.847374][ T5967] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 158.495162][ T6458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.495286][ T6457] netlink: 'syz.4.114': attribute type 3 has an invalid length. [ 160.491938][ T30] audit: type=1326 audit(1757324410.410:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.4.116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x0 [ 161.258751][ T5938] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.422458][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.467704][ T5938] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.515899][ T5938] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 161.563784][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.622857][ T5938] usb 3-1: Product: syz [ 161.627855][ T5938] usb 3-1: Manufacturer: syz [ 161.636283][ T5938] usb 3-1: SerialNumber: syz [ 161.661276][ T5938] usb 3-1: config 0 descriptor?? [ 161.725423][ T5938] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 161.737606][ T5967] usb 2-1: USB disconnect, device number 8 [ 161.792524][ T5967] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 161.811562][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.913794][ T5938] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 162.139361][ T5938] usb 3-1: media controller created [ 162.274586][ T6497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.430613][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.781399][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.794937][ T5938] DVB: Unable to find symbol tda10046_attach() [ 162.831988][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.858712][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.886602][ T5938] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 162.911610][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.949324][ T5938] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 162.961073][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.961123][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.961151][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.961178][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.961205][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 162.961231][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 163.030883][ T9] hid-generic 00A0:0006:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 163.082454][ T5967] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 163.257433][ T5967] usb 2-1: config 0 has no interfaces? [ 163.263427][ T5967] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 163.350887][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.438372][ T5938] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 163.461763][ T5967] usb 2-1: config 0 descriptor?? [ 163.496031][ T6530] loop2: detected capacity change from 0 to 7 [ 163.549307][ T5938] usb 3-1: USB disconnect, device number 10 [ 163.795628][ T30] audit: type=1326 audit(1757324413.730:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.3.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cd7b8ebe9 code=0x0 [ 163.922353][ T6530] kvm: kvm [6528]: vcpu0, guest rIP: 0x1a Unhandled WRMSR(0xc2) = 0x8000 [ 166.073176][ T30] audit: type=1326 audit(1757324415.920:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.3.134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cd7b8ebe9 code=0x0 [ 167.170592][ T5967] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.348889][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 167.363825][ T5967] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 167.392313][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.505397][ T5967] usb 3-1: config 0 has no interfaces? [ 167.521342][ T5967] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 167.572882][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.623386][ T5967] usb 3-1: config 0 descriptor?? [ 167.708107][ T5938] usb 2-1: USB disconnect, device number 9 [ 169.786780][ T5967] usb 3-1: string descriptor 0 read error: -71 [ 169.803856][ T5967] usb 3-1: USB disconnect, device number 11 [ 169.934948][ T6617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.090070][ T5967] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.367703][ T5967] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 171.398054][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.424330][ T5967] usb 2-1: Product: syz [ 171.459628][ T5967] usb 2-1: Manufacturer: syz [ 171.495510][ T5967] usb 2-1: SerialNumber: syz [ 171.973761][ T5967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 172.046592][ T5967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 172.094412][ T5967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 172.620271][ T5955] hid_parser_main: 4 callbacks suppressed [ 172.620294][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 172.697452][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 172.720469][ T5967] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 172.844318][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 172.907442][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 172.915153][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 172.942238][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 172.958809][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 172.967713][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 172.977368][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 172.985981][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 173.054965][ T5955] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 173.142297][ T9] usb 1-1: config 0 has no interfaces? [ 173.147868][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 173.158410][ T5955] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 173.228185][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.316742][ T9] usb 1-1: config 0 descriptor?? [ 173.626227][ T24] usb 2-1: USB disconnect, device number 10 [ 174.063261][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.118805][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.248867][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 174.259264][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.274065][ T24] usb 2-1: config 0 has no interfaces? [ 174.292009][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 174.311087][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 174.319251][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 174.330700][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.334677][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 174.352774][ T24] usb 2-1: Product: syz [ 174.372711][ T24] usb 2-1: Manufacturer: syz [ 174.394377][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 174.403875][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.405419][ T24] usb 2-1: SerialNumber: syz [ 174.412627][ T9] usb 3-1: Product: syz [ 174.432871][ T9] usb 3-1: Manufacturer: syz [ 174.472277][ T9] usb 3-1: SerialNumber: syz [ 174.472666][ T24] usb 2-1: config 0 descriptor?? [ 174.492183][ T5967] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.584937][ T9] usb 3-1: config 0 descriptor?? [ 174.601055][ T9] mcba_usb 3-1:0.0: Can't find endpoints [ 174.934221][ T5967] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 174.945141][ T5967] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 175.032910][ T5967] usb 4-1: config 1 interface 0 has no altsetting 0 [ 175.130127][ T5967] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 175.162168][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.172946][ T5967] usb 4-1: Product: syz [ 175.182133][ T5967] usb 4-1: Manufacturer: syz [ 175.202961][ T5967] usb 4-1: SerialNumber: syz [ 175.383048][ T6685] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 175.392261][ T6685] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 175.552507][ T9] usb 2-1: USB disconnect, device number 11 [ 175.913360][ T24] usb 1-1: USB disconnect, device number 8 [ 176.082922][ T6685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.099139][ T6685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.294720][ T5967] rtl8150 4-1:1.0: couldn't reset the device [ 176.323196][ T5967] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 176.397791][ T5967] usb 4-1: USB disconnect, device number 8 [ 176.813108][ T6701] pim6reg: entered allmulticast mode [ 177.708650][ T5952] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 177.884091][ T5952] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.894412][ T5952] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.950769][ T5952] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.965128][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.037796][ T5952] usb 4-1: Product: syz [ 178.070467][ T5952] usb 4-1: Manufacturer: syz [ 178.255459][ T5952] usb 4-1: SerialNumber: syz [ 178.293455][ T5952] usb 4-1: config 0 descriptor?? [ 178.318394][ T5952] usb 4-1: selecting invalid altsetting 0 [ 178.359329][ T5931] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 178.368326][ T5967] usb 3-1: USB disconnect, device number 12 [ 178.513159][ T5931] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.530943][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.574437][ T5931] usb 2-1: Product: syz [ 178.598624][ T5931] usb 2-1: Manufacturer: syz [ 178.612089][ T5931] usb 2-1: SerialNumber: syz [ 178.675602][ T6724] FAULT_INJECTION: forcing a failure. [ 178.675602][ T6724] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.725624][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.0.169 Not tainted syzkaller #0 PREEMPT(full) [ 178.725653][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.725674][ T6724] Call Trace: [ 178.725682][ T6724] [ 178.725690][ T6724] dump_stack_lvl+0x189/0x250 [ 178.725728][ T6724] ? irqentry_exit+0x74/0x90 [ 178.725749][ T6724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.725793][ T6724] should_fail_ex+0x414/0x560 [ 178.725827][ T6724] _copy_from_iter+0x1de/0x1790 [ 178.725847][ T6724] ? aa_file_perm+0x13a/0x1550 [ 178.725867][ T6724] ? aa_file_perm+0x44d/0x1550 [ 178.725889][ T6724] ? _parse_integer_limit+0x1ae/0x1f0 [ 178.725915][ T6724] ? __pfx__copy_from_iter+0x10/0x10 [ 178.725936][ T6724] ? __lock_acquire+0xab9/0xd20 [ 178.725966][ T6724] ? __pfx_aa_file_perm+0x10/0x10 [ 178.725998][ T6724] vhost_chr_write_iter+0xc3/0xad0 [ 178.726028][ T6724] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 178.726046][ T6724] ? common_file_perm+0x1b5/0x230 [ 178.726089][ T6724] ? security_file_permission+0x75/0x290 [ 178.726126][ T6724] vfs_write+0x5c6/0xb30 [ 178.726159][ T6724] ? __pfx_vhost_vsock_chr_write_iter+0x10/0x10 [ 178.726183][ T6724] ? __pfx_vfs_write+0x10/0x10 [ 178.726219][ T6724] ? __fget_files+0x2a/0x420 [ 178.726246][ T6724] ksys_write+0x145/0x250 [ 178.726284][ T6724] ? __pfx_ksys_write+0x10/0x10 [ 178.726315][ T6724] ? do_syscall_64+0xbe/0x3b0 [ 178.726340][ T6724] do_syscall_64+0xfa/0x3b0 [ 178.726359][ T6724] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.726378][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.726397][ T6724] ? clear_bhb_loop+0x60/0xb0 [ 178.726421][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.726439][ T6724] RIP: 0033:0x7fa87058ebe9 [ 178.726465][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.726481][ T6724] RSP: 002b:00007fa8713fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.726505][ T6724] RAX: ffffffffffffffda RBX: 00007fa8707c6090 RCX: 00007fa87058ebe9 [ 178.726519][ T6724] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000003 [ 178.726531][ T6724] RBP: 00007fa8713fa090 R08: 0000000000000000 R09: 0000000000000000 [ 178.726543][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.726554][ T6724] R13: 00007fa8707c6128 R14: 00007fa8707c6090 R15: 00007fa8708efa28 [ 178.726586][ T6724] [ 178.737839][ T5952] usb 4-1: USB disconnect, device number 9 [ 179.145514][ T5931] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 179.171591][ T5931] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.183662][ T5931] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.230376][ T5931] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 179.776507][ T5938] hid_parser_main: 4 callbacks suppressed [ 179.776530][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 179.982980][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 179.990611][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 180.038627][ T24] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 180.068009][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 180.092964][ T6742] kernel read not supported for file /  (pid: 6742 comm: syz.4.173) [ 180.124005][ T30] audit: type=1800 audit(1757324430.060:14): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.173" name=200120 dev="mqueue" ino=12305 res=0 errno=0 [ 180.155929][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 180.176744][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 180.198974][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 180.229524][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 180.236983][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 180.251904][ T24] usb 3-1: config 0 has no interfaces? [ 180.257502][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 180.345842][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.354064][ T5938] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 180.546535][ T5938] hid-generic 00A0:0006:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 180.566873][ T24] usb 3-1: config 0 descriptor?? [ 181.080489][ T5931] usb 2-1: USB disconnect, device number 12 [ 182.018944][ T6766] netlink: 'syz.1.177': attribute type 5 has an invalid length. [ 183.312721][ T9] usb 3-1: USB disconnect, device number 13 [ 183.649937][ T6782] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.805920][ T6782] kvm: pic: level sensitive irq not supported [ 183.806129][ T6782] kvm: pic: non byte read [ 185.088730][ T5938] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 185.426427][ T5938] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 185.448631][ T24] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 185.477700][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.528326][ T5938] usb 5-1: Product: syz [ 185.534891][ T5938] usb 5-1: Manufacturer: syz [ 185.542634][ T5938] usb 5-1: SerialNumber: syz [ 185.642906][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 185.650714][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.668726][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.773527][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.891065][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.913990][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 185.925801][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.941581][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.962333][ T5938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 186.009699][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.028767][ T5938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 186.057713][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.072681][ T5938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 186.124569][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 186.132564][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 186.171994][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.183800][ T5938] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 186.202672][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.259294][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.300449][ T24] usb 4-1: string descriptor 0 read error: -22 [ 186.306950][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 186.317344][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.346901][ T24] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 186.975876][ T6817] FAULT_INJECTION: forcing a failure. [ 186.975876][ T6817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.012599][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.2.190 Not tainted syzkaller #0 PREEMPT(full) [ 187.012621][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.012630][ T6817] Call Trace: [ 187.012635][ T6817] [ 187.012641][ T6817] dump_stack_lvl+0x189/0x250 [ 187.012674][ T6817] ? __pfx____ratelimit+0x10/0x10 [ 187.012689][ T6817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.012706][ T6817] ? __pfx__printk+0x10/0x10 [ 187.012735][ T6817] should_fail_ex+0x414/0x560 [ 187.012761][ T6817] _copy_to_user+0x31/0xb0 [ 187.012782][ T6817] simple_read_from_buffer+0xe1/0x170 [ 187.012807][ T6817] proc_fail_nth_read+0x1b3/0x220 [ 187.012826][ T6817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.012844][ T6817] ? rw_verify_area+0x2a6/0x4d0 [ 187.012862][ T6817] ? __lock_acquire+0xab9/0xd20 [ 187.012882][ T6817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.012899][ T6817] vfs_read+0x200/0xa30 [ 187.012916][ T6817] ? fdget_pos+0x247/0x320 [ 187.012932][ T6817] ? __pfx___mutex_lock+0x10/0x10 [ 187.012948][ T6817] ? __pfx_vfs_read+0x10/0x10 [ 187.012968][ T6817] ? __fget_files+0x2a/0x420 [ 187.012983][ T6817] ? __fget_files+0x3a0/0x420 [ 187.012995][ T6817] ? __fget_files+0x2a/0x420 [ 187.013013][ T6817] ksys_read+0x145/0x250 [ 187.013034][ T6817] ? __pfx_ksys_read+0x10/0x10 [ 187.013051][ T6817] ? rcu_is_watching+0x15/0xb0 [ 187.013069][ T6817] ? do_syscall_64+0xbe/0x3b0 [ 187.013087][ T6817] do_syscall_64+0xfa/0x3b0 [ 187.013101][ T6817] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.013115][ T6817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.013128][ T6817] ? clear_bhb_loop+0x60/0xb0 [ 187.013146][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.013159][ T6817] RIP: 0033:0x7f1b8ed8d5fc [ 187.013173][ T6817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.013185][ T6817] RSP: 002b:00007f1b8fb45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.013200][ T6817] RAX: ffffffffffffffda RBX: 00007f1b8efc5fa0 RCX: 00007f1b8ed8d5fc [ 187.013210][ T6817] RDX: 000000000000000f RSI: 00007f1b8fb450a0 RDI: 0000000000000004 [ 187.013219][ T6817] RBP: 00007f1b8fb45090 R08: 0000000000000000 R09: 0000000000000000 [ 187.013227][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.013235][ T6817] R13: 00007f1b8efc6038 R14: 00007f1b8efc5fa0 R15: 00007f1b8f0efa28 [ 187.013257][ T6817] [ 187.408619][ T5938] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.650521][ T5938] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 187.660611][ T5938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.688563][ T5938] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 187.699543][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 187.724237][ T5938] usb 2-1: Product: syz [ 187.758928][ T5938] usb 2-1: Manufacturer: syz [ 187.779042][ T5938] usb 2-1: SerialNumber: syz [ 187.788496][ T5938] usb 2-1: config 0 descriptor?? [ 187.811707][ T5938] usb 2-1: selecting invalid altsetting 0 [ 187.865810][ T24] usb 5-1: USB disconnect, device number 12 [ 189.036703][ T5931] usb 2-1: USB disconnect, device number 13 [ 189.261916][ T5955] hid_parser_main: 4 callbacks suppressed [ 189.261941][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.318002][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.333725][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.342728][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.357374][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.369985][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.384130][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.394348][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.402494][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.522039][ T5955] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 189.547440][ T5938] usb 4-1: USB disconnect, device number 10 [ 189.571831][ T5955] hid-generic 00A0:0006:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 189.581764][ T5967] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 189.807977][ T5967] usb 5-1: config 0 has no interfaces? [ 189.819666][ T5967] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 189.886211][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.107022][ T5967] usb 5-1: config 0 descriptor?? [ 190.350171][ T6855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.119179][ T5953] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.298782][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 192.368806][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 192.407557][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 192.743013][ T5953] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 192.769130][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.797553][ T5953] usb 4-1: Product: syz [ 192.814301][ T5953] usb 4-1: Manufacturer: syz [ 192.830278][ T5953] usb 4-1: SerialNumber: syz [ 192.848401][ T5953] usb 4-1: config 0 descriptor?? [ 192.865122][ T5953] mcba_usb 4-1:0.0: Can't find endpoints [ 193.045131][ T5938] usb 5-1: USB disconnect, device number 13 [ 193.281441][ T5967] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.433207][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.484247][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 193.566850][ T5967] usb 3-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 193.581371][ T5967] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.595241][ T5967] usb 3-1: config 1 has no interface number 1 [ 193.635909][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 193.651954][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.678743][ T5967] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.694120][ T24] usb 1-1: Product: syz [ 193.711997][ T24] usb 1-1: Manufacturer: syz [ 193.717192][ T5967] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.727207][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.735488][ T5967] usb 3-1: Product: syz [ 193.741281][ T5967] usb 3-1: Manufacturer: syz [ 193.746131][ T5967] usb 3-1: SerialNumber: syz [ 193.925098][ T24] usb 1-1: SerialNumber: syz [ 194.328383][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335242][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.969378][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 195.269342][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 195.284855][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 195.300510][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 195.463317][ T5967] usb 3-1: cannot find UAC_HEADER [ 195.527208][ T5967] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 195.599149][ T30] audit: type=1326 audit(1757324445.520:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.4.206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x0 [ 195.647836][ T5967] usb 3-1: USB disconnect, device number 14 [ 195.712452][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.089613][ T9] usb 1-1: USB disconnect, device number 9 [ 196.459137][ T24] usb 4-1: USB disconnect, device number 11 [ 196.505083][ T6932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.645548][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 196.788672][ T5955] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 196.826982][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.845390][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.855358][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.876548][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.901652][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.917801][ T9] usb 1-1: config 0 descriptor?? [ 196.933003][ T9] hub 1-1:0.0: USB hub found [ 196.965536][ T5955] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 196.974725][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.151920][ T5955] usb 5-1: Product: syz [ 197.235100][ T5955] usb 5-1: Manufacturer: syz [ 197.240770][ T5955] usb 5-1: SerialNumber: syz [ 197.245565][ T9] hub 1-1:0.0: 9 ports detected [ 197.263709][ T9] hub 1-1:0.0: insufficient power available to use all downstream ports [ 197.284195][ T5955] usb 5-1: config 0 descriptor?? [ 197.310331][ T5955] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 197.330285][ T5955] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 197.603723][ T5955] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 197.626697][ T5955] usb 5-1: USB disconnect, device number 14 [ 197.696660][ T5938] hid_parser_main: 4 callbacks suppressed [ 197.696682][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 197.895981][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 197.905268][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 197.980510][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 198.010736][ T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 198.018723][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 198.026364][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 198.033967][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 198.045109][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 198.186993][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 198.204609][ T24] usb 2-1: config 0 has no interfaces? [ 198.210289][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 198.219448][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.258087][ T5938] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 198.268904][ T24] usb 2-1: config 0 descriptor?? [ 198.321714][ T9] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 198.328312][ T9] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 198.354559][ T5938] hid-generic 00A0:0006:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 198.828761][ T5938] usb 1-1: USB disconnect, device number 10 [ 198.949117][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 199.210459][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 199.229790][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.242297][ T9] usb 5-1: config 0 has no interfaces? [ 199.306979][ T6972] warning: `syz.3.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 199.333738][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 199.371656][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.384665][ T9] usb 5-1: Product: syz [ 199.399360][ T9] usb 5-1: Manufacturer: syz [ 199.405912][ T9] usb 5-1: SerialNumber: syz [ 199.416111][ T9] usb 5-1: config 0 descriptor?? [ 199.668641][ T5938] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 199.831309][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.841839][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.853342][ T5938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 199.864242][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.876287][ T5938] usb 4-1: SerialNumber: syz [ 199.891183][ T5938] usb 4-1: 0:2 : does not exist [ 199.896440][ T5938] usb 4-1: unit 255 not found! [ 200.812801][ T9] usb 2-1: USB disconnect, device number 14 [ 201.854130][ T30] audit: type=1326 audit(1757324451.790:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x0 [ 202.028312][ T5967] usb 5-1: USB disconnect, device number 15 [ 202.207219][ T24] usb 4-1: USB disconnect, device number 12 [ 202.258118][ T5938] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.418627][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 202.470623][ T5938] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 202.497692][ T5938] usb 1-1: config 0 has no interface number 0 [ 202.514889][ T7002] netlink: 64 bytes leftover after parsing attributes in process `syz.1.226'. [ 202.518595][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.549258][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 202.566326][ T5938] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.580194][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.596846][ T5938] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 202.606549][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.628655][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.644831][ T5938] usb 1-1: config 0 descriptor?? [ 202.656436][ T7002] netlink: 'syz.1.226': attribute type 10 has an invalid length. [ 202.676052][ T5938] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 202.741109][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.755651][ T7002] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.798755][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 202.816897][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.838808][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.870402][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.904059][ T24] usb 4-1: config 0 descriptor?? [ 202.925703][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 202.938911][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 202.969526][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 203.923882][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 204.032253][ T7007] pim6reg: entered allmulticast mode [ 204.139378][ T5967] usb 1-1: USB disconnect, device number 11 [ 204.159009][ T5967] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 204.194786][ T7030] batman_adv: batadv0: Adding interface: dummy0 [ 204.298939][ T7030] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.326067][ T7030] batman_adv: batadv0: Interface activated: dummy0 [ 204.452291][ T5938] hid_parser_main: 4 callbacks suppressed [ 204.452312][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 204.474205][ T7022] batadv0: mtu less than device minimum [ 204.498835][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.510953][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.522719][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.534447][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.546170][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.557907][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.569465][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.581189][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.592893][ T7022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.630637][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 204.762022][ T24] usb 2-1: config 0 has no interfaces? [ 204.783770][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 204.810159][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 204.908836][ T5953] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 204.925285][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 204.954866][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.975080][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 205.263535][ T24] usb 2-1: Product: syz [ 205.268736][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 205.279219][ T24] usb 2-1: Manufacturer: syz [ 205.334828][ T5953] usb 5-1: config 0 has no interfaces? [ 205.345121][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 205.355099][ T24] usb 2-1: SerialNumber: syz [ 205.361746][ T5953] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 205.392442][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 205.401736][ T24] usb 2-1: config 0 descriptor?? [ 205.425523][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.465533][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 205.516303][ T5953] usb 5-1: config 0 descriptor?? [ 205.524748][ T5938] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 205.608651][ T5938] hid-generic 00A0:0006:0003.0008: hidraw0: HID v0.05 Device [syz1] on syz0 [ 206.048934][ T5967] usb 4-1: USB disconnect, device number 13 [ 206.098260][ T7041] netlink: 300 bytes leftover after parsing attributes in process `syz.3.235'. [ 207.404569][ T5967] usb 5-1: USB disconnect, device number 16 [ 207.709225][ T5938] usb 2-1: USB disconnect, device number 15 [ 207.805418][ T7067] FAULT_INJECTION: forcing a failure. [ 207.805418][ T7067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.861778][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.3.241 Not tainted syzkaller #0 PREEMPT(full) [ 207.861808][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.861821][ T7067] Call Trace: [ 207.861829][ T7067] [ 207.861838][ T7067] dump_stack_lvl+0x189/0x250 [ 207.861868][ T7067] ? __pfx____ratelimit+0x10/0x10 [ 207.861890][ T7067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.861914][ T7067] ? __pfx__printk+0x10/0x10 [ 207.861943][ T7067] ? __might_fault+0xb0/0x130 [ 207.861982][ T7067] should_fail_ex+0x414/0x560 [ 207.862017][ T7067] _copy_from_user+0x2d/0xb0 [ 207.862045][ T7067] smc_setsockopt+0x3b8/0xab0 [ 207.862072][ T7067] ? __pfx_smc_setsockopt+0x10/0x10 [ 207.862088][ T7067] ? aa_sock_opt_perm+0xff/0x1b0 [ 207.862112][ T7067] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 207.862134][ T7067] ? __pfx_smc_setsockopt+0x10/0x10 [ 207.862153][ T7067] do_sock_setsockopt+0x17c/0x1b0 [ 207.862179][ T7067] __x64_sys_setsockopt+0x13f/0x1b0 [ 207.862207][ T7067] do_syscall_64+0xfa/0x3b0 [ 207.862228][ T7067] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.862247][ T7067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.862267][ T7067] ? clear_bhb_loop+0x60/0xb0 [ 207.862291][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.862310][ T7067] RIP: 0033:0x7f0cd7b8ebe9 [ 207.862328][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.862345][ T7067] RSP: 002b:00007f0cd89a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.862365][ T7067] RAX: ffffffffffffffda RBX: 00007f0cd7dc5fa0 RCX: 00007f0cd7b8ebe9 [ 207.862380][ T7067] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000003 [ 207.862392][ T7067] RBP: 00007f0cd89a3090 R08: 0000000000000010 R09: 0000000000000000 [ 207.862404][ T7067] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 207.862416][ T7067] R13: 00007f0cd7dc6038 R14: 00007f0cd7dc5fa0 R15: 00007f0cd7eefa28 [ 207.862448][ T7067] [ 209.219016][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 209.449239][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 209.464518][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.532291][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.592801][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.617980][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.658025][ T9] usb 4-1: config 0 descriptor?? [ 209.802634][ T9] hub 4-1:0.0: USB hub found [ 210.076673][ T9] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 210.539712][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 210.553957][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 210.571094][ T7090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.628832][ T9] usb 4-1: USB disconnect, device number 14 [ 210.998059][ T30] audit: type=1326 audit(1757324460.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 211.114901][ T30] audit: type=1326 audit(1757324460.960:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 211.196310][ T30] audit: type=1326 audit(1757324460.980:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 211.261520][ T30] audit: type=1326 audit(1757324460.980:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 211.288627][ T5955] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 211.447410][ T30] audit: type=1326 audit(1757324460.980:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 211.541859][ T5955] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 211.608690][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.616890][ T5955] usb 2-1: Product: syz [ 211.634079][ T30] audit: type=1326 audit(1757324460.980:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f769158d550 code=0x7ffc0000 [ 211.698607][ T5955] usb 2-1: Manufacturer: syz [ 211.703272][ T5955] usb 2-1: SerialNumber: syz [ 211.731255][ T5955] usb 2-1: config 0 descriptor?? [ 211.861281][ T30] audit: type=1326 audit(1757324460.980:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769158e7eb code=0x7ffc0000 [ 211.886333][ T30] audit: type=1326 audit(1757324460.980:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769158e7eb code=0x7ffc0000 [ 211.912371][ T30] audit: type=1326 audit(1757324460.990:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769158e7eb code=0x7ffc0000 [ 211.972202][ T30] audit: type=1326 audit(1757324460.990:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769158e7eb code=0x7ffc0000 [ 212.044745][ T5955] usb-storage 2-1:0.0: USB Mass Storage device detected [ 212.199671][ T5955] usb 2-1: USB disconnect, device number 16 [ 212.356447][ T7117] binder: BINDER_SET_CONTEXT_MGR already set [ 212.362815][ T7117] binder: 7116:7117 ioctl 4018620d 200000000040 returned -16 [ 212.370628][ T5938] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 212.384159][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 212.563003][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 212.591790][ T5938] usb 3-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 212.602389][ T5938] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.657626][ T5938] usb 3-1: config 1 has no interface number 1 [ 213.040738][ T5938] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.262072][ T5938] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.273078][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.281708][ T5938] usb 3-1: Product: syz [ 213.288748][ T5938] usb 3-1: Manufacturer: syz [ 213.293385][ T5938] usb 3-1: SerialNumber: syz [ 213.494889][ T7129] netlink: 188 bytes leftover after parsing attributes in process `syz.0.257'. [ 213.606785][ T7129] net_ratelimit: 11 callbacks suppressed [ 213.606807][ T7129] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 214.723874][ T24] IPVS: starting estimator thread 0... [ 214.781275][ T7138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.829521][ T7137] IPVS: using max 29 ests per chain, 69600 per kthread [ 215.904455][ T5938] usb 3-1: cannot find UAC_HEADER [ 216.042640][ T5938] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 216.103872][ T5938] usb 3-1: USB disconnect, device number 15 [ 216.164361][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.458910][ T5938] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 216.458924][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 216.634297][ T7161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.820464][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 216.829670][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.859407][ T9] usb 2-1: config 0 descriptor?? [ 216.895684][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 216.909027][ T5880] Bluetooth: hci0: command 0x0406 tx timeout [ 217.422170][ T9] ath6kl: Failed to submit usb control message: -71 [ 217.431468][ T5938] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.440443][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 217.447755][ T5938] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.466763][ T9] ath6kl: Unable to send get target info: -71 [ 217.524179][ T9] ath6kl: Failed to init ath6kl core: -71 [ 217.546290][ T9] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 217.590641][ T9] usb 2-1: USB disconnect, device number 17 [ 217.787368][ T5938] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.798625][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.806868][ T5938] usb 3-1: Product: syz [ 217.817091][ T5938] usb 3-1: Manufacturer: syz [ 217.827273][ T5938] usb 3-1: SerialNumber: syz [ 217.838321][ T5938] usb 3-1: config 0 descriptor?? [ 217.855716][ T5938] usb 3-1: selecting invalid altsetting 0 [ 218.321400][ T7177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.336822][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 218.381162][ T24] usb 3-1: USB disconnect, device number 16 [ 219.319876][ T7198] FAULT_INJECTION: forcing a failure. [ 219.319876][ T7198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.352618][ T7198] CPU: 1 UID: 0 PID: 7198 Comm: syz.4.277 Not tainted syzkaller #0 PREEMPT(full) [ 219.352639][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.352648][ T7198] Call Trace: [ 219.352654][ T7198] [ 219.352661][ T7198] dump_stack_lvl+0x189/0x250 [ 219.352684][ T7198] ? __pfx____ratelimit+0x10/0x10 [ 219.352699][ T7198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.352716][ T7198] ? __pfx__printk+0x10/0x10 [ 219.352736][ T7198] ? __might_fault+0xb0/0x130 [ 219.352765][ T7198] should_fail_ex+0x414/0x560 [ 219.352790][ T7198] _copy_from_iter+0x1de/0x1790 [ 219.352806][ T7198] ? aa_file_perm+0x13a/0x1550 [ 219.352822][ T7198] ? aa_file_perm+0x44d/0x1550 [ 219.352838][ T7198] ? _parse_integer_limit+0x1ae/0x1f0 [ 219.352857][ T7198] ? __pfx__copy_from_iter+0x10/0x10 [ 219.352872][ T7198] ? __lock_acquire+0xab9/0xd20 [ 219.352895][ T7198] ? __pfx_aa_file_perm+0x10/0x10 [ 219.352914][ T7198] ? iov_iter_advance+0x8b/0x1c0 [ 219.352932][ T7198] vhost_chr_write_iter+0x22c/0xad0 [ 219.352954][ T7198] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 219.352967][ T7198] ? common_file_perm+0x1b5/0x230 [ 219.352984][ T7198] ? security_file_permission+0x75/0x290 [ 219.353010][ T7198] vfs_write+0x5c6/0xb30 [ 219.353043][ T7198] ? __pfx_vhost_vsock_chr_write_iter+0x10/0x10 [ 219.353061][ T7198] ? __pfx_vfs_write+0x10/0x10 [ 219.353092][ T7198] ? __fget_files+0x2a/0x420 [ 219.353111][ T7198] ksys_write+0x145/0x250 [ 219.353132][ T7198] ? __pfx_ksys_write+0x10/0x10 [ 219.353155][ T7198] ? do_syscall_64+0xbe/0x3b0 [ 219.353173][ T7198] do_syscall_64+0xfa/0x3b0 [ 219.353187][ T7198] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.353208][ T7198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.353222][ T7198] ? clear_bhb_loop+0x60/0xb0 [ 219.353239][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.353253][ T7198] RIP: 0033:0x7f844838ebe9 [ 219.353267][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.353278][ T7198] RSP: 002b:00007f84465d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.353294][ T7198] RAX: ffffffffffffffda RBX: 00007f84485c6090 RCX: 00007f844838ebe9 [ 219.353304][ T7198] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000003 [ 219.353313][ T7198] RBP: 00007f84465d5090 R08: 0000000000000000 R09: 0000000000000000 [ 219.353321][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.353329][ T7198] R13: 00007f84485c6128 R14: 00007f84485c6090 R15: 00007f84486efa28 [ 219.353351][ T7198] [ 220.009495][ T7203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.058613][ T5967] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 220.170505][ T7207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.218633][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 220.228043][ T5967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.240404][ T5967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.253486][ T5967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.263164][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.272090][ T5967] usb 1-1: Product: syz [ 220.276730][ T5967] usb 1-1: Manufacturer: syz [ 220.285058][ T5967] usb 1-1: SerialNumber: syz [ 220.920761][ T5967] usb 1-1: 0:2 : does not exist [ 221.718460][ T5967] usb 1-1: USB disconnect, device number 12 [ 221.887070][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.036990][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 222.045431][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 222.051569][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 222.208403][ T7227] pim6reg: entered allmulticast mode [ 222.260007][ T7233] ptrace attach of "./syz-executor exec"[5885] was attempted by "./syz-executor exec"[7233] [ 222.542724][ T7239] netlink: 'syz.0.288': attribute type 3 has an invalid length. [ 222.866331][ T5938] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 223.144631][ T7252] netlink: 'syz.2.292': attribute type 10 has an invalid length. [ 223.154699][ T5938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.177300][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.185870][ T7252] macvlan1: entered allmulticast mode [ 223.197653][ T7252] veth1_vlan: entered allmulticast mode [ 223.225098][ T5938] usb 2-1: Product: syz [ 223.257925][ T5938] usb 2-1: Manufacturer: syz [ 223.276788][ T7252] team0: Port device macvlan1 added [ 223.288676][ T5938] usb 2-1: SerialNumber: syz [ 223.323711][ T5938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.441734][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 224.558674][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 224.572159][ T43] ath9k_htc: Failed to initialize the device [ 224.784083][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 225.368295][ T5967] usb 2-1: USB disconnect, device number 18 [ 226.178470][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 226.203147][ T7287] netlink: 160 bytes leftover after parsing attributes in process `syz.1.300'. [ 227.750081][ T7299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.962326][ T7300] binder_alloc: 7298: binder_alloc_buf, no vma [ 227.992351][ T7300] binder: 7298:7300 ioctl c0306201 200000000180 returned -11 [ 228.258836][ T5955] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 228.424570][ T5938] hid_parser_main: 4 callbacks suppressed [ 228.424594][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.455240][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.472192][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.533338][ T5955] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 228.542500][ T5955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.563324][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 228.577345][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.597637][ T5955] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 228.607171][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.615539][ T5955] usb 4-1: Product: syz [ 228.682796][ T5955] usb 4-1: Manufacturer: syz [ 228.690469][ T43] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 228.697940][ T5955] usb 4-1: SerialNumber: syz [ 228.698190][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.717917][ T5955] usb 4-1: config 0 descriptor?? [ 228.744360][ T5955] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 228.762240][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.786099][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.786647][ T5955] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 228.793684][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.793716][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.793742][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.793768][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 228.839189][ T5955] usb 4-1: media controller created [ 228.940505][ T7300] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.074378][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.307640][ T5938] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 229.357148][ T5938] hid-generic 00A0:0006:0003.0009: hidraw0: HID v0.05 Device [syz1] on syz0 [ 229.472452][ T43] usb 3-1: config 0 has no interfaces? [ 229.478011][ T43] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 229.502448][ T5955] DVB: Unable to find symbol tda10046_attach() [ 229.512888][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.518670][ T5955] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 229.574356][ T5955] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 229.614438][ T43] usb 3-1: config 0 descriptor?? [ 229.778964][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 229.938729][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 229.948882][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.968908][ T9] usb 5-1: config 0 has no interfaces? [ 229.993974][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 230.012471][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.041294][ T9] usb 5-1: Product: syz [ 230.072133][ T9] usb 5-1: Manufacturer: syz [ 230.100729][ T9] usb 5-1: SerialNumber: syz [ 230.183620][ T9] usb 5-1: config 0 descriptor?? [ 230.708746][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 230.837043][ T5955] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 230.948979][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 230.967993][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.986481][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.017599][ T5955] usb 4-1: USB disconnect, device number 15 [ 231.089024][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 231.177711][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.259207][ T7324] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[7324] [ 231.333790][ T43] usb 2-1: config 0 descriptor?? [ 231.356503][ T43] hub 2-1:0.0: USB hub found [ 231.559791][ T43] hub 2-1:0.0: 1 port detected [ 231.713136][ T7331] netlink: 148 bytes leftover after parsing attributes in process `syz.3.314'. [ 231.752045][ T24] usb 3-1: USB disconnect, device number 17 [ 231.955738][ T5938] usb 5-1: USB disconnect, device number 17 [ 232.176739][ T7322] batman_adv: batadv0: Adding interface: dummy0 [ 232.183197][ T7322] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.344529][ T7322] batman_adv: batadv0: Interface activated: dummy0 [ 232.358772][ T7337] batadv0: mtu less than device minimum [ 232.376059][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.387811][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.399866][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.411921][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.423959][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.435944][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.447993][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.460140][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.472176][ T7337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.771972][ T24] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 232.781223][ T24] usb 2-1: USB disconnect, device number 19 [ 232.799871][ T43] usb 2-1: Failed to suspend device, error -19 [ 233.032115][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 233.032133][ T30] audit: type=1326 audit(1757324482.960:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.2.315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ed8ebe9 code=0x0 [ 233.657778][ T7350] FAULT_INJECTION: forcing a failure. [ 233.657778][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.725175][ T7350] CPU: 1 UID: 0 PID: 7350 Comm: syz.1.318 Not tainted syzkaller #0 PREEMPT(full) [ 233.725202][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.725213][ T7350] Call Trace: [ 233.725221][ T7350] [ 233.725230][ T7350] dump_stack_lvl+0x189/0x250 [ 233.725260][ T7350] ? __pfx____ratelimit+0x10/0x10 [ 233.725281][ T7350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.725305][ T7350] ? __pfx__printk+0x10/0x10 [ 233.725332][ T7350] ? __might_fault+0xb0/0x130 [ 233.725372][ T7350] should_fail_ex+0x414/0x560 [ 233.725407][ T7350] _copy_from_user+0x2d/0xb0 [ 233.725433][ T7350] ___sys_sendmsg+0x158/0x2a0 [ 233.725461][ T7350] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.725533][ T7350] ? __might_fault+0xb0/0x130 [ 233.725564][ T7350] __sys_sendmmsg+0x227/0x430 [ 233.725596][ T7350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 233.725618][ T7350] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 233.725668][ T7350] ? ksys_write+0x22a/0x250 [ 233.725697][ T7350] ? __pfx_ksys_write+0x10/0x10 [ 233.725728][ T7350] ? rcu_is_watching+0x15/0xb0 [ 233.725756][ T7350] __x64_sys_sendmmsg+0xa0/0xc0 [ 233.725783][ T7350] do_syscall_64+0xfa/0x3b0 [ 233.725803][ T7350] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.725822][ T7350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.725843][ T7350] ? clear_bhb_loop+0x60/0xb0 [ 233.725867][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.725886][ T7350] RIP: 0033:0x7f769158ebe9 [ 233.725904][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.725921][ T7350] RSP: 002b:00007f7692402038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.725942][ T7350] RAX: ffffffffffffffda RBX: 00007f76917c5fa0 RCX: 00007f769158ebe9 [ 233.725956][ T7350] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 233.725969][ T7350] RBP: 00007f7692402090 R08: 0000000000000000 R09: 0000000000000000 [ 233.725979][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.725990][ T7350] R13: 00007f76917c6038 R14: 00007f76917c5fa0 R15: 00007f76918efa28 [ 233.726022][ T7350] [ 234.778606][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 235.259105][ T5931] hid_parser_main: 4 callbacks suppressed [ 235.259124][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.293190][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.308671][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.333207][ T43] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.438744][ T43] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 235.475560][ T43] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 235.479318][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.524418][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 235.538872][ T5955] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 235.539773][ T43] usb 4-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 235.596494][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.638303][ T43] usb 4-1: config 0 descriptor?? [ 235.682698][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.701334][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.759029][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.818679][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.828895][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.836354][ T5931] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 235.854678][ T5931] hid-generic 00A0:0006:0003.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 235.986094][ T5955] usb 1-1: config 0 has no interfaces? [ 235.998734][ T5955] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 236.053270][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.084494][ T5955] usb 1-1: config 0 descriptor?? [ 236.259554][ T7380] binder: BINDER_SET_CONTEXT_MGR already set [ 236.287027][ T7380] binder: 7379:7380 ioctl 4018620d 200000000040 returned -16 [ 237.308819][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 237.675062][ T43] usb 4-1: string descriptor 0 read error: -71 [ 237.845854][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 237.994122][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 238.076119][ T43] usb 4-1: USB disconnect, device number 16 [ 238.352767][ T5938] usb 1-1: USB disconnect, device number 13 [ 238.438642][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.614755][ T43] usb 4-1: config 0 has no interfaces? [ 238.631002][ T43] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 238.679914][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.725531][ T43] usb 4-1: config 0 descriptor?? [ 238.863007][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'. [ 238.941258][ T7420] capability: warning: `syz.1.340' uses 32-bit capabilities (legacy support in use) [ 239.028687][ T961] usb 4-1: USB disconnect, device number 17 [ 239.396046][ T7428] netlink: 148 bytes leftover after parsing attributes in process `syz.2.341'. [ 241.181242][ T7434] netlink: 'syz.1.345': attribute type 3 has an invalid length. [ 241.206517][ T7434] netlink: 156 bytes leftover after parsing attributes in process `syz.1.345'. [ 241.226018][ T7434] netlink: 'syz.1.345': attribute type 3 has an invalid length. [ 241.268130][ T7434] netlink: 156 bytes leftover after parsing attributes in process `syz.1.345'. [ 241.357930][ T7438] syz.1.345 uses obsolete (PF_INET,SOCK_PACKET) [ 241.608687][ T961] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 241.832382][ T961] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 241.846410][ T961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.873253][ T961] usb 4-1: Product: syz [ 241.898115][ T961] usb 4-1: Manufacturer: syz [ 241.908382][ T961] usb 4-1: SerialNumber: syz [ 241.947300][ T961] usb 4-1: config 0 descriptor?? [ 242.171331][ T961] usb-storage 4-1:0.0: USB Mass Storage device detected [ 242.322314][ T961] usb 4-1: USB disconnect, device number 18 [ 243.219497][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 243.599527][ T7464] vlan2: entered allmulticast mode [ 243.605021][ T7464] bond1: entered allmulticast mode [ 245.283817][ T5955] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 245.920981][ T5955] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 245.960403][ T5955] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 245.981881][ T5955] usb 3-1: config 1 interface 0 has no altsetting 0 [ 246.022379][ T5955] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 246.031996][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.040063][ T5955] usb 3-1: Product: syz [ 246.044773][ T5955] usb 3-1: Manufacturer: syz [ 246.056760][ T5955] usb 3-1: SerialNumber: syz [ 246.076170][ T7478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.084581][ T7478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.423970][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 246.619060][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 246.635958][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.693736][ T9] usb 1-1: config 0 has no interfaces? [ 246.712150][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 246.738553][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.787661][ T9] usb 1-1: Product: syz [ 246.817479][ T9] usb 1-1: Manufacturer: syz [ 246.837719][ T9] usb 1-1: SerialNumber: syz [ 246.854115][ T9] usb 1-1: config 0 descriptor?? [ 247.310198][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 247.326181][ T961] usb 1-1: USB disconnect, device number 14 [ 247.618953][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 247.628257][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.648695][ T9] usb 5-1: config 0 descriptor?? [ 247.869466][ T9] ath6kl: Failed to submit usb control message: -71 [ 247.886608][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 247.904081][ T9] ath6kl: Unable to send get target info: -71 [ 247.928784][ T9] ath6kl: Failed to init ath6kl core: -71 [ 247.958331][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 248.013837][ T9] usb 5-1: USB disconnect, device number 18 [ 248.164336][ T5955] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:f0:16:c1:3f:b1 [ 248.266823][ T5955] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 248.508751][ T5938] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 248.688602][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 248.701401][ T5938] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 248.732269][ T5938] usb 1-1: config 0 has no interface number 0 [ 248.774624][ T5938] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.826299][ T5938] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 248.902161][ T5938] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 248.982218][ T5938] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.066105][ T5938] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 249.101496][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.155826][ T5938] usb 1-1: Product: syz [ 249.188436][ T5938] usb 1-1: Manufacturer: syz [ 249.238569][ T5938] usb 1-1: SerialNumber: syz [ 249.260239][ T5938] usb 1-1: config 0 descriptor?? [ 249.410100][ T24] usb 3-1: USB disconnect, device number 18 [ 249.510065][ T9] hid_parser_main: 4 callbacks suppressed [ 249.510088][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 249.734986][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 249.777251][ T5938] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 249.778682][ T5955] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 249.811043][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 249.843235][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 249.868185][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 249.897996][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 249.932990][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 249.941480][ T5938] usb 1-1: USB disconnect, device number 15 [ 249.965867][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 249.990866][ T5955] usb 4-1: config 0 has no interfaces? [ 249.996422][ T5955] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 250.022949][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 250.058620][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 250.068710][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.097638][ T9] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 250.163007][ T5955] usb 4-1: config 0 descriptor?? [ 250.175297][ T9] hid-generic 00A0:0006:0003.000B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 251.148784][ T5955] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 251.370606][ T5955] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 251.388661][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.427685][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.585834][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 251.763682][ T5955] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 251.801752][ T5955] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 251.823481][ T5955] usb 1-1: Manufacturer: syz [ 251.847439][ T5955] usb 1-1: config 0 descriptor?? [ 252.310605][ T5955] appleir 0003:05AC:8243.000C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 253.093990][ T24] usb 1-1: USB disconnect, device number 16 [ 253.162292][ T5938] usb 4-1: USB disconnect, device number 19 [ 253.898297][ T5967] IPVS: starting estimator thread 0... [ 254.038626][ T7591] IPVS: using max 25 ests per chain, 60000 per kthread [ 255.148674][ T24] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 255.330347][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 255.348667][ T5938] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 255.356392][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.388290][ T24] usb 2-1: config 0 descriptor?? [ 255.518867][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 255.540183][ T5938] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.558536][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 255.565334][ T5938] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 255.588602][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.603749][ T5938] usb 5-1: config 0 descriptor?? [ 255.763173][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.769970][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.044915][ T5938] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 256.235892][ C1] usb 5-1: input irq status -75 received [ 256.437528][ T5955] usb 5-1: USB disconnect, device number 19 [ 256.841017][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 256.851200][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 256.871355][ T24] asix 2-1:0.0: probe with driver asix failed with error -71 [ 256.896912][ T24] usb 2-1: USB disconnect, device number 20 [ 261.038882][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 261.453810][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.462147][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.539745][ T7691] bridge0: entered allmulticast mode [ 261.616040][ T7692] bridge_slave_1: left allmulticast mode [ 261.627943][ T7692] bridge_slave_1: left promiscuous mode [ 261.652511][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.705367][ T7692] bridge_slave_0: left allmulticast mode [ 261.711526][ T7692] bridge_slave_0: left promiscuous mode [ 261.719301][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.334318][ T5880] Bluetooth: hci1: unexpected event for opcode 0x204e [ 262.642706][ T7710] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 262.687057][ T7710] macsec1: entered allmulticast mode [ 262.713989][ T7710] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 266.523302][ T7764] dvmrp1: entered allmulticast mode [ 269.098647][ T5967] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 269.285883][ T5967] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 269.303307][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.378369][ T5967] usb 4-1: Product: syz [ 269.388192][ T5967] usb 4-1: Manufacturer: syz [ 269.398552][ T5967] usb 4-1: SerialNumber: syz [ 269.548217][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 270.209244][ T7810] dvmrp1: entered allmulticast mode [ 270.948627][ T5967] net_ratelimit: 10 callbacks suppressed [ 270.948651][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 270.991799][ T7821] netlink: 'syz.0.453': attribute type 12 has an invalid length. [ 271.025815][ T7821] netlink: 'syz.0.453': attribute type 29 has an invalid length. [ 271.053963][ T7821] netlink: 148 bytes leftover after parsing attributes in process `syz.0.453'. [ 271.078583][ T7821] netlink: 'syz.0.453': attribute type 2 has an invalid length. [ 271.106848][ T7821] netlink: 'syz.0.453': attribute type 3 has an invalid length. [ 271.127104][ T7821] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 271.511729][ T7833] ipvlan1: entered promiscuous mode [ 271.517071][ T7833] ipvlan1: entered allmulticast mode [ 271.545281][ T7833] veth0_vlan: entered allmulticast mode [ 271.591633][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 271.629190][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 271.641572][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 271.651574][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 271.691189][ T5967] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 271.705399][ T5967] usb 4-1: USB disconnect, device number 20 [ 272.204525][ T7843] veth0: entered promiscuous mode [ 272.230425][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 272.250987][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 272.732931][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 272.986700][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 273.970088][ T7888] random: crng reseeded on system resumption [ 274.808172][ T30] audit: type=1326 audit(1757324524.740:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 274.898574][ T30] audit: type=1326 audit(1757324524.740:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 274.945528][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 275.036002][ T7913] random: crng reseeded on system resumption [ 275.095687][ T30] audit: type=1326 audit(1757324524.770:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 275.194620][ T30] audit: type=1326 audit(1757324524.770:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 275.258322][ T30] audit: type=1326 audit(1757324524.770:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 275.377167][ T30] audit: type=1326 audit(1757324524.770:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 275.510911][ T30] audit: type=1326 audit(1757324524.770:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 275.651495][ T30] audit: type=1326 audit(1757324524.770:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 275.748594][ T30] audit: type=1326 audit(1757324524.770:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 275.858581][ T30] audit: type=1326 audit(1757324524.770:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 276.007453][ T7937] tipc: Enabling of bearer rejected, failed to enable media [ 277.107241][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880477d0c00: rx timeout, send abort [ 277.117298][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880477d0c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 278.714746][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'. [ 278.914777][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 279.955822][ T8039] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 280.728724][ T30] kauditd_printk_skb: 578 callbacks suppressed [ 280.728743][ T30] audit: type=1326 audit(1757324530.660:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd7b8ebe9 code=0x7ffc0000 [ 280.862168][ T30] audit: type=1326 audit(1757324530.660:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd7b8ebe9 code=0x7ffc0000 [ 280.900137][ T8064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.561'. [ 280.921892][ T30] audit: type=1326 audit(1757324530.700:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd7b8ebe9 code=0x7ffc0000 [ 280.965064][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.561'. [ 281.012394][ T30] audit: type=1326 audit(1757324530.700:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd7b8ebe9 code=0x7ffc0000 [ 281.023114][ T8064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.561'. [ 281.142274][ T30] audit: type=1326 audit(1757324530.700:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f0cd7b8ebe9 code=0x7ffc0000 [ 281.232877][ T30] audit: type=1326 audit(1757324530.700:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd7b8ebe9 code=0x7ffc0000 [ 282.111349][ T30] audit: type=1326 audit(1757324532.050:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87058ebe9 code=0x7ffc0000 [ 282.193489][ T30] audit: type=1326 audit(1757324532.100:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa87058ebe9 code=0x7ffc0000 [ 282.305223][ T30] audit: type=1326 audit(1757324532.100:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87058ebe9 code=0x7ffc0000 [ 282.418581][ T30] audit: type=1326 audit(1757324532.100:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87058ebe9 code=0x7ffc0000 [ 282.527247][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 282.537830][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 282.623032][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'. [ 282.633628][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 282.654035][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 282.852380][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 283.225922][ T8148] syz.3.602: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 283.285525][ T8148] CPU: 1 UID: 0 PID: 8148 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT(full) [ 283.285555][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.285569][ T8148] Call Trace: [ 283.285583][ T8148] [ 283.285593][ T8148] dump_stack_lvl+0x189/0x250 [ 283.285629][ T8148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.285654][ T8148] ? __pfx__printk+0x10/0x10 [ 283.285684][ T8148] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 283.285710][ T8148] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 283.285736][ T8148] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 283.285764][ T8148] warn_alloc+0x214/0x310 [ 283.285795][ T8148] ? stack_depot_save_flags+0x40/0x860 [ 283.285828][ T8148] ? __pfx_warn_alloc+0x10/0x10 [ 283.285862][ T8148] ? kasan_save_track+0x4f/0x80 [ 283.285888][ T8148] ? xskq_create+0x56/0x170 [ 283.285905][ T8148] ? xsk_init_queue+0xb0/0x110 [ 283.285934][ T8148] ? xsk_setsockopt+0x57b/0x8d0 [ 283.285961][ T8148] ? do_sock_setsockopt+0x17c/0x1b0 [ 283.285984][ T8148] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 283.286016][ T8148] ? do_syscall_64+0xfa/0x3b0 [ 283.286037][ T8148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.286066][ T8148] __vmalloc_node_range_noprof+0x125/0x12f0 [ 283.286131][ T8148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.286169][ T8148] ? __kasan_kmalloc+0x93/0xb0 [ 283.286199][ T8148] vmalloc_user_noprof+0xad/0xf0 [ 283.286230][ T8148] ? xskq_create+0xbf/0x170 [ 283.286250][ T8148] xskq_create+0xbf/0x170 [ 283.286272][ T8148] xsk_init_queue+0xb0/0x110 [ 283.286307][ T8148] xsk_setsockopt+0x57b/0x8d0 [ 283.286341][ T8148] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.286371][ T8148] ? __pfx_aa_sk_perm+0x10/0x10 [ 283.286406][ T8148] ? __fget_files+0x2a/0x420 [ 283.286422][ T8148] ? aa_sock_opt_perm+0xff/0x1b0 [ 283.286447][ T8148] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 283.286469][ T8148] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.286501][ T8148] do_sock_setsockopt+0x17c/0x1b0 [ 283.286531][ T8148] __x64_sys_setsockopt+0x13f/0x1b0 [ 283.286561][ T8148] do_syscall_64+0xfa/0x3b0 [ 283.286581][ T8148] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.286601][ T8148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.286621][ T8148] ? clear_bhb_loop+0x60/0xb0 [ 283.286655][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.286676][ T8148] RIP: 0033:0x7f0cd7b8ebe9 [ 283.286695][ T8148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.286714][ T8148] RSP: 002b:00007f0cd89a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.286736][ T8148] RAX: ffffffffffffffda RBX: 00007f0cd7dc5fa0 RCX: 00007f0cd7b8ebe9 [ 283.286752][ T8148] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 283.286765][ T8148] RBP: 00007f0cd7c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 283.286778][ T8148] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 283.286792][ T8148] R13: 00007f0cd7dc6038 R14: 00007f0cd7dc5fa0 R15: 00007f0cd7eefa28 [ 283.286826][ T8148] [ 283.286869][ T8148] Mem-Info: [ 283.631192][ T8148] active_anon:6263 inactive_anon:0 isolated_anon:0 [ 283.631192][ T8148] active_file:12680 inactive_file:39964 isolated_file:0 [ 283.631192][ T8148] unevictable:768 dirty:123 writeback:0 [ 283.631192][ T8148] slab_reclaimable:10700 slab_unreclaimable:110403 [ 283.631192][ T8148] mapped:30249 shmem:1358 pagetables:1377 [ 283.631192][ T8148] sec_pagetables:0 bounce:0 [ 283.631192][ T8148] kernel_misc_reclaimable:0 [ 283.631192][ T8148] free:1301589 free_pcp:14220 free_cma:0 [ 283.704246][ T8148] Node 0 active_anon:25152kB inactive_anon:0kB active_file:50720kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120996kB dirty:488kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12456kB pagetables:5136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.757176][ T8148] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.864138][ T8148] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.900408][ T8148] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 283.906694][ T8148] Node 0 DMA32 free:1297640kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25104kB inactive_anon:0kB active_file:50720kB inactive_file:158088kB unevictable:1536kB writepending:488kB present:3129332kB managed:2557428kB mlocked:0kB bounce:0kB free_pcp:41940kB local_pcp:21820kB free_cma:0kB [ 283.971449][ T8148] lowmem_reserve[]: 0 0 1 1 1 [ 283.976344][ T8148] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 284.009577][ T8148] lowmem_reserve[]: 0 0 0 0 0 [ 284.014380][ T8148] Node 1 Normal free:3893344kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15872kB local_pcp:7616kB free_cma:0kB [ 284.074115][ T8148] lowmem_reserve[]: 0 0 0 0 0 [ 284.098867][ T8148] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.114616][ T8148] Node 0 DMA32: 781*4kB (UM) 1032*8kB (UME) 390*16kB (UME) 546*32kB (UM) 354*64kB (UME) 146*128kB (UME) 60*256kB (UME) 17*512kB (UM) 6*1024kB (UM) 10*2048kB (UM) 286*4096kB (UM) = 1298580kB [ 284.167612][ T8148] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 284.169775][ T8173] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 284.218685][ T8148] Node 1 Normal: 188*4kB (UME) 44*8kB (UME) 33*16kB (UME) 154*32kB (UME) 45*64kB (UME) 7*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (UM) = 3893344kB [ 284.243891][ T8148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.340407][ T8148] Node 0 hugepages_total=6 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 284.361089][ T8148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.370858][ T8148] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 284.374440][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 284.390564][ T8148] 54047 total pagecache pages [ 284.395296][ T8148] 0 pages in swap cache [ 284.474533][ T8148] Free swap = 124996kB [ 284.498594][ T8148] Total swap = 124996kB [ 284.528700][ T8148] 2097051 pages RAM [ 284.532575][ T8148] 0 pages HighMem/MovableOnly [ 284.618609][ T8148] 425668 pages reserved [ 284.664594][ T8148] 0 pages cma reserved [ 284.951514][ T8194] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 284.951514][ T8194] program syz.4.621 not setting count and/or reply_len properly [ 285.804306][ T8212] vlan2: entered promiscuous mode [ 285.869100][ T8212] vlan2: entered allmulticast mode [ 285.874290][ T8212] hsr_slave_1: entered allmulticast mode [ 285.945796][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 286.176104][ T8226] netlink: 'syz.4.634': attribute type 10 has an invalid length. [ 286.176132][ T8226] netlink: 40 bytes leftover after parsing attributes in process `syz.4.634'. [ 286.176430][ T8226] dummy0: entered promiscuous mode [ 286.178023][ T8226] bridge0: port 4(dummy0) entered blocking state [ 286.178318][ T8226] bridge0: port 4(dummy0) entered disabled state [ 286.180265][ T8226] dummy0: entered allmulticast mode [ 286.263865][ T8226] bridge0: port 4(dummy0) entered blocking state [ 286.264051][ T8226] bridge0: port 4(dummy0) entered forwarding state [ 287.641138][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 287.641169][ T30] audit: type=1326 audit(1757324537.560:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 287.753585][ T30] audit: type=1326 audit(1757324537.560:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 287.797937][ T30] audit: type=1326 audit(1757324537.560:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 287.822341][ T30] audit: type=1326 audit(1757324537.560:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 287.844955][ T30] audit: type=1326 audit(1757324537.560:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 287.905645][ T30] audit: type=1326 audit(1757324537.560:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 287.969196][ T30] audit: type=1326 audit(1757324537.560:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 288.063959][ T30] audit: type=1326 audit(1757324537.560:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 288.138814][ T30] audit: type=1326 audit(1757324537.560:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 288.233757][ T30] audit: type=1326 audit(1757324537.560:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769158ebe9 code=0x7ffc0000 [ 288.966680][ T8298] syz.2.663 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 290.666967][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 291.525392][ T5967] hid_parser_main: 5 callbacks suppressed [ 291.526988][ T5967] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 291.635106][ T5967] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 291.650273][ T8390] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 291.854217][ T8395] netlink: 168 bytes leftover after parsing attributes in process `syz.2.706'. [ 291.923132][ T8391] fido_id[8391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 292.465544][ T8411] gretap0: left allmulticast mode [ 292.475278][ T8411] gretap0: left promiscuous mode [ 292.481439][ T8411] bridge0: port 3(gretap0) entered disabled state [ 292.597570][ T8411] dummy0: left allmulticast mode [ 292.640176][ T8411] bridge0: port 4(dummy0) entered disabled state [ 292.678216][ T8411] bridge_slave_0: left allmulticast mode [ 292.700579][ T8411] bridge_slave_0: left promiscuous mode [ 292.737351][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.778106][ T8411] bridge_slave_1: left allmulticast mode [ 292.798554][ T8411] bridge_slave_1: left promiscuous mode [ 292.804441][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.843551][ T8411] bond0: (slave bond_slave_0): Releasing backup interface [ 292.892556][ T8411] bond0: (slave bond_slave_1): Releasing backup interface [ 292.917047][ T8411] team0: Port device team_slave_0 removed [ 292.927881][ T8411] team0: Port device team_slave_1 removed [ 292.935244][ T8411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.942992][ T8411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.952729][ T8411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.960850][ T8411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.985548][ T8415] netlink: 'syz.1.715': attribute type 12 has an invalid length. [ 292.993657][ T8415] netlink: 'syz.1.715': attribute type 29 has an invalid length. [ 293.049529][ T8415] netlink: 148 bytes leftover after parsing attributes in process `syz.1.715'. [ 293.087350][ T8415] netlink: 'syz.1.715': attribute type 2 has an invalid length. [ 293.135928][ T8415] netlink: 'syz.1.715': attribute type 3 has an invalid length. [ 293.367925][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.720'. [ 294.138428][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 294.138448][ T30] audit: type=1326 audit(1757324544.070:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.250074][ T30] audit: type=1326 audit(1757324544.080:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.253949][ T8467] program syz.3.739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.358551][ T30] audit: type=1326 audit(1757324544.080:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.434799][ T30] audit: type=1326 audit(1757324544.080:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.517172][ T30] audit: type=1326 audit(1757324544.080:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.601025][ T30] audit: type=1326 audit(1757324544.080:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.659077][ T30] audit: type=1326 audit(1757324544.080:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.706936][ T30] audit: type=1326 audit(1757324544.080:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.751036][ T30] audit: type=1326 audit(1757324544.080:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.791542][ T30] audit: type=1326 audit(1757324544.080:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844838ebe9 code=0x7ffc0000 [ 294.875858][ T8491] netlink: 87 bytes leftover after parsing attributes in process `syz.3.751'. [ 294.996781][ T8494] IPVS: rr: FWM 3 0x00000003 - no destination available [ 295.005008][ T5938] IPVS: starting estimator thread 0... [ 295.118740][ T8496] IPVS: using max 27 ests per chain, 64800 per kthread [ 295.588310][ T8518] netlink: 'syz.0.763': attribute type 7 has an invalid length. [ 295.604846][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 295.821231][ T8521] tipc: Started in network mode [ 295.826240][ T8521] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 295.887388][ T8521] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 295.914567][ T8521] tipc: Enabled bearer , priority 10 [ 297.030336][ T5955] tipc: Node number set to 1 [ 299.008016][ T8632] batadv0: mtu less than device minimum [ 299.015524][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 299.027680][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 299.039502][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 299.051389][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 299.063218][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 299.075116][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 299.086952][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 299.098856][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 299.419661][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.427499][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.710122][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.727045][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.898601][ T5955] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 300.070259][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 300.100711][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 300.152925][ T5955] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 300.163357][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.178860][ T5955] usb 5-1: Product: syz [ 300.183067][ T5955] usb 5-1: Manufacturer: syz [ 300.187688][ T5955] usb 5-1: SerialNumber: syz [ 300.225116][ T5955] usb 5-1: config 0 descriptor?? [ 300.250650][ T5955] usb 5-1: no audio or video endpoints found [ 300.302718][ T6871] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.333285][ T6871] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.359093][ T6871] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.377913][ T6871] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.581149][ T8683] netlink: 96 bytes leftover after parsing attributes in process `syz.1.831'. [ 300.984003][ T8698] syz_tun: entered allmulticast mode [ 301.027657][ T8698] dvmrp1: entered allmulticast mode [ 301.121302][ T8697] syz_tun: left allmulticast mode [ 301.486652][ T8703] batman_adv: batadv0: Interface deactivated: dummy0 [ 301.754950][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.802055][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.096888][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 302.464128][ T8703] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 302.498544][ C0] [ 302.500970][ C0] ======================================================== [ 302.508176][ C0] WARNING: possible irq lock inversion dependency detected [ 302.515383][ C0] syzkaller #0 Not tainted [ 302.519805][ C0] -------------------------------------------------------- [ 302.526991][ C0] syz.1.843/8722 just changed the state of lock: [ 302.533321][ C0] ffff8881467d4230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 302.543006][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 302.550985][ C0] (tasklist_lock){.+.+}-{3:3} [ 302.551010][ C0] [ 302.551010][ C0] [ 302.551010][ C0] and interrupts could create inverse lock ordering between them. [ 302.551010][ C0] [ 302.570070][ C0] [ 302.570070][ C0] other info that might help us debug this: [ 302.578130][ C0] Chain exists of: [ 302.578130][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 302.578130][ C0] [ 302.591704][ C0] Possible interrupt unsafe locking scenario: [ 302.591704][ C0] [ 302.600039][ C0] CPU0 CPU1 [ 302.605418][ C0] ---- ---- [ 302.610782][ C0] lock(tasklist_lock); [ 302.615035][ C0] local_irq_disable(); [ 302.621785][ C0] lock(&dev->event_lock#2); [ 302.629033][ C0] lock(&client->buffer_lock); [ 302.636407][ C0] [ 302.639865][ C0] lock(&dev->event_lock#2); [ 302.644823][ C0] [ 302.644823][ C0] *** DEADLOCK *** [ 302.644823][ C0] [ 302.652964][ C0] 2 locks held by syz.1.843/8722: [ 302.657982][ C0] #0: ffff88802999c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 302.667139][ C0] #1: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 302.676720][ C0] [ 302.676720][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 302.686125][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 302.691602][ C0] HARDIRQ-ON-R at: [ 302.696367][ C0] lock_acquire+0x120/0x360 [ 302.703241][ C0] _raw_read_lock+0x36/0x50 [ 302.710101][ C0] __do_wait+0xde/0x740 [ 302.716607][ C0] do_wait+0x1f8/0x520 [ 302.723043][ C0] kernel_wait+0xab/0x170 [ 302.729721][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 302.737970][ C0] process_scheduled_works+0xae1/0x17b0 [ 302.745864][ C0] worker_thread+0x8a0/0xda0 [ 302.752800][ C0] kthread+0x70e/0x8a0 [ 302.759214][ C0] ret_from_fork+0x3fc/0x770 [ 302.766150][ C0] ret_from_fork_asm+0x1a/0x30 [ 302.773262][ C0] SOFTIRQ-ON-R at: [ 302.777590][ C0] lock_acquire+0x120/0x360 [ 302.784450][ C0] _raw_read_lock+0x36/0x50 [ 302.791389][ C0] __do_wait+0xde/0x740 [ 302.797890][ C0] do_wait+0x1f8/0x520 [ 302.804395][ C0] kernel_wait+0xab/0x170 [ 302.811078][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 302.819370][ C0] process_scheduled_works+0xae1/0x17b0 [ 302.827258][ C0] worker_thread+0x8a0/0xda0 [ 302.834190][ C0] kthread+0x70e/0x8a0 [ 302.840604][ C0] ret_from_fork+0x3fc/0x770 [ 302.847541][ C0] ret_from_fork_asm+0x1a/0x30 [ 302.854656][ C0] INITIAL USE at: [ 302.858899][ C0] lock_acquire+0x120/0x360 [ 302.865668][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 302.872858][ C0] copy_process+0x224f/0x3c00 [ 302.879794][ C0] kernel_clone+0x21e/0x840 [ 302.886557][ C0] user_mode_thread+0xdd/0x140 [ 302.893584][ C0] rest_init+0x23/0x300 [ 302.900026][ C0] start_kernel+0x3a9/0x410 [ 302.906788][ C0] x86_64_start_reservations+0x24/0x30 [ 302.914508][ C0] x86_64_start_kernel+0x143/0x1c0 [ 302.921883][ C0] common_startup_64+0x13e/0x147 [ 302.929087][ C0] INITIAL READ USE at: [ 302.933762][ C0] lock_acquire+0x120/0x360 [ 302.940965][ C0] _raw_read_lock+0x36/0x50 [ 302.948178][ C0] __do_wait+0xde/0x740 [ 302.955045][ C0] do_wait+0x1f8/0x520 [ 302.961812][ C0] kernel_wait+0xab/0x170 [ 302.968842][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 302.977435][ C0] process_scheduled_works+0xae1/0x17b0 [ 302.985671][ C0] worker_thread+0x8a0/0xda0 [ 302.992955][ C0] kthread+0x70e/0x8a0 [ 302.999811][ C0] ret_from_fork+0x3fc/0x770 [ 303.007090][ C0] ret_from_fork_asm+0x1a/0x30 [ 303.014568][ C0] } [ 303.017410][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 303.025481][ C0] ... acquired at: [ 303.029659][ C0] lock_acquire+0x120/0x360 [ 303.034344][ C0] _raw_read_lock+0x36/0x50 [ 303.039027][ C0] send_sigurg+0x12b/0x420 [ 303.043619][ C0] sk_send_sigurg+0x6c/0x2e0 [ 303.048398][ C0] tcp_check_urg+0x200/0x760 [ 303.053163][ C0] tcp_urg+0x164/0x3f0 [ 303.057417][ C0] tcp_rcv_established+0xf93/0x1eb0 [ 303.062796][ C0] tcp_v4_do_rcv+0xa23/0xce0 [ 303.067566][ C0] __release_sock+0x21c/0x350 [ 303.072425][ C0] release_sock+0x5f/0x1f0 [ 303.077022][ C0] tcp_sendmsg+0x39/0x50 [ 303.081450][ C0] __sock_sendmsg+0xe5/0x270 [ 303.086215][ C0] ____sys_sendmsg+0x505/0x830 [ 303.091156][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 303.096014][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 303.101132][ C0] do_syscall_64+0xfa/0x3b0 [ 303.105812][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.111882][ C0] [ 303.114206][ C0] -> (&f_owner->lock){....}-{3:3} { [ 303.119690][ C0] INITIAL USE at: [ 303.123846][ C0] lock_acquire+0x120/0x360 [ 303.130461][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 303.137484][ C0] __f_setown+0x67/0x370 [ 303.143812][ C0] tty_fasync+0x2dc/0x350 [ 303.150229][ C0] do_fcntl+0x1096/0x1910 [ 303.156643][ C0] __se_sys_fcntl+0xc8/0x150 [ 303.163317][ C0] do_syscall_64+0xfa/0x3b0 [ 303.169916][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.177915][ C0] INITIAL READ USE at: [ 303.182526][ C0] lock_acquire+0x120/0x360 [ 303.189575][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 303.197406][ C0] send_sigio+0x38/0x370 [ 303.204180][ C0] kill_fasync+0x24d/0x4d0 [ 303.211129][ C0] lease_break_callback+0x26/0x30 [ 303.218782][ C0] __break_lease+0x6a2/0x1620 [ 303.226001][ C0] do_dentry_open+0x8b7/0x13f0 [ 303.233325][ C0] vfs_open+0x3b/0x340 [ 303.239913][ C0] path_openat+0x2ee5/0x3830 [ 303.247028][ C0] do_filp_open+0x1fa/0x410 [ 303.254055][ C0] do_open_execat+0x135/0x560 [ 303.261254][ C0] open_exec+0x40/0x60 [ 303.267846][ C0] load_script+0x6e9/0x860 [ 303.274820][ C0] bprm_execve+0x99c/0x1450 [ 303.281847][ C0] do_execveat_common+0x510/0x6a0 [ 303.289390][ C0] __x64_sys_execveat+0xc4/0xe0 [ 303.296770][ C0] do_syscall_64+0xfa/0x3b0 [ 303.303825][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.312245][ C0] } [ 303.315028][ C0] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 303.324152][ C0] ... acquired at: [ 303.328213][ C0] lock_acquire+0x120/0x360 [ 303.332898][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 303.338478][ C0] send_sigio+0x38/0x370 [ 303.342921][ C0] kill_fasync+0x24d/0x4d0 [ 303.347521][ C0] lease_break_callback+0x26/0x30 [ 303.352723][ C0] __break_lease+0x6a2/0x1620 [ 303.357606][ C0] do_dentry_open+0x8b7/0x13f0 [ 303.362546][ C0] vfs_open+0x3b/0x340 [ 303.366784][ C0] path_openat+0x2ee5/0x3830 [ 303.371554][ C0] do_filp_open+0x1fa/0x410 [ 303.376249][ C0] do_open_execat+0x135/0x560 [ 303.381115][ C0] open_exec+0x40/0x60 [ 303.385369][ C0] load_script+0x6e9/0x860 [ 303.389976][ C0] bprm_execve+0x99c/0x1450 [ 303.394664][ C0] do_execveat_common+0x510/0x6a0 [ 303.399875][ C0] __x64_sys_execveat+0xc4/0xe0 [ 303.404907][ C0] do_syscall_64+0xfa/0x3b0 [ 303.409583][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.415649][ C0] [ 303.417972][ C0] -> (&new->fa_lock){....}-{3:3} { [ 303.423305][ C0] INITIAL USE at: [ 303.427419][ C0] lock_acquire+0x120/0x360 [ 303.433866][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 303.440755][ C0] fasync_remove_entry+0xf1/0x1c0 [ 303.447698][ C0] tty_fasync+0x13c/0x350 [ 303.453950][ C0] __fput+0x8a2/0xa70 [ 303.459856][ C0] task_work_run+0x1d1/0x260 [ 303.466371][ C0] exit_to_user_mode_loop+0xec/0x110 [ 303.473584][ C0] do_syscall_64+0x2bd/0x3b0 [ 303.480092][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.487901][ C0] INITIAL READ USE at: [ 303.492411][ C0] lock_acquire+0x120/0x360 [ 303.499276][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 303.506932][ C0] kill_fasync+0x199/0x4d0 [ 303.513798][ C0] lease_break_callback+0x26/0x30 [ 303.521189][ C0] __break_lease+0x6a2/0x1620 [ 303.528222][ C0] do_dentry_open+0x8b7/0x13f0 [ 303.535356][ C0] vfs_open+0x3b/0x340 [ 303.541798][ C0] path_openat+0x2ee5/0x3830 [ 303.548744][ C0] do_filp_open+0x1fa/0x410 [ 303.555600][ C0] do_open_execat+0x135/0x560 [ 303.562639][ C0] open_exec+0x40/0x60 [ 303.569095][ C0] load_script+0x6e9/0x860 [ 303.575870][ C0] bprm_execve+0x99c/0x1450 [ 303.582750][ C0] do_execveat_common+0x510/0x6a0 [ 303.590123][ C0] __x64_sys_execveat+0xc4/0xe0 [ 303.597844][ C0] do_syscall_64+0xfa/0x3b0 [ 303.604698][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.612942][ C0] } [ 303.615617][ C0] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 303.624473][ C0] ... acquired at: [ 303.628446][ C0] lock_acquire+0x120/0x360 [ 303.633140][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 303.638609][ C0] kill_fasync+0x199/0x4d0 [ 303.643199][ C0] evdev_pass_values+0x627/0xbd0 [ 303.648312][ C0] evdev_events+0x1e6/0x340 [ 303.653012][ C0] input_pass_values+0x288/0x890 [ 303.658134][ C0] input_event_dispose+0x330/0x6b0 [ 303.663424][ C0] input_inject_event+0x1dd/0x340 [ 303.668632][ C0] evdev_write+0x2fc/0x480 [ 303.673236][ C0] vfs_write+0x27b/0xb30 [ 303.677675][ C0] ksys_write+0x145/0x250 [ 303.682201][ C0] do_syscall_64+0xfa/0x3b0 [ 303.686881][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.692948][ C0] [ 303.695289][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 303.701115][ C0] INITIAL USE at: [ 303.705096][ C0] lock_acquire+0x120/0x360 [ 303.711365][ C0] _raw_spin_lock+0x2e/0x40 [ 303.717701][ C0] evdev_handle_get_val+0x70/0x9f0 [ 303.724556][ C0] evdev_ioctl_handler+0x1202/0x1f10 [ 303.731577][ C0] __se_sys_ioctl+0xfc/0x170 [ 303.737922][ C0] do_syscall_64+0xfa/0x3b0 [ 303.744167][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.751811][ C0] } [ 303.754402][ C0] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 303.762641][ C0] ... acquired at: [ 303.766529][ C0] lock_acquire+0x120/0x360 [ 303.771214][ C0] _raw_spin_lock+0x2e/0x40 [ 303.775905][ C0] evdev_handle_get_val+0x70/0x9f0 [ 303.781199][ C0] evdev_ioctl_handler+0x1202/0x1f10 [ 303.786660][ C0] __se_sys_ioctl+0xfc/0x170 [ 303.791460][ C0] do_syscall_64+0xfa/0x3b0 [ 303.796140][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.802205][ C0] [ 303.804527][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 303.810114][ C0] IN-SOFTIRQ-W at: [ 303.814111][ C0] lock_acquire+0x120/0x360 [ 303.820274][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 303.827136][ C0] input_inject_event+0xa5/0x340 [ 303.833735][ C0] led_trigger_event+0x138/0x210 [ 303.840328][ C0] kbd_bh+0x1c6/0x2e0 [ 303.845983][ C0] tasklet_action_common+0x36c/0x580 [ 303.852923][ C0] handle_softirqs+0x283/0x870 [ 303.859426][ C0] __irq_exit_rcu+0xca/0x1f0 [ 303.865665][ C0] irq_exit_rcu+0x9/0x30 [ 303.871563][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 303.878872][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 303.886507][ C0] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 303.893891][ C0] evdev_write+0x2fc/0x480 [ 303.899967][ C0] vfs_write+0x27b/0xb30 [ 303.905864][ C0] ksys_write+0x145/0x250 [ 303.911859][ C0] do_syscall_64+0xfa/0x3b0 [ 303.918017][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.925559][ C0] INITIAL USE at: [ 303.929448][ C0] lock_acquire+0x120/0x360 [ 303.935524][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 303.942296][ C0] input_inject_event+0xa5/0x340 [ 303.948803][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 303.955832][ C0] led_trigger_set+0x52a/0x950 [ 303.962187][ C0] led_trigger_set_default+0x260/0x2a0 [ 303.969297][ C0] led_classdev_register_ext+0x73d/0x930 [ 303.976494][ C0] input_leds_connect+0x517/0x790 [ 303.983100][ C0] input_register_device+0xcfd/0x1140 [ 303.990047][ C0] atkbd_connect+0x72e/0xa00 [ 303.996636][ C0] serio_driver_probe+0x82/0xd0 [ 304.003061][ C0] really_probe+0x26d/0x9e0 [ 304.009136][ C0] __driver_probe_device+0x18c/0x2f0 [ 304.015991][ C0] driver_probe_device+0x4f/0x430 [ 304.022604][ C0] __driver_attach+0x452/0x700 [ 304.028940][ C0] bus_for_each_dev+0x233/0x2b0 [ 304.035439][ C0] serio_handle_event+0x1f9/0x8d0 [ 304.042028][ C0] process_scheduled_works+0xae1/0x17b0 [ 304.049144][ C0] worker_thread+0x8a0/0xda0 [ 304.055294][ C0] kthread+0x70e/0x8a0 [ 304.060930][ C0] ret_from_fork+0x3fc/0x770 [ 304.067081][ C0] ret_from_fork_asm+0x1a/0x30 [ 304.073415][ C0] } [ 304.075912][ C0] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 304.084950][ C0] ... acquired at: [ 304.088752][ C0] mark_lock+0x11b/0x190 [ 304.093168][ C0] __lock_acquire+0x680/0xd20 [ 304.098022][ C0] lock_acquire+0x120/0x360 [ 304.102711][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 304.108096][ C0] input_inject_event+0xa5/0x340 [ 304.113211][ C0] led_trigger_event+0x138/0x210 [ 304.118325][ C0] kbd_bh+0x1c6/0x2e0 [ 304.122487][ C0] tasklet_action_common+0x36c/0x580 [ 304.127953][ C0] handle_softirqs+0x283/0x870 [ 304.132889][ C0] __irq_exit_rcu+0xca/0x1f0 [ 304.137669][ C0] irq_exit_rcu+0x9/0x30 [ 304.142086][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 304.147926][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.154107][ C0] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 304.160036][ C0] evdev_write+0x2fc/0x480 [ 304.164634][ C0] vfs_write+0x27b/0xb30 [ 304.169065][ C0] ksys_write+0x145/0x250 [ 304.173574][ C0] do_syscall_64+0xfa/0x3b0 [ 304.178257][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.184321][ C0] [ 304.186640][ C0] [ 304.186640][ C0] stack backtrace: [ 304.192530][ C0] CPU: 0 UID: 0 PID: 8722 Comm: syz.1.843 Not tainted syzkaller #0 PREEMPT(full) [ 304.192556][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.192570][ C0] Call Trace: [ 304.192579][ C0] [ 304.192587][ C0] dump_stack_lvl+0x189/0x250 [ 304.192609][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.192628][ C0] ? __pfx__printk+0x10/0x10 [ 304.192654][ C0] print_irq_inversion_bug+0x1d2/0x1e0 [ 304.192674][ C0] mark_lock_irq+0x35f/0x390 [ 304.192693][ C0] mark_lock+0x11b/0x190 [ 304.192707][ C0] __lock_acquire+0x680/0xd20 [ 304.192733][ C0] ? input_inject_event+0xa5/0x340 [ 304.192755][ C0] lock_acquire+0x120/0x360 [ 304.192778][ C0] ? input_inject_event+0xa5/0x340 [ 304.192804][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 304.192828][ C0] ? input_inject_event+0xa5/0x340 [ 304.192849][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 304.192872][ C0] ? led_trigger_event+0x4b/0x210 [ 304.192891][ C0] ? led_trigger_event+0x4b/0x210 [ 304.192915][ C0] input_inject_event+0xa5/0x340 [ 304.192937][ C0] ? led_trigger_event+0x4b/0x210 [ 304.192955][ C0] led_trigger_event+0x138/0x210 [ 304.192973][ C0] kbd_bh+0x1c6/0x2e0 [ 304.192996][ C0] tasklet_action_common+0x36c/0x580 [ 304.193014][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 304.193035][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 304.193056][ C0] ? workqueue_softirq_action+0xd4/0x150 [ 304.193076][ C0] handle_softirqs+0x283/0x870 [ 304.193094][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 304.193111][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 304.193128][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 304.193149][ C0] __irq_exit_rcu+0xca/0x1f0 [ 304.193164][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 304.193183][ C0] irq_exit_rcu+0x9/0x30 [ 304.193196][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 304.193223][ C0] [ 304.193228][ C0] [ 304.193233][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.193251][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 304.193278][ C0] Code: 74 05 e8 1b aa 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 4e 13 f6 65 8b 05 6c 01 24 07 85 c0 74 40 48 c7 04 24 0e 36 [ 304.193293][ C0] RSP: 0018:ffffc9001b09fb00 EFLAGS: 00000206 [ 304.193308][ C0] RAX: 0bedf40941fb8100 RBX: 0000000000000a02 RCX: 0bedf40941fb8100 [ 304.193321][ C0] RDX: 0000000000000006 RSI: ffffffff8d9b930b RDI: 0000000000000001 [ 304.193332][ C0] RBP: ffffc9001b09fb90 R08: ffffffff8fa39f37 R09: 1ffffffff1f473e6 [ 304.193343][ C0] R10: dffffc0000000000 R11: fffffbfff1f473e7 R12: dffffc0000000000 [ 304.193356][ C0] R13: dffffc0000000000 R14: ffff8881467d4218 R15: 1ffff92003613f60 [ 304.193375][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 304.193401][ C0] ? input_inject_event+0x2e6/0x340 [ 304.193427][ C0] ? input_inject_event+0xb6/0x340 [ 304.193451][ C0] evdev_write+0x2fc/0x480 [ 304.193467][ C0] ? futex_private_hash_put+0x245/0x280 [ 304.193505][ C0] ? __pfx_evdev_write+0x10/0x10 [ 304.193522][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 304.193541][ C0] ? security_file_permission+0x75/0x290 [ 304.193563][ C0] ? rw_verify_area+0x255/0x4d0 [ 304.193583][ C0] ? __lock_acquire+0xab9/0xd20 [ 304.193605][ C0] ? __pfx_evdev_write+0x10/0x10 [ 304.193621][ C0] vfs_write+0x27b/0xb30 [ 304.193645][ C0] ? __pfx_vfs_write+0x10/0x10 [ 304.193667][ C0] ? __fget_files+0x2a/0x420 [ 304.193681][ C0] ? __fget_files+0x2a/0x420 [ 304.193694][ C0] ? __fget_files+0x3a0/0x420 [ 304.193706][ C0] ? __fget_files+0x2a/0x420 [ 304.193723][ C0] ksys_write+0x145/0x250 [ 304.193744][ C0] ? __pfx_ksys_write+0x10/0x10 [ 304.193764][ C0] ? rcu_is_watching+0x15/0xb0 [ 304.193781][ C0] ? do_syscall_64+0xbe/0x3b0 [ 304.193798][ C0] do_syscall_64+0xfa/0x3b0 [ 304.193815][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.193829][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.193845][ C0] ? clear_bhb_loop+0x60/0xb0 [ 304.193862][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.193877][ C0] RIP: 0033:0x7f769158ebe9 [ 304.193892][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.193911][ C0] RSP: 002b:00007f7692402038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.193927][ C0] RAX: ffffffffffffffda RBX: 00007f76917c5fa0 RCX: 00007f769158ebe9 [ 304.193938][ C0] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 304.193949][ C0] RBP: 00007f7691611e19 R08: 0000000000000000 R09: 0000000000000000 [ 304.193958][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.193968][ C0] R13: 00007f76917c6038 R14: 00007f76917c5fa0 R15: 00007f76918efa28 [ 304.193986][ C0] [ 304.692731][ T8726] usb 5-1: USB disconnect, device number 20 [ 304.709863][ T8711] syz_tun: entered allmulticast mode [ 304.716222][ T8711] syz_tun: left allmulticast mode [ 304.771414][ T8716] dvmrp1: entered allmulticast mode [ 304.793381][ T6881] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.793456][ T6881] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.793491][ T6881] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.793525][ T6881] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0