last executing test programs: 9.996172818s ago: executing program 4 (id=1286): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.24821324s ago: executing program 4 (id=1302): syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@generic={0x88e5}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="260f01cfbaf80c66b835b9ca8166efbafc0cec66640f32baf80c66b83065cd8966efbafc0c66b88f9b000066efbaf80c66b8a8a86e8866efbafc0c66b80100000066efbaf80c66b8983d448366efbafc0cb000eeea012b5d00660ff96700c4e2bddfdd0f01c2", 0x66}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.117825235s ago: executing program 3 (id=1311): openat$ppp(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001"], 0xec}}, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.114352954s ago: executing program 2 (id=1321): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) syz_fuse_handle_req(r0, &(0x7f00000006c0)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000200)="56934cb32225dcbf0e649cd9075be1d645a3fc0640fa2fef", 0x0, 0x18) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 3.766031883s ago: executing program 2 (id=1312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x7f, 0x4, 0x19, 0x0, 0x9, 0x0, 0x8b, 0xc, 0x4, 0xd, 0x3, 0x34, 0x0, 0x100, 0x19a, 0x4, 0x67, 0x59, 0x4c, '\x00', 0x5, 0x1341}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.5233352s ago: executing program 3 (id=1313): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x11c000, 0x800}, 0x1c) 3.368107251s ago: executing program 2 (id=1314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x9101, 0x0) 3.360980815s ago: executing program 0 (id=1315): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000740)={{0x0, 0x5, 0x8, 0x2, 'syz0\x00', 0xa72}, 0x1, [0x7, 0x2d, 0x6b, 0xff, 0x1436, 0x3, 0x6, 0x38, 0x20000, 0x2, 0x8, 0x3, 0x10001, 0xc, 0x83b1, 0x9, 0x6, 0x3, 0x7, 0x1c72, 0x7, 0xd62, 0x4, 0x3, 0x8, 0x2, 0x6, 0x7, 0x9, 0x6, 0xb3, 0xfffffff9, 0xffff0001, 0x4, 0x8, 0x4, 0x1, 0x5, 0x3, 0x3, 0x2, 0x6, 0xb7, 0xb, 0x358c, 0xb, 0xfff, 0x6e7, 0x0, 0x80, 0x10000, 0x9, 0x3, 0x9, 0x8, 0x72, 0x6f14, 0x6, 0x80000001, 0x44, 0xbab, 0x9, 0xf, 0x65c6, 0x0, 0x8, 0x7, 0x3, 0x2, 0x20000000, 0x3, 0x4, 0x4, 0x5, 0x0, 0x5, 0xd83, 0x0, 0x1, 0x401, 0x34f, 0x7ff, 0x200, 0x63, 0x9, 0x181d, 0x7, 0x4b80, 0x6, 0x0, 0xfffffff8, 0xfffffffe, 0x50000, 0x6, 0x3, 0x7, 0x3, 0x1ff, 0xfffffff8, 0xd, 0x3, 0x2, 0x5159, 0x0, 0x5, 0x145a, 0x6, 0xf, 0x6, 0xf, 0x9, 0x7, 0x8, 0x6, 0x41, 0x81, 0x41666f03, 0xffffffff, 0x98e9, 0x10d7, 0x9, 0x2, 0xff, 0x6, 0x100, 0xffffffff, 0x1, 0x3]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @local=@item_4={0x3, 0x2, 0x2, "2cb5b914"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}, @global]}}, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x100, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x1ff, 0x0, 0xf, 0x0, 0x4, 0x1}, {0x1, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x0, @in=@empty, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) close(0x4) 3.222246734s ago: executing program 3 (id=1316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000005280)) 3.030958708s ago: executing program 4 (id=1317): r0 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) recvfrom$unix(r0, &(0x7f0000000200)=""/163, 0xa3, 0x2102, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="240000002d00010000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="04000080"], 0x24}], 0x1}, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x300, 0x2, 0x0, 0x0) 2.611797318s ago: executing program 0 (id=1318): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x600000a0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 2.611207641s ago: executing program 1 (id=1319): socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000580), 0x20280, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 2.581164366s ago: executing program 4 (id=1320): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.318021793s ago: executing program 1 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff0000060000000008000100ac1414"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000002000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.204017476s ago: executing program 4 (id=1323): ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 2.173891237s ago: executing program 1 (id=1324): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(0x3) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$can_j1939(r0, &(0x7f00000006c0)={0x1d, r2, 0x0, {0x2, 0xf0, 0x3}, 0x2}, 0x18) 1.640295185s ago: executing program 0 (id=1325): openat$ppp(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001"], 0xec}}, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.639993294s ago: executing program 2 (id=1326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) socket$inet(0x2, 0x2, 0x1) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff251202a6475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.639777477s ago: executing program 3 (id=1327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.475995491s ago: executing program 3 (id=1328): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="deccf36e83c5950f01eeddec66b9800000c00f326635008000000f3066b9c308000066b80e00000066ba000000000f3064660fdf48370f01b4003066b95f0b00000f32", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.440854423s ago: executing program 2 (id=1329): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3a}, @in6=@mcast1, 0xfffe, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in6=@local, 0x0, 0x5, 0x0, 0xb7}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.40186974s ago: executing program 4 (id=1330): syz_open_dev$sg(0x0, 0x10000000000000b, 0x1490c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 1.361423172s ago: executing program 0 (id=1331): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xffffffffffff887b, 0x6, 0x8, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffbec}, 0x0, &(0x7f0000000680)={0xff, 0x10000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20000000000}, 0x0, 0x0) 1.250687009s ago: executing program 1 (id=1332): socket(0x200000000000011, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE2(r4, &(0x7f0000000980)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xfa, 0x2, 0x7, 0x1ff, 0xfff, 0x2, "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"}}, 0x212) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f00000081c0)={0x2020}, 0x2020) 462.871069ms ago: executing program 2 (id=1333): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000005000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 459.732772ms ago: executing program 3 (id=1334): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 391.144758ms ago: executing program 0 (id=1335): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 330.498826ms ago: executing program 1 (id=1336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x51, 0x0, 0xcb, 0x0, 0xfffffffd, 0xd1, 0x4, 0x4, 0x8, 0xa, 0x9, 0x8, 0x0, 0x2, 0x992b, 0x10, 0x40, 0x40, 0x1, '\x00', 0xc, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 125.443157ms ago: executing program 0 (id=1337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) 0s ago: executing program 1 (id=1338): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.285225][ T883] usb 5-1: Product: syz [ 83.289454][ T883] usb 5-1: Manufacturer: syz [ 83.308214][ T883] usb 5-1: SerialNumber: syz [ 83.335565][ T5890] usb 1-1: USB disconnect, device number 2 [ 83.545745][ T883] option 5-1:89.228: GSM modem (1-port) converter detected [ 83.585433][ T883] usb 5-1: USB disconnect, device number 2 [ 83.600546][ T883] option 5-1:89.228: device disconnected [ 83.943089][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.954436][ T5889] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 83.974804][ T5889] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 83.986738][ T5889] asix 3-1:0.0: probe with driver asix failed with error -71 [ 84.001271][ T5889] usb 3-1: USB disconnect, device number 3 [ 84.539439][ T5900] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 84.573204][ T5900] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 84.619474][ T5900] asix 4-1:0.0: probe with driver asix failed with error -71 [ 84.644675][ T5900] usb 4-1: USB disconnect, device number 2 [ 85.335285][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.638392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 85.703961][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.943916][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 85.964742][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.997646][ T5900] usb 2-1: config 0 has no interfaces? [ 86.011675][ T5900] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 86.021121][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.050263][ T5900] usb 2-1: config 0 descriptor?? [ 86.303910][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.312770][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.368238][ T5900] usb 2-1: USB disconnect, device number 2 [ 86.645870][ T3083] cfg80211: failed to load regulatory.db [ 86.743919][ T5889] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.777935][ T6088] loop2: detected capacity change from 0 to 7 [ 86.799417][ T6088] Dev loop2: unable to read RDB block 7 [ 86.812670][ T6088] loop2: unable to read partition table [ 86.829534][ T6088] loop2: partition table beyond EOD, truncated [ 86.836304][ T6088] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.846151][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.906426][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.918006][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 86.931587][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.955901][ T5889] usb 3-1: config 0 descriptor?? [ 86.993137][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 87.004143][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 87.015178][ T5844] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 87.026743][ T5844] usb 5-1: config 0 has no interface number 0 [ 87.040637][ T5844] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.052009][ T5844] usb 5-1: config 0 interface 85 has no altsetting 0 [ 87.061502][ T5844] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 87.071732][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.080313][ T5844] usb 5-1: Product: syz [ 87.084795][ T5844] usb 5-1: Manufacturer: syz [ 87.089438][ T5844] usb 5-1: SerialNumber: syz [ 87.098148][ T5844] usb 5-1: config 0 descriptor?? [ 87.126742][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 87.417026][ T6105] mmap: syz.1.79 (6105) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.431761][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 87.441745][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 87.450111][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 87.461779][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 87.478990][ T6110] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.479353][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 87.499901][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 87.709840][ T5889] pwc: recv_control_msg error -71 req 02 val 2100 [ 87.727160][ T5889] pwc: recv_control_msg error -71 req 04 val 1500 [ 87.738461][ T5889] pwc: recv_control_msg error -71 req 02 val 2500 [ 87.785575][ T5844] appletouch 5-1:0.85: Geyser mode initialized. [ 87.793670][ T5889] pwc: recv_control_msg error -71 req 02 val 2400 [ 87.804939][ T5844] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input5 [ 87.819151][ T5889] pwc: recv_control_msg error -71 req 02 val 2600 [ 87.827938][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 87.860952][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 87.870052][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 87.873936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 87.879114][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 87.885344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.924913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.972516][ T5889] pwc: Registered as video103. [ 87.997173][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 88.126366][ T5900] usb 5-1: USB disconnect, device number 3 [ 88.126500][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 88.473540][ T5900] appletouch 5-1:0.85: input: appletouch disconnected [ 88.489042][ T5889] usb 3-1: USB disconnect, device number 4 [ 88.496111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.598541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.656468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.245429][ T5900] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.520194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.727098][ T5900] usb 1-1: config 0 has no interfaces? [ 89.735555][ T5900] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=cc.10 [ 89.749303][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.763111][ T5900] usb 1-1: Product: syz [ 89.767904][ T5900] usb 1-1: Manufacturer: syz [ 89.772939][ T5900] usb 1-1: SerialNumber: syz [ 89.862726][ T5900] usb 1-1: config 0 descriptor?? [ 90.791639][ T6166] process 'syz.3.95' launched './file1' with NULL argv: empty string added [ 90.824246][ T5889] usb 1-1: USB disconnect, device number 3 [ 91.177993][ T6175] syzkaller0: entered promiscuous mode [ 91.184171][ T6175] syzkaller0: entered allmulticast mode [ 91.406844][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 91.522989][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 93.765274][ T6169] Set syz1 is full, maxelem 65536 reached [ 94.034756][ T6204] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.471726][ T6211] fuse: root generation should be zero [ 95.168352][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.176214][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.396739][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.407848][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.721253][ T6216] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.740769][ T6216] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.764073][ T6216] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.790037][ T6216] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.865296][ T3083] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.943340][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.044428][ T3083] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 96.060980][ T3083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.094730][ T3083] usb 2-1: config 0 descriptor?? [ 96.984091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 97.715282][ T30] audit: type=1326 audit(1743273171.969:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.135" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 97.886914][ T3083] usb 2-1: Cannot set autoneg [ 97.892765][ T3083] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 97.952566][ T3083] usb 2-1: USB disconnect, device number 3 [ 101.025861][ T30] audit: type=1326 audit(1743273175.279:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 101.049699][ T30] audit: type=1326 audit(1743273175.279:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 101.085277][ T6359] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.156'. [ 101.110072][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 101.127416][ T30] audit: type=1326 audit(1743273175.279:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 101.191919][ T30] audit: type=1326 audit(1743273175.279:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 101.758135][ T6370] sg_write: data in/out 214/14 bytes for SCSI command 0x0-- guessing data in; [ 101.758135][ T6370] program syz.0.162 not setting count and/or reply_len properly [ 102.203946][ T883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.375194][ T883] usb 1-1: Using ep0 maxpacket: 32 [ 102.389447][ T883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.409816][ T883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.420438][ T883] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 102.430821][ T883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.444336][ T883] usb 1-1: config 0 descriptor?? [ 102.859998][ T883] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 103.087549][ T883] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 103.423997][ T883] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 103.613417][ T883] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 103.626179][ T6402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.647304][ T883] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 103.705026][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.865441][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.888498][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.916754][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.932126][ T3083] usb 1-1: USB disconnect, device number 4 [ 103.951387][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.964116][ T5900] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.973562][ T9] usb 4-1: config 0 descriptor?? [ 104.125527][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.137989][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.148795][ T5900] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.158212][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.167058][ T5900] usb 3-1: SerialNumber: syz [ 104.393163][ T5900] usb 3-1: 0:2 : does not exist [ 104.411581][ T5900] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 104.430487][ T5900] usb 3-1: 5:0: failed to get current value for ch 14 (-22) [ 104.462607][ T5900] usb 3-1: USB disconnect, device number 5 [ 104.598094][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 104.655084][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.028635][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input7 [ 105.159799][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input8 [ 105.254359][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input9 [ 105.316427][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input10 [ 105.396292][ T9] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 105.684223][ T9] usb 4-1: USB disconnect, device number 3 [ 106.327748][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 106.497540][ T6466] netlink: 'syz.4.190': attribute type 10 has an invalid length. [ 106.516564][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.561625][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.568876][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.609511][ T6466] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.426747][ T5844] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.605592][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 107.617165][ T5844] usb 3-1: config 0 interface 0 altsetting 234 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.774711][ T5844] usb 3-1: config 0 interface 0 altsetting 234 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.785304][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.792936][ T5844] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 107.804607][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.842430][ T5844] usb 3-1: config 0 descriptor?? [ 108.292498][ T5844] kye 0003:0458:501A.0003: control desc unexpectedly large [ 108.302198][ T6510] loop6: detected capacity change from 0 to 524287999 [ 108.316456][ T5844] input: HID 0458:501a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:501A.0003/input/input11 [ 108.337558][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.353240][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.366681][ T36] loop: Write error at byte offset 1, length 4096. [ 108.378491][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 108.388222][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 108.402348][ T5844] kye 0003:0458:501A.0003: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 108.444998][ T6515] Invalid logical block size (-9) [ 108.776299][ T5890] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.954500][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 108.971710][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 108.984194][ T5890] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.001738][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 109.023906][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.031979][ T5890] usb 4-1: Product: syz [ 109.038746][ T5890] usb 4-1: Manufacturer: syz [ 109.043402][ T5890] usb 4-1: SerialNumber: syz [ 109.275555][ T5890] usbhid 4-1:1.0: can't add hid device: -71 [ 109.281689][ T5890] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 109.316257][ T5890] usb 4-1: USB disconnect, device number 4 [ 109.476278][ C1] kye 0003:0458:501A.0003: usb_submit_urb(ctrl) failed: -1 [ 109.494893][ T5889] usb 3-1: USB disconnect, device number 6 [ 109.633889][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.783943][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 109.790526][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.799459][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 109.808726][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.818474][ T9] usb 1-1: config 0 descriptor?? [ 110.247846][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0004/input/input12 [ 110.314101][ T5890] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.393129][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0004/input/input13 [ 110.460746][ T9] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 110.490268][ T9] usb 1-1: USB disconnect, device number 5 [ 110.519118][ T5890] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.560586][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 110.581583][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.619249][ T5890] usb 3-1: Product: syz [ 110.629336][ T5890] usb 3-1: Manufacturer: syz [ 110.635016][ T5890] usb 3-1: SerialNumber: syz [ 110.888396][ T5890] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.038433][ T6562] bridge0: port 3(syz_tun) entered blocking state [ 111.046562][ T6562] bridge0: port 3(syz_tun) entered disabled state [ 111.055910][ T6562] syz_tun: entered allmulticast mode [ 111.076143][ T6562] syz_tun: entered promiscuous mode [ 111.084921][ T6562] bridge0: port 3(syz_tun) entered blocking state [ 111.092052][ T6562] bridge0: port 3(syz_tun) entered forwarding state [ 111.171242][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 111.357060][ C0] usblp0: nonzero write bulk status received: -71 [ 111.385621][ C1] usblp0: nonzero write bulk status received: -71 [ 111.392284][ T5844] usb 3-1: USB disconnect, device number 7 [ 111.559679][ T6546] usblp0: removed [ 112.812654][ T6611] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1634036803 (104578355392 ns) > initial count (53901527040 ns). Using initial count to start timer. [ 114.432891][ T30] audit: type=1326 audit(1743273188.679:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.493966][ T30] audit: type=1326 audit(1743273188.679:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.522291][ T30] audit: type=1326 audit(1743273188.689:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.600629][ T30] audit: type=1326 audit(1743273188.689:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.623426][ T5891] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.663560][ T30] audit: type=1326 audit(1743273188.689:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.677752][ T5900] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.744001][ T30] audit: type=1326 audit(1743273188.689:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.817445][ T5891] usb 3-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.833925][ T30] audit: type=1326 audit(1743273188.689:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.863282][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0 [ 114.871203][ T5900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.871480][ T30] audit: type=1326 audit(1743273188.689:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.903878][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.913741][ T6659] syzkaller0: entered promiscuous mode [ 114.920199][ T6659] syzkaller0: entered allmulticast mode [ 114.928777][ T30] audit: type=1326 audit(1743273188.689:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 114.950604][ T5900] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.950636][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.950658][ T5900] usb 1-1: SerialNumber: syz [ 114.972808][ T5891] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.40 [ 114.992369][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.001143][ T5891] usb 3-1: Product: á Œ [ 115.013869][ T5891] usb 3-1: Manufacturer: 㘠[ 115.019464][ T5891] usb 3-1: SerialNumber: Є [ 115.029217][ T30] audit: type=1326 audit(1743273188.689:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 115.234091][ T5900] usb 1-1: 0:2 : does not exist [ 115.270104][ T5900] usb 1-1: USB disconnect, device number 6 [ 115.316770][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.350304][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.488509][ T6465] udevd[6465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.535861][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.696553][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 115.708890][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.720287][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.736330][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.751758][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.775940][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.790548][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.065345][ T5890] usb 4-1: GET_CAPABILITIES returned 0 [ 116.070893][ T5890] usbtmc 4-1:16.0: can't read capabilities [ 116.084266][ T5844] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.243975][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 116.265732][ T5844] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 116.279004][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.287346][ T5844] usb 1-1: Product: syz [ 116.291787][ T5844] usb 1-1: Manufacturer: syz [ 116.300231][ T5844] usb 1-1: SerialNumber: syz [ 116.307938][ T5844] usb 1-1: config 0 descriptor?? [ 116.326391][ T5844] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 116.344731][ T5890] usb 4-1: USB disconnect, device number 5 [ 116.753682][ T5891] usbhid 3-1:1.0: can't add hid device: -71 [ 116.761211][ T5891] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 116.787688][ T5891] usb 3-1: USB disconnect, device number 8 [ 117.783115][ T5844] gspca_topro: Sensor cx0342 [ 117.993608][ T5900] usb 1-1: USB disconnect, device number 7 [ 118.197202][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 118.243033][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 119.689228][ T6744] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.285'. [ 119.708165][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'. [ 120.713937][ T883] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.874005][ T883] usb 1-1: Using ep0 maxpacket: 8 [ 120.895274][ T883] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.903598][ T883] usb 1-1: config 179 has no interface number 0 [ 120.913903][ T883] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.933867][ T883] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.954013][ T883] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.966325][ T883] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 120.978137][ T883] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.991869][ T883] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 121.001552][ T883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.015956][ T6754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.339277][ T883] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 121.600424][ T883] usb 1-1: USB disconnect, device number 8 [ 121.606502][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 121.606551][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 121.648626][ T883] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 122.647660][ T5900] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.823276][ T5900] usb 4-1: config 0 has no interfaces? [ 122.913314][ T5900] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.953327][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.993163][ T5900] usb 4-1: Product: syz [ 123.024175][ T5900] usb 4-1: Manufacturer: syz [ 123.057049][ T5900] usb 4-1: SerialNumber: syz [ 123.065146][ T6797] input: syz0 as /devices/virtual/input/input15 [ 123.098931][ T5900] usb 4-1: config 0 descriptor?? [ 123.566007][ T6806] input: syz0 as /devices/virtual/input/input16 [ 123.884072][ T883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.036320][ T883] usb 2-1: Using ep0 maxpacket: 8 [ 124.043126][ T883] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.055604][ T883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.106890][ T883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.135341][ T883] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.177444][ T883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.209232][ T883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.487596][ T883] usb 2-1: GET_CAPABILITIES returned 0 [ 124.519814][ T883] usbtmc 2-1:16.0: can't read capabilities [ 124.714176][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.765983][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.775139][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.784253][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.793358][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.802444][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.811511][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.020853][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.030025][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.039415][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.048537][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.057747][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.066878][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.076063][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.144397][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.153517][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.162626][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.234260][ T883] usb 4-1: USB disconnect, device number 6 [ 125.547853][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 125.558962][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 125.852540][ T5844] usb 2-1: USB disconnect, device number 4 [ 126.233982][ T5844] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.394368][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 126.401146][ T5844] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.412055][ T5844] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 126.458240][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.515188][ T5844] usb 2-1: config 0 descriptor?? [ 126.960810][ T5844] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0005/input/input17 [ 127.047293][ T5844] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0005/input/input18 [ 127.165911][ T5844] kye 0003:0458:5013.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 127.200386][ T5844] usb 2-1: USB disconnect, device number 5 [ 127.535353][ T5891] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.717697][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.794102][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.823883][ T5891] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.853907][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.863162][ T5891] usb 1-1: SerialNumber: syz [ 127.961489][ T1898] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.086879][ T5891] usb 1-1: 0:2 : does not exist [ 128.117854][ T5891] usb 1-1: USB disconnect, device number 9 [ 128.314870][ T6465] udevd[6465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.777428][ T6903] netlink: 156 bytes leftover after parsing attributes in process `syz.0.344'. [ 128.816205][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 129.917531][ T6924] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 129.950659][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.958040][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.977982][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.978086][ T6924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.993220][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.000366][ T6924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.015846][ T6924] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 130.564830][ T883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.757795][ T883] usb 2-1: Using ep0 maxpacket: 32 [ 130.802492][ T883] usb 2-1: config 89 has an invalid interface number: 228 but max is 1 [ 130.826527][ T883] usb 2-1: config 89 has an invalid interface number: 251 but max is 1 [ 130.847017][ T883] usb 2-1: config 89 has no interface number 0 [ 130.853375][ T883] usb 2-1: config 89 has no interface number 1 [ 130.860087][ T883] usb 2-1: config 89 interface 228 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.876111][ T883] usb 2-1: config 89 interface 251 altsetting 19 has an invalid endpoint descriptor of length 2, skipping [ 130.887957][ T883] usb 2-1: config 89 interface 251 altsetting 19 endpoint 0xF has invalid wMaxPacketSize 0 [ 130.901838][ T883] usb 2-1: config 89 interface 251 altsetting 19 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 130.922731][ T883] usb 2-1: config 89 interface 251 has no altsetting 0 [ 130.932708][ T883] usb 2-1: New USB device found, idVendor=07d1, idProduct=3e01, bcdDevice=2e.9e [ 130.942276][ T883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.960868][ T883] usb 2-1: Product: syz [ 130.964111][ T5844] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.987222][ T883] usb 2-1: Manufacturer: syz [ 131.003438][ T883] usb 2-1: SerialNumber: syz [ 131.034125][ T5900] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.135505][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 131.185883][ T5844] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.200854][ T5844] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.227569][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 131.240273][ T5844] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.250628][ T883] option 2-1:89.228: GSM modem (1-port) converter detected [ 131.257611][ T5900] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 131.270025][ T5900] usb 5-1: config 179 has no interface number 0 [ 131.276931][ T5844] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.298018][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 131.304602][ T883] usb 2-1: USB disconnect, device number 6 [ 131.317500][ T5844] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.328906][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 131.341348][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.350543][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.375222][ T883] option 2-1:89.228: device disconnected [ 131.379251][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 131.398050][ T5900] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.441355][ T5900] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 131.472363][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.498821][ T6941] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 131.583249][ T5844] usb 3-1: GET_CAPABILITIES returned 0 [ 131.592353][ T5844] usbtmc 3-1:16.0: can't read capabilities [ 131.925556][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.934702][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.943813][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.952934][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.962036][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.971125][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.047371][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.056521][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.065613][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.074669][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.104668][ T5844] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input19 [ 132.125546][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.134771][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.143886][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.275142][ T24] usb 5-1: USB disconnect, device number 4 [ 132.275215][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 132.275256][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 132.286982][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.306895][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.316008][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.342927][ T24] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 132.689988][ T6962] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 132.702436][ T6962] bridge0: port 3(syz_tun) entered disabled state [ 132.709160][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.717326][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.740156][ T6962] bridge0: port 3(syz_tun) entered blocking state [ 132.746791][ T6962] bridge0: port 3(syz_tun) entered forwarding state [ 132.753698][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.760872][ T6962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.765476][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768335][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.774641][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.781546][ T6962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.801305][ T6962] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 132.909360][ T6966] netlink: 'syz.0.374': attribute type 10 has an invalid length. [ 132.924692][ T5844] usb 3-1: USB disconnect, device number 9 [ 132.949751][ T6966] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 133.146489][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.526903][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 133.580739][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.589978][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 133.766447][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.793313][ T24] usb 4-1: config 0 descriptor?? [ 134.377153][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0006/input/input20 [ 134.490609][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0006/input/input21 [ 134.567673][ T24] kye 0003:0458:5013.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 134.684041][ T24] usb 4-1: USB disconnect, device number 7 [ 135.455925][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 135.455945][ T30] audit: type=1326 audit(1743273209.709:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.1.371" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 136.170985][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 137.134202][ T883] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.461131][ T883] usb 3-1: Using ep0 maxpacket: 8 [ 137.538261][ T883] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.571976][ T883] usb 3-1: config 179 has no interface number 0 [ 137.609780][ T883] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 137.630441][ T883] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 137.671356][ T883] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.712918][ T883] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 137.740257][ T883] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.766747][ T883] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 137.790728][ T883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.813544][ T7017] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.169758][ T883] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input22 [ 138.532913][ T24] usb 3-1: USB disconnect, device number 10 [ 138.533012][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 138.547273][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.564563][ T24] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 142.108059][ T7084] netlink: 'syz.1.397': attribute type 4 has an invalid length. [ 143.051916][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 143.493197][ T7104] netem: change failed [ 146.133905][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.303845][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 146.311918][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 146.324856][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.341150][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.357292][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.593599][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.626294][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.991866][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 146.997647][ T24] usbtmc 4-1:16.0: can't read capabilities [ 147.220322][ T24] usb 4-1: USB disconnect, device number 8 [ 147.614689][ T5900] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 147.767186][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 147.788965][ T5900] usb 3-1: config 0 has no interfaces? [ 147.796155][ T5900] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 147.808724][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.893148][ T5900] usb 3-1: config 0 descriptor?? [ 148.244888][ T5900] usb 3-1: USB disconnect, device number 11 [ 148.355514][ T30] audit: type=1326 audit(1743273222.609:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.429" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 148.695032][ T7191] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.432'. [ 148.724423][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 150.596622][ T7216] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 150.652179][ T7216] bond1: entered promiscuous mode [ 150.659037][ T7216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.752660][ T7216] netlink: 3 bytes leftover after parsing attributes in process `syz.4.442'. [ 150.812361][ T7216] batadv1: entered promiscuous mode [ 150.881425][ T7216] batadv1: entered allmulticast mode [ 150.893432][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.952538][ T7216] bond1: (slave batadv1): making interface the new active one [ 151.215350][ T7216] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 151.225712][ T7216] Zero length message leads to an empty skb [ 152.059954][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 152.148361][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.452'. [ 153.581325][ T7277] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.023920][ T5890] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.183827][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 154.203515][ T5890] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 154.211993][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.243864][ T5890] usb 4-1: config 0 has no interface number 0 [ 154.259357][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 154.269429][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.285836][ T5890] usb 4-1: Product: syz [ 154.290062][ T5890] usb 4-1: Manufacturer: syz [ 154.314028][ T5890] usb 4-1: SerialNumber: syz [ 154.329634][ T5890] usb 4-1: config 0 descriptor?? [ 154.346812][ T5890] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 154.373515][ T5890] usb 4-1: No valid video chain found. [ 154.554348][ T5890] usb 4-1: USB disconnect, device number 9 [ 157.508048][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 157.739618][ T7341] syzkaller0: entered promiscuous mode [ 157.755555][ T7341] syzkaller0: entered allmulticast mode [ 157.893979][ T5900] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.063041][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.075917][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.087114][ T5900] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.103418][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.126394][ T5900] usb 5-1: SerialNumber: syz [ 158.378824][ T5900] usb 5-1: 0:2 : does not exist [ 158.417606][ T5900] usb 5-1: USB disconnect, device number 5 [ 158.533553][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 158.625935][ T6465] udevd[6465]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.754110][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.905223][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 158.933910][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 158.972456][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.009004][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.018646][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.027148][ T24] usb 2-1: Product: syz [ 159.031385][ T24] usb 2-1: Manufacturer: syz [ 159.036565][ T24] usb 2-1: SerialNumber: syz [ 159.051283][ T24] usb 2-1: config 0 descriptor?? [ 159.059665][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.070004][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 159.692258][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 159.704930][ T24] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 160.531274][ T24] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 160.538760][ T24] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 160.545824][ T24] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 160.552422][ T24] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 160.561062][ T24] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 160.567829][ T24] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 160.577479][ T24] usb 2-1: USB disconnect, device number 7 [ 161.383888][ T5890] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 161.524206][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.553863][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 161.561935][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 161.574127][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.604103][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.615955][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.624865][ T5890] usb 4-1: Product: syz [ 161.629146][ T5890] usb 4-1: Manufacturer: syz [ 161.633847][ T5890] usb 4-1: SerialNumber: syz [ 161.645242][ T5890] usb 4-1: config 0 descriptor?? [ 161.653474][ T5890] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.665046][ T5890] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 161.693073][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.710129][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.728323][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.743413][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.780913][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.876197][ T24] usb 1-1: config 0 descriptor?? [ 162.319867][ T24] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 162.329366][ T5890] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 162.336617][ T5890] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 162.358956][ T24] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 162.416789][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 162.749478][ T5890] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 162.760154][ T5890] em28xx 4-1:0.0: No AC97 audio processor [ 162.800090][ T5890] usb 4-1: USB disconnect, device number 10 [ 162.835444][ T5890] em28xx 4-1:0.0: Disconnecting em28xx [ 162.939095][ T5890] em28xx 4-1:0.0: Freeing device [ 164.415055][ T5889] usb 1-1: USB disconnect, device number 10 [ 167.012770][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 170.164292][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.373895][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 170.408021][ T24] usb 5-1: config 0 has no interfaces? [ 170.413576][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 170.424116][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.433946][ T24] usb 5-1: config 0 descriptor?? [ 170.781703][ T3083] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 170.883376][ T5891] usb 5-1: USB disconnect, device number 6 [ 170.966585][ T3083] usb 1-1: Using ep0 maxpacket: 32 [ 171.004265][ T3083] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 171.019336][ T3083] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 171.080748][ T3083] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 171.090636][ T3083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.104154][ T3083] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.114062][ T3083] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 171.127498][ T3083] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 171.146626][ T3083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.384996][ T3083] usb 1-1: config 0 descriptor?? [ 171.616296][ T3083] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 171.694132][ T3083] usb 1-1: USB disconnect, device number 11 [ 171.730808][ T3083] usblp0: removed [ 171.993920][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.154003][ T3083] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 172.185523][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.214363][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.248331][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.374034][ T3083] usb 1-1: Using ep0 maxpacket: 32 [ 172.396849][ T3083] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.409964][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.418533][ T3083] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.505302][ T3083] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 172.507608][ T7559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.712889][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.713949][ T5891] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 172.729390][ T3083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.878785][ T3083] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.889974][ T3083] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.989037][ T3083] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 173.020818][ T3083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.173559][ T24] usb 5-1: USB disconnect, device number 7 [ 173.191690][ T3083] usb 1-1: config 0 descriptor?? [ 173.307276][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.318721][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.338842][ T5891] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 173.356381][ T3083] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 173.358618][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.482196][ T5891] usb 3-1: config 0 descriptor?? [ 173.491452][ T3083] usb 1-1: USB disconnect, device number 12 [ 173.523028][ T3083] usblp0: removed [ 173.791516][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 173.813995][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 173.845755][ T5891] usb 3-1: USB disconnect, device number 12 [ 173.903864][ T3083] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 174.078447][ T3083] usb 1-1: Using ep0 maxpacket: 32 [ 174.097150][ T3083] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 174.106015][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 174.116849][ T3083] usb 1-1: config 0 has no interface number 0 [ 174.132662][ T3083] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 174.157349][ T3083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.173582][ T3083] usb 1-1: Product: syz [ 174.182438][ T3083] usb 1-1: Manufacturer: syz [ 174.230430][ T3083] usb 1-1: SerialNumber: syz [ 174.248238][ T3083] usb 1-1: config 0 descriptor?? [ 174.259992][ T3083] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 174.278145][ T3083] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 174.298395][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 174.311112][ T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 174.319530][ T24] usb 2-1: config 0 has no interface number 0 [ 174.333866][ T24] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 174.344329][ T24] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 174.354374][ T24] usb 2-1: config 0 interface 41 has no altsetting 0 [ 174.370585][ T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 174.388956][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.419064][ T24] usb 2-1: Product: syz [ 174.433979][ T24] usb 2-1: Manufacturer: syz [ 174.461760][ T24] usb 2-1: SerialNumber: syz [ 174.481161][ T24] usb 2-1: config 0 descriptor?? [ 174.499216][ T7581] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 174.521696][ T7581] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 174.944085][ T3083] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 174.951626][ T3083] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 174.974405][ T7581] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 175.013695][ T7581] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 175.138362][ T5890] usb 1-1: USB disconnect, device number 13 [ 175.252871][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 175.265644][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 175.636603][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 177.190930][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 177.202816][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 177.250831][ T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 177.301902][ T24] usb 2-1: USB disconnect, device number 8 [ 180.230063][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 180.274320][ T7667] netlink: 104 bytes leftover after parsing attributes in process `syz.1.583'. [ 180.299097][ T7667] netlink: 104 bytes leftover after parsing attributes in process `syz.1.583'. [ 181.907644][ T7684] capability: warning: `syz.3.588' uses 32-bit capabilities (legacy support in use) [ 182.198286][ T7665] netlink: 'syz.4.582': attribute type 4 has an invalid length. [ 182.974116][ T883] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.250044][ T883] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.264857][ T883] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.293919][ T883] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.330886][ T883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.437056][ T7712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.449199][ T883] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.887340][ T3083] usb 2-1: USB disconnect, device number 9 [ 186.086385][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 186.099829][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 187.331741][ T7745] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 190.569688][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 190.759335][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 190.771993][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 190.782489][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 191.027346][ T7810] netlink: 5 bytes leftover after parsing attributes in process `syz.1.629'. [ 194.168686][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.175305][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.244810][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 196.251672][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 196.260155][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 196.266398][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 197.170558][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 199.102675][ T7878] netlink: 'syz.1.653': attribute type 4 has an invalid length. [ 202.375034][ T7962] veth0_vlan: entered allmulticast mode [ 202.453860][ T3083] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.598255][ T30] audit: type=1326 audit(1743273276.849:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.0.679" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23579 code=0x0 [ 202.620646][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.627104][ T3083] usb 4-1: Using ep0 maxpacket: 8 [ 202.634786][ T3083] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.645237][ T3083] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 202.654703][ T3083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.668877][ T3083] usb 4-1: config 0 descriptor?? [ 202.677715][ T3083] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 203.765470][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 204.169670][ T3083] usb 4-1: USB disconnect, device number 11 [ 205.083875][ T883] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 205.274193][ T883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.285429][ T883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.302687][ T883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.339847][ T883] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.365458][ T883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.398086][ T883] usb 3-1: config 0 descriptor?? [ 206.015176][ T883] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 206.037404][ T883] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 206.728270][ T30] audit: type=1326 audit(1743273280.979:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.1.693" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73bd579 code=0x0 [ 208.115881][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 208.155768][ T5890] usb 3-1: USB disconnect, device number 13 [ 208.304264][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 208.316161][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 208.413907][ T24] usb 2-1: config 0 has no interface number 0 [ 208.424141][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 208.440737][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 208.450395][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.458704][ T24] usb 2-1: Product: syz [ 208.462942][ T24] usb 2-1: Manufacturer: syz [ 208.467855][ T24] usb 2-1: SerialNumber: syz [ 208.491888][ T24] usb 2-1: config 0 descriptor?? [ 208.500942][ T24] smsc75xx v1.0.0 [ 209.255433][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 209.266654][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 209.904705][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021389c00: rx timeout, send abort [ 209.915534][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021389c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 210.095288][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 210.130308][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 210.160749][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 210.193667][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 210.233068][ T24] usb 2-1: USB disconnect, device number 10 [ 210.635228][ T5852] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 210.936390][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 210.948004][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 213.940528][ T8145] kvm: emulating exchange as write [ 214.014044][ T3083] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 214.173820][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 214.193871][ T3083] usb 3-1: Using ep0 maxpacket: 8 [ 214.205542][ T3083] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.216384][ T3083] usb 3-1: config 0 has no interfaces? [ 214.224935][ T3083] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 214.234557][ T3083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.249430][ T3083] usb 3-1: Product: syz [ 214.254030][ T3083] usb 3-1: Manufacturer: syz [ 214.259077][ T3083] usb 3-1: SerialNumber: syz [ 214.269571][ T3083] usb 3-1: config 0 descriptor?? [ 214.325531][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.340916][ T24] usb 4-1: config 0 has no interfaces? [ 214.348691][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.363527][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.379094][ T24] usb 4-1: config 0 descriptor?? [ 214.604125][ T5890] usb 3-1: USB disconnect, device number 14 [ 214.737752][ T883] usb 4-1: USB disconnect, device number 12 [ 217.168082][ T8187] input: syz0 as /devices/virtual/input/input23 [ 217.335626][ T8167] hub 1-0:1.0: USB hub found [ 217.346484][ T8167] hub 1-0:1.0: 1 port detected [ 217.704549][ T8205] vivid-000: disconnect [ 217.725284][ T8200] vivid-000: reconnect [ 218.160147][ T8211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.754'. [ 218.170847][ T8211] IPv6: NLM_F_REPLACE set, but no existing node found! [ 218.320460][ T8228] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.484142][ T8242] input: syz0 as /devices/virtual/input/input24 [ 220.364094][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.515440][ T5890] usb 5-1: config 0 has no interfaces? [ 220.523120][ T5890] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 220.532640][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.540914][ T5890] usb 5-1: Product: syz [ 220.546336][ T5890] usb 5-1: Manufacturer: syz [ 220.551010][ T5890] usb 5-1: SerialNumber: syz [ 220.557349][ T5890] usb 5-1: config 0 descriptor?? [ 220.802579][ T883] usb 5-1: USB disconnect, device number 8 [ 220.865787][ T8264] bond0: (slave bridge0): Releasing backup interface [ 220.888482][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.895816][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.920462][ T8264] bridge_slave_0: left allmulticast mode [ 220.932683][ T8264] bridge_slave_0: left promiscuous mode [ 220.942463][ T8265] kvm: pic: non byte read [ 220.948469][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.985789][ T8264] bridge_slave_1: left allmulticast mode [ 220.994730][ T8264] bridge_slave_1: left promiscuous mode [ 221.004328][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.021516][ T8264] bond0: (slave bond_slave_0): Releasing backup interface [ 221.064285][ T8264] bond0: (slave bond_slave_1): Releasing backup interface [ 221.100583][ T8264] team0: Port device team_slave_0 removed [ 221.191807][ T8264] team0: Port device team_slave_1 removed [ 221.198379][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.233839][ T8264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.252870][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.260743][ T8264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.303936][ T30] audit: type=1326 audit(1743273295.549:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.325688][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.346207][ T30] audit: type=1326 audit(1743273295.549:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.401696][ T30] audit: type=1326 audit(1743273295.639:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.423487][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.466974][ T30] audit: type=1326 audit(1743273295.639:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.488753][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.566000][ T30] audit: type=1326 audit(1743273295.639:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.587756][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.602095][ T30] audit: type=1326 audit(1743273295.639:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.645809][ T30] audit: type=1326 audit(1743273295.639:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.677869][ T30] audit: type=1326 audit(1743273295.639:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.717783][ T30] audit: type=1326 audit(1743273295.639:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.739666][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.788569][ T30] audit: type=1326 audit(1743273295.639:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 221.990795][ T8305] bridge0: port 3(syz_tun) entered disabled state [ 222.034703][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.042060][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.246579][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.261932][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.342762][ T8305] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.352162][ T8305] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.365002][ T8305] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.374481][ T8305] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.784007][ T3083] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 222.920866][ T8340] capability: warning: `syz.4.798' uses deprecated v2 capabilities in a way that may be insecure [ 222.955345][ T3083] usb 1-1: config 0 has no interfaces? [ 222.961068][ T3083] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 222.993055][ T3083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.023661][ T3083] usb 1-1: config 0 descriptor?? [ 223.250757][ T5890] usb 1-1: USB disconnect, device number 14 [ 223.384359][ T3083] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.567218][ T3083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.578473][ T3083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.589007][ T3083] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.602183][ T3083] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.612713][ T3083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.622389][ T3083] usb 2-1: config 0 descriptor?? [ 224.043540][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.056894][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.067813][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.077931][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.085814][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.093675][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.101328][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.109301][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.117047][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.124862][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.132438][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.140396][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.147999][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.155923][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.163662][ T3083] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 224.172362][ T3083] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 224.187569][ T3083] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 225.953976][ T9] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 226.861492][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 227.296225][ T5890] usb 2-1: USB disconnect, device number 11 [ 227.757456][ T5890] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 227.921324][ T5890] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 227.943119][ T5890] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.963985][ T5890] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.978539][ T5890] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.005267][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.093454][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.128758][ T5890] usb 4-1: invalid MIDI out EP 0 [ 228.745779][ T5890] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 228.965237][ T6463] udevd[6463]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.713262][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 230.482559][ T8406] delete_channel: no stack [ 230.499391][ T5891] usb 4-1: USB disconnect, device number 13 [ 230.757635][ T8442] netlink: zone id is out of range [ 230.766519][ T8442] netlink: zone id is out of range [ 230.771806][ T8442] netlink: zone id is out of range [ 230.783350][ T8442] netlink: zone id is out of range [ 230.823989][ T8442] netlink: zone id is out of range [ 230.829304][ T8442] netlink: zone id is out of range [ 230.835448][ T8442] netlink: zone id is out of range [ 230.840803][ T8442] netlink: zone id is out of range [ 230.846552][ T8442] netlink: zone id is out of range [ 230.851875][ T8442] netlink: zone id is out of range [ 232.349072][ T5890] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 232.634385][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 232.658437][ T5890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 232.694434][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.711466][ T5890] usb 2-1: Product: syz [ 232.728049][ T5890] usb 2-1: Manufacturer: syz [ 232.733794][ T5890] usb 2-1: SerialNumber: syz [ 232.740644][ T5890] usb 2-1: config 0 descriptor?? [ 233.154259][ T5890] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 234.672470][ T8518] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.858'. [ 234.713969][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 234.781279][ T5890] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 234.809494][ T5890] usb 2-1: USB disconnect, device number 12 [ 234.884029][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 234.891059][ T9] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 234.901981][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.915326][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.924660][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.933321][ T9] usb 4-1: Product: syz [ 234.937636][ T9] usb 4-1: Manufacturer: syz [ 234.942306][ T9] usb 4-1: SerialNumber: syz [ 235.155940][ T9] usb 4-1: 0:2 : does not exist [ 235.169526][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 235.188125][ T9] usb 4-1: USB disconnect, device number 14 [ 235.364927][ T6465] udevd[6465]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.809708][ T8536] syzkaller0: entered promiscuous mode [ 235.816079][ T8536] syzkaller0: entered allmulticast mode [ 238.445888][ T8567] netlink: 168 bytes leftover after parsing attributes in process `syz.2.874'. [ 238.455437][ T8567] netlink: 168 bytes leftover after parsing attributes in process `syz.2.874'. [ 238.479667][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.650849][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 238.664836][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.673214][ T24] usb 2-1: config 0 has no interface number 0 [ 238.701073][ T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 238.713796][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.732742][ T24] usb 2-1: Product: syz [ 238.748314][ T24] usb 2-1: Manufacturer: syz [ 238.752969][ T24] usb 2-1: SerialNumber: syz [ 238.769573][ T24] usb 2-1: config 0 descriptor?? [ 238.787636][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 238.904653][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 240.843544][ T24] gspca_spca1528: reg_r err -71 [ 240.856192][ T24] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 240.874158][ T24] usb 2-1: USB disconnect, device number 13 [ 242.304102][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 242.504121][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 242.518982][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.533263][ T24] usb 2-1: config 0 has no interfaces? [ 242.545318][ T24] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 242.559377][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 242.568725][ T24] usb 2-1: Product: syz [ 242.572997][ T24] usb 2-1: Manufacturer: syz [ 242.584795][ T24] usb 2-1: config 0 descriptor?? [ 242.654142][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 242.823905][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 242.830579][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.845475][ T9] usb 5-1: config 0 has no interfaces? [ 242.853185][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 242.858533][ T24] usb 2-1: USB disconnect, device number 14 [ 242.867639][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.882880][ T9] usb 5-1: Product: syz [ 242.890570][ T9] usb 5-1: Manufacturer: syz [ 242.896134][ T9] usb 5-1: SerialNumber: syz [ 242.902658][ T9] usb 5-1: config 0 descriptor?? [ 243.125986][ T24] usb 5-1: USB disconnect, device number 9 [ 243.430935][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 243.447216][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 245.134019][ T5844] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 245.360845][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'. [ 245.374989][ T5844] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.397380][ T8680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.457161][ T5844] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.492209][ T5844] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.516652][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.542029][ T8666] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.561504][ T5844] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.653972][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 246.822254][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.841299][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.851958][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.889673][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.898933][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.931426][ T9] usb 3-1: config 0 descriptor?? [ 247.351505][ T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 247.365040][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 248.317868][ T5844] usb 4-1: USB disconnect, device number 15 [ 248.651637][ T9] usb 3-1: USB disconnect, device number 15 [ 249.666399][ T8751] lo: entered allmulticast mode [ 250.163841][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 250.355714][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 250.369316][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.383982][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.410382][ T8764] kvm: kvm [8763]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 250.425699][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.449594][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.820189][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.848707][ T24] usb 3-1: invalid MIDI out EP 0 [ 250.924599][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 250.991490][ T6463] udevd[6463]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.270750][ T9] usb 3-1: USB disconnect, device number 16 [ 251.478356][ T8754] delete_channel: no stack [ 252.031394][ T8785] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.938'. [ 252.073076][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 252.082653][ T5852] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 252.873884][ T5890] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 253.045382][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.073897][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.099241][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.145488][ T5890] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.168127][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.196506][ T5890] usb 3-1: config 0 descriptor?? [ 253.626008][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.652390][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.668678][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.685266][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.701537][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.718113][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.733933][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.760536][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.786515][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.894049][ T5890] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 253.918816][ T5890] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 254.027775][ T5890] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 254.075550][ T5890] usb 3-1: USB disconnect, device number 17 [ 255.624759][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631282][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.004212][ T5844] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 256.123235][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 256.196206][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 256.220472][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 256.236847][ T8845] netlink: 104 bytes leftover after parsing attributes in process `syz.4.959'. [ 256.252255][ T5844] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 256.271846][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.313871][ T8845] netlink: 104 bytes leftover after parsing attributes in process `syz.4.959'. [ 256.329054][ T5844] usb 2-1: Product: syz [ 256.353772][ T5844] usb 2-1: Manufacturer: syz [ 256.389496][ T5844] usb 2-1: SerialNumber: syz [ 256.427251][ T5844] usb 2-1: config 0 descriptor?? [ 256.457244][ T5844] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 256.755610][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 256.933828][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 256.941528][ T24] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 256.951925][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.980686][ T24] usb 4-1: config 0 descriptor?? [ 257.017519][ T24] as10x_usb: device has been detected [ 257.039290][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 257.125374][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 257.293924][ T8863] af_packet: tpacket_rcv: packet too big, clamped from 55250 to 3952. macoff=96 [ 257.322768][ T24] as10x_usb: error during firmware upload part1 [ 257.361670][ T24] Registered device nBox DVB-T Dongle [ 257.372860][ T24] usb 4-1: USB disconnect, device number 16 [ 257.526723][ T24] Unregistered device nBox DVB-T Dongle [ 257.543607][ T24] as10x_usb: device has been disconnected [ 257.574222][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 257.983940][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 258.148648][ T24] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 258.189759][ T24] usb 4-1: config 0 has no interfaces? [ 258.208230][ T24] usb 4-1: config 0 has no interfaces? [ 258.222877][ T24] usb 4-1: config 0 has no interfaces? [ 258.248879][ T24] usb 4-1: config 0 has no interfaces? [ 258.301706][ T24] usb 4-1: config 0 has no interfaces? [ 258.308405][ T5844] gspca_sonixj: reg_r err -71 [ 258.337646][ T24] usb 4-1: config 0 has no interfaces? [ 258.345416][ T5844] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 258.354891][ T24] usb 4-1: config 0 has no interfaces? [ 258.368682][ T24] usb 4-1: config 0 has no interfaces? [ 258.382982][ T5844] usb 2-1: USB disconnect, device number 15 [ 258.398275][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.445978][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.509142][ T24] usb 4-1: Product: syz [ 258.820091][ T24] usb 4-1: Manufacturer: syz [ 258.837160][ T24] usb 4-1: SerialNumber: syz [ 258.879243][ T24] usb 4-1: config 0 descriptor?? [ 259.170108][ T3083] usb 4-1: USB disconnect, device number 17 [ 259.365696][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 259.544006][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 259.570291][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 259.581646][ T24] usb 1-1: config 0 has no interface number 0 [ 259.594960][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 259.610379][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 259.630028][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.654620][ T24] usb 1-1: Product: syz [ 259.669184][ T24] usb 1-1: Manufacturer: syz [ 259.696083][ T24] usb 1-1: SerialNumber: syz [ 259.714964][ T24] usb 1-1: config 0 descriptor?? [ 259.844068][ T3083] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 260.023850][ T3083] usb 4-1: Using ep0 maxpacket: 32 [ 260.035648][ T3083] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 260.053830][ T3083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.081096][ T3083] usb 4-1: config 0 descriptor?? [ 260.100117][ T3083] as10x_usb: device has been detected [ 260.124515][ T3083] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 260.198380][ T3083] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 260.235975][ T3083] as10x_usb: error during firmware upload part1 [ 260.263380][ T3083] Registered device nBox DVB-T Dongle [ 260.588294][ T5889] usb 4-1: USB disconnect, device number 18 [ 260.640622][ T5889] Unregistered device nBox DVB-T Dongle [ 260.655797][ T5889] as10x_usb: device has been disconnected [ 260.820217][ T8924] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 261.605845][ T24] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 261.616362][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 261.644746][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 261.737840][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 262.035073][ T24] usb 1-1: USB disconnect, device number 15 [ 262.978321][ T8963] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 263.121535][ T8966] veth3: entered promiscuous mode [ 263.129769][ T8966] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 263.319789][ T8971] veth0_to_batadv: entered promiscuous mode [ 263.375340][ T8971] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 264.936469][ T9005] syz_tun: entered allmulticast mode [ 264.943608][ T9005] lo: entered allmulticast mode [ 265.009606][ T9004] syz_tun: left allmulticast mode [ 265.604400][ T9028] net_ratelimit: 418 callbacks suppressed [ 265.604425][ T9028] netlink: zone id is out of range [ 265.771706][ T9028] netlink: zone id is out of range [ 265.781405][ T9028] netlink: zone id is out of range [ 265.787567][ T9028] netlink: zone id is out of range [ 265.796387][ T9028] netlink: zone id is out of range [ 265.801827][ T9028] netlink: zone id is out of range [ 265.808030][ T9028] netlink: zone id is out of range [ 265.813419][ T9028] netlink: zone id is out of range [ 265.819794][ T9028] netlink: zone id is out of range [ 265.825647][ T9028] netlink: zone id is out of range [ 268.773953][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 269.003125][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.024278][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.035678][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.047305][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.108092][ T9060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.119156][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.293283][ T9] usb 3-1: USB disconnect, device number 18 [ 271.355166][ T9096] kernel profiling enabled (shift: 9) [ 271.804059][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 271.963885][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 271.976685][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 271.988526][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 271.999202][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.009531][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.022704][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.032088][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.223864][ T5891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 272.261533][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 272.267934][ T24] usbtmc 1-1:16.0: can't read capabilities [ 272.419650][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 272.432569][ T9117] kvm: kvm [9116]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 272.442819][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.471312][ T5891] usb 2-1: config 0 descriptor?? [ 272.507034][ T5891] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 272.914910][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 272.950500][ T9122] usbtmc 1-1:16.0: Unable to send data, error -71 [ 273.150202][ T9] usb 1-1: USB disconnect, device number 16 [ 273.924076][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 273.933334][ T5891] usb 2-1: USB disconnect, device number 16 [ 274.105863][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.120536][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.139903][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.181681][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.296158][ T9143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 274.347143][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.352171][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 274.505578][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 274.515161][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.551587][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 274.571582][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 274.593788][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.682687][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.695412][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 274.720180][ T24] usb 4-1: Product: syz [ 274.725001][ T24] usb 4-1: Manufacturer: syz [ 274.748659][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 274.759183][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 274.772607][ T24] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 275.054105][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 275.054127][ T30] audit: type=1326 audit(1743273349.299:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.1.1061" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 275.099231][ T24] usb 4-1: USB disconnect, device number 19 [ 275.230381][ T9166] kvm: kvm [9164]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 276.246652][ T30] audit: type=1326 audit(1743273350.499:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.2.1064" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 277.484041][ T5890] usb 5-1: USB disconnect, device number 10 [ 279.320537][ T9222] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 279.364185][ T9222] bond1: entered promiscuous mode [ 279.370631][ T9222] bond1: entered allmulticast mode [ 279.376577][ T9222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.113914][ T3083] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 282.183832][ T5890] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 282.284457][ T3083] usb 3-1: Using ep0 maxpacket: 16 [ 282.300530][ T3083] usb 3-1: config 0 has no interfaces? [ 282.308676][ T3083] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 282.327549][ T3083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.346510][ T5890] usb 5-1: config 0 has no interfaces? [ 282.349235][ T3083] usb 3-1: config 0 descriptor?? [ 282.352035][ T5890] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 282.433062][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.466319][ T5890] usb 5-1: config 0 descriptor?? [ 282.597703][ T5891] usb 3-1: USB disconnect, device number 19 [ 282.745885][ T5890] usb 5-1: USB disconnect, device number 11 [ 283.434001][ T9267] cgroup: fork rejected by pids controller in /syz0 [ 285.333379][ T9333] kvm: pic: non byte read [ 285.338711][ T9333] kvm: pic: level sensitive irq not supported [ 285.338817][ T9333] kvm: pic: non byte read [ 285.364220][ T9333] kvm: pic: level sensitive irq not supported [ 285.364294][ T9333] kvm: pic: non byte read [ 285.402865][ T9333] kvm: pic: level sensitive irq not supported [ 285.402922][ T9333] kvm: pic: non byte read [ 285.471765][ T9333] kvm: pic: level sensitive irq not supported [ 285.471840][ T9333] kvm: pic: non byte read [ 285.511305][ T9333] kvm: pic: level sensitive irq not supported [ 285.511391][ T9333] kvm: pic: non byte read [ 285.551594][ T9333] kvm: pic: level sensitive irq not supported [ 285.551671][ T9333] kvm: pic: non byte read [ 285.564436][ T9333] kvm: pic: level sensitive irq not supported [ 285.564510][ T9333] kvm: pic: non byte read [ 285.623652][ T9333] kvm: pic: level sensitive irq not supported [ 285.623819][ T9333] kvm: pic: non byte read [ 286.087696][ T9359] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 286.505586][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.702044][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.723633][ T24] usb 5-1: config 1 interface 0 altsetting 73 bulk endpoint 0x1 has invalid maxpacket 1023 [ 286.754293][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 286.943451][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 286.969923][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.978120][ T24] usb 5-1: Product: syz [ 286.982496][ T24] usb 5-1: Manufacturer: syz [ 286.987281][ T24] usb 5-1: SerialNumber: syz [ 287.307342][ T9365] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.614191][ T3083] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 287.626550][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 287.642133][ T24] usb 5-1: USB disconnect, device number 12 [ 287.656254][ T24] usblp0: removed [ 287.694983][ T5900] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 287.806223][ T3083] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 287.824582][ T3083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.841217][ T3083] usb 1-1: config 0 descriptor?? [ 287.864030][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 287.871742][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 287.883767][ T5900] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 287.893044][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.004470][ T5900] usb 3-1: Product: syz [ 288.008829][ T5900] usb 3-1: Manufacturer: syz [ 288.013499][ T5900] usb 3-1: SerialNumber: syz [ 288.292766][ T5900] usb 3-1: config 0 descriptor?? [ 288.306535][ T5900] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.316544][ T5900] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 288.936092][ T5900] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 289.546217][ T3083] usb 1-1: Cannot set autoneg [ 289.553290][ T3083] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 289.614585][ T3083] usb 1-1: USB disconnect, device number 17 [ 289.977362][ T5900] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 289.989417][ T5900] em28xx 3-1:0.0: board has no eeprom [ 290.073835][ T5900] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 290.081808][ T5900] em28xx 3-1:0.0: dvb set to bulk mode. [ 290.114625][ T3083] em28xx 3-1:0.0: Binding DVB extension [ 290.141376][ T5900] usb 3-1: USB disconnect, device number 20 [ 290.164508][ T5900] em28xx 3-1:0.0: Disconnecting em28xx [ 290.292611][ T3083] em28xx 3-1:0.0: Registering input extension [ 290.304141][ T5900] em28xx 3-1:0.0: Closing input extension [ 290.342619][ T5900] em28xx 3-1:0.0: Freeing device [ 290.388176][ T9425] input: syz1 as /devices/virtual/input/input27 [ 290.485360][ T5890] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 290.653784][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.674040][ T5890] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 290.683323][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.727290][ T5890] usb 4-1: config 0 descriptor?? [ 290.739150][ T5890] option 4-1:0.0: GSM modem (1-port) converter detected [ 290.963129][ T5900] usb 4-1: USB disconnect, device number 20 [ 290.980360][ T5900] option 4-1:0.0: device disconnected [ 292.217157][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 292.322373][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.473815][ T5890] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 292.724208][ T5890] usb 4-1: config 0 has no interfaces? [ 292.764832][ T5890] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 292.803988][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.834844][ T5890] usb 4-1: Product: syz [ 292.859273][ T5890] usb 4-1: Manufacturer: syz [ 292.893853][ T5890] usb 4-1: SerialNumber: syz [ 292.932051][ T5890] usb 4-1: config 0 descriptor?? [ 293.489193][ T5900] usb 4-1: USB disconnect, device number 21 [ 293.804380][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1143'. [ 294.233916][ T5890] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 294.395933][ T5890] usb 3-1: config 0 has no interfaces? [ 294.405233][ T5890] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 294.465685][ T5890] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 294.482951][ T5890] usb 3-1: Manufacturer: syz [ 294.490478][ T5890] usb 3-1: config 0 descriptor?? [ 294.520268][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 294.564811][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 294.712493][ T5890] usb 3-1: USB disconnect, device number 21 [ 295.769571][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 295.824585][ T9511] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 297.363973][ T3083] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 297.613852][ T3083] usb 4-1: Using ep0 maxpacket: 8 [ 297.621015][ T3083] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 297.631877][ T3083] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.643732][ T3083] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 297.657421][ T3083] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.667300][ T3083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.680716][ T3083] usbtmc 4-1:16.0: bulk endpoints not found [ 298.513929][ T3083] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 298.677052][ T3083] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 298.745389][ T3083] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.775723][ T3083] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.802839][ T3083] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.846162][ T3083] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 298.859258][ T3083] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.869881][ T3083] usb 2-1: Product: syz [ 298.883155][ T3083] usb 2-1: Manufacturer: syz [ 298.906998][ T3083] cdc_wdm 2-1:1.0: skipping garbage [ 298.931969][ T3083] cdc_wdm 2-1:1.0: skipping garbage [ 298.952575][ T3083] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 299.932901][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 300.386380][ T24] usb 4-1: USB disconnect, device number 22 [ 300.533845][ T3083] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 300.704872][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 300.777692][ T3083] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.790391][ T3083] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 300.858644][ T3083] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.893849][ T3083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.941428][ T9564] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 300.973409][ T3083] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.064645][ T9] usb 2-1: USB disconnect, device number 17 [ 301.429381][ T9574] tipc: Started in network mode [ 301.475143][ T9574] tipc: Node identity 080211000001, cluster identity 4711 [ 301.522349][ T9574] tipc: Enabled bearer , priority 0 [ 301.560059][ T9577] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 301.612302][ T9577] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 302.574159][ T3083] tipc: Node number set to 134418688 [ 303.669252][ T9] usb 1-1: USB disconnect, device number 18 [ 304.503931][ T3083] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 304.676946][ T3083] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 304.704942][ T3083] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.743259][ T3083] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.821194][ T3083] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.920210][ T3083] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.018121][ T3083] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.085274][ T3083] usb 3-1: Product: syz [ 305.098622][ T3083] usb 3-1: Manufacturer: syz [ 305.154393][ T3083] cdc_wdm 3-1:1.0: skipping garbage [ 305.166765][ T3083] cdc_wdm 3-1:1.0: skipping garbage [ 305.212882][ T3083] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 305.504606][ T9629] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 305.504606][ T9629] program syz.0.1186 not setting count and/or reply_len properly [ 305.734234][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 305.782857][ T3083] usb 3-1: USB disconnect, device number 22 [ 305.934006][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 305.941147][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 305.950082][ T9] usb 4-1: config 0 has no interface number 0 [ 305.963928][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 305.983054][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 305.993030][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.022980][ T9] usb 4-1: Product: syz [ 306.027592][ T9] usb 4-1: Manufacturer: syz [ 306.032654][ T9] usb 4-1: SerialNumber: syz [ 306.054440][ T9] usb 4-1: config 0 descriptor?? [ 306.065979][ T9] smsc75xx v1.0.0 [ 306.673181][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 306.685227][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.958092][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 306.973572][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 307.132147][ T9666] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 307.139586][ T9666] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 307.335882][ T5889] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 307.505412][ T5889] usb 5-1: config 0 has no interfaces? [ 307.510978][ T5889] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 307.543534][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.569150][ T5889] usb 5-1: config 0 descriptor?? [ 307.908097][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 307.919047][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 307.931391][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 307.944707][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 307.968159][ T9] usb 4-1: USB disconnect, device number 23 [ 307.982079][ T9680] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 307.982079][ T9680] program syz.2.1209 not setting count and/or reply_len properly [ 310.411429][ T24] usb 5-1: USB disconnect, device number 13 [ 310.875613][ T9726] random: crng reseeded on system resumption [ 311.266980][ T9730] syz.0.1225 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 313.048198][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 313.081563][ T9755] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 313.099081][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.128283][ T9755] bond0: (slave team0): Enslaving as an active interface with an up link [ 313.459885][ T9762] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 313.500685][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d37400: rx timeout, send abort [ 313.802451][ T9782] netlink: 'syz.0.1241': attribute type 10 has an invalid length. [ 313.812748][ T9782] syz_tun: entered promiscuous mode [ 313.827769][ T9782] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 314.009006][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d37400: abort rx timeout. Force session deactivation [ 314.448071][ T30] audit: type=1800 audit(1743273388.689:122): pid=9777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1238" name="/" dev="fuse" ino=0 res=0 errno=0 [ 317.054457][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.061468][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.749025][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 317.759642][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 317.777099][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 317.794134][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 317.804665][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 318.224332][ T5891] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 318.353921][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 318.479618][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 318.508400][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1268'. [ 318.538323][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 318.560629][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.598225][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.608646][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.627004][ T5891] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.711209][ T9] usb 3-1: config 0 has no interfaces? [ 318.763512][ T9] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 318.783802][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 318.792044][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.800979][ T9] usb 3-1: Manufacturer: syz [ 318.823505][ T5891] usb 4-1: config 0 descriptor?? [ 318.836375][ T9] usb 3-1: config 0 descriptor?? [ 319.427159][ T5891] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 319.499046][ T5891] HID 045e:07da: Invalid code 65791 type 1 [ 319.505474][ T5891] HID 045e:07da: Invalid code 768 type 1 [ 319.511870][ T5891] HID 045e:07da: Invalid code 769 type 1 [ 320.196237][ T5891] HID 045e:07da: Invalid code 770 type 1 [ 320.202230][ T5891] HID 045e:07da: Invalid code 771 type 1 [ 320.216598][ T5891] HID 045e:07da: Invalid code 772 type 1 [ 320.230470][ T5891] HID 045e:07da: Invalid code 773 type 1 [ 320.244196][ T5891] HID 045e:07da: Invalid code 774 type 1 [ 320.249935][ T5891] HID 045e:07da: Invalid code 775 type 1 [ 320.256034][ T5891] HID 045e:07da: Invalid code 776 type 1 [ 320.288870][ T5891] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input28 [ 320.364576][ T5891] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 320.408345][ T5891] usb 4-1: USB disconnect, device number 24 [ 320.901022][ T5891] usb 3-1: USB disconnect, device number 23 [ 322.252344][ T5891] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 322.403916][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 322.447266][ T5891] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 322.458352][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.474313][ T5891] usb 4-1: Product: syz [ 322.478694][ T5891] usb 4-1: Manufacturer: syz [ 322.485592][ T5891] usb 4-1: SerialNumber: syz [ 322.546137][ T5891] usb 4-1: config 0 descriptor?? [ 322.575195][ T5891] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 322.873838][ T883] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 323.033887][ T883] usb 5-1: Using ep0 maxpacket: 16 [ 323.041363][ T883] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 323.050127][ T883] usb 5-1: config 0 has no interface number 0 [ 323.056734][ T883] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 323.067348][ T883] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 323.086204][ T883] usb 5-1: config 0 interface 41 has no altsetting 0 [ 323.097372][ T883] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 323.126875][ T883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.137814][ T883] usb 5-1: Product: syz [ 323.143644][ T883] usb 5-1: Manufacturer: syz [ 323.153368][ T883] usb 5-1: SerialNumber: syz [ 323.182127][ T883] usb 5-1: config 0 descriptor?? [ 323.224267][ T9930] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 323.231680][ T9930] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 323.510851][ T9930] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 323.538412][ T9930] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 323.549267][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 324.225637][ T883] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 324.629056][ T5891] gspca_sonixj: reg_w1 err -71 [ 324.673865][ T5891] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 324.683926][ T5891] usb 4-1: USB disconnect, device number 25 [ 324.938504][ T9959] kvm: pic: non byte read [ 324.944422][ T9959] kvm: pic: level sensitive irq not supported [ 324.944499][ T9959] kvm: pic: non byte read [ 325.620389][ T883] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 325.643083][ T883] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 325.663240][ T883] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 325.682155][ T883] usb 5-1: USB disconnect, device number 14 [ 325.747180][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 325.789972][ T9982] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 325.850073][ T9982] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.977449][ T9982] bond0: (slave team0): Enslaving as an active interface with a down link [ 326.942340][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 326.970335][ T5891] IPVS: starting estimator thread 0... [ 326.984530][ T9999] tipc: Started in network mode [ 327.002368][ T9999] tipc: Node identity ac1414aa, cluster identity 4711 [ 327.024787][ T9999] net_ratelimit: 416 callbacks suppressed [ 327.024814][ T9999] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.089726][ T9999] tipc: Enabled bearer , priority 10 [ 327.107027][T10000] IPVS: using max 25 ests per chain, 60000 per kthread [ 327.164116][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.313819][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.315201][T10004] kvm: pic: single mode not supported [ 327.321292][T10004] kvm: pic: level sensitive irq not supported [ 327.335405][T10004] kvm: pic: single mode not supported [ 327.341717][T10004] kvm: pic: level sensitive irq not supported [ 327.443911][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 327.457810][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.593786][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.643810][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 327.654448][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.669583][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.687992][ T24] usb 2-1: Product: syz [ 327.700103][ T24] usb 2-1: Manufacturer: syz [ 327.711693][ T24] usb 2-1: SerialNumber: syz [ 327.724704][ T24] usb 2-1: config 0 descriptor?? [ 327.743814][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.893784][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.142042][ T5900] tipc: Node number set to 2886997162 [ 328.148154][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 328.183780][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.453793][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.658057][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 328.707604][T10017] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 328.839100][T10017] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.870113][T10017] bond0: (slave team0): Enslaving as an active interface with a down link [ 328.983967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.395906][T10031] random: crng reseeded on system resumption [ 329.425818][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 329.444865][ T24] usb 2-1: USB disconnect, device number 18 [ 330.363589][T10047] netlink: 'syz.1.1322': attribute type 4 has an invalid length. [ 330.689595][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.835227][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.851202][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.920303][T10052] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.930480][T10052] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.944484][T10052] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.953522][T10052] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.030956][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 331.087011][T10061] netlink: 'syz.0.1325': attribute type 10 has an invalid length. [ 331.133034][T10061] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.145491][T10061] bond0: (slave team0): Enslaving as an active interface with a down link [ 332.083811][ C1] net_ratelimit: 3 callbacks suppressed [ 332.083833][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.297560][T10081] netlink: 'syz.2.1333': attribute type 10 has an invalid length. [ 332.310689][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1333'. [ 332.526612][T10081] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 332.568175][T10081] team0: Failed to send options change via netlink (err -105) [ 332.580320][ T5112] [ 332.583297][ T5112] ============================= [ 332.588254][ T5112] WARNING: suspicious RCU usage [ 332.593157][ T5112] 6.14.0-syzkaller-09584-g7d06015d936c #0 Not tainted [ 332.600046][ T5112] ----------------------------- [ 332.605042][ T5112] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! [ 332.613918][ T5112] [ 332.613918][ T5112] other info that might help us debug this: [ 332.613918][ T5112] [ 332.624441][ T5112] [ 332.624441][ T5112] rcu_scheduler_active = 2, debug_locks = 1 [ 332.632566][ T5112] 3 locks held by kworker/u8:8/5112: [ 332.638154][ T5112] #0: ffff88805e19a948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 332.641543][T10081] team0: Port device geneve0 added [ 332.649359][ T5112] #1: ffffc900109f7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 332.667568][ T5112] #2: ffffffff8ed3a2a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 332.677471][ T5112] [ 332.677471][ T5112] stack backtrace: [ 332.683895][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 332.683923][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.683937][ T5112] Workqueue: bond0 bond_mii_monitor [ 332.683970][ T5112] Call Trace: [ 332.683977][ T5112] [ 332.683986][ T5112] dump_stack_lvl+0x241/0x360 [ 332.684018][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.684046][ T5112] ? __pfx__printk+0x10/0x10 [ 332.684080][ T5112] lockdep_rcu_suspicious+0x175/0x200 [ 332.684105][ T5112] dev_activate+0xff/0x1240 [ 332.684127][ T5112] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 332.684151][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 332.684178][ T5112] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 332.684201][ T5112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.684227][ T5112] ? __pfx_dev_activate+0x10/0x10 [ 332.684249][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 332.684277][ T5112] ? rfc2863_policy+0x1ce/0x3f0 [ 332.684313][ T5112] linkwatch_do_dev+0xfb/0x170 [ 332.684339][ T5112] ethtool_op_get_link+0x15/0x60 [ 332.684361][ T5112] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 332.684383][ T5112] bond_check_dev_link+0x1fb/0x4b0 [ 332.684406][ T5112] ? __pfx_bond_check_dev_link+0x10/0x10 [ 332.684441][ T5112] bond_mii_monitor+0x49d/0x3170 [ 332.684472][ T5112] ? bond_mii_monitor+0x17f/0x3170 [ 332.684497][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 332.684528][ T5112] ? __pfx_bond_mii_monitor+0x10/0x10 [ 332.684553][ T5112] ? register_lock_class+0x54/0x330 [ 332.684576][ T5112] ? __lock_acquire+0xad5/0xd80 [ 332.684611][ T5112] ? process_scheduled_works+0x9cb/0x18e0 [ 332.684633][ T5112] process_scheduled_works+0xac3/0x18e0 [ 332.684675][ T5112] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.684704][ T5112] ? assign_work+0x367/0x3d0 [ 332.684729][ T5112] worker_thread+0x870/0xd50 [ 332.684761][ T5112] ? __kthread_parkme+0x1a8/0x200 [ 332.684788][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 332.684811][ T5112] kthread+0x7b7/0x940 [ 332.684838][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 332.684861][ T5112] ? __pfx_kthread+0x10/0x10 [ 332.684885][ T5112] ? __pfx_kthread+0x10/0x10 [ 332.684911][ T5112] ? __pfx_kthread+0x10/0x10 [ 332.684936][ T5112] ? __pfx_kthread+0x10/0x10 [ 332.684961][ T5112] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.684982][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 332.685008][ T5112] ? __pfx_kthread+0x10/0x10 [ 332.685033][ T5112] ret_from_fork+0x4b/0x80 [ 332.685054][ T5112] ? __pfx_kthread+0x10/0x10 [ 332.685079][ T5112] ret_from_fork_asm+0x1a/0x30 [ 332.685109][ T5112] [ 332.957989][ T5112] [ 332.960418][ T5112] ============================= [ 332.965364][ T5112] WARNING: suspicious RCU usage [ 332.970273][ T5112] 6.14.0-syzkaller-09584-g7d06015d936c #0 Not tainted [ 332.977212][ T5112] ----------------------------- [ 332.982130][ T5112] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 332.990988][ T5112] [ 332.990988][ T5112] other info that might help us debug this: [ 332.990988][ T5112] [ 333.001335][ T5112] [ 333.001335][ T5112] rcu_scheduler_active = 2, debug_locks = 1 [ 333.009672][ T5112] 3 locks held by kworker/u8:8/5112: [ 333.015041][ T5112] #0: ffff88805e19a948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 333.026062][ T5112] #1: ffffc900109f7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 333.039243][ T5112] #2: ffffffff8ed3a2a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 333.049387][ T5112] [ 333.049387][ T5112] stack backtrace: [ 333.055345][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 333.055366][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.055378][ T5112] Workqueue: bond0 bond_mii_monitor [ 333.055400][ T5112] Call Trace: [ 333.055406][ T5112] [ 333.055412][ T5112] dump_stack_lvl+0x241/0x360 [ 333.055437][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.055458][ T5112] ? __pfx__printk+0x10/0x10 [ 333.055479][ T5112] ? print_lock+0x171/0x1a0 [ 333.055498][ T5112] lockdep_rcu_suspicious+0x175/0x200 [ 333.055516][ T5112] transition_one_qdisc+0x8e/0x1c0 [ 333.055534][ T5112] dev_activate+0x835/0x1240 [ 333.055550][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.055570][ T5112] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 333.055588][ T5112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.055606][ T5112] ? __pfx_dev_activate+0x10/0x10 [ 333.055622][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.055642][ T5112] ? rfc2863_policy+0x1ce/0x3f0 [ 333.055662][ T5112] linkwatch_do_dev+0xfb/0x170 [ 333.055682][ T5112] ethtool_op_get_link+0x15/0x60 [ 333.055698][ T5112] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 333.055713][ T5112] bond_check_dev_link+0x1fb/0x4b0 [ 333.055731][ T5112] ? __pfx_bond_check_dev_link+0x10/0x10 [ 333.055755][ T5112] bond_mii_monitor+0x49d/0x3170 [ 333.055777][ T5112] ? bond_mii_monitor+0x17f/0x3170 [ 333.055794][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.055817][ T5112] ? __pfx_bond_mii_monitor+0x10/0x10 [ 333.055835][ T5112] ? register_lock_class+0x54/0x330 [ 333.055851][ T5112] ? __lock_acquire+0xad5/0xd80 [ 333.055876][ T5112] ? process_scheduled_works+0x9cb/0x18e0 [ 333.055892][ T5112] process_scheduled_works+0xac3/0x18e0 [ 333.055921][ T5112] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.055941][ T5112] ? assign_work+0x367/0x3d0 [ 333.055958][ T5112] worker_thread+0x870/0xd50 [ 333.055981][ T5112] ? __kthread_parkme+0x1a8/0x200 [ 333.056003][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 333.056021][ T5112] kthread+0x7b7/0x940 [ 333.056041][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 333.056058][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.056076][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.056094][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.056113][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.056136][ T5112] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.056155][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.056173][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.056192][ T5112] ret_from_fork+0x4b/0x80 [ 333.056207][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.056226][ T5112] ret_from_fork_asm+0x1a/0x30 [ 333.056248][ T5112] [ 333.316543][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.323816][ T5112] [ 333.326230][ T5112] ============================= [ 333.331384][ T5112] WARNING: suspicious RCU usage [ 333.336563][ T5112] 6.14.0-syzkaller-09584-g7d06015d936c #0 Not tainted [ 333.344000][ T5112] ----------------------------- [ 333.348876][ T5112] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 333.358058][ T5112] [ 333.358058][ T5112] other info that might help us debug this: [ 333.358058][ T5112] [ 333.368434][ T5112] [ 333.368434][ T5112] rcu_scheduler_active = 2, debug_locks = 1 [ 333.376623][ T5112] 3 locks held by kworker/u8:8/5112: [ 333.381930][ T5112] #0: ffff88805e19a948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 333.392942][ T5112] #1: ffffc900109f7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 333.405940][ T5112] #2: ffffffff8ed3a2a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 333.415787][ T5112] [ 333.415787][ T5112] stack backtrace: [ 333.421695][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 333.421716][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.421727][ T5112] Workqueue: bond0 bond_mii_monitor [ 333.421748][ T5112] Call Trace: [ 333.421755][ T5112] [ 333.421761][ T5112] dump_stack_lvl+0x241/0x360 [ 333.421785][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.421806][ T5112] ? __pfx__printk+0x10/0x10 [ 333.421831][ T5112] lockdep_rcu_suspicious+0x175/0x200 [ 333.421850][ T5112] dev_activate+0x922/0x1240 [ 333.421867][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.421887][ T5112] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 333.421905][ T5112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.421924][ T5112] ? __pfx_dev_activate+0x10/0x10 [ 333.421939][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.421960][ T5112] ? rfc2863_policy+0x1ce/0x3f0 [ 333.421980][ T5112] linkwatch_do_dev+0xfb/0x170 [ 333.421999][ T5112] ethtool_op_get_link+0x15/0x60 [ 333.422016][ T5112] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 333.422031][ T5112] bond_check_dev_link+0x1fb/0x4b0 [ 333.422049][ T5112] ? __pfx_bond_check_dev_link+0x10/0x10 [ 333.422073][ T5112] bond_mii_monitor+0x49d/0x3170 [ 333.422095][ T5112] ? bond_mii_monitor+0x17f/0x3170 [ 333.422113][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.422136][ T5112] ? __pfx_bond_mii_monitor+0x10/0x10 [ 333.422154][ T5112] ? register_lock_class+0x54/0x330 [ 333.422170][ T5112] ? __lock_acquire+0xad5/0xd80 [ 333.422195][ T5112] ? process_scheduled_works+0x9cb/0x18e0 [ 333.422211][ T5112] process_scheduled_works+0xac3/0x18e0 [ 333.422240][ T5112] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.422260][ T5112] ? assign_work+0x367/0x3d0 [ 333.422299][ T5112] worker_thread+0x870/0xd50 [ 333.422322][ T5112] ? __kthread_parkme+0x1a8/0x200 [ 333.422342][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 333.422358][ T5112] kthread+0x7b7/0x940 [ 333.422378][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 333.422395][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.422412][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.422431][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.422450][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.422468][ T5112] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.422484][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.422502][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.422521][ T5112] ret_from_fork+0x4b/0x80 [ 333.422537][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.422555][ T5112] ret_from_fork_asm+0x1a/0x30 [ 333.422576][ T5112] [ 333.446304][ T5112] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 333.680938][ T5112] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5112, name: kworker/u8:8 [ 333.690451][ T5112] preempt_count: 0, expected: 0 [ 333.695789][ T5112] RCU nest depth: 1, expected: 0 [ 333.700779][ T5112] 3 locks held by kworker/u8:8/5112: [ 333.706376][ T5112] #0: ffff88805e19a948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 333.717758][ T5112] #1: ffffc900109f7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 333.730842][ T5112] #2: ffffffff8ed3a2a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 333.740623][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 333.740644][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.740655][ T5112] Workqueue: bond0 bond_mii_monitor [ 333.740676][ T5112] Call Trace: [ 333.740682][ T5112] [ 333.740689][ T5112] dump_stack_lvl+0x241/0x360 [ 333.740714][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.740743][ T5112] __might_resched+0x558/0x6c0 [ 333.740762][ T5112] ? preempt_schedule_notrace+0xf9/0x140 [ 333.740782][ T5112] ? __pfx___might_resched+0x10/0x10 [ 333.740799][ T5112] ? __pfx___schedule+0x10/0x10 [ 333.740823][ T5112] down_read+0x90/0xa50 [ 333.740844][ T5112] ? dump_stack_lvl+0x275/0x360 [ 333.740866][ T5112] ? preempt_schedule_notrace+0x103/0x140 [ 333.740884][ T5112] ? __pfx_down_read+0x10/0x10 [ 333.740905][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.740925][ T5112] ? __pfx__printk+0x10/0x10 [ 333.740947][ T5112] ? dev_get_flags+0x147/0x1d0 [ 333.740968][ T5112] wext_netdev_notifier_call+0x1f/0x120 [ 333.740986][ T5112] notifier_call_chain+0x1a5/0x3f0 [ 333.741008][ T5112] netdev_state_change+0x123/0x1a0 [ 333.741022][ T5112] ? __pfx_netdev_state_change+0x10/0x10 [ 333.741039][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.741060][ T5112] ? rfc2863_policy+0x1ce/0x3f0 [ 333.741081][ T5112] linkwatch_do_dev+0x112/0x170 [ 333.741100][ T5112] ethtool_op_get_link+0x15/0x60 [ 333.741117][ T5112] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 333.741133][ T5112] bond_check_dev_link+0x1fb/0x4b0 [ 333.741151][ T5112] ? __pfx_bond_check_dev_link+0x10/0x10 [ 333.741175][ T5112] bond_mii_monitor+0x49d/0x3170 [ 333.741198][ T5112] ? bond_mii_monitor+0x17f/0x3170 [ 333.741215][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.741244][ T5112] ? __pfx_bond_mii_monitor+0x10/0x10 [ 333.741262][ T5112] ? register_lock_class+0x54/0x330 [ 333.741279][ T5112] ? __lock_acquire+0xad5/0xd80 [ 333.741304][ T5112] ? process_scheduled_works+0x9cb/0x18e0 [ 333.741320][ T5112] process_scheduled_works+0xac3/0x18e0 [ 333.741349][ T5112] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.741370][ T5112] ? assign_work+0x367/0x3d0 [ 333.741388][ T5112] worker_thread+0x870/0xd50 [ 333.741411][ T5112] ? __kthread_parkme+0x1a8/0x200 [ 333.741432][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 333.741456][ T5112] kthread+0x7b7/0x940 [ 333.741484][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 333.741508][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.741532][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.741559][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.741578][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.741597][ T5112] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.741613][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.741632][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.741651][ T5112] ret_from_fork+0x4b/0x80 [ 333.741666][ T5112] ? __pfx_kthread+0x10/0x10 [ 333.741685][ T5112] ret_from_fork_asm+0x1a/0x30 [ 333.741706][ T5112] [ 333.741714][ T5112] [ 334.026382][ T5112] ============================= [ 334.031229][ T5112] [ BUG: Invalid wait context ] [ 334.036080][ T5112] 6.14.0-syzkaller-09584-g7d06015d936c #0 Tainted: G W [ 334.044316][ T5112] ----------------------------- [ 334.049250][ T5112] kworker/u8:8/5112 is trying to lock: [ 334.054709][ T5112] ffffffff900e67d0 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 334.064216][ T5112] other info that might help us debug this: [ 334.070101][ T5112] context-{5:5} [ 334.073555][ T5112] 3 locks held by kworker/u8:8/5112: [ 334.078923][ T5112] #0: ffff88805e19a948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 334.090082][ T5112] #1: ffffc900109f7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 334.102974][ T5112] #2: ffffffff8ed3a2a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 334.112664][ T5112] stack backtrace: [ 334.116402][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: kworker/u8:8 Tainted: G W 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 334.116428][ T5112] Tainted: [W]=WARN [ 334.116434][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.116448][ T5112] Workqueue: bond0 bond_mii_monitor [ 334.116471][ T5112] Call Trace: [ 334.116478][ T5112] [ 334.116486][ T5112] dump_stack_lvl+0x241/0x360 [ 334.116511][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.116534][ T5112] ? __pfx__printk+0x10/0x10 [ 334.116559][ T5112] __lock_acquire+0xc30/0xd80 [ 334.116577][ T5112] lock_acquire+0x116/0x2f0 [ 334.116591][ T5112] ? wext_netdev_notifier_call+0x1f/0x120 [ 334.116613][ T5112] down_read+0xb3/0xa50 [ 334.116636][ T5112] ? wext_netdev_notifier_call+0x1f/0x120 [ 334.116653][ T5112] ? dump_stack_lvl+0x275/0x360 [ 334.116676][ T5112] ? preempt_schedule_notrace+0x103/0x140 [ 334.116695][ T5112] ? __pfx_down_read+0x10/0x10 [ 334.116718][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.116740][ T5112] ? __pfx__printk+0x10/0x10 [ 334.116761][ T5112] ? dev_get_flags+0x147/0x1d0 [ 334.116782][ T5112] wext_netdev_notifier_call+0x1f/0x120 [ 334.116801][ T5112] notifier_call_chain+0x1a5/0x3f0 [ 334.116822][ T5112] netdev_state_change+0x123/0x1a0 [ 334.116838][ T5112] ? __pfx_netdev_state_change+0x10/0x10 [ 334.116855][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.116877][ T5112] ? rfc2863_policy+0x1ce/0x3f0 [ 334.116898][ T5112] linkwatch_do_dev+0x112/0x170 [ 334.116918][ T5112] ethtool_op_get_link+0x15/0x60 [ 334.116937][ T5112] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 334.116954][ T5112] bond_check_dev_link+0x1fb/0x4b0 [ 334.116972][ T5112] ? __pfx_bond_check_dev_link+0x10/0x10 [ 334.116994][ T5112] bond_mii_monitor+0x49d/0x3170 [ 334.117016][ T5112] ? bond_mii_monitor+0x17f/0x3170 [ 334.117035][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.117057][ T5112] ? __pfx_bond_mii_monitor+0x10/0x10 [ 334.117076][ T5112] ? register_lock_class+0x54/0x330 [ 334.117093][ T5112] ? __lock_acquire+0xad5/0xd80 [ 334.117114][ T5112] ? process_scheduled_works+0x9cb/0x18e0 [ 334.117131][ T5112] process_scheduled_works+0xac3/0x18e0 [ 334.117156][ T5112] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.117175][ T5112] ? assign_work+0x367/0x3d0 [ 334.117198][ T5112] worker_thread+0x870/0xd50 [ 334.117220][ T5112] ? __kthread_parkme+0x1a8/0x200 [ 334.117243][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 334.117261][ T5112] kthread+0x7b7/0x940 [ 334.117282][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 334.117300][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.117320][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.117340][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.117360][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.117380][ T5112] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.117397][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 334.117418][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.117440][ T5112] ret_from_fork+0x4b/0x80 [ 334.117457][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.117477][ T5112] ret_from_fork_asm+0x1a/0x30 [ 334.117497][ T5112] [ 334.410263][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.426617][ T5112] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 334.436369][ T5112] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5112, name: kworker/u8:8 [ 334.445759][ T5112] preempt_count: 0, expected: 0 [ 334.450811][ T5112] RCU nest depth: 1, expected: 0 [ 334.455894][ T5112] INFO: lockdep is turned off. [ 334.461072][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: kworker/u8:8 Tainted: G W 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 334.461106][ T5112] Tainted: [W]=WARN [ 334.461114][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.461128][ T5112] Workqueue: bond0 bond_mii_monitor [ 334.461158][ T5112] Call Trace: [ 334.461165][ T5112] [ 334.461174][ T5112] dump_stack_lvl+0x241/0x360 [ 334.461206][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.461235][ T5112] ? __pfx__printk+0x10/0x10 [ 334.461257][ T5112] __might_resched+0x558/0x6c0 [ 334.461274][ T5112] ? trace_irq_disable+0x3b/0x120 [ 334.461296][ T5112] ? preempt_schedule_irq+0xee/0x1c0 [ 334.461315][ T5112] ? __pfx___might_resched+0x10/0x10 [ 334.461332][ T5112] ? rcu_is_watching+0x15/0xb0 [ 334.461350][ T5112] ? lock_release+0x4e/0x3e0 [ 334.461362][ T5112] ? br_get_link_af_size_filtered+0xe9/0xd30 [ 334.461380][ T5112] ? fs_reclaim_acquire+0x93/0x130 [ 334.461399][ T5112] kmem_cache_alloc_node_noprof+0x6e/0x3b0 [ 334.461422][ T5112] ? __alloc_skb+0x1c2/0x480 [ 334.461439][ T5112] ? rtnl_prop_list_size+0x1e/0x1e0 [ 334.461462][ T5112] __alloc_skb+0x1c2/0x480 [ 334.461478][ T5112] ? rcu_is_watching+0x15/0xb0 [ 334.461497][ T5112] ? __pfx___alloc_skb+0x10/0x10 [ 334.461514][ T5112] ? if_nlmsg_size+0x75b/0x7b0 [ 334.461534][ T5112] ? if_nlmsg_size+0x544/0x7b0 [ 334.461555][ T5112] rtmsg_ifinfo_build_skb+0x84/0x260 [ 334.461575][ T5112] ? in6_dev_get+0x22a/0x290 [ 334.461593][ T5112] ? notifier_call_chain+0x15a/0x3f0 [ 334.461611][ T5112] rtmsg_ifinfo+0x91/0x1b0 [ 334.461632][ T5112] netdev_state_change+0x13d/0x1a0 [ 334.461646][ T5112] ? __pfx_netdev_state_change+0x10/0x10 [ 334.461661][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.461681][ T5112] ? rfc2863_policy+0x1ce/0x3f0 [ 334.461700][ T5112] linkwatch_do_dev+0x112/0x170 [ 334.461718][ T5112] ethtool_op_get_link+0x15/0x60 [ 334.461734][ T5112] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 334.461749][ T5112] bond_check_dev_link+0x1fb/0x4b0 [ 334.461766][ T5112] ? __pfx_bond_check_dev_link+0x10/0x10 [ 334.461786][ T5112] bond_mii_monitor+0x49d/0x3170 [ 334.461805][ T5112] ? bond_mii_monitor+0x17f/0x3170 [ 334.461822][ T5112] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.461842][ T5112] ? __pfx_bond_mii_monitor+0x10/0x10 [ 334.461860][ T5112] ? register_lock_class+0x54/0x330 [ 334.461874][ T5112] ? __lock_acquire+0xad5/0xd80 [ 334.461894][ T5112] ? process_scheduled_works+0x9cb/0x18e0 [ 334.461910][ T5112] process_scheduled_works+0xac3/0x18e0 [ 334.461933][ T5112] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.461951][ T5112] ? assign_work+0x367/0x3d0 [ 334.461966][ T5112] worker_thread+0x870/0xd50 [ 334.461986][ T5112] ? __kthread_parkme+0x1a8/0x200 [ 334.462003][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 334.462019][ T5112] kthread+0x7b7/0x940 [ 334.462038][ T5112] ? __pfx_worker_thread+0x10/0x10 [ 334.462054][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.462072][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.462090][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.462108][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.462126][ T5112] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.462142][ T5112] ? lockdep_hardirqs_on+0x9d/0x150 [ 334.462161][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.462179][ T5112] ret_from_fork+0x4b/0x80 [ 334.462194][ T5112] ? __pfx_kthread+0x10/0x10 [ 334.462218][ T5112] ret_from_fork_asm+0x1a/0x30 [ 334.462250][ T5112] [ 334.824791][ T5112] bond0: (slave team0): link status definitely up, 0 Mbps full duplex [ 334.833157][ T5112] bond0: active interface up! [ 335.443997][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.484074][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.524661][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.563970][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.603938][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.644230][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.684118][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available