last executing test programs: 5.470443465s ago: executing program 1 (id=1252): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1003ffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) close(r2) 4.873016733s ago: executing program 3 (id=1259): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.894193664s ago: executing program 3 (id=1263): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x82) fchdir(r2) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 3.746592262s ago: executing program 2 (id=1264): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000680)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 3.610641893s ago: executing program 3 (id=1265): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) writev(r3, &(0x7f0000002580)=[{&(0x7f0000000100)='5', 0x1}], 0x1) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020) 3.485346864s ago: executing program 2 (id=1266): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 3.302299786s ago: executing program 1 (id=1267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) shutdown(r1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x6, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x1, 0x1000, 0x9, 0x3, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x5, 0x71, 0x407, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x2003, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0xfb40, 0xea4, 0x0, 0x4, 0x24, 0x8, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0x7f, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x46, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x400000, 0x8d2, 0x9, 0x800003, 0x7fff, 0x9, 0x5, 0xf, 0x4, 0x1, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x9, 0x0, 0x3e7, 0xa, 0x5, 0x2, 0x2, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x0, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x7fffffff, 0x0, 0x5, 0x7d, 0xc9, 0x7, 0x6, 0x3, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x0, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x20, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x2bf, 0x3, 0x200, 0xffff3441, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.191440786s ago: executing program 3 (id=1268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 3.132831247s ago: executing program 1 (id=1269): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) fsmount(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) 3.033163486s ago: executing program 0 (id=1270): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000001c0)={0x200c}) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x3, 0x0, 0x0) 3.023000002s ago: executing program 2 (id=1271): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x40010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 2.961303533s ago: executing program 1 (id=1272): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.878568103s ago: executing program 0 (id=1273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.726870868s ago: executing program 3 (id=1274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) 2.6507747s ago: executing program 0 (id=1275): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 2.015132875s ago: executing program 2 (id=1276): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x4, 0x80, 0xf2, 0x4, 0x19df630a}) close(r0) 1.887043096s ago: executing program 4 (id=1278): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) pselect6(0x40, &(0x7f0000000000)={0x2, 0x9000000000000000, 0x8000000000000000, 0x6, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.635975737s ago: executing program 2 (id=1279): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xfffffffc}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a3aed7f3f111d75e"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.376488342s ago: executing program 2 (id=1280): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1.375878136s ago: executing program 1 (id=1290): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x90) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket(0x2, 0x80802, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000200)={0x1fc, 0x3, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x80000002, 0x1, 0x2, 0xfffffff5, 0x50, "c7eded010000000000000000804000"}) 1.303940612s ago: executing program 3 (id=1281): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, 0x0, 0x0, 0x8, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0xf7e) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.183485408s ago: executing program 0 (id=1282): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0xf5, 0x0, 0x0, 0x0) 1.120171469s ago: executing program 1 (id=1283): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 1.119713575s ago: executing program 4 (id=1284): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x6402}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r0) 891.45948ms ago: executing program 4 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r3, 0xffffffffffffffff, 0x0) 708.607773ms ago: executing program 4 (id=1286): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 583.561226ms ago: executing program 4 (id=1287): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) 183.157118ms ago: executing program 0 (id=1288): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 76.184996ms ago: executing program 0 (id=1289): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000600)={0x20, 0x12, 0x4, "088cc2b3"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=1291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x100) msgsnd(r5, &(0x7f0000002900)={0x3, "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"}, 0x401, 0x0) kernel console output (not intermixed with test programs): lave_1) entered forwarding state [ 74.999323][ T5856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.011690][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.044493][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.070631][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.077809][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.103698][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.110884][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.140800][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.159458][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.177054][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.266379][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.291758][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.322337][ T5853] veth0_vlan: entered promiscuous mode [ 75.333168][ T5856] veth0_vlan: entered promiscuous mode [ 75.356641][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.369410][ T5856] veth1_vlan: entered promiscuous mode [ 75.378308][ T5853] veth1_vlan: entered promiscuous mode [ 75.449821][ T5852] veth0_vlan: entered promiscuous mode [ 75.457195][ T54] Bluetooth: hci2: command tx timeout [ 75.462332][ T5853] veth0_macvtap: entered promiscuous mode [ 75.472617][ T5855] veth0_vlan: entered promiscuous mode [ 75.496376][ T5853] veth1_macvtap: entered promiscuous mode [ 75.517408][ T5856] veth0_macvtap: entered promiscuous mode [ 75.532817][ T5852] veth1_vlan: entered promiscuous mode [ 75.539378][ T54] Bluetooth: hci0: command tx timeout [ 75.548841][ T5857] veth0_vlan: entered promiscuous mode [ 75.559771][ T5856] veth1_macvtap: entered promiscuous mode [ 75.567292][ T5855] veth1_vlan: entered promiscuous mode [ 75.596479][ T5857] veth1_vlan: entered promiscuous mode [ 75.616636][ T54] Bluetooth: hci1: command tx timeout [ 75.621905][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.629375][ T54] Bluetooth: hci4: command tx timeout [ 75.629421][ T54] Bluetooth: hci3: command tx timeout [ 75.647984][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.658891][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.670971][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.687040][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.701409][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.712264][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.723537][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.735875][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.745078][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.753814][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.763077][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.781586][ T5855] veth0_macvtap: entered promiscuous mode [ 75.792185][ T5852] veth0_macvtap: entered promiscuous mode [ 75.802791][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.811889][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.821135][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.830271][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.850247][ T5852] veth1_macvtap: entered promiscuous mode [ 75.860434][ T5855] veth1_macvtap: entered promiscuous mode [ 75.893275][ T5857] veth0_macvtap: entered promiscuous mode [ 75.923411][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.934165][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.945344][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.956177][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.967946][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.978403][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.989098][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.999395][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.009984][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.021174][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.032107][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.043442][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.076932][ T5857] veth1_macvtap: entered promiscuous mode [ 76.084376][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.097910][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.107878][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.118486][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.129723][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.139988][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.151338][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.161327][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.171888][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.182248][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.193118][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.204338][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.244385][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.244901][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.254251][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.267725][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.271019][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.286240][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.316125][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.325041][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.334043][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.344210][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.363730][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.376178][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.386137][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.396819][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.406726][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.418286][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.428179][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.438865][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.449895][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.477628][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.486385][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.517489][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.528096][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.538494][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.549220][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.559347][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.569969][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.580493][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.591047][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.603179][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.623667][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.632999][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.641122][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.653055][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.663759][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.672846][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.711621][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.728106][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.807005][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.811831][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.825386][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.836885][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.865778][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.999446][ T645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.007413][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.007439][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.052188][ T645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.054107][ T5898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.083744][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.097034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.236222][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.273755][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.539680][ T5851] Bluetooth: hci2: command tx timeout [ 77.619896][ T5851] Bluetooth: hci0: command tx timeout [ 77.695071][ T5851] Bluetooth: hci3: command tx timeout [ 77.695222][ T54] Bluetooth: hci4: command tx timeout [ 77.700538][ T5842] Bluetooth: hci1: command tx timeout [ 78.035351][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.058451][ T5928] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 78.209841][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 78.227647][ T5889] usb 4-1: config 89 has an invalid interface number: 228 but max is 1 [ 78.237896][ T5889] usb 4-1: config 89 has an invalid interface number: 251 but max is 1 [ 78.248020][ T5889] usb 4-1: config 89 has no interface number 0 [ 78.254316][ T5889] usb 4-1: config 89 has no interface number 1 [ 78.272731][ T5889] usb 4-1: config 89 interface 228 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.291242][ T5889] usb 4-1: config 89 interface 251 altsetting 19 has an invalid endpoint descriptor of length 2, skipping [ 78.304404][ T5889] usb 4-1: config 89 interface 251 altsetting 19 endpoint 0xF has invalid wMaxPacketSize 0 [ 78.318137][ T5889] usb 4-1: config 89 interface 251 altsetting 19 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 78.332044][ T5889] usb 4-1: config 89 interface 251 has no altsetting 0 [ 78.346505][ T5889] usb 4-1: New USB device found, idVendor=07d1, idProduct=3e01, bcdDevice=2e.9e [ 78.356213][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.364657][ T5889] usb 4-1: Product: syz [ 78.369268][ T5889] usb 4-1: Manufacturer: syz [ 78.373954][ T5889] usb 4-1: SerialNumber: syz [ 78.599493][ T5889] option 4-1:89.228: GSM modem (1-port) converter detected [ 78.618958][ T5889] usb 4-1: USB disconnect, device number 2 [ 78.626486][ T5889] option 4-1:89.228: device disconnected [ 78.726096][ T5892] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 78.887896][ T5892] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 78.898643][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.910915][ T5892] usb 3-1: config 0 descriptor?? [ 79.497964][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 79.625490][ T5842] Bluetooth: hci2: command tx timeout [ 79.704791][ T5842] Bluetooth: hci0: command tx timeout [ 79.754736][ T58] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.775022][ T5851] Bluetooth: hci1: command tx timeout [ 79.775091][ T54] Bluetooth: hci3: command tx timeout [ 79.780491][ T5842] Bluetooth: hci4: command tx timeout [ 79.884669][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.914843][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 79.923729][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.935257][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.945125][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 79.959139][ T58] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 79.968329][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.980224][ T58] usb 4-1: config 0 descriptor?? [ 80.038645][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.049847][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.059696][ T5889] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 80.069062][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.079595][ T5889] usb 2-1: config 0 descriptor?? [ 80.204852][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 80.210952][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 80.225818][ T58] usb 4-1: USB disconnect, device number 3 [ 80.542182][ T5892] pegasus 3-1:0.0: can't reset MAC [ 80.549116][ T5892] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 80.560819][ T5892] usb 3-1: USB disconnect, device number 2 [ 80.693808][ T5889] usb 2-1: language id specifier not provided by device, defaulting to English [ 81.059620][ T5975] process 'syz.3.29' launched './file1' with NULL argv: empty string added [ 81.123372][ T5889] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input5 [ 81.147963][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 81.231790][ T5889] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input6 [ 81.275530][ T5889] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input7 [ 81.319606][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.351926][ T5889] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input8 [ 81.373645][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.393092][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 81.413588][ T5889] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 81.426069][ T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 81.434693][ T10] usb 5-1: Product: syz [ 81.438965][ T10] usb 5-1: Manufacturer: syz [ 81.450653][ T5889] usb 2-1: USB disconnect, device number 2 [ 81.473452][ T10] hub 5-1:4.0: USB hub found [ 81.496355][ T5986] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 81.533347][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.561599][ T5986] bond0: (slave team0): Enslaving as an active interface with an up link [ 81.675447][ T10] hub 5-1:4.0: 8 ports detected [ 81.685414][ T10] hub 5-1:4.0: insufficient power available to use all downstream ports [ 81.891807][ T10] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 81.931174][ T10] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 81.954902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.963521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.038293][ T10] usb 5-1: USB disconnect, device number 2 [ 82.074839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.114957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.448070][ T2150] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.635852][ T2150] usb 1-1: Using ep0 maxpacket: 32 [ 82.684731][ T2150] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 82.712350][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.743792][ T2150] usb 1-1: config 0 descriptor?? [ 82.757349][ T2150] gspca_main: sunplus-2.14.0 probing 041e:400b [ 82.934833][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.084812][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 83.119544][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 83.145071][ T10] usb 5-1: config 0 has no interface number 0 [ 83.156571][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 83.170681][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 83.192115][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.221221][ T10] usb 5-1: Product: syz [ 83.227950][ T10] usb 5-1: Manufacturer: syz [ 83.242821][ T10] usb 5-1: SerialNumber: syz [ 83.256795][ T10] usb 5-1: config 0 descriptor?? [ 83.290087][ T10] smsc75xx v1.0.0 [ 83.294468][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 83.325775][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 83.733801][ T5842] Bluetooth: hci4: Unexpected advertising set terminated event [ 83.818945][ T6039] netlink: 'syz.1.51': attribute type 5 has an invalid length. [ 83.819251][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 83.984785][ T58] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.164671][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 84.172054][ T58] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 84.183872][ T58] usb 3-1: config 0 has no interface number 0 [ 84.194594][ T58] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 84.206258][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.216134][ T58] usb 3-1: Product: syz [ 84.220454][ T58] usb 3-1: Manufacturer: syz [ 84.226049][ T58] usb 3-1: SerialNumber: syz [ 84.304242][ T58] usb 3-1: config 0 descriptor?? [ 84.406870][ T2150] gspca_sunplus: reg_w_riv err -71 [ 84.412660][ T2150] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 84.439509][ T2150] usb 1-1: USB disconnect, device number 2 [ 84.721729][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.733982][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.804904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.813482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.830578][ T58] usb 3-1: USB disconnect, device number 3 [ 85.125729][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.389376][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'. [ 85.405791][ T6069] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.689990][ T10] usb 5-1: USB disconnect, device number 3 [ 85.807192][ T6085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.819141][ T976] cfg80211: failed to load regulatory.db [ 86.994795][ T58] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.196166][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 87.196499][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.234914][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.255003][ T58] usb 4-1: config 0 has no interfaces? [ 87.284664][ T58] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 87.295384][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.325384][ T58] usb 4-1: config 0 descriptor?? [ 87.375666][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 87.397225][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.411747][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 87.422924][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.443670][ T10] usb 5-1: config 0 descriptor?? [ 87.579201][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.596721][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.623955][ T2150] usb 4-1: USB disconnect, device number 4 [ 87.907050][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0002/input/input9 [ 87.998807][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0002/input/input10 [ 88.086534][ T10] kye 0003:0458:5013.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 88.145083][ T10] usb 5-1: USB disconnect, device number 4 [ 88.328856][ T2150] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.604748][ T2150] usb 1-1: Using ep0 maxpacket: 32 [ 88.615661][ T2150] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.635834][ T2150] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.662491][ T2150] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 88.688729][ T2150] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 88.697527][ T2150] usb 1-1: Product: syz [ 88.701738][ T2150] usb 1-1: Manufacturer: syz [ 88.718658][ T2150] hub 1-1:4.0: USB hub found [ 88.961204][ T2150] hub 1-1:4.0: 2 ports detected [ 89.520274][ T6135] kvm: MONITOR instruction emulated as NOP! [ 90.277853][ T5892] hub 1-1:4.0: activate --> -90 [ 90.480333][ T5892] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 90.500355][ T5891] usb 1-1: USB disconnect, device number 3 [ 91.696184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.711151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.723043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.732340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.191880][ T6181] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.103'. [ 92.237380][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.103'. [ 92.247767][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 92.281591][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 92.550997][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 92.570887][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 92.784432][ T6200] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 92.801125][ T6202] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 92.804453][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.817420][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.842881][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.850552][ T6200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.858503][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.865675][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.875911][ T6205] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 92.882297][ T6200] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.716147][ T30] audit: type=1326 audit(1743323129.606:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 93.941660][ T30] audit: type=1326 audit(1743323129.606:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.019458][ T30] audit: type=1326 audit(1743323129.616:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.041132][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.078037][ T30] audit: type=1326 audit(1743323129.616:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.151087][ T30] audit: type=1326 audit(1743323129.616:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.172811][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.192518][ T30] audit: type=1326 audit(1743323129.616:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.220636][ T30] audit: type=1326 audit(1743323129.616:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.242285][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.294100][ T30] audit: type=1326 audit(1743323129.616:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.395068][ T30] audit: type=1326 audit(1743323129.616:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.481444][ T30] audit: type=1326 audit(1743323129.876:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x7ffc0000 [ 94.957949][ T6246] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.109074][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 95.120432][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 95.225359][ T5891] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.404656][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 95.420513][ T5891] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.426530][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 95.454009][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 95.474749][ T5891] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.489012][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 95.499111][ T5891] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 95.526870][ T5891] usb 2-1: Product: syz [ 95.537136][ T5891] usb 2-1: Manufacturer: syz [ 95.559229][ T5891] hub 2-1:4.0: USB hub found [ 95.765563][ T5891] hub 2-1:4.0: 2 ports detected [ 96.070305][ T6278] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.389550][ T5891] usb 2-1: USB disconnect, device number 3 [ 96.476255][ T58] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.689980][ T58] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 96.698494][ T58] usb 4-1: config 0 has no interface number 0 [ 96.704919][ T58] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 96.717729][ T58] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 96.731977][ T58] usb 4-1: config 0 interface 255 has no altsetting 0 [ 96.738964][ T58] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 96.748172][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.773448][ T58] usb 4-1: config 0 descriptor?? [ 96.800271][ T58] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 97.044505][ T58] usb 4-1: USB disconnect, device number 5 [ 97.517356][ T6332] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1634036803 (104578355392 ns) > initial count (53901527040 ns). Using initial count to start timer. [ 97.803824][ T6341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.462253][ T2150] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 98.645832][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 98.682321][ T2150] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 98.703016][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.724198][ T2150] usb 4-1: config 0 descriptor?? [ 98.731852][ T6360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.186411][ T2150] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 99.715544][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.831501][ T58] usb 4-1: USB disconnect, device number 6 [ 99.878226][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.899324][ T10] usb 3-1: config 0 has no interfaces? [ 99.906985][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.916369][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.936776][ T10] usb 3-1: config 0 descriptor?? [ 100.861333][ T2150] usb 3-1: USB disconnect, device number 4 [ 101.678833][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.686635][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.872246][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.896250][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.996843][ T6436] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.006231][ T6436] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.015736][ T6436] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.025342][ T6436] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.055543][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.215521][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 102.233453][ T5892] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 102.247320][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.274565][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.317186][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.328386][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.344876][ T5892] usb 5-1: Product: syz [ 102.349197][ T5892] usb 5-1: Manufacturer: syz [ 102.356063][ T5892] usb 5-1: SerialNumber: syz [ 102.384352][ T6460] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 102.418257][ T6460] batman_adv: batadv0: Adding interface: ip6gretap1 [ 102.437513][ T6460] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.484308][ T6460] batman_adv: batadv0: Interface activated: ip6gretap1 [ 102.754319][ T6469] syz.1.211 (6469) used greatest stack depth: 19768 bytes left [ 102.790572][ T5892] usb 5-1: 0:2 : does not exist [ 103.475008][ T6496] input: syz0 as /devices/virtual/input/input11 [ 104.036683][ T5892] usb 5-1: USB disconnect, device number 5 [ 104.247400][ T6519] __nla_validate_parse: 3 callbacks suppressed [ 104.247423][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 104.264283][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 104.292079][ T6519] geneve2: entered allmulticast mode [ 104.306487][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.336334][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 105.545091][ T5892] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.751689][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 105.783110][ T5892] usb 2-1: config 0 interface 0 altsetting 234 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.802690][ T5892] usb 2-1: config 0 interface 0 altsetting 234 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.815057][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.822632][ T5892] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 105.833830][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.846076][ T5892] usb 2-1: config 0 descriptor?? [ 106.283309][ T5892] kye 0003:0458:501A.0004: control desc unexpectedly large [ 106.302599][ T5892] input: HID 0458:501a as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:501A.0004/input/input12 [ 106.382768][ T5892] kye 0003:0458:501A.0004: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 106.743213][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 106.759964][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 107.349142][ C1] kye 0003:0458:501A.0004: usb_submit_urb(ctrl) failed: -1 [ 107.397449][ T6599] kernel read not supported for file /eth0 (pid: 6599 comm: syz.0.257) [ 107.410058][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 107.410075][ T30] audit: type=1800 audit(1743323143.316:13): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.257" name="eth0" dev="mqueue" ino=11534 res=0 errno=0 [ 108.050615][ T6622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.169418][ T5892] usb 2-1: USB disconnect, device number 4 [ 108.621512][ T5892] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 108.646597][ T5892] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.504738][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.683602][ T5891] usb 3-1: config 0 has no interfaces? [ 109.711048][ T5891] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 109.773265][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.804823][ T5891] usb 3-1: Product: syz [ 109.815561][ T5891] usb 3-1: Manufacturer: syz [ 109.820375][ T5891] usb 3-1: SerialNumber: syz [ 109.894117][ T5891] usb 3-1: config 0 descriptor?? [ 110.389836][ T6687] lo: entered promiscuous mode [ 110.447900][ T6687] tunl0: entered promiscuous mode [ 110.467547][ T6687] gre0: entered promiscuous mode [ 110.538554][ T6687] gretap0: entered promiscuous mode [ 110.548707][ T6687] erspan0: entered promiscuous mode [ 110.559465][ T6687] ip_vti0: entered promiscuous mode [ 111.490809][ T6707] bridge0: port 3(syz_tun) entered blocking state [ 111.568007][ T6707] bridge0: port 3(syz_tun) entered disabled state [ 111.600207][ T6707] syz_tun: entered allmulticast mode [ 111.639074][ T6707] syz_tun: entered promiscuous mode [ 111.661432][ T6707] bridge0: port 3(syz_tun) entered blocking state [ 111.668197][ T6707] bridge0: port 3(syz_tun) entered forwarding state [ 111.744731][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.988329][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.019313][ T5891] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 112.053633][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.093483][ T5891] usb 2-1: config 0 descriptor?? [ 112.097105][ T5892] usb 3-1: USB disconnect, device number 5 [ 112.120243][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 112.484869][ T5904] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.506525][ T58] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 112.521941][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 112.530426][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 112.537676][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 112.548086][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 112.555832][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 112.646545][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.658405][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.670629][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.683409][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.697140][ T5904] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.697271][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 112.717619][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.726519][ T58] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 112.741673][ T5904] usb 5-1: config 0 descriptor?? [ 112.746869][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.760098][ T58] usb 4-1: config 0 descriptor?? [ 112.767468][ T6729] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.768390][ T5891] pwc: recv_control_msg error -71 req 02 val 2000 [ 112.789711][ T5891] pwc: recv_control_msg error -71 req 02 val 2100 [ 112.797788][ T5891] pwc: recv_control_msg error -71 req 04 val 1500 [ 112.804760][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 112.815352][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 112.822357][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 112.832740][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 112.840457][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 112.847863][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 112.854769][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 112.864379][ T5891] pwc: Registered as video103. [ 112.870643][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 112.900777][ T5891] usb 2-1: USB disconnect, device number 5 [ 113.166599][ T5904] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 113.178361][ T5904] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 113.201136][ T58] elan 0003:04F3:0755.0007: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 113.498835][ T58] usb 4-1: USB disconnect, device number 7 [ 114.075796][ T10] usb 5-1: USB disconnect, device number 6 [ 114.083694][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 114.347035][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 114.640602][ T6784] input: syz0 as /devices/virtual/input/input15 [ 115.147125][ T6799] trusted_key: syz.1.325 sent an empty control message without MSG_MORE. [ 115.174642][ T5890] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.341912][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 115.351753][ T5890] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 115.360707][ T5890] usb 1-1: config 0 has no interface number 0 [ 115.373119][ T5890] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.412238][ T5890] usb 1-1: config 0 interface 85 has no altsetting 0 [ 115.427154][ T5890] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 115.436744][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.445845][ T5890] usb 1-1: Product: syz [ 115.451387][ T5890] usb 1-1: Manufacturer: syz [ 115.474800][ T5890] usb 1-1: SerialNumber: syz [ 115.490109][ T5890] usb 1-1: config 0 descriptor?? [ 115.719314][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.755534][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.770271][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 115.784964][ T6793] netlink: 68 bytes leftover after parsing attributes in process `syz.0.322'. [ 116.208355][ T5890] appletouch 1-1:0.85: Geyser mode initialized. [ 116.223357][ T5890] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input16 [ 116.427199][ T5904] usb 1-1: USB disconnect, device number 4 [ 116.441840][ T5904] appletouch 1-1:0.85: input: appletouch disconnected [ 116.524778][ T58] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.694810][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 116.701653][ T58] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 116.710988][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.720683][ T58] usb 4-1: config 0 descriptor?? [ 117.171722][ T6842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.361265][ T58] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.371677][ T58] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 118.382158][ T58] asix 4-1:0.0: probe with driver asix failed with error -71 [ 118.393929][ T58] usb 4-1: USB disconnect, device number 8 [ 118.706288][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 118.750934][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 119.055267][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.114758][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.216209][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.241796][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.285879][ T5890] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.293718][ T5904] usb 2-1: config 0 has no interfaces? [ 119.302229][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.312925][ T5904] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 119.325458][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.333841][ T5904] usb 2-1: Product: syz [ 119.341541][ T5890] usb 1-1: SerialNumber: syz [ 119.347384][ T5904] usb 2-1: Manufacturer: syz [ 119.361431][ T5904] usb 2-1: SerialNumber: syz [ 119.391464][ T5904] usb 2-1: config 0 descriptor?? [ 119.582793][ T5890] usb 1-1: 0:2 : does not exist [ 119.603895][ T5890] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 119.669298][ T5890] usb 1-1: USB disconnect, device number 5 [ 119.865714][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.305068][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 120.498995][ T6889] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.579316][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.748379][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 120.805422][ T5904] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 120.819149][ T5904] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.829304][ T5904] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.860493][ T5904] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.906605][ T5904] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.964618][ T5904] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.003501][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.236152][ T5904] usb 5-1: GET_CAPABILITIES returned 0 [ 121.260601][ T5904] usbtmc 5-1:16.0: can't read capabilities [ 121.399466][ T6911] syzkaller0: entered promiscuous mode [ 121.406244][ T6911] syzkaller0: entered allmulticast mode [ 121.478308][ T5890] usb 5-1: USB disconnect, device number 7 [ 121.998499][ T5904] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.111975][ T58] usb 2-1: USB disconnect, device number 6 [ 122.167002][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 122.196238][ T5904] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 122.207906][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.232629][ T5904] usb 1-1: config 0 descriptor?? [ 122.659605][ T5904] gt683r_led 0003:1770:FF00.0008: collection stack underflow [ 122.672010][ T5904] gt683r_led 0003:1770:FF00.0008: item 0 2 0 12 parsing failed [ 122.681915][ T5904] gt683r_led 0003:1770:FF00.0008: hid parsing failed [ 122.689183][ T5904] gt683r_led 0003:1770:FF00.0008: probe with driver gt683r_led failed with error -22 [ 122.891081][ T5904] usb 1-1: USB disconnect, device number 6 [ 124.454796][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.628672][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.638880][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.652021][ T5892] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.661307][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.669902][ T5892] usb 3-1: SerialNumber: syz [ 124.671428][ T5891] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.834663][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 124.841752][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.864603][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.876257][ T5891] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 124.897889][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.911369][ T5891] usb 4-1: config 0 descriptor?? [ 124.923831][ T5892] usb 3-1: 0:2 : does not exist [ 124.947701][ T5892] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 124.994341][ T5892] usb 3-1: USB disconnect, device number 6 [ 125.187907][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.335634][ T5891] playstation 0003:054C:05C4.0009: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 125.520619][ T6967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.760098][ T5891] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 163: -32 [ 125.769791][ T5891] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 firmware info: -32 [ 125.779723][ T5891] playstation 0003:054C:05C4.0009: Failed to get firmware info from DualShock4 [ 125.789937][ T5891] playstation 0003:054C:05C4.0009: HW/FW version data in sysfs will be invalid. [ 125.800099][ T5891] playstation 0003:054C:05C4.0009: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 125.813356][ T5891] input: HID 054c:05c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0009/input/input17 [ 125.830777][ T5891] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0009/input/input18 [ 125.851780][ T5891] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0009/input/input19 [ 125.906283][ T5891] playstation 0003:054C:05C4.0009: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 126.146915][ T5892] usb 4-1: USB disconnect, device number 9 [ 126.629454][ T6998] kernel read not supported for file /eth0 (pid: 6998 comm: syz.1.400) [ 126.638330][ T30] audit: type=1800 audit(1743323162.546:14): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.400" name="eth0" dev="mqueue" ino=8238 res=0 errno=0 [ 127.258967][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.410'. [ 127.444966][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.614840][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 127.627272][ T5891] usb 2-1: config 89 has an invalid interface number: 228 but max is 1 [ 127.640087][ T5891] usb 2-1: config 89 has an invalid interface number: 251 but max is 1 [ 127.659540][ T5891] usb 2-1: config 89 has no interface number 0 [ 127.672903][ T5891] usb 2-1: config 89 has no interface number 1 [ 127.682238][ T5891] usb 2-1: config 89 interface 228 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.694310][ T5891] usb 2-1: config 89 interface 251 altsetting 19 has an invalid endpoint descriptor of length 2, skipping [ 127.705836][ T5891] usb 2-1: config 89 interface 251 altsetting 19 endpoint 0xF has invalid wMaxPacketSize 0 [ 127.716230][ T5891] usb 2-1: config 89 interface 251 altsetting 19 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 127.729589][ T5891] usb 2-1: config 89 interface 251 has no altsetting 0 [ 127.739110][ T5891] usb 2-1: New USB device found, idVendor=07d1, idProduct=3e01, bcdDevice=2e.9e [ 127.748427][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.756587][ T5891] usb 2-1: Product: syz [ 127.760863][ T5891] usb 2-1: Manufacturer: syz [ 127.765705][ T5891] usb 2-1: SerialNumber: syz [ 127.793182][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888026ff8400: rx timeout, send abort [ 127.803124][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888026ff8400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.096291][ T5891] option 2-1:89.228: GSM modem (1-port) converter detected [ 128.121653][ T5891] usb 2-1: USB disconnect, device number 7 [ 128.139681][ T5891] option 2-1:89.228: device disconnected [ 128.244778][ T5892] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.434657][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 128.445995][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.454610][ T5892] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 128.463835][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.492368][ T5892] usb 3-1: config 0 descriptor?? [ 128.926050][ T7065] lo: left promiscuous mode [ 128.930802][ T7065] tunl0: left promiscuous mode [ 128.938104][ T7065] gre0: left promiscuous mode [ 128.943908][ T7065] gretap0: left promiscuous mode [ 128.954065][ T7065] erspan0: left promiscuous mode [ 128.961999][ T7065] ip_vti0: left promiscuous mode [ 129.001822][ T5892] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.000A/input/input20 [ 129.049774][ T7065] bridge0: port 3(syz_tun) entered disabled state [ 129.067605][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.076152][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.100481][ T5892] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.000A/input/input21 [ 129.173241][ T5892] kye 0003:0458:5013.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 129.196455][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.213254][ T5892] usb 3-1: USB disconnect, device number 7 [ 129.229421][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.341446][ T7065] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.351117][ T7065] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.361585][ T7065] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.371227][ T7065] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.699535][ T7078] kernel read not supported for file /eth0 (pid: 7078 comm: syz.3.428) [ 129.708271][ T30] audit: type=1800 audit(1743323165.616:15): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.428" name="eth0" dev="mqueue" ino=14112 res=0 errno=0 [ 130.050678][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888024982400: rx timeout, send abort [ 130.059307][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888024982400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.144819][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.308763][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.319884][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.332617][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.342110][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.353591][ T10] usb 5-1: config 0 descriptor?? [ 130.969193][ T10] usb 5-1: language id specifier not provided by device, defaulting to English [ 131.374928][ T10] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input22 [ 131.448497][ T10] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input23 [ 131.465721][ T10] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input24 [ 131.481436][ T10] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input25 [ 131.499413][ T10] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 131.762017][ T10] usb 5-1: USB disconnect, device number 8 [ 132.160168][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.167534][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.287940][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.306080][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.386412][ T7110] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.396920][ T7110] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.406546][ T7110] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.418288][ T7110] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.924768][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.931119][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.285027][ T7134] kernel read not supported for file /!selinÛ¡¿Ùl×ÍÀuxseîÍÎq¢¥ ˜Š>º (pid: 7134 comm: syz.3.450) [ 133.329058][ T30] audit: type=1800 audit(1743323169.226:16): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.450" name=2173656C696EDBA102BFD96CD7CDC075787365EE0ECDCE71A2A509988A8F3EBA dev="mqueue" ino=14266 res=0 errno=0 [ 133.354733][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.649054][ T58] usb 5-1: config 0 has no interfaces? [ 133.676712][ T58] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.710095][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.715101][ T5890] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.725378][ T58] usb 5-1: Product: syz [ 133.729873][ T58] usb 5-1: Manufacturer: syz [ 133.774098][ T58] usb 5-1: SerialNumber: syz [ 133.780325][ T7130] syz.1.449: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.800880][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.1.449 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 133.800908][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.800925][ T7130] Call Trace: [ 133.800932][ T7130] [ 133.800941][ T7130] dump_stack_lvl+0x241/0x360 [ 133.800986][ T7130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.801016][ T7130] ? __pfx__printk+0x10/0x10 [ 133.801055][ T7130] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 133.801089][ T7130] ? __rcu_read_unlock+0xa1/0x110 [ 133.801111][ T7130] warn_alloc+0x27c/0x410 [ 133.801139][ T7130] ? __pfx_warn_alloc+0x10/0x10 [ 133.801166][ T7130] ? xp_create_and_assign_umem+0x17b/0xc60 [ 133.801196][ T7130] ? __get_vm_area_node+0x1c8/0x2d0 [ 133.801217][ T7130] ? __get_vm_area_node+0x25c/0x2d0 [ 133.801241][ T7130] __vmalloc_node_range_noprof+0x634/0x1390 [ 133.801276][ T7130] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 133.801303][ T7130] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.801326][ T7130] ? __kasan_kmalloc_large+0x1a/0xa0 [ 133.801357][ T7130] ? xp_create_and_assign_umem+0x17b/0xc60 [ 133.801388][ T7130] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 133.801409][ T7130] ? xp_create_and_assign_umem+0x17b/0xc60 [ 133.801437][ T7130] ? xp_create_and_assign_umem+0x17b/0xc60 [ 133.801470][ T7130] xp_create_and_assign_umem+0x17b/0xc60 [ 133.801508][ T7130] ? dev_get_by_index+0x23/0x2d0 [ 133.801543][ T7130] xsk_bind+0x435/0xfb0 [ 133.801576][ T7130] __sys_bind+0x1de/0x290 [ 133.801599][ T7130] ? __pfx___sys_bind+0x10/0x10 [ 133.801637][ T7130] __ia32_sys_bind+0x7a/0x90 [ 133.801659][ T7130] __do_fast_syscall_32+0xb4/0x110 [ 133.801689][ T7130] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 133.801710][ T7130] ? lockdep_hardirqs_on+0x9d/0x150 [ 133.801739][ T7130] do_fast_syscall_32+0x34/0x80 [ 133.801768][ T7130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.801799][ T7130] RIP: 0023:0xf7fc1579 [ 133.801821][ T7130] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 133.801839][ T7130] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 133.801860][ T7130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 133.801874][ T7130] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.801887][ T7130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.801898][ T7130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.801910][ T7130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.801934][ T7130] [ 133.802825][ T58] usb 5-1: config 0 descriptor?? [ 133.874776][ T7130] Mem-Info: [ 134.070233][ T7130] active_anon:7372 inactive_anon:0 isolated_anon:0 [ 134.070233][ T7130] active_file:1314 inactive_file:38277 isolated_file:0 [ 134.070233][ T7130] unevictable:770 dirty:327 writeback:0 [ 134.070233][ T7130] slab_reclaimable:9694 slab_unreclaimable:98486 [ 134.070233][ T7130] mapped:29281 shmem:1445 pagetables:1003 [ 134.070233][ T7130] sec_pagetables:0 bounce:0 [ 134.070233][ T7130] kernel_misc_reclaimable:0 [ 134.070233][ T7130] free:1334776 free_pcp:138 free_cma:0 [ 134.115216][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.121875][ T7130] Node 0 active_anon:29488kB inactive_anon:0kB active_file:5256kB inactive_file:153032kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:117124kB dirty:1304kB writeback:0kB shmem:4244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11120kB pagetables:4012kB sec_pagetables:0kB all_unreclaimable? no [ 134.148389][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.190369][ T7130] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 134.196381][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.234996][ T5890] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.244113][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.256252][ T5890] usb 3-1: config 0 descriptor?? [ 134.264423][ T7130] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.302266][ T7130] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 134.308878][ T7130] Node 0 DMA32 free:1423280kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:29548kB inactive_anon:0kB active_file:5256kB inactive_file:152720kB unevictable:1544kB writepending:1304kB present:3129332kB managed:2549548kB mlocked:0kB bounce:0kB free_pcp:1356kB local_pcp:644kB free_cma:0kB [ 134.341003][ T7130] lowmem_reserve[]: 0 0 0 0 0 [ 134.346258][ T7130] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 134.384611][ T7130] lowmem_reserve[]: 0 0 0 0 0 [ 134.389547][ T7130] Node 1 Normal free:3898592kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.423957][ T7130] lowmem_reserve[]: 0 0 0 0 0 [ 134.431306][ T7130] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.448488][ T7130] Node 0 DMA32: 2*4kB (UM) 3*8kB (UE) 14*16kB (E) 31*32kB (UME) 28*64kB (ME) 23*128kB (M) 22*256kB (UME) 19*512kB (UME) 7*1024kB (UME) 7*2048kB (UM) 337*4096kB (UM) = 1423200kB [ 134.477681][ T7130] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 134.492602][ T7130] Node 1 Normal: 236*4kB (UE) 68*8kB (UME) 53*16kB (UME) 222*32kB (UME) 100*64kB (UME) 28*128kB (UME) 17*256kB (UME) 6*512kB (UME) 5*1024kB (UM) 4*2048kB (UE) 942*4096kB (M) = 3898592kB [ 134.539331][ T7130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.551150][ T7130] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.561653][ T7130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.572479][ T7130] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.582738][ T7130] 41011 total pagecache pages [ 134.588016][ T7130] 0 pages in swap cache [ 134.592444][ T7130] Free swap = 124880kB [ 134.597427][ T7130] Total swap = 124996kB [ 134.601741][ T7130] 2097051 pages RAM [ 134.606245][ T7130] 0 pages HighMem/MovableOnly [ 134.611267][ T7130] 427942 pages reserved [ 134.616291][ T7130] 0 pages cma reserved [ 134.878519][ T5890] usb 3-1: language id specifier not provided by device, defaulting to English [ 135.285212][ T5890] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input26 [ 135.367435][ T5890] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input27 [ 135.397261][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.404871][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.436270][ T5890] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input28 [ 135.454204][ T5890] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input29 [ 135.474099][ T5890] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 135.491404][ T5890] usb 3-1: USB disconnect, device number 8 [ 135.509966][ T7160] netlink: 'syz.0.458': attribute type 9 has an invalid length. [ 135.524713][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 135.572940][ T7161] netlink: 'syz.0.458': attribute type 9 has an invalid length. [ 135.659251][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 135.825298][ T7154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.867804][ T7154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.019335][ T7154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.028974][ T7154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.041300][ T7154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.051449][ T7154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.064177][ T7154] geneve2: left allmulticast mode [ 136.275048][ T7164] usb 5-1: USB disconnect, device number 9 [ 136.758915][ T7200] sg_write: data in/out 214/14 bytes for SCSI command 0x0-- guessing data in; [ 136.758915][ T7200] program syz.4.471 not setting count and/or reply_len properly [ 136.803587][ T976] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.974986][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 136.995578][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.008550][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.034310][ T976] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 137.051563][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.083867][ T976] usb 3-1: config 0 descriptor?? [ 137.108841][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 137.510329][ T976] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 137.707849][ T976] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 137.913477][ T976] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 138.112334][ T976] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 138.153262][ T976] ft260 0003:0403:6030.000D: failed to retrieve status: -32 [ 138.445290][ T7173] usb 3-1: USB disconnect, device number 9 [ 138.906911][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 139.036654][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 139.895677][ T7297] syz_tun: entered allmulticast mode [ 139.922159][ T7295] syz_tun: left allmulticast mode [ 140.557397][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.517'. [ 140.903986][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 141.331203][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 142.574667][ T976] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.717035][ T7367] tipc: Failed to remove unknown binding: 66,1,1/0:3380247922/3380247924 [ 142.728180][ T7367] tipc: Failed to remove unknown binding: 66,1,1/0:3380247922/3380247924 [ 142.790487][ T7367] tipc: Failed to remove unknown binding: 66,1,1/0:3380247922/3380247924 [ 142.856796][ T976] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 142.874479][ T976] usb 1-1: config 0 has no interface number 0 [ 142.895615][ T976] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=d8.11 [ 142.922928][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.926506][ T7371] pim6reg1: entered promiscuous mode [ 142.950547][ T976] usb 1-1: Product: syz [ 142.963870][ T976] usb 1-1: Manufacturer: syz [ 142.965889][ T7371] pim6reg1: entered allmulticast mode [ 142.988036][ T976] usb 1-1: SerialNumber: syz [ 143.010679][ T976] usb 1-1: config 0 descriptor?? [ 143.234856][ T976] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.282170][ T976] snd-usb-audio 1-1:0.107: probe with driver snd-usb-audio failed with error -2 [ 143.301164][ T976] usb 1-1: USB disconnect, device number 7 [ 143.479412][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.107/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.077765][ T30] audit: type=1326 audit(1743323179.986:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 144.351515][ T7408] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.544'. [ 144.380948][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 144.574139][ T7415] bond0: entered promiscuous mode [ 144.579627][ T7415] bond_slave_0: entered promiscuous mode [ 144.593724][ T7415] bond_slave_1: entered promiscuous mode [ 144.609230][ T7415] team0: entered promiscuous mode [ 144.619180][ T7415] team_slave_0: entered promiscuous mode [ 144.633748][ T7415] team_slave_1: entered promiscuous mode [ 145.316008][ T7436] tipc: Started in network mode [ 145.321165][ T7436] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 145.368420][ T7436] tipc: Enabled bearer , priority 10 [ 145.399434][ T7440] netlink: 14 bytes leftover after parsing attributes in process `syz.0.558'. [ 145.528796][ T7440] syz_tun (unregistering): left allmulticast mode [ 145.540526][ T7440] syz_tun (unregistering): left promiscuous mode [ 145.556028][ T7440] bridge0: port 3(syz_tun) entered disabled state [ 145.573254][ T7440] tipc: Disabling bearer [ 145.949295][ T7462] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 145.988704][ T7462] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 146.008630][ T30] audit: type=1326 audit(1743323181.916:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz.4.568" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 146.249994][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 146.365689][ T7173] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.454942][ T976] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.588029][ T7173] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 146.613438][ T7173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.631751][ T976] usb 1-1: config 0 has no interfaces? [ 146.645506][ T7173] usb 4-1: Product: syz [ 146.664653][ T7173] usb 4-1: Manufacturer: syz [ 146.696248][ T7173] usb 4-1: SerialNumber: syz [ 146.736068][ T7173] usb 4-1: config 0 descriptor?? [ 146.775914][ T976] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 146.808104][ T7173] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 146.834783][ T5892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.847446][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.884579][ T976] usb 1-1: Product: syz [ 146.888854][ T976] usb 1-1: Manufacturer: syz [ 146.893509][ T976] usb 1-1: SerialNumber: syz [ 146.949807][ T976] usb 1-1: config 0 descriptor?? [ 147.026407][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.040719][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.051928][ T5892] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.066042][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.077837][ T5892] usb 3-1: SerialNumber: syz [ 147.315178][ T7173] gspca_sunplus: reg_r err -110 [ 147.322889][ T7173] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 147.340403][ T5892] usb 3-1: 0:2 : does not exist [ 147.362197][ T5892] usb 3-1: USB disconnect, device number 10 [ 147.635323][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.792517][ T7509] Â: renamed from pim6reg1 [ 149.125001][ T5892] usb 4-1: USB disconnect, device number 10 [ 149.357905][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 149.751004][ T7534] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.774692][ T7164] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.953727][ T7164] usb 2-1: Using ep0 maxpacket: 8 [ 149.981969][ T5892] usb 1-1: USB disconnect, device number 8 [ 150.001048][ T7164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.041444][ T7164] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.079174][ T7164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.113622][ T7164] usb 2-1: config 0 descriptor?? [ 150.458471][ T7547] bond1: entered promiscuous mode [ 150.545132][ T7547] bond1: entered allmulticast mode [ 150.552182][ T7164] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 151.086125][ T7164] usb 2-1: USB disconnect, device number 8 [ 152.274708][ T7173] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.294624][ T7164] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.474827][ T7173] usb 3-1: Using ep0 maxpacket: 8 [ 152.533162][ T7164] usb 4-1: config 0 has no interfaces? [ 152.535914][ T7173] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 152.548085][ T7164] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.548116][ T7164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.612770][ T7164] usb 4-1: Product: syz [ 152.632902][ T7164] usb 4-1: Manufacturer: syz [ 152.650734][ T7173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.650783][ T7164] usb 4-1: SerialNumber: syz [ 152.694776][ T7173] usb 3-1: config 0 descriptor?? [ 152.700708][ T7164] usb 4-1: config 0 descriptor?? [ 152.927372][ T7173] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 153.076104][ T7605] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.619'. [ 153.091275][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 154.363973][ T7173] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 154.415343][ T7173] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 154.445335][ T7173] asix 3-1:0.0: probe with driver asix failed with error -71 [ 154.461322][ T7173] usb 3-1: USB disconnect, device number 11 [ 154.988311][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 155.381966][ T976] usb 4-1: USB disconnect, device number 11 [ 155.617412][ T7648] syzkaller0: entered promiscuous mode [ 155.675774][ T7648] syzkaller0: entered allmulticast mode [ 156.004654][ T7164] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.194661][ T7164] usb 2-1: Using ep0 maxpacket: 32 [ 156.239610][ T7164] usb 2-1: config 0 interface 0 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 156.280390][ T7164] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.318910][ T7164] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 156.362178][ T7164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.414942][ T7164] usb 2-1: config 0 descriptor?? [ 156.423813][ T7164] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 156.738066][ T976] usb 2-1: USB disconnect, device number 9 [ 157.095001][ T7164] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.337351][ T7164] usb 1-1: config 0 has no interfaces? [ 157.366821][ T7164] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 157.394114][ T7164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.417630][ T7164] usb 1-1: Product: syz [ 157.428246][ T7164] usb 1-1: Manufacturer: syz [ 157.439397][ T2150] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 157.447367][ T7164] usb 1-1: SerialNumber: syz [ 157.465308][ T7164] usb 1-1: config 0 descriptor?? [ 157.646160][ T2150] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.657031][ T2150] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.669178][ T2150] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.679940][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.690626][ T2150] usb 3-1: SerialNumber: syz [ 157.915870][ T2150] usb 3-1: 0:2 : does not exist [ 157.950095][ T2150] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 157.965563][ T2150] usb 3-1: 5:0: failed to get current value for ch 14 (-22) [ 157.995636][ T2150] usb 3-1: USB disconnect, device number 12 [ 158.244399][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.759290][ T976] usb 1-1: USB disconnect, device number 9 [ 159.924615][ T7173] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.936290][ T5892] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.094727][ T7173] usb 5-1: Using ep0 maxpacket: 32 [ 160.106086][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.109324][ T7173] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 160.133065][ T7173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.151012][ T7173] usb 5-1: Product: syz [ 160.153988][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.155349][ T7173] usb 5-1: Manufacturer: syz [ 160.169845][ T7173] usb 5-1: SerialNumber: syz [ 160.184193][ T7173] usb 5-1: config 0 descriptor?? [ 160.200235][ T7173] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 160.210252][ T5892] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 160.224122][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.342360][ T5892] usb 4-1: config 0 descriptor?? [ 161.195173][ T5892] hid-led 0003:27B8:01ED.000E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 161.220734][ T5892] hid-led 0003:27B8:01ED.000E: ThingM blink(1) initialized [ 161.341195][ T7738] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 161.353512][ T7738] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.416130][ T976] usb 4-1: USB disconnect, device number 12 [ 161.669049][ T7173] gspca_topro: Sensor cx0342 [ 161.889940][ T7173] usb 5-1: USB disconnect, device number 10 [ 161.902439][ T7758] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 161.924839][ T7758] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 163.692137][ T7804] block device autoloading is deprecated and will be removed. [ 163.742682][ T30] audit: type=1326 audit(1743323199.636:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 163.791727][ T30] audit: type=1326 audit(1743323199.636:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 163.818859][ T30] audit: type=1326 audit(1743323199.636:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 163.866711][ T7164] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 163.893465][ T30] audit: type=1326 audit(1743323199.636:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 163.907057][ T7164] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.945124][ T30] audit: type=1326 audit(1743323199.636:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 164.124799][ T5892] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.344649][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 164.679389][ T5892] usb 1-1: config 0 has no interfaces? [ 164.685123][ T5892] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 164.707360][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.727369][ T5892] usb 1-1: config 0 descriptor?? [ 165.121939][ T5892] usb 1-1: USB disconnect, device number 10 [ 165.274949][ T7832] netlink: 'syz.2.701': attribute type 4 has an invalid length. [ 165.316273][ T7832] netlink: 'syz.2.701': attribute type 4 has an invalid length. [ 165.564915][ T7839] kvm: apic: phys broadcast and lowest prio [ 165.825501][ T7849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.854875][ T5892] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.024968][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 166.047634][ T5892] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.084639][ T5892] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.093489][ T5892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.104263][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.155073][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.193040][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.286617][ T5892] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.369236][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.472625][ T5892] usb 5-1: config 0 descriptor?? [ 166.717242][ T5892] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 166.808442][ T5892] usb 5-1: USB disconnect, device number 11 [ 166.848292][ T5892] usblp0: removed [ 167.246486][ T7883] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.297927][ T5892] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 167.464721][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 167.475463][ T5892] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 167.484240][ T5892] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 167.497657][ T5892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 167.508736][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.521902][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.532809][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.774997][ T5892] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 167.814566][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.824863][ T5892] usb 5-1: config 0 descriptor?? [ 168.035030][ T5892] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 168.526588][ T976] usb 5-1: USB disconnect, device number 12 [ 168.545980][ T976] usblp0: removed [ 171.667433][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.896956][ T5892] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 171.914607][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.934723][ T5892] usb 5-1: config 0 descriptor?? [ 172.283568][ T7991] bond0: entered promiscuous mode [ 172.298730][ T7991] bond_slave_0: entered promiscuous mode [ 172.304874][ T7991] bond_slave_1: entered promiscuous mode [ 172.310718][ T7991] bridge0: entered promiscuous mode [ 172.399192][ T5892] usb 5-1: string descriptor 0 read error: -71 [ 172.702873][ T5892] usb 5-1: Cannot read MAC address [ 172.713725][ T5892] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 172.756088][ T5892] usb 5-1: USB disconnect, device number 13 [ 173.320971][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 174.134705][ T5903] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.294713][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 174.308892][ T5903] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 174.320755][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 174.331263][ T5903] usb 4-1: Product: syz [ 174.338046][ T5903] usb 4-1: Manufacturer: syz [ 174.342836][ T5903] usb 4-1: SerialNumber: syz [ 174.353493][ T5903] usb 4-1: config 0 descriptor?? [ 174.617156][ T7948] Set syz1 is full, maxelem 65536 reached [ 174.631991][ T5903] usb 4-1: USB disconnect, device number 13 [ 174.729295][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 175.809625][ T8049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.773'. [ 176.215130][ T976] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 176.365046][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 176.376509][ T976] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 176.385223][ T976] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 176.439447][ T976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.473485][ T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 176.514322][ T976] usb 4-1: config 1 has no interface number 0 [ 176.521918][ T976] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 176.535961][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.562678][ T976] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 176.725197][ T8064] sctp: [Deprecated]: syz.1.777 (pid 8064) Use of int in maxseg socket option. [ 176.725197][ T8064] Use struct sctp_assoc_value instead [ 177.214741][ T7172] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 177.367736][ T7172] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 177.378128][ T7172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.390250][ T7172] usb 5-1: config 0 descriptor?? [ 177.499109][ T8074] bond2: entered promiscuous mode [ 177.508516][ T8074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.876013][ T976] snd_usb_pod 4-1:1.1: set_interface failed [ 178.882226][ T976] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 178.924740][ T976] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 178.956065][ T976] usb 4-1: USB disconnect, device number 14 [ 179.028007][ T8087] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.794'. [ 179.049092][ T7172] usb 5-1: Cannot set autoneg [ 179.053968][ T7172] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 179.074625][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 179.103740][ T7172] usb 5-1: USB disconnect, device number 14 [ 181.011785][ T8160] netlink: 156 bytes leftover after parsing attributes in process `syz.4.816'. [ 181.027947][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.816'. [ 183.004693][ T976] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 183.172592][ T8197] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.828'. [ 183.187253][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.828'. [ 183.197279][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 183.204743][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 183.226951][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.277630][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.311620][ T976] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 183.321971][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.341431][ T976] usb 1-1: config 0 descriptor?? [ 183.544886][ T7172] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 183.724774][ T7172] usb 5-1: Using ep0 maxpacket: 16 [ 183.737683][ T7172] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 183.752279][ T7172] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.765977][ T7172] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.783299][ T976] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0010/input/input30 [ 183.797985][ T7172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.806797][ T7172] usb 5-1: Product: syz [ 183.812792][ T7172] usb 5-1: Manufacturer: syz [ 183.818124][ T7172] usb 5-1: SerialNumber: syz [ 183.887782][ T976] appleir 0003:05AC:8241.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 184.034770][ T7172] usb 5-1: 0:2 : does not exist [ 184.047073][ T7172] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 184.072599][ T7172] usb 5-1: USB disconnect, device number 15 [ 184.275230][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.380258][ T5892] usb 1-1: USB disconnect, device number 11 [ 185.491624][ T30] audit: type=1326 audit(1743323221.386:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.3.839" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x0 [ 186.954606][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 187.147374][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 187.154570][ T5892] usb 3-1: config 0 has no interfaces? [ 187.160141][ T5892] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 187.183186][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.193214][ T5892] usb 3-1: config 0 descriptor?? [ 187.311293][ T8274] mmap: syz.3.855 (8274) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.452761][ T2150] usb 3-1: USB disconnect, device number 13 [ 187.562425][ T30] audit: type=1326 audit(1743323223.466:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.859" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 188.708398][ T2150] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 188.924733][ T2150] usb 5-1: Using ep0 maxpacket: 32 [ 188.932130][ T2150] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 188.940865][ T2150] usb 5-1: config 0 has no interface number 0 [ 188.956030][ T2150] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 188.972850][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.986276][ T2150] usb 5-1: Product: syz [ 188.990605][ T2150] usb 5-1: Manufacturer: syz [ 188.995798][ T2150] usb 5-1: SerialNumber: syz [ 189.002363][ T2150] usb 5-1: config 0 descriptor?? [ 189.017889][ T2150] smsc95xx v2.0.0 [ 189.021658][ T2150] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 189.037211][ T2150] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 189.281462][ T8312] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.864'. [ 189.290901][ T8312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.864'. [ 189.324743][ T7173] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 189.478930][ T7173] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.489365][ T7173] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.499517][ T7173] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.508724][ T7173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.524787][ T7173] usb 3-1: SerialNumber: syz [ 189.584839][ T8314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'. [ 189.760294][ T7173] usb 3-1: 0:2 : does not exist [ 189.787066][ T7173] usb 3-1: USB disconnect, device number 14 [ 189.975250][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.581252][ T7172] usb 5-1: USB disconnect, device number 16 [ 194.352448][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359372][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.948799][ T8400] kernel profiling enabled (shift: 9) [ 195.304589][ T7172] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 195.476273][ T7172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.512735][ T7172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 195.548073][ T7172] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 195.590669][ T7172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.635404][ T7172] usb 5-1: config 0 descriptor?? [ 195.664185][ T7172] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 195.704939][ T7172] dvb-usb: bulk message failed: -22 (3/0) [ 195.762381][ T7172] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 195.784719][ T2150] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.814905][ T7172] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 195.822276][ T7172] usb 5-1: media controller created [ 195.863377][ T8404] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 195.916434][ T7172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.964611][ T2150] usb 1-1: Using ep0 maxpacket: 8 [ 195.969801][ T7172] dvb-usb: bulk message failed: -22 (6/0) [ 195.996155][ T2150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.021357][ T7172] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 196.046735][ T2150] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 196.059073][ T7172] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 196.091908][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.123801][ T2150] usb 1-1: config 0 descriptor?? [ 196.133387][ T7172] dvb-usb: schedule remote query interval to 150 msecs. [ 196.160261][ T2150] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 196.169189][ T7172] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 196.180222][ T7172] usb 5-1: USB disconnect, device number 17 [ 196.219768][ T7172] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 196.416462][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 196.423474][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 196.430416][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 196.433300][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 196.436719][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 196.972158][ T8457] Zero length message leads to an empty skb [ 197.945286][ T976] usb 1-1: USB disconnect, device number 12 [ 198.765884][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 199.211182][ T8486] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.459668][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 199.481156][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 199.674405][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 199.714724][ T8474] IPv6: Can't replace route, no match found [ 199.843363][ T8505] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 199.883138][ T8505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 199.923848][ T8505] batadv0: entered promiscuous mode [ 199.957745][ T8505] batadv0: entered allmulticast mode [ 200.005993][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.045165][ T8505] bridge0: port 3(batadv0) entered blocking state [ 200.146865][ T976] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.414384][ T8505] bridge0: port 3(batadv0) entered disabled state [ 200.865009][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 200.907378][ T976] usb 3-1: config 0 has no interfaces? [ 200.920641][ T976] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.976718][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.013910][ T976] usb 3-1: config 0 descriptor?? [ 201.209023][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 201.218957][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 201.264863][ T8505] batman_adv: batadv0: Adding interface: dummy0 [ 201.353860][ T8505] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.900248][ T8505] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 201.932445][ T976] usb 3-1: USB disconnect, device number 15 [ 202.097230][ T8546] kvm: pic: non byte read [ 203.821575][ T8579] hub 1-0:1.0: USB hub found [ 203.829118][ T8579] hub 1-0:1.0: 1 port detected [ 205.003303][ T8601] syzkaller0: entered promiscuous mode [ 205.029143][ T8601] syzkaller0: entered allmulticast mode [ 206.118471][ T8618] input: syz1 as /devices/virtual/input/input32 [ 206.533860][ T8624] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.965'. [ 206.547021][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.965'. [ 207.810714][ T8640] netlink: 5 bytes leftover after parsing attributes in process `syz.1.971'. [ 210.480121][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 210.552445][ T30] audit: type=1326 audit(1743323246.456:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.0.991" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744d579 code=0x0 [ 212.692837][ T8740] netlink: 'syz.4.1003': attribute type 4 has an invalid length. [ 214.484673][ T976] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 214.869674][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.914595][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.960203][ T976] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 214.994046][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.014061][ T976] usb 2-1: config 0 descriptor?? [ 215.379861][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 215.387376][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.549278][ T976] usb 2-1: USB disconnect, device number 10 [ 216.574659][ T8805] Set syz1 is full, maxelem 65536 reached [ 217.645049][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1028'. [ 219.694655][ T976] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.200077][ T976] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 220.219575][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.240391][ T976] usb 1-1: config 0 descriptor?? [ 222.428531][ T976] usb 1-1: Cannot set autoneg [ 222.433536][ T976] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 222.500562][ T976] usb 1-1: USB disconnect, device number 13 [ 223.447543][ T5892] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.614779][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 223.636301][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 223.657797][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.693042][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.703228][ T5892] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.720027][ T5892] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.752159][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.992135][ T5892] usb 2-1: GET_CAPABILITIES returned 0 [ 223.997820][ T5892] usbtmc 2-1:16.0: can't read capabilities [ 224.071104][ T8945] bond1: entered promiscuous mode [ 224.083400][ T8945] bond1: entered allmulticast mode [ 224.344081][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 224.642103][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 224.815539][ T8964] usbtmc 2-1:16.0: Unable to send data, error -71 [ 225.049639][ T5892] usb 2-1: USB disconnect, device number 11 [ 225.615422][ T7172] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 225.797465][ T7172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.809252][ T7172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.134028][ T7172] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.157590][ T7172] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.179920][ T7172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.263433][ T7172] usb 4-1: config 0 descriptor?? [ 226.722445][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.733192][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.747014][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.757641][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.776577][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.798291][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.828335][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.847714][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.890235][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.921080][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.988985][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 227.066579][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 227.135257][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 227.216291][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 227.284817][ T7172] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 227.292616][ T7172] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 227.443384][ T7172] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 228.194827][ T7172] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 228.236688][ T5851] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 228.344772][ T7172] usb 3-1: Using ep0 maxpacket: 8 [ 228.353488][ T5892] usb 4-1: USB disconnect, device number 15 [ 228.358921][ T7172] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 228.385165][ T7172] usb 3-1: config 0 has no interface number 0 [ 228.417305][ T7172] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.444663][ T7172] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 228.467147][ T7172] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.492072][ T7172] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.532717][ T7172] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 228.553239][ T7172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.585380][ T7172] usb 3-1: config 0 descriptor?? [ 228.600984][ T7172] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 228.880933][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.932403][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.100325][ T5892] usb 3-1: USB disconnect, device number 16 [ 229.138149][ T5892] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 230.492308][ T9063] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1099'. [ 230.604007][ T9063] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1099'. [ 230.845267][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 231.804562][ T5903] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 231.957337][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.969369][ T5903] usb 2-1: config 0 has no interfaces? [ 231.975410][ T5903] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.984910][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.995500][ T5903] usb 2-1: config 0 descriptor?? [ 232.700814][ T9116] netlink: 'syz.1.1108': attribute type 13 has an invalid length. [ 233.113823][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.129030][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.200355][ T9116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.860826][ T5903] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 234.035953][ T5903] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 234.045161][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.057396][ T5903] usb 3-1: config 0 descriptor?? [ 234.378780][ T9116] syz.1.1108 (9116) used greatest stack depth: 19264 bytes left [ 234.387251][ T976] usb 2-1: USB disconnect, device number 12 [ 235.502592][ T5903] usb 3-1: Cannot set autoneg [ 235.507850][ T5903] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 235.696725][ T5903] usb 3-1: USB disconnect, device number 17 [ 235.758295][ T30] audit: type=1326 audit(1743323271.666:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.4.1136" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 240.627707][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1157'. [ 240.640651][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1157'. [ 241.034616][ T5903] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.186459][ T5903] usb 1-1: config 0 has no interfaces? [ 241.192174][ T5903] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 241.201715][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.211624][ T5903] usb 1-1: config 0 descriptor?? [ 241.484100][ T9275] netlink: 'syz.2.1166': attribute type 1 has an invalid length. [ 241.542012][ T9279] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1166'. [ 241.544074][ T9275] bond3: entered promiscuous mode [ 241.584609][ T7172] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 241.592585][ T9275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.668210][ T9279] batadv1: entered promiscuous mode [ 241.744614][ T7172] usb 4-1: Using ep0 maxpacket: 32 [ 241.749977][ T9279] batadv1: entered allmulticast mode [ 241.757669][ T9279] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 241.767428][ T7172] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 241.789177][ T7172] usb 4-1: config 0 has no interface number 0 [ 241.798564][ T9279] bond3: (slave batadv1): making interface the new active one [ 241.806667][ T7172] usb 4-1: config 0 interface 184 has no altsetting 0 [ 241.887250][ T9279] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 241.945956][ T7172] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 241.957651][ T7172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.040727][ T7172] usb 4-1: Product: syz [ 242.051838][ T7172] usb 4-1: Manufacturer: syz [ 242.064041][ T7172] usb 4-1: SerialNumber: syz [ 242.081497][ T7172] usb 4-1: config 0 descriptor?? [ 242.104939][ T7172] smsc75xx v1.0.0 [ 242.514787][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 242.788332][ T7172] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 242.905518][ T7172] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 243.771676][ T7172] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 243.790923][ T7172] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 243.827865][ T976] usb 1-1: USB disconnect, device number 14 [ 243.838477][ T7172] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 243.863596][ T7172] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 243.919890][ T7172] usb 4-1: USB disconnect, device number 16 [ 244.396980][ T9325] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 244.482218][ T9325] bond1: entered promiscuous mode [ 244.487665][ T9325] bond1: entered allmulticast mode [ 244.493324][ T9325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.630128][ T7172] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 244.804524][ T7172] usb 3-1: Using ep0 maxpacket: 32 [ 244.813494][ T7172] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 244.822025][ T7172] usb 3-1: config 0 has no interface number 0 [ 244.837963][ T7172] usb 3-1: config 0 interface 12 has no altsetting 0 [ 244.859358][ T7172] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 244.870090][ T7172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.891759][ T7172] usb 3-1: Product: syz [ 244.914706][ T976] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 244.927339][ T7172] usb 3-1: Manufacturer: syz [ 244.950889][ T7172] usb 3-1: SerialNumber: syz [ 244.982037][ T7172] usb 3-1: config 0 descriptor?? [ 245.227237][ T976] usb 4-1: config 0 has no interfaces? [ 245.245496][ T976] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 245.274892][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.301630][ T976] usb 4-1: config 0 descriptor?? [ 245.532066][ T5892] usb 4-1: USB disconnect, device number 17 [ 245.598833][ T9346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 246.924041][ T7172] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 246.940148][ T7172] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 246.949121][ T7172] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 246.967102][ T7172] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 246.995003][ T7172] usb 3-1: USB disconnect, device number 18 [ 247.286689][ T30] audit: type=1326 audit(1743323283.196:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.0.1193" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 247.787111][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 249.454789][ T5903] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.486844][ T5892] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 249.785556][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 249.795063][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 249.821080][ T5903] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 249.829500][ T5903] usb 1-1: config 0 has no interface number 0 [ 249.836664][ T5892] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.848106][ T5892] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.863470][ T5903] usb 1-1: config 0 interface 12 has no altsetting 0 [ 250.007618][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 250.084648][ T5892] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 250.093197][ T5892] usb 3-1: Product: syz [ 250.098665][ T5892] usb 3-1: Manufacturer: syz [ 250.107866][ T5903] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 250.125481][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.135990][ T5892] hub 3-1:4.0: USB hub found [ 250.144757][ T5903] usb 1-1: Product: syz [ 250.148973][ T5903] usb 1-1: Manufacturer: syz [ 250.154799][ T5903] usb 1-1: SerialNumber: syz [ 250.162044][ T5903] usb 1-1: config 0 descriptor?? [ 250.353421][ T5892] hub 3-1:4.0: 2 ports detected [ 250.435120][ T9420] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 250.981781][ T9430] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 250.981781][ T9430] program syz.4.1208 not setting count and/or reply_len properly [ 251.579527][ T5892] hub 3-1:4.0: activate --> -90 [ 251.994349][ T5892] usb 3-1-port2: config error [ 252.003749][ T7172] usb 3-1: USB disconnect, device number 19 [ 252.026728][ T5903] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 252.044644][ T5903] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 252.052125][ T5903] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 252.139889][ T5903] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 252.163297][ T5903] usb 1-1: USB disconnect, device number 15 [ 252.710229][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.717775][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.225758][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.238644][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.362643][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 253.380468][ T9455] vivid-006: disconnect [ 253.423621][ T9450] vivid-006: reconnect [ 253.640283][ T9438] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.667215][ T9438] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.687997][ T9438] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.755635][ T9438] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.932856][ T9438] bond1: left promiscuous mode [ 253.938380][ T9438] bond1: left allmulticast mode [ 253.973904][ T9461] veth0_vlan: entered allmulticast mode [ 254.182955][ T9466] syzkaller0: entered promiscuous mode [ 254.188674][ T9466] syzkaller0: entered allmulticast mode [ 254.998371][ T9495] netlink: 'syz.4.1229': attribute type 7 has an invalid length. [ 255.085647][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 255.792970][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.799522][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.634849][ T9516] veth0_vlan: entered allmulticast mode [ 260.664722][ T5892] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 260.879831][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 260.904573][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.034595][ T5892] usb 1-1: config 0 has no interfaces? [ 261.063554][ T5892] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 261.084563][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.119570][ T5892] usb 1-1: Product: syz [ 261.135634][ T5892] usb 1-1: Manufacturer: syz [ 261.150536][ T5892] usb 1-1: SerialNumber: syz [ 261.184041][ T5892] usb 1-1: config 0 descriptor?? [ 261.456222][ T5892] usb 1-1: USB disconnect, device number 16 [ 262.744659][ T5892] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 262.977322][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 263.112251][ T5892] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 263.126661][ T9603] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 263.224090][ T5892] usb 5-1: config 0 has no interface number 0 [ 263.250007][ T5892] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.280030][ T5892] usb 5-1: config 0 interface 85 has no altsetting 0 [ 263.295397][ T9603] bond4: entered promiscuous mode [ 263.300489][ T9603] bond4: entered allmulticast mode [ 263.310382][ T9603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.448065][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 263.503856][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.516467][ T30] audit: type=1326 audit(1743323299.406:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 263.584663][ T5892] usb 5-1: Product: syz [ 263.589044][ T5892] usb 5-1: Manufacturer: syz [ 263.600442][ T5892] usb 5-1: SerialNumber: syz [ 263.604527][ T30] audit: type=1326 audit(1743323299.406:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 263.645388][ T5892] usb 5-1: config 0 descriptor?? [ 263.710192][ T30] audit: type=1326 audit(1743323299.416:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 263.778687][ T30] audit: type=1326 audit(1743323299.416:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 263.858626][ T30] audit: type=1326 audit(1743323299.416:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 263.898666][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 263.922575][ T30] audit: type=1326 audit(1743323299.416:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 264.008737][ T30] audit: type=1326 audit(1743323299.426:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 264.076126][ T30] audit: type=1326 audit(1743323299.426:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 264.130477][ T30] audit: type=1326 audit(1743323299.426:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 264.244608][ T30] audit: type=1326 audit(1743323299.426:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 264.320669][ T5892] appletouch 5-1:0.85: Geyser mode initialized. [ 264.360013][ T5892] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input34 [ 264.573135][ T7172] usb 5-1: USB disconnect, device number 18 [ 264.596038][ T7172] appletouch 5-1:0.85: input: appletouch disconnected [ 264.661214][ T9643] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 266.164588][ T7172] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 266.347951][ T7172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.371123][ T7172] usb 3-1: config 0 has no interfaces? [ 266.444637][ T7172] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 266.504898][ T7172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.547376][ T7172] usb 3-1: config 0 descriptor?? [ 267.052002][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 267.191780][ T9686] netlink: 'syz.2.1280': attribute type 13 has an invalid length. [ 267.315582][ T9686] bridge0: port 3(batadv0) entered blocking state [ 267.322267][ T9686] bridge0: port 3(batadv0) entered forwarding state [ 267.374753][ T7172] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 267.388790][ T3605] [ 267.391292][ T3605] ============================= [ 267.396270][ T3605] WARNING: suspicious RCU usage [ 267.401129][ T3605] 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 Not tainted [ 267.408020][ T3605] ----------------------------- [ 267.412865][ T3605] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! [ 267.421686][ T3605] [ 267.421686][ T3605] other info that might help us debug this: [ 267.421686][ T3605] [ 267.432027][ T3605] [ 267.432027][ T3605] rcu_scheduler_active = 2, debug_locks = 1 [ 267.440291][ T3605] 3 locks held by kworker/u8:7/3605: [ 267.445598][ T3605] #0: ffff88805d7e1948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 267.456725][ T3605] #1: ffffc9000db0fc60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 267.469734][ T3605] #2: ffffffff8ed3b2e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 267.479487][ T3605] [ 267.479487][ T3605] stack backtrace: [ 267.485503][ T3605] CPU: 0 UID: 0 PID: 3605 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 267.485522][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.485533][ T3605] Workqueue: bond0 bond_mii_monitor [ 267.485556][ T3605] Call Trace: [ 267.485561][ T3605] [ 267.485567][ T3605] dump_stack_lvl+0x241/0x360 [ 267.485591][ T3605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.485611][ T3605] ? __pfx__printk+0x10/0x10 [ 267.485636][ T3605] lockdep_rcu_suspicious+0x175/0x200 [ 267.485654][ T3605] dev_activate+0xff/0x1240 [ 267.485669][ T3605] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 267.485686][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 267.485706][ T3605] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 267.485723][ T3605] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.485741][ T3605] ? __pfx_dev_activate+0x10/0x10 [ 267.485758][ T3605] ? rfc2863_policy+0x1ce/0x3f0 [ 267.485777][ T3605] linkwatch_do_dev+0xfb/0x170 [ 267.485796][ T3605] ethtool_op_get_link+0x15/0x60 [ 267.485811][ T3605] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 267.485826][ T3605] bond_check_dev_link+0x1fb/0x4b0 [ 267.485842][ T3605] ? __pfx_bond_check_dev_link+0x10/0x10 [ 267.485869][ T3605] bond_mii_monitor+0x49d/0x3170 [ 267.485890][ T3605] ? bond_mii_monitor+0x17f/0x3170 [ 267.485906][ T3605] ? do_raw_spin_unlock+0x13c/0x8b0 [ 267.485928][ T3605] ? __pfx_bond_mii_monitor+0x10/0x10 [ 267.485944][ T3605] ? register_lock_class+0x54/0x330 [ 267.485960][ T3605] ? __lock_acquire+0xad5/0xd80 [ 267.485975][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 267.486001][ T3605] ? process_scheduled_works+0x9cb/0x18e0 [ 267.486017][ T3605] process_scheduled_works+0xac3/0x18e0 [ 267.486045][ T3605] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.486064][ T3605] ? assign_work+0x367/0x3d0 [ 267.486081][ T3605] worker_thread+0x870/0xd50 [ 267.486104][ T3605] ? __kthread_parkme+0x1a8/0x200 [ 267.486122][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 267.486138][ T3605] kthread+0x7b7/0x940 [ 267.486157][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 267.486174][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.486191][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.486209][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.486227][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.486245][ T3605] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.486260][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 267.486277][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.486296][ T3605] ret_from_fork+0x4b/0x80 [ 267.486311][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.486329][ T3605] ret_from_fork_asm+0x1a/0x30 [ 267.486349][ T3605] [ 267.793589][ T3605] [ 267.796125][ T3605] ============================= [ 267.801032][ T3605] WARNING: suspicious RCU usage [ 267.806027][ T3605] 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 Not tainted [ 267.812803][ T3605] ----------------------------- [ 267.817691][ T3605] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 267.826504][ T3605] [ 267.826504][ T3605] other info that might help us debug this: [ 267.826504][ T3605] [ 267.836775][ T3605] [ 267.836775][ T3605] rcu_scheduler_active = 2, debug_locks = 1 [ 267.845027][ T3605] 3 locks held by kworker/u8:7/3605: [ 267.850324][ T3605] #0: ffff88805d7e1948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 267.861460][ T3605] #1: ffffc9000db0fc60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 267.874423][ T3605] #2: ffffffff8ed3b2e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 267.884186][ T3605] [ 267.884186][ T3605] stack backtrace: [ 267.890152][ T3605] CPU: 0 UID: 0 PID: 3605 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 267.890176][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.890189][ T3605] Workqueue: bond0 bond_mii_monitor [ 267.890213][ T3605] Call Trace: [ 267.890220][ T3605] [ 267.890227][ T3605] dump_stack_lvl+0x241/0x360 [ 267.890261][ T3605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.890290][ T3605] ? __pfx__printk+0x10/0x10 [ 267.890316][ T3605] ? print_lock+0x171/0x1a0 [ 267.890341][ T3605] lockdep_rcu_suspicious+0x175/0x200 [ 267.890366][ T3605] transition_one_qdisc+0x8e/0x1c0 [ 267.890391][ T3605] dev_activate+0x835/0x1240 [ 267.890413][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 267.890442][ T3605] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 267.890466][ T3605] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.890492][ T3605] ? __pfx_dev_activate+0x10/0x10 [ 267.890515][ T3605] ? rfc2863_policy+0x1ce/0x3f0 [ 267.890542][ T3605] linkwatch_do_dev+0xfb/0x170 [ 267.890569][ T3605] ethtool_op_get_link+0x15/0x60 [ 267.890590][ T3605] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 267.890611][ T3605] bond_check_dev_link+0x1fb/0x4b0 [ 267.890635][ T3605] ? __pfx_bond_check_dev_link+0x10/0x10 [ 267.890667][ T3605] bond_mii_monitor+0x49d/0x3170 [ 267.890696][ T3605] ? bond_mii_monitor+0x17f/0x3170 [ 267.890720][ T3605] ? do_raw_spin_unlock+0x13c/0x8b0 [ 267.890751][ T3605] ? __pfx_bond_mii_monitor+0x10/0x10 [ 267.890781][ T3605] ? register_lock_class+0x54/0x330 [ 267.890802][ T3605] ? __lock_acquire+0xad5/0xd80 [ 267.890821][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 267.890858][ T3605] ? process_scheduled_works+0x9cb/0x18e0 [ 267.890881][ T3605] process_scheduled_works+0xac3/0x18e0 [ 267.890923][ T3605] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.890953][ T3605] ? assign_work+0x367/0x3d0 [ 267.890979][ T3605] worker_thread+0x870/0xd50 [ 267.891013][ T3605] ? __kthread_parkme+0x1a8/0x200 [ 267.891040][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 267.891064][ T3605] kthread+0x7b7/0x940 [ 267.891093][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 267.891117][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.891142][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.891170][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.891196][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.891222][ T3605] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.891245][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 267.891270][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.891297][ T3605] ret_from_fork+0x4b/0x80 [ 267.891318][ T3605] ? __pfx_kthread+0x10/0x10 [ 267.891344][ T3605] ret_from_fork_asm+0x1a/0x30 [ 267.891374][ T3605] [ 268.154851][ T3605] [ 268.157264][ T3605] ============================= [ 268.162129][ T3605] WARNING: suspicious RCU usage [ 268.167192][ T3605] 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 Not tainted [ 268.173980][ T3605] ----------------------------- [ 268.179186][ T3605] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 268.188379][ T3605] [ 268.188379][ T3605] other info that might help us debug this: [ 268.188379][ T3605] [ 268.198733][ T3605] [ 268.198733][ T3605] rcu_scheduler_active = 2, debug_locks = 1 [ 268.198771][ T7172] usb 1-1: Using ep0 maxpacket: 32 [ 268.206891][ T3605] 3 locks held by kworker/u8:7/3605: [ 268.213654][ T7172] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.217362][ T3605] #0: [ 268.228134][ T7172] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.230905][ T3605] ffff88805d7e1948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 268.251492][ T3605] #1: ffffc9000db0fc60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 268.264790][ T3605] #2: ffffffff8ed3b2e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 268.273062][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.274561][ T3605] [ 268.274561][ T3605] stack backtrace: [ 268.274579][ T3605] CPU: 1 UID: 0 PID: 3605 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 268.274611][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.274625][ T3605] Workqueue: bond0 bond_mii_monitor [ 268.274653][ T3605] Call Trace: [ 268.274663][ T3605] [ 268.274672][ T3605] dump_stack_lvl+0x241/0x360 [ 268.274711][ T3605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.274742][ T3605] ? __pfx__printk+0x10/0x10 [ 268.274778][ T3605] lockdep_rcu_suspicious+0x175/0x200 [ 268.274807][ T3605] dev_activate+0x922/0x1240 [ 268.274831][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 268.274862][ T3605] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 268.274889][ T3605] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.274916][ T3605] ? __pfx_dev_activate+0x10/0x10 [ 268.274941][ T3605] ? rfc2863_policy+0x1ce/0x3f0 [ 268.274970][ T3605] linkwatch_do_dev+0xfb/0x170 [ 268.274998][ T3605] ethtool_op_get_link+0x15/0x60 [ 268.275022][ T3605] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 268.275044][ T3605] bond_check_dev_link+0x1fb/0x4b0 [ 268.275069][ T3605] ? __pfx_bond_check_dev_link+0x10/0x10 [ 268.275101][ T3605] bond_mii_monitor+0x49d/0x3170 [ 268.275132][ T3605] ? bond_mii_monitor+0x17f/0x3170 [ 268.275157][ T3605] ? do_raw_spin_unlock+0x13c/0x8b0 [ 268.275191][ T3605] ? __pfx_bond_mii_monitor+0x10/0x10 [ 268.275216][ T3605] ? register_lock_class+0x54/0x330 [ 268.275240][ T3605] ? __lock_acquire+0xad5/0xd80 [ 268.275263][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 268.275302][ T3605] ? process_scheduled_works+0x9cb/0x18e0 [ 268.275343][ T3605] process_scheduled_works+0xac3/0x18e0 [ 268.275389][ T3605] ? __pfx_process_scheduled_works+0x10/0x10 [ 268.275430][ T3605] ? assign_work+0x367/0x3d0 [ 268.275457][ T3605] worker_thread+0x870/0xd50 [ 268.275492][ T3605] ? __kthread_parkme+0x1a8/0x200 [ 268.275520][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 268.275544][ T3605] kthread+0x7b7/0x940 [ 268.275574][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 268.275607][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.275634][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.275661][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.275689][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.275717][ T3605] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.275740][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 268.275767][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.275795][ T3605] ret_from_fork+0x4b/0x80 [ 268.275817][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.275845][ T3605] ret_from_fork_asm+0x1a/0x30 [ 268.275877][ T3605] [ 268.451329][ T3605] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 268.562770][ T7172] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 268.572839][ T3605] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3605, name: kworker/u8:7 [ 268.575957][ T7172] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 268.582792][ T3605] preempt_count: 0, expected: 0 [ 268.595616][ T3605] RCU nest depth: 1, expected: 0 [ 268.600701][ T3605] 3 locks held by kworker/u8:7/3605: [ 268.606276][ T3605] #0: ffff88805d7e1948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 268.616881][ T7172] usb 1-1: Product: syz [ 268.617695][ T3605] #1: ffffc9000db0fc60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 268.629095][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.634949][ T3605] #2: [ 268.641359][ T7172] usb 1-1: Manufacturer: syz [ 268.641396][ T3605] ffffffff8ed3b2e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 268.664756][ T3605] CPU: 1 UID: 0 PID: 3605 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 268.664784][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.664800][ T3605] Workqueue: bond0 bond_mii_monitor [ 268.664828][ T3605] Call Trace: [ 268.664835][ T3605] [ 268.664844][ T3605] dump_stack_lvl+0x241/0x360 [ 268.664879][ T3605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.664919][ T3605] __might_resched+0x558/0x6c0 [ 268.664944][ T3605] ? preempt_schedule_notrace+0xf9/0x140 [ 268.664971][ T3605] ? __pfx___might_resched+0x10/0x10 [ 268.664995][ T3605] ? __pfx___schedule+0x10/0x10 [ 268.665028][ T3605] down_read+0x90/0xa50 [ 268.665057][ T3605] ? dump_stack_lvl+0x275/0x360 [ 268.665085][ T3605] ? preempt_schedule_notrace+0x103/0x140 [ 268.665110][ T3605] ? __pfx_down_read+0x10/0x10 [ 268.665138][ T3605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.665166][ T3605] ? __pfx__printk+0x10/0x10 [ 268.665193][ T3605] ? dev_get_flags+0x147/0x1d0 [ 268.665220][ T3605] wext_netdev_notifier_call+0x1f/0x120 [ 268.665245][ T3605] notifier_call_chain+0x1a5/0x3f0 [ 268.665274][ T3605] netdev_state_change+0x123/0x1a0 [ 268.665293][ T3605] ? __pfx_netdev_state_change+0x10/0x10 [ 268.665318][ T3605] ? rfc2863_policy+0x1ce/0x3f0 [ 268.665344][ T3605] linkwatch_do_dev+0x112/0x170 [ 268.665370][ T3605] ethtool_op_get_link+0x15/0x60 [ 268.665391][ T3605] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 268.665417][ T3605] bond_check_dev_link+0x1fb/0x4b0 [ 268.665440][ T3605] ? __pfx_bond_check_dev_link+0x10/0x10 [ 268.665480][ T3605] bond_mii_monitor+0x49d/0x3170 [ 268.665510][ T3605] ? bond_mii_monitor+0x17f/0x3170 [ 268.665534][ T3605] ? do_raw_spin_unlock+0x13c/0x8b0 [ 268.665566][ T3605] ? __pfx_bond_mii_monitor+0x10/0x10 [ 268.665590][ T3605] ? register_lock_class+0x54/0x330 [ 268.665613][ T3605] ? __lock_acquire+0xad5/0xd80 [ 268.665634][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 268.665674][ T3605] ? process_scheduled_works+0x9cb/0x18e0 [ 268.665696][ T3605] process_scheduled_works+0xac3/0x18e0 [ 268.665740][ T3605] ? __pfx_process_scheduled_works+0x10/0x10 [ 268.665769][ T3605] ? assign_work+0x367/0x3d0 [ 268.665793][ T3605] worker_thread+0x870/0xd50 [ 268.665827][ T3605] ? __kthread_parkme+0x1a8/0x200 [ 268.665854][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 268.665878][ T3605] kthread+0x7b7/0x940 [ 268.665906][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 268.665930][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.665957][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.665984][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.666010][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.666037][ T3605] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.666060][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 268.666086][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.666114][ T3605] ret_from_fork+0x4b/0x80 [ 268.666147][ T3605] ? __pfx_kthread+0x10/0x10 [ 268.666173][ T3605] ret_from_fork_asm+0x1a/0x30 [ 268.666202][ T3605] [ 268.666335][ T3605] [ 268.669779][ T7172] hub 1-1:4.0: USB hub found [ 268.678153][ T3605] ============================= [ 268.678165][ T3605] [ BUG: Invalid wait context ] [ 268.678176][ T3605] 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 Tainted: G W [ 268.678189][ T3605] ----------------------------- [ 268.678196][ T3605] kworker/u8:7/3605 is trying to lock: [ 268.678208][ T3605] ffffffff900e6350 [ 268.895867][ T7172] hub 1-1:4.0: 2 ports detected [ 268.897866][ T3605] (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 268.999813][ T3605] other info that might help us debug this: [ 269.005750][ T3605] context-{5:5} [ 269.009222][ T3605] 3 locks held by kworker/u8:7/3605: [ 269.014507][ T3605] #0: ffff88805d7e1948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 269.025613][ T3605] #1: ffffc9000db0fc60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 269.038553][ T3605] #2: ffffffff8ed3b2e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 269.048252][ T3605] stack backtrace: [ 269.051975][ T3605] CPU: 1 UID: 0 PID: 3605 Comm: kworker/u8:7 Tainted: G W 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 269.052004][ T3605] Tainted: [W]=WARN [ 269.052011][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.052025][ T3605] Workqueue: bond0 bond_mii_monitor [ 269.052045][ T3605] Call Trace: [ 269.052052][ T3605] [ 269.052058][ T3605] dump_stack_lvl+0x241/0x360 [ 269.052086][ T3605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.052115][ T3605] ? __pfx__printk+0x10/0x10 [ 269.052144][ T3605] __lock_acquire+0xc30/0xd80 [ 269.052168][ T3605] lock_acquire+0x116/0x2f0 [ 269.052184][ T3605] ? wext_netdev_notifier_call+0x1f/0x120 [ 269.052211][ T3605] down_read+0xb3/0xa50 [ 269.052233][ T3605] ? wext_netdev_notifier_call+0x1f/0x120 [ 269.052255][ T3605] ? dump_stack_lvl+0x275/0x360 [ 269.052283][ T3605] ? preempt_schedule_notrace+0x103/0x140 [ 269.052307][ T3605] ? __pfx_down_read+0x10/0x10 [ 269.052335][ T3605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.052354][ T3605] ? __pfx__printk+0x10/0x10 [ 269.052373][ T3605] ? dev_get_flags+0x147/0x1d0 [ 269.052395][ T3605] wext_netdev_notifier_call+0x1f/0x120 [ 269.052425][ T3605] notifier_call_chain+0x1a5/0x3f0 [ 269.052450][ T3605] netdev_state_change+0x123/0x1a0 [ 269.052469][ T3605] ? __pfx_netdev_state_change+0x10/0x10 [ 269.052490][ T3605] ? rfc2863_policy+0x1ce/0x3f0 [ 269.052508][ T3605] linkwatch_do_dev+0x112/0x170 [ 269.052525][ T3605] ethtool_op_get_link+0x15/0x60 [ 269.052545][ T3605] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 269.052567][ T3605] bond_check_dev_link+0x1fb/0x4b0 [ 269.052588][ T3605] ? __pfx_bond_check_dev_link+0x10/0x10 [ 269.052612][ T3605] bond_mii_monitor+0x49d/0x3170 [ 269.052637][ T3605] ? bond_mii_monitor+0x17f/0x3170 [ 269.052653][ T3605] ? do_raw_spin_unlock+0x13c/0x8b0 [ 269.052674][ T3605] ? __pfx_bond_mii_monitor+0x10/0x10 [ 269.052694][ T3605] ? register_lock_class+0x54/0x330 [ 269.052715][ T3605] ? __lock_acquire+0xad5/0xd80 [ 269.052734][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 269.052764][ T3605] ? process_scheduled_works+0x9cb/0x18e0 [ 269.052786][ T3605] process_scheduled_works+0xac3/0x18e0 [ 269.052808][ T3605] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.052825][ T3605] ? assign_work+0x367/0x3d0 [ 269.052844][ T3605] worker_thread+0x870/0xd50 [ 269.052873][ T3605] ? __kthread_parkme+0x1a8/0x200 [ 269.052897][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 269.052918][ T3605] kthread+0x7b7/0x940 [ 269.052940][ T3605] ? __pfx_worker_thread+0x10/0x10 [ 269.052956][ T3605] ? __pfx_kthread+0x10/0x10 [ 269.052974][ T3605] ? __pfx_kthread+0x10/0x10 [ 269.052998][ T3605] ? __pfx_kthread+0x10/0x10 [ 269.053024][ T3605] ? __pfx_kthread+0x10/0x10 [ 269.053048][ T3605] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.053068][ T3605] ? lockdep_hardirqs_on+0x9d/0x150 [ 269.053090][ T3605] ? __pfx_kthread+0x10/0x10 [ 269.053108][ T3605] ret_from_fork+0x4b/0x80 [ 269.053122][ T3605] ? __pfx_kthread+0x10/0x10 [ 269.053145][ T3605] ret_from_fork_asm+0x1a/0x30 [ 269.053169][ T3605] [ 269.346870][ T9686] batman_adv: batadv0: Interface activated: dummy0 [ 269.357453][ T9686] batadv0: mtu less than device minimum [ 269.363890][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.375090][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.386021][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.397038][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.408013][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.419062][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.429944][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.440939][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.451883][ T9686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 269.470309][ T9686] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 269.481023][ T9686] caif:caif_disconnect_client(): nothing to disconnect [ 269.488833][ T9686] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 269.499684][ T9686] chnl_net:chnl_net_open(): state disconnected [ 269.514834][ T36] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 269.523791][ T36] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 269.525980][ T7171] usb 3-1: USB disconnect, device number 20 [ 270.387193][ T7172] hub 1-1:4.0: activate --> -90 [ 270.788866][ T5903] usb 1-1: USB disconnect, device number 17 [ 270.788898][ T7172] usb 1-1-port2: config error [ 275.054611][ C1] net_ratelimit: 18 callbacks suppressed [ 275.054629][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00