last executing test programs: 14.980000868s ago: executing program 2 (id=3426): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) mlock(&(0x7f00000de000/0x2000)=nil, 0x2000) 14.800014839s ago: executing program 2 (id=3436): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x20, 0xdc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@timestamp={0x44, 0x4, 0x7f, 0x0, 0x9}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 14.599816865s ago: executing program 2 (id=3428): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x300}]}}}}}}}, 0x0) 14.415709756s ago: executing program 2 (id=3429): socket$kcm(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000100)={0x0, 0xfffffffd, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 13.761946615s ago: executing program 2 (id=3431): syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="e2ff"], 0x0) 12.207983919s ago: executing program 2 (id=3442): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 7.77687161s ago: executing program 4 (id=3469): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x8100) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) 7.651923652s ago: executing program 4 (id=3470): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x300}]}}}}}}}, 0x0) 7.645645955s ago: executing program 4 (id=3471): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x83}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.44708391s ago: executing program 4 (id=3472): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}) 5.183976632s ago: executing program 3 (id=3496): r0 = eventfd(0x401) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) 4.800624421s ago: executing program 4 (id=3498): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000140)=[{0x9, 0x2010, 0x0, 0x0}, {0x1, 0x6000, 0x0, 0x0}], 0x2}) 4.29564747s ago: executing program 3 (id=3499): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="8b4488a1aae397"], 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 3.986677539s ago: executing program 0 (id=3503): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) write(0xffffffffffffffff, &(0x7f00000000c0)="8783522e", 0x4) 3.850615165s ago: executing program 0 (id=3504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @remote, 0x3}, 0x1c, &(0x7f00000003c0)}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x1}, 0x8) 3.708040869s ago: executing program 0 (id=3505): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 3.698913569s ago: executing program 3 (id=3506): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 3.582051601s ago: executing program 0 (id=3507): syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb1, &(0x7f00000001c0)=ANY=[@ANYBLOB="b10396a81af97584d89f1e91d23d4e54996599431b1bee933037c4df4532ce4ef295fa4241cd85e614b04ed5dc8e2e8ba8edce398a10b11590e66313274056d7d1d6e9"]}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04050403c9008108328aa929287e5a34ce42eab2076f08e12cf40c071056654f0a"], 0x7) 3.548370613s ago: executing program 3 (id=3508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 2.743934313s ago: executing program 0 (id=3509): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}) 2.633706876s ago: executing program 3 (id=3510): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f000000540b4550"], 0x0}, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000080)={0x3, 0x100}) 2.470744191s ago: executing program 1 (id=3512): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc091}, 0x1) 2.356119876s ago: executing program 1 (id=3513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) 1.652879134s ago: executing program 4 (id=3514): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000080) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000083090000000b93bff0"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, 0x0}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) 1.652028709s ago: executing program 1 (id=3523): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 1.524322264s ago: executing program 1 (id=3515): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c) 1.371936852s ago: executing program 1 (id=3516): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3fffff) 1.325540014s ago: executing program 1 (id=3517): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000940)=ANY=[@ANYBLOB="400e06"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 713.451056ms ago: executing program 3 (id=3518): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 0 (id=3519): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0xdf8, 0x10000) kernel console output (not intermixed with test programs): 4491][ T24] usb 5-1: SerialNumber: syz [ 1022.682343][ T5837] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1022.692834][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.700980][ T5837] usb 1-1: Product: syz [ 1022.705238][ T5837] usb 1-1: Manufacturer: syz [ 1022.709883][ T5837] usb 1-1: SerialNumber: syz [ 1022.855631][ T24] usb 5-1: config 0 descriptor?? [ 1022.878891][ T5837] usb 1-1: config 0 descriptor?? [ 1022.998718][T17768] syz.1.3047: attempt to access beyond end of device [ 1022.998718][T17768] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1023.266117][T17762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.280199][T17764] pimreg: entered allmulticast mode [ 1023.483767][T17762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.569626][T17771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.763487][T17771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.848064][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1024.088174][ T24] gspca_sunplus: reg_w_riv err -71 [ 1024.200408][ T5954] usb 1-1: USB disconnect, device number 21 [ 1024.311347][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1024.325407][ T24] usb 5-1: USB disconnect, device number 12 [ 1025.469982][T17778] FAULT_INJECTION: forcing a failure. [ 1025.469982][T17778] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.474248][T10970] usbhid 3-1:0.0: can't add hid device: -71 [ 1025.528158][T17778] CPU: 1 UID: 0 PID: 17778 Comm: syz.4.3049 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1025.528184][T17778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1025.528196][T17778] Call Trace: [ 1025.528204][T17778] [ 1025.528212][T17778] dump_stack_lvl+0x189/0x250 [ 1025.528241][T17778] ? __pfx____ratelimit+0x10/0x10 [ 1025.528265][T17778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1025.528287][T17778] ? __pfx__printk+0x10/0x10 [ 1025.528308][T17778] ? __pfx___might_resched+0x10/0x10 [ 1025.528331][T17778] ? fs_reclaim_acquire+0x7d/0x100 [ 1025.528355][T17778] should_fail_ex+0x414/0x560 [ 1025.528382][T17778] should_failslab+0xa8/0x100 [ 1025.528402][T17778] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1025.528426][T17778] ? sk_prot_alloc+0x57/0x220 [ 1025.528450][T17778] sk_prot_alloc+0x57/0x220 [ 1025.528467][T17778] ? sk_alloc+0x24/0x370 [ 1025.528487][T17778] sk_alloc+0x3a/0x370 [ 1025.528510][T17778] rxrpc_create+0xd9/0x750 [ 1025.528531][T17778] __sock_create+0x4b0/0x9f0 [ 1025.528566][T17778] __sys_socket+0xd7/0x1b0 [ 1025.528593][T17778] __ia32_sys_socket+0x7a/0x90 [ 1025.528618][T17778] __do_fast_syscall_32+0xb6/0x2b0 [ 1025.528642][T17778] ? lockdep_hardirqs_on+0x9c/0x150 [ 1025.528668][T17778] do_fast_syscall_32+0x34/0x80 [ 1025.528690][T17778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1025.528710][T17778] RIP: 0023:0xf70ae539 [ 1025.528725][T17778] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1025.528741][T17778] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000167 [ 1025.528759][T17778] RAX: ffffffffffffffda RBX: 0000000000000021 RCX: 0000000000000002 [ 1025.528771][T17778] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1025.528781][T17778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1025.528791][T17778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1025.528801][T17778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1025.528828][T17778] [ 1025.547729][T10970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1025.554612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.560698][T10970] usb 3-1: USB disconnect, device number 3 [ 1028.987256][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1029.064664][ T980] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1029.107976][T10970] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1029.154198][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1029.181189][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1029.207776][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.227570][ T24] usb 3-1: Product: syz [ 1029.231780][ T24] usb 3-1: Manufacturer: syz [ 1029.264443][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 1029.264512][ T24] usb 3-1: SerialNumber: syz [ 1029.278479][ T980] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1029.291386][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.300717][T10970] usb 2-1: config 0 has no interfaces? [ 1029.306635][ T980] usb 4-1: Product: syz [ 1029.311271][ T980] usb 4-1: Manufacturer: syz [ 1029.315111][ T24] usb 3-1: config 0 descriptor?? [ 1029.316768][ T980] usb 4-1: SerialNumber: syz [ 1029.334586][ T980] usb 4-1: config 0 descriptor?? [ 1029.339867][T10970] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1029.349400][T10970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.364207][T10970] usb 2-1: Product: syz [ 1029.369464][T10970] usb 2-1: Manufacturer: syz [ 1029.375322][T10970] usb 2-1: SerialNumber: syz [ 1029.394454][T10970] usb 2-1: config 0 descriptor?? [ 1029.566801][T17820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.577326][T17820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.587261][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1029.615584][T17821] pimreg: entered allmulticast mode [ 1029.622214][T17821] pimreg: left allmulticast mode [ 1029.700446][T17825] syz.0.3062: attempt to access beyond end of device [ 1029.700446][T17825] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1029.797620][ T980] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1030.039443][ T980] gspca_sunplus: reg_w_riv err -71 [ 1030.072409][ T980] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1030.128875][ T980] usb 4-1: USB disconnect, device number 4 [ 1030.236318][ T5954] usb 2-1: USB disconnect, device number 46 [ 1031.072509][T17851] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3067'. [ 1031.751160][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1031.780436][ T24] usb 3-1: USB disconnect, device number 4 [ 1032.353420][T17863] loop2: detected capacity change from 0 to 7 [ 1032.368007][T17863] Dev loop2: unable to read RDB block 7 [ 1032.392576][T17863] loop2: unable to read partition table [ 1032.427805][T17863] loop2: partition table beyond EOD, truncated [ 1032.500064][T17863] loop_reread_partitions: partition scan of loop2 (x鼦熝鄸 ) failed (rc=-5) [ 1033.244272][ T5954] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1033.408194][ T5954] usb 2-1: config 0 has no interfaces? [ 1033.416443][ T5954] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1033.425634][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.435911][ T5954] usb 2-1: Product: syz [ 1033.440237][ T5954] usb 2-1: Manufacturer: syz [ 1033.458070][ T5954] usb 2-1: SerialNumber: syz [ 1033.464220][ T5871] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 1033.477515][ T5954] usb 2-1: config 0 descriptor?? [ 1033.584256][ T980] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1033.649527][ T5871] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1033.660006][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.672658][ T5871] usb 5-1: config 0 has no interface number 0 [ 1033.678854][ T5871] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1033.689113][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.705319][T17870] pimreg: entered allmulticast mode [ 1033.711719][T17870] pimreg: left allmulticast mode [ 1033.735997][ T5871] usb 5-1: config 0 descriptor?? [ 1033.744939][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 1033.752933][ T5871] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1033.761567][ T980] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1033.775028][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.783463][ T980] usb 4-1: Product: syz [ 1033.798926][ T980] usb 4-1: Manufacturer: syz [ 1033.812206][ T980] usb 4-1: SerialNumber: syz [ 1033.821205][ T980] usb 4-1: config 0 descriptor?? [ 1033.909461][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'. [ 1033.922721][T17890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3078'. [ 1033.979417][ T5837] usb 5-1: USB disconnect, device number 13 [ 1034.050427][T17884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.061616][T17884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.336773][ T980] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1034.366348][ T5918] usb 2-1: USB disconnect, device number 47 [ 1034.451484][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3081'. [ 1034.469489][T17904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3081'. [ 1034.591472][ T980] gspca_sunplus: reg_w_riv err -71 [ 1034.601063][ T980] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1034.657497][ T980] usb 4-1: USB disconnect, device number 5 [ 1036.375214][T17900] syz.2.3080: attempt to access beyond end of device [ 1036.375214][T17900] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1037.446604][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1037.459771][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1038.094339][T16564] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1038.293699][ T980] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 1038.301947][ T5918] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1038.316888][T16564] usb 4-1: config 0 has no interfaces? [ 1038.327444][T16564] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1038.338164][T16564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.350481][T16564] usb 4-1: Product: syz [ 1038.355749][T16564] usb 4-1: Manufacturer: syz [ 1038.361727][T16564] usb 4-1: SerialNumber: syz [ 1038.412691][T16564] usb 4-1: config 0 descriptor?? [ 1038.493123][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 1038.500376][ T980] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.509017][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.519729][ T980] usb 1-1: config 0 has no interface number 0 [ 1038.526133][ T980] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1038.535766][ T5918] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1038.548087][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.625394][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.633467][ T5918] usb 2-1: Product: syz [ 1038.671683][ T5918] usb 2-1: Manufacturer: syz [ 1038.696123][ T980] usb 1-1: config 0 descriptor?? [ 1038.701521][ T5918] usb 2-1: SerialNumber: syz [ 1038.774872][T17948] pimreg: entered allmulticast mode [ 1038.781233][T17948] pimreg: left allmulticast mode [ 1039.066345][ T980] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1039.073410][ T5918] usb 2-1: config 0 descriptor?? [ 1039.267902][T16564] usb 1-1: USB disconnect, device number 22 [ 1039.314752][T17958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.323631][T17958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.544370][ T5918] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1039.758270][ T5918] gspca_sunplus: reg_w_riv err -71 [ 1039.763515][ T5918] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1040.048704][ T5918] usb 2-1: USB disconnect, device number 48 [ 1040.223266][ T980] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1040.409646][ T980] usb 3-1: config 0 has no interfaces? [ 1040.431763][ T980] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1040.454382][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.462590][ T980] usb 3-1: Product: syz [ 1040.467448][ T980] usb 3-1: Manufacturer: syz [ 1040.472152][ T980] usb 3-1: SerialNumber: syz [ 1040.485955][ T980] usb 3-1: config 0 descriptor?? [ 1040.751613][T17972] pimreg: entered allmulticast mode [ 1040.762322][T17972] pimreg: left allmulticast mode [ 1040.931786][ T5918] usb 4-1: USB disconnect, device number 6 [ 1041.016544][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'. [ 1041.025705][T17983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3101'. [ 1042.398501][T18003] netlink: 'syz.3.3107': attribute type 1 has an invalid length. [ 1043.280478][T18003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1043.302786][T18009] bond1: (slave geneve2): making interface the new active one [ 1043.315325][T18009] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1043.394540][ T24] usb 3-1: USB disconnect, device number 5 [ 1043.416321][T18011] bond1: entered promiscuous mode [ 1043.421669][T18011] geneve2: entered promiscuous mode [ 1043.534056][T18017] syz.4.3106: attempt to access beyond end of device [ 1043.534056][T18017] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1043.904262][ T24] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1044.035280][ T980] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1044.095802][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1044.104361][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.115108][ T24] usb 3-1: config 0 has no interface number 0 [ 1044.131355][ T24] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1044.144522][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1044.153682][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.165497][ T24] usb 3-1: config 0 descriptor?? [ 1044.175205][ T24] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1044.204605][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'. [ 1044.211505][ T980] usb 4-1: config 0 has no interfaces? [ 1044.213754][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3113'. [ 1044.236748][ T980] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1044.250778][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.259860][ T5918] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1044.272300][ T980] usb 4-1: Product: syz [ 1044.280540][ T980] usb 4-1: Manufacturer: syz [ 1044.293858][ T980] usb 4-1: SerialNumber: syz [ 1044.309408][ T980] usb 4-1: config 0 descriptor?? [ 1044.389226][ T980] usb 3-1: USB disconnect, device number 6 [ 1044.424703][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 1044.441382][ T5918] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1044.461860][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.471103][ T5918] usb 2-1: Product: syz [ 1044.480332][ T5918] usb 2-1: Manufacturer: syz [ 1044.485499][ T5918] usb 2-1: SerialNumber: syz [ 1044.500504][ T5918] usb 2-1: config 0 descriptor?? [ 1044.554875][T18025] pimreg: entered allmulticast mode [ 1044.561486][T18025] pimreg: left allmulticast mode [ 1044.742966][T18028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.754617][T18028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.979189][ T5918] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1045.199068][ T5918] gspca_sunplus: reg_w_riv err -71 [ 1045.210555][ T5918] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1045.229296][ T5918] usb 2-1: USB disconnect, device number 49 [ 1046.705600][ T5918] usb 4-1: USB disconnect, device number 7 [ 1047.645955][T18066] loop2: detected capacity change from 0 to 7 [ 1047.657508][T18062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3121'. [ 1047.683272][ T30] audit: type=1326 audit(1751253176.916:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1047.716363][ T5844] Dev loop2: unable to read RDB block 7 [ 1047.722118][ T5844] loop2: unable to read partition table [ 1048.034647][ T5844] loop2: partition table beyond EOD, truncated [ 1048.202851][T18066] Dev loop2: unable to read RDB block 7 [ 1048.211356][T18066] loop2: unable to read partition table [ 1048.351355][ T30] audit: type=1326 audit(1751253176.916:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1048.355417][T18066] loop2: partition table beyond EOD, truncated [ 1048.460457][T18066] loop_reread_partitions: partition scan of loop2 (x鼦熝鄸 ) failed (rc=-5) [ 1048.514227][T16564] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 1048.866032][T16564] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1049.102086][ T30] audit: type=1326 audit(1751253176.916:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1049.177634][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1049.306009][T16564] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1049.374410][ T30] audit: type=1326 audit(1751253176.916:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1049.412735][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1049.489509][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1049.643836][ T30] audit: type=1326 audit(1751253176.916:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1049.714464][T16564] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1049.768121][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1049.804391][T16564] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1049.821249][ T30] audit: type=1326 audit(1751253176.916:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1049.829501][T18073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3123'. [ 1049.849698][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1049.873216][ T30] audit: type=1326 audit(1751253176.916:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1049.900477][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1049.952594][T16564] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1049.960782][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1049.977134][ T30] audit: type=1326 audit(1751253176.916:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1049.999999][T16564] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1050.000742][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1050.041501][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1050.061537][ T30] audit: type=1326 audit(1751253176.916:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1050.084033][T16564] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1050.093100][T18077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1050.097923][ T30] audit: type=1326 audit(1751253176.916:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1050.138301][T16564] usb 2-1: string descriptor 0 read error: -22 [ 1050.144674][T16564] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1050.162042][T16564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.182064][T16564] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1050.386249][T18070] FAULT_INJECTION: forcing a failure. [ 1050.386249][T18070] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.400405][T18070] CPU: 1 UID: 0 PID: 18070 Comm: syz.1.3122 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1050.400429][T18070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1050.400440][T18070] Call Trace: [ 1050.400447][T18070] [ 1050.400455][T18070] dump_stack_lvl+0x189/0x250 [ 1050.400478][T18070] ? __pfx____ratelimit+0x10/0x10 [ 1050.400493][T18070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1050.400507][T18070] ? __pfx__printk+0x10/0x10 [ 1050.400521][T18070] ? __pfx___might_resched+0x10/0x10 [ 1050.400535][T18070] ? fs_reclaim_acquire+0x7d/0x100 [ 1050.400550][T18070] should_fail_ex+0x414/0x560 [ 1050.400565][T18070] should_failslab+0xa8/0x100 [ 1050.400576][T18070] __kmalloc_cache_noprof+0x70/0x3d0 [ 1050.400586][T18070] ? dummy_urb_enqueue+0x7c/0x780 [ 1050.400598][T18070] dummy_urb_enqueue+0x7c/0x780 [ 1050.400611][T18070] usb_hcd_submit_urb+0x325/0x1aa0 [ 1050.400628][T18070] adu_write+0x870/0xed0 [ 1050.400648][T18070] ? __pfx_adu_write+0x10/0x10 [ 1050.400659][T18070] ? __pfx_default_wake_function+0x10/0x10 [ 1050.400673][T18070] ? bpf_lsm_file_permission+0x9/0x20 [ 1050.400687][T18070] ? security_file_permission+0x75/0x290 [ 1050.400697][T18070] ? rw_verify_area+0x258/0x650 [ 1050.400711][T18070] ? __pfx_adu_write+0x10/0x10 [ 1050.400723][T18070] vfs_write+0x27e/0xa90 [ 1050.400741][T18070] ? __pfx_vfs_write+0x10/0x10 [ 1050.400756][T18070] ? __fget_files+0x2a/0x420 [ 1050.400769][T18070] ? __fget_files+0x2a/0x420 [ 1050.400778][T18070] ? __fget_files+0x3a0/0x420 [ 1050.400787][T18070] ? __fget_files+0x2a/0x420 [ 1050.400801][T18070] ksys_write+0x145/0x250 [ 1050.400812][T18070] ? __pfx_ksys_write+0x10/0x10 [ 1050.400822][T18070] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1050.400836][T18070] ? lockdep_hardirqs_on+0x9c/0x150 [ 1050.400850][T18070] __do_fast_syscall_32+0xb6/0x2b0 [ 1050.400865][T18070] ? lockdep_hardirqs_on+0x9c/0x150 [ 1050.400880][T18070] do_fast_syscall_32+0x34/0x80 [ 1050.400894][T18070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1050.400906][T18070] RIP: 0023:0xf70ce539 [ 1050.400915][T18070] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1050.400923][T18070] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1050.400934][T18070] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 1050.400941][T18070] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.400946][T18070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1050.400951][T18070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1050.400957][T18070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1050.400971][T18070] [ 1050.401101][T18070] usb 2-1: Couldn't submit interrupt_out_urb -12 [ 1050.694291][ T5918] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 1051.340694][ T5918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1051.809360][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.820315][ T980] usb 2-1: USB disconnect, device number 50 [ 1051.847434][ T5918] usb 5-1: config 0 has no interface number 0 [ 1051.916309][ T5918] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1051.984386][T16564] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1052.038621][ T5918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1052.143870][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.177346][ T5918] usb 5-1: config 0 descriptor?? [ 1052.178059][T16564] usb 1-1: Using ep0 maxpacket: 8 [ 1052.238516][ T5918] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1052.254300][T16564] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1052.293586][T16564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.312137][T16564] usb 1-1: Product: syz [ 1052.544308][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1052.555731][T16564] usb 1-1: Manufacturer: syz [ 1052.582942][T16564] usb 1-1: SerialNumber: syz [ 1052.621399][T16564] usb 1-1: config 0 descriptor?? [ 1052.867817][ T24] usb 2-1: config 0 has no interfaces? [ 1053.023035][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1053.365967][T18097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.530025][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.584833][T18097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.854315][ T24] usb 2-1: Product: syz [ 1053.921581][ T24] usb 2-1: Manufacturer: syz [ 1054.058943][ T980] usb 5-1: USB disconnect, device number 14 [ 1054.204293][ T24] usb 2-1: SerialNumber: syz [ 1054.217712][T16564] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1054.245865][ T24] usb 2-1: config 0 descriptor?? [ 1054.424703][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.431292][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.469879][T16564] gspca_sunplus: reg_w_riv err -71 [ 1054.544330][T16564] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1054.703569][T16564] usb 1-1: USB disconnect, device number 23 [ 1056.070907][T12120] usb 2-1: USB disconnect, device number 51 [ 1056.224448][ T5954] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1056.414313][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 1056.471690][ T5954] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1057.147211][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.279054][ T5954] usb 1-1: config 0 descriptor?? [ 1057.303123][T18106] pimreg: entered allmulticast mode [ 1057.617422][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 1057.626636][T18143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3138'. [ 1057.724414][ T5954] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1057.746204][ T5954] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1057.773242][ T5954] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1058.557005][T18149] FAULT_INJECTION: forcing a failure. [ 1058.557005][T18149] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.575571][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.2.3140 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1058.575596][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1058.575606][T18149] Call Trace: [ 1058.575615][T18149] [ 1058.575623][T18149] dump_stack_lvl+0x189/0x250 [ 1058.575652][T18149] ? __pfx____ratelimit+0x10/0x10 [ 1058.575676][T18149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.575699][T18149] ? __pfx__printk+0x10/0x10 [ 1058.575724][T18149] ? __pfx___might_resched+0x10/0x10 [ 1058.575747][T18149] ? fs_reclaim_acquire+0x7d/0x100 [ 1058.575771][T18149] should_fail_ex+0x414/0x560 [ 1058.575797][T18149] should_failslab+0xa8/0x100 [ 1058.575818][T18149] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 1058.575839][T18149] ? rcu_is_watching+0x15/0xb0 [ 1058.575863][T18149] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1058.575885][T18149] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 1058.575907][T18149] ? mas_alloc_nodes+0x2e9/0x8e0 [ 1058.575934][T18149] mas_alloc_nodes+0x447/0x8e0 [ 1058.575964][T18149] mas_preallocate+0x3ad/0x6f0 [ 1058.575992][T18149] ? __pfx_mas_preallocate+0x10/0x10 [ 1058.576025][T18149] ? __mas_set_range+0x12f/0x3c0 [ 1058.576053][T18149] __split_vma+0x2fa/0xa00 [ 1058.576080][T18149] ? load_gs_index+0x169/0x190 [ 1058.576103][T18149] ? __pfx___split_vma+0x10/0x10 [ 1058.576124][T18149] ? kvm_sched_clock_read+0x11/0x20 [ 1058.576156][T18149] ? __switch_to+0xd74/0x1600 [ 1058.576182][T18149] vms_gather_munmap_vmas+0x2de/0x12b0 [ 1058.576209][T18149] ? finish_task_switch+0x18b/0x950 [ 1058.576242][T18149] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1058.576271][T18149] ? rcu_is_watching+0x15/0xb0 [ 1058.576295][T18149] ? trace_sched_exit_tp+0x38/0x120 [ 1058.576322][T18149] do_vmi_align_munmap+0x25d/0x420 [ 1058.576363][T18149] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1058.576407][T18149] ? mas_find+0x962/0xc10 [ 1058.576434][T18149] do_vmi_munmap+0x253/0x2e0 [ 1058.576467][T18149] do_munmap+0xe1/0x140 [ 1058.576484][T18149] ? __lock_acquire+0xab9/0xd20 [ 1058.576507][T18149] ? __pfx_do_munmap+0x10/0x10 [ 1058.576544][T18149] mremap_to+0x56a/0x8b0 [ 1058.576575][T18149] ? __pfx_mremap_to+0x10/0x10 [ 1058.576601][T18149] ? __pfx_down_write_killable+0x10/0x10 [ 1058.576629][T18149] __se_sys_mremap+0x8ac/0xc00 [ 1058.576668][T18149] ? __pfx___se_sys_mremap+0x10/0x10 [ 1058.576687][T18149] ? ksys_write+0x22a/0x250 [ 1058.576710][T18149] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1058.576734][T18149] ? __ia32_sys_mremap+0x20/0xc0 [ 1058.576758][T18149] __do_fast_syscall_32+0xb6/0x2b0 [ 1058.576781][T18149] ? lockdep_hardirqs_on+0x9c/0x150 [ 1058.576806][T18149] do_fast_syscall_32+0x34/0x80 [ 1058.576828][T18149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1058.576846][T18149] RIP: 0023:0xf7f88539 [ 1058.576862][T18149] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1058.576877][T18149] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 1058.576895][T18149] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000001000 [ 1058.576908][T18149] RDX: 0000000000001000 RSI: 0000000000000007 RDI: 0000000080481000 [ 1058.576919][T18149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1058.576930][T18149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1058.576940][T18149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1058.576968][T18149] [ 1058.741843][T18147] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1058.959725][T18147] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1059.062037][T18147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1059.076388][T18160] syz.2.3145 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1059.089008][T18147] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1060.580736][T18152] syz.4.3143: attempt to access beyond end of device [ 1060.580736][T18152] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1060.918578][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1060.962076][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3152'. [ 1060.994745][T18186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3152'. [ 1061.404795][ T24] usb 2-1: config 0 has no interfaces? [ 1061.618024][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1061.640948][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.856291][ T24] usb 2-1: Product: syz [ 1061.863826][ T24] usb 2-1: Manufacturer: syz [ 1061.903353][ T24] usb 2-1: SerialNumber: syz [ 1062.415463][ T24] usb 2-1: config 0 descriptor?? [ 1062.440582][T18205] FAULT_INJECTION: forcing a failure. [ 1062.440582][T18205] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.453499][T18205] CPU: 1 UID: 0 PID: 18205 Comm: syz.3.3155 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1062.453526][T18205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1062.453538][T18205] Call Trace: [ 1062.453548][T18205] [ 1062.453558][T18205] dump_stack_lvl+0x189/0x250 [ 1062.453591][T18205] ? __pfx____ratelimit+0x10/0x10 [ 1062.453619][T18205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1062.453648][T18205] ? __pfx__printk+0x10/0x10 [ 1062.453673][T18205] ? __lock_acquire+0xab9/0xd20 [ 1062.453711][T18205] should_fail_ex+0x414/0x560 [ 1062.453742][T18205] should_failslab+0xa8/0x100 [ 1062.453765][T18205] __kmalloc_cache_noprof+0x70/0x3d0 [ 1062.453785][T18205] ? tipc_nametbl_insert_publ+0x8a6/0x1340 [ 1062.453799][T18205] tipc_nametbl_insert_publ+0x8a6/0x1340 [ 1062.453822][T18205] tipc_nametbl_publish+0xc7/0x1f0 [ 1062.453835][T18205] tipc_sk_publish+0x1c3/0x450 [ 1062.453846][T18205] ? lockdep_hardirqs_on+0x9c/0x150 [ 1062.453862][T18205] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1062.453875][T18205] ? do_raw_spin_unlock+0x122/0x240 [ 1062.453888][T18205] tipc_sk_bind+0x221/0x300 [ 1062.453901][T18205] __sys_bind+0x2c6/0x3e0 [ 1062.453911][T18205] ? __pfx___sys_bind+0x10/0x10 [ 1062.453931][T18205] __ia32_sys_bind+0x7a/0x90 [ 1062.453941][T18205] __do_fast_syscall_32+0xb6/0x2b0 [ 1062.453955][T18205] ? lockdep_hardirqs_on+0x9c/0x150 [ 1062.453970][T18205] do_fast_syscall_32+0x34/0x80 [ 1062.453985][T18205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.453997][T18205] RIP: 0023:0xf710e539 [ 1062.454006][T18205] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1062.454015][T18205] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 1062.454025][T18205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1062.454032][T18205] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1062.454038][T18205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1062.454043][T18205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1062.454049][T18205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1062.454063][T18205] [ 1062.454068][T18205] tipc: Failed to bind to 66,0,12 [ 1062.820539][T18207] ptrace attach of "./syz-executor exec"[16011] was attempted by "./syz-executor exec"[18207] [ 1062.886185][T18207] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3156'. [ 1062.915342][T18182] pimreg: left allmulticast mode [ 1063.164352][ T5837] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1063.297369][T18215] fuse: Unknown parameter 'gro8&蜥y񷂁鯯皍S)d' [ 1063.326051][ T5837] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1063.335313][ T5837] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1063.356595][ T5837] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1063.376681][T18200] syz.0.3154: attempt to access beyond end of device [ 1063.376681][T18200] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1063.434926][ T5837] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1063.450764][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.462420][ T5837] usb 4-1: Product: syz [ 1063.474840][ T5837] usb 4-1: Manufacturer: syz [ 1063.487070][ T5837] usb 4-1: SerialNumber: syz [ 1063.703294][ T5837] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1063.719872][ T5837] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 1063.728811][ T5837] usb 4-1: 2:1: All rates were zero [ 1063.761298][ T5837] usb 4-1: USB disconnect, device number 8 [ 1063.803851][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.045721][T12120] usb 2-1: USB disconnect, device number 52 [ 1064.193741][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3160'. [ 1064.400798][T18227] x_tables: duplicate underflow at hook 2 [ 1064.815051][T10970] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1064.986382][T10970] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1065.034542][T10970] usb 4-1: config 0 has no interface number 0 [ 1065.080002][T10970] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1065.100592][T10970] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1065.131448][T10970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.168686][T10970] usb 4-1: config 0 descriptor?? [ 1065.193855][T10970] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1065.415016][T12120] usb 4-1: USB disconnect, device number 9 [ 1065.554453][T10970] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1065.760277][T10970] usb 5-1: config 0 has no interfaces? [ 1065.778167][T10970] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1065.796557][T10970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.829351][T10970] usb 5-1: Product: syz [ 1065.833554][T10970] usb 5-1: Manufacturer: syz [ 1065.839734][T10970] usb 5-1: SerialNumber: syz [ 1065.849084][T10970] usb 5-1: config 0 descriptor?? [ 1066.392660][T18257] pimreg: entered allmulticast mode [ 1066.406383][T18257] pimreg: left allmulticast mode [ 1066.523392][T18274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3175'. [ 1066.727966][T18276] FAULT_INJECTION: forcing a failure. [ 1066.727966][T18276] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.858791][T18276] CPU: 1 UID: 0 PID: 18276 Comm: syz.1.3176 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1066.858816][T18276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1066.858836][T18276] Call Trace: [ 1066.858844][T18276] [ 1066.858852][T18276] dump_stack_lvl+0x189/0x250 [ 1066.858882][T18276] ? __pfx____ratelimit+0x10/0x10 [ 1066.858905][T18276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1066.858929][T18276] ? __pfx__printk+0x10/0x10 [ 1066.858953][T18276] ? __pfx___might_resched+0x10/0x10 [ 1066.858974][T18276] ? fs_reclaim_acquire+0x7d/0x100 [ 1066.858999][T18276] should_fail_ex+0x414/0x560 [ 1066.859024][T18276] should_failslab+0xa8/0x100 [ 1066.859044][T18276] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1066.859069][T18276] ? getname_flags+0xb8/0x540 [ 1066.859091][T18276] getname_flags+0xb8/0x540 [ 1066.859116][T18276] __ia32_sys_renameat2+0xba/0xe0 [ 1066.859138][T18276] __do_fast_syscall_32+0xb6/0x2b0 [ 1066.859161][T18276] ? lockdep_hardirqs_on+0x9c/0x150 [ 1066.859188][T18276] do_fast_syscall_32+0x34/0x80 [ 1066.859211][T18276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1066.859231][T18276] RIP: 0023:0xf70ce539 [ 1066.859246][T18276] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1066.859262][T18276] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 1066.859280][T18276] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600 [ 1066.859293][T18276] RDX: 00000000ffffff9c RSI: 0000000080000640 RDI: 0000000000000002 [ 1066.859304][T18276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1066.859315][T18276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1066.859325][T18276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1066.859351][T18276] [ 1067.045343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.131544][T18302] random: crng reseeded on system resumption [ 1068.595292][ T24] usb 5-1: USB disconnect, device number 15 [ 1068.885903][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1068.895112][T18310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1068.944342][ T5920] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1069.144287][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 1069.152033][ T5920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1069.161067][ T5920] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.177184][ T5920] usb 4-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1069.234443][ T5918] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 1069.242182][ T5920] usb 4-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 1069.253390][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.274851][ T5920] usb 4-1: Product: syz [ 1069.288005][ T5920] usb 4-1: Manufacturer: syz [ 1069.299315][ T5920] usb 4-1: SerialNumber: syz [ 1069.760725][ T5918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1069.767541][ T5920] usb 4-1: USB disconnect, device number 10 [ 1069.770436][ T5918] usb 5-1: config 0 has no interface number 0 [ 1069.781013][ T5918] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1069.834183][ T5918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1069.849358][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.865837][ T5918] usb 5-1: config 0 descriptor?? [ 1069.898554][ T5918] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1070.128007][ T5918] usb 5-1: USB disconnect, device number 16 [ 1070.589894][T18329] syz.3.3190: attempt to access beyond end of device [ 1070.589894][T18329] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1071.056664][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 1072.014390][ T5871] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1072.118313][T18338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1072.278222][ T5871] usb 5-1: config 0 has no interfaces? [ 1072.295295][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1072.304525][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1072.334064][ T5871] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1072.384276][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.439008][ T5871] usb 5-1: Product: syz [ 1072.443220][ T5871] usb 5-1: Manufacturer: syz [ 1072.464189][ T5871] usb 5-1: SerialNumber: syz [ 1072.520982][ T5871] usb 5-1: config 0 descriptor?? [ 1073.517695][T18348] pimreg: entered allmulticast mode [ 1073.612458][T18358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.647205][ T24] usb 5-1: USB disconnect, device number 17 [ 1074.823441][T12120] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 1074.986537][T12120] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1074.999780][T12120] usb 2-1: config 0 has no interface number 0 [ 1075.024248][T12120] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1075.054981][T12120] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1075.082532][T12120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.152337][T12120] usb 2-1: config 0 descriptor?? [ 1075.203767][T18393] syz.3.3207: attempt to access beyond end of device [ 1075.203767][T18393] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1075.281249][T12120] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1075.382405][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 1075.430984][T18406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3209'. [ 1075.483478][ T5871] usb 2-1: USB disconnect, device number 53 [ 1075.707470][T18402] syz.2.3206: attempt to access beyond end of device [ 1075.707470][T18402] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1076.503263][T18432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1077.401865][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.633616][T18435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.135970][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 1078.145075][T18447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3220'. [ 1078.217851][T10970] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1078.405787][T18457] netlink: 'syz.3.3221': attribute type 39 has an invalid length. [ 1078.457813][T18457] veth0_macvtap: left promiscuous mode [ 1078.501854][T10970] usb 2-1: config 0 has no interfaces? [ 1078.855065][T10970] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1078.926693][T10970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.935181][T10970] usb 2-1: Product: syz [ 1078.939509][T10970] usb 2-1: Manufacturer: syz [ 1078.945506][T10970] usb 2-1: SerialNumber: syz [ 1078.951982][T10970] usb 2-1: config 0 descriptor?? [ 1079.169812][T18445] pimreg: entered allmulticast mode [ 1079.176476][T18445] pimreg: left allmulticast mode [ 1079.854299][T18469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.862439][T18469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.880256][T18469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.895646][T18469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.942528][T18470] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.984066][T18470] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.002087][T18469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.028394][T18470] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.040998][T18469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.050692][T18470] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.979676][ T5837] usb 2-1: USB disconnect, device number 54 [ 1081.795845][T18491] syz.1.3230: attempt to access beyond end of device [ 1081.795845][T18491] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1081.844589][ T5837] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1081.882678][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 1081.937367][T18499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3231'. [ 1082.114886][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 1082.179033][ T5837] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1082.195378][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.237772][ T5837] usb 3-1: Product: syz [ 1082.242323][ T5837] usb 3-1: Manufacturer: syz [ 1082.247274][ T5837] usb 3-1: SerialNumber: syz [ 1082.254596][ T5837] usb 3-1: config 0 descriptor?? [ 1082.268903][ T5837] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1082.416133][T18508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 1082.806925][ T5837] gspca_sonixj: reg_w1 err -110 [ 1082.821394][ T5837] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1082.835194][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 1082.845873][T18489] netlink: 'syz.2.3229': attribute type 23 has an invalid length. [ 1083.294232][ T5837] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1083.475066][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 1083.489486][ T5837] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1083.506805][ T5837] usb 4-1: config 0 has no interface number 0 [ 1083.557192][ T5837] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1083.656454][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.064173][ T5837] usb 4-1: Product: syz [ 1084.087958][ T5837] usb 4-1: Manufacturer: syz [ 1084.092572][ T5837] usb 4-1: SerialNumber: syz [ 1084.308557][ T5837] usb 4-1: config 0 descriptor?? [ 1084.349607][ T5837] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1084.614622][ T5837] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1084.661596][ T5837] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1084.844309][ T5918] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1084.961466][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1084.971343][T12120] usb 4-1: USB disconnect, device number 11 [ 1084.988860][T12120] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1085.026945][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1085.035028][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 1085.042131][T12120] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1085.055453][T12120] quatech2 4-1:0.51: device disconnected [ 1085.061228][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1085.069724][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1085.078113][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1085.088325][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1085.121830][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.137270][ T5837] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1085.145151][T16005] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1085.153919][T16005] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1085.161669][T16005] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1085.174428][T16005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1085.186661][T16005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1085.242520][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.285349][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1085.320680][ T5918] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1085.335421][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.336462][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 1085.346516][ T5918] usb 5-1: config 0 descriptor?? [ 1085.361485][ T5837] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1085.373688][ T5837] usb 2-1: config 0 has no interface number 0 [ 1085.393343][ T5837] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1085.403619][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.413412][ T5837] usb 2-1: Product: syz [ 1085.420759][ T5837] usb 2-1: Manufacturer: syz [ 1085.426540][ T5837] usb 2-1: SerialNumber: syz [ 1085.458602][ T5837] usb 2-1: config 0 descriptor?? [ 1085.478449][ T5837] smsc95xx v2.0.0 [ 1085.580792][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1085.582557][ T30] audit: type=1326 audit(1751253214.836:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1085.666539][ T30] audit: type=1326 audit(1751253214.836:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1085.772505][ T30] audit: type=1326 audit(1751253214.836:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1085.838866][ T5920] usb 3-1: USB disconnect, device number 7 [ 1085.909311][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1085.930608][ T5918] HID 045e:07da: Invalid code 65791 type 1 [ 1085.946073][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1085.956398][ T30] audit: type=1326 audit(1751253214.836:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1085.985422][ T30] audit: type=1326 audit(1751253214.836:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1086.203801][ T30] audit: type=1326 audit(1751253214.836:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1086.215455][ T5918] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002F/input/input96 [ 1086.357484][ T30] audit: type=1326 audit(1751253214.836:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1086.786178][ T5918] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1086.804499][ T30] audit: type=1326 audit(1751253214.836:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1086.944229][ T30] audit: type=1326 audit(1751253214.836:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1087.020851][ T5918] usb 5-1: USB disconnect, device number 18 [ 1087.067517][T18542] fido_id[18542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1087.234291][ T30] audit: type=1326 audit(1751253214.836:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1087.244788][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1087.314220][T16005] Bluetooth: hci1: command tx timeout [ 1087.444472][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1088.524832][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1088.576671][ T5837] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1088.608880][ T5837] usb 2-1: USB disconnect, device number 55 [ 1088.924886][ T60] bond0 (unregistering): Released all slaves [ 1089.048912][ T60] tipc: Disabling bearer [ 1089.080076][ T60] tipc: Left network mode [ 1089.251663][T18535] chnl_net:caif_netlink_parms(): no params data found [ 1089.364646][T16005] Bluetooth: hci1: command tx timeout [ 1089.521208][T18577] sock: sock_timestamping_bind_phc: sock not bind to device [ 1089.539290][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 1090.314425][ T5837] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1090.536465][ T5837] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.536494][ T5837] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1090.536547][ T5837] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1090.536569][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.542095][ T5837] usb 2-1: config 0 descriptor?? [ 1090.547209][ T5837] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1090.547255][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 1090.575174][ T5837] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1090.680202][T18615] sctp: [Deprecated]: syz.3.3268 (pid 18615) Use of int in max_burst socket option. [ 1090.680202][T18615] Use struct sctp_assoc_value instead [ 1090.743518][ T5837] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1090.753391][T18591] dvb-usb: bulk message failed: -22 (2/0) [ 1090.769712][ T5837] usb 2-1: media controller created [ 1090.777831][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.816313][T18619] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3270'. [ 1090.823781][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 1090.831314][ T5837] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1090.876784][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input97 [ 1090.917397][ T5837] dvb-usb: schedule remote query interval to 150 msecs. [ 1090.936413][ T5837] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1091.018648][ T5837] usb 2-1: USB disconnect, device number 56 [ 1091.053574][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.117584][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.129592][T18535] bridge_slave_0: entered allmulticast mode [ 1091.139447][T18535] bridge_slave_0: entered promiscuous mode [ 1091.153034][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.162002][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.174206][T18535] bridge_slave_1: entered allmulticast mode [ 1091.182308][T18535] bridge_slave_1: entered promiscuous mode [ 1091.259868][ T5837] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1091.455314][T16005] Bluetooth: hci1: command tx timeout [ 1091.651838][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.746769][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.933545][T18639] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3277'. [ 1092.035163][T18644] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1092.044340][T18644] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1092.074555][T18644] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1092.186262][T18535] team0: Port device team_slave_0 added [ 1092.231503][T18535] team0: Port device team_slave_1 added [ 1092.332715][T18655] loop4: detected capacity change from 0 to 7 [ 1092.344449][ T5918] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1092.358638][ T5844] Dev loop4: unable to read RDB block 7 [ 1092.366819][T18535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.389360][ T5844] loop4: unable to read partition table [ 1092.394611][T10970] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1092.399125][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.433096][ T5844] loop4: partition table beyond EOD, truncated [ 1092.445617][T18535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.460142][T18655] Dev loop4: unable to read RDB block 7 [ 1092.478630][T18655] loop4: unable to read partition table [ 1092.504401][T18655] loop4: partition table beyond EOD, truncated [ 1092.514320][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 1092.523777][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1092.524264][T18655] loop_reread_partitions: partition scan of loop4 (x鼦熝鄸 ) failed (rc=-5) [ 1092.544476][ T5918] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1092.553546][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.575265][ T5200] Dev loop4: unable to read RDB block 7 [ 1092.577530][T10970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.592200][ T5200] loop4: unable to read partition table [ 1092.598861][ T5918] usb 2-1: Product: syz [ 1092.603173][T10970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1092.615190][ T5918] usb 2-1: Manufacturer: syz [ 1092.619805][ T5918] usb 2-1: SerialNumber: syz [ 1092.621939][T18535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.626368][T10970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1092.635792][ T5200] loop4: partition table beyond EOD, [ 1092.643705][ T5918] usb 2-1: config 0 descriptor?? [ 1092.655189][T10970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1092.665560][T10970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1092.678451][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.678544][T18535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.683380][ T5200] truncated [ 1092.711412][ T5918] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1092.751398][T10970] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1092.760852][T10970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1092.782880][T10970] usb 4-1: Product: syz [ 1092.788938][T10970] usb 4-1: Manufacturer: syz [ 1092.793606][T10970] usb 4-1: SerialNumber: syz [ 1092.845459][T10970] usb 4-1: config 0 descriptor?? [ 1093.057146][T10970] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1093.084517][T10970] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1093.128781][T18535] hsr_slave_0: entered promiscuous mode [ 1093.158771][T18535] hsr_slave_1: entered promiscuous mode [ 1093.190163][T18535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.211448][T18535] Cannot create hsr debugfs directory [ 1093.259810][T10970] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1093.271068][T10970] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1093.333262][T10970] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1093.358099][ T5918] gspca_zc3xx: reg_w_i err -71 [ 1093.467493][T10970] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1093.524421][T16005] Bluetooth: hci1: command tx timeout [ 1093.679177][T10970] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1093.696317][T10970] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1093.771980][T10970] usb 4-1: USB disconnect, device number 12 [ 1093.944630][ T5918] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1093.951010][ T5918] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1093.972924][ T5918] usb 2-1: USB disconnect, device number 57 [ 1094.317030][ T5837] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1094.524177][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 1094.574587][ T5837] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1094.612014][ T5837] usb 3-1: config 179 has no interface number 0 [ 1094.629332][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1094.678578][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1094.713592][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1094.750647][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1094.788911][ T5837] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1094.841923][ T5837] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1094.979342][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.074577][T18696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1095.492797][T18739] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1095.514784][T18739] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1095.554398][ T5871] usb 3-1: USB disconnect, device number 8 [ 1095.554541][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1095.569634][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1095.591113][T18739] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1095.970234][T10970] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1096.061132][T18535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1096.105656][T18535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1096.126736][T10970] usb 4-1: too many configurations: 253, using maximum allowed: 8 [ 1096.179939][T10970] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1096.209443][T10970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.257813][T10970] usb 4-1: Product: syz [ 1096.292518][T10970] usb 4-1: Manufacturer: syz [ 1096.313132][T10970] usb 4-1: SerialNumber: syz [ 1096.347734][T10970] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1096.375779][T18535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1096.452197][ T5871] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1096.483367][T18535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1096.654659][ T5837] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1096.832109][ T5837] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1096.859890][ T5837] usb 2-1: config 0 has no interface number 0 [ 1096.869316][ T5837] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1096.906783][ T5837] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1096.915674][ T5918] usb 4-1: USB disconnect, device number 13 [ 1096.943226][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.957483][ T5837] usb 2-1: Product: syz [ 1096.980640][ T5837] usb 2-1: Manufacturer: syz [ 1097.003822][ T5837] usb 2-1: SerialNumber: syz [ 1097.045216][ T5837] usb 2-1: config 0 descriptor?? [ 1097.072866][T18535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.150359][T18535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.215510][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.222865][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.270683][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.279087][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.458835][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3324'. [ 1097.470858][T18788] netlink: 'syz.3.3324': attribute type 7 has an invalid length. [ 1097.492945][T18788] netlink: 'syz.3.3324': attribute type 8 has an invalid length. [ 1097.523979][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 1097.528408][ T5871] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1097.577621][ T5871] ath9k_htc: Failed to initialize the device [ 1097.582895][T18788] ip6gretap0: entered promiscuous mode [ 1097.591305][ T5918] usb 4-1: ath9k_htc: USB layer deinitialized [ 1097.600148][T18788] syz_tun: entered promiscuous mode [ 1097.617819][T18788] gretap0: entered promiscuous mode [ 1097.846265][T18535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.872062][ T5837] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1098.058173][T18535] veth0_vlan: entered promiscuous mode [ 1098.101420][T18535] veth1_vlan: entered promiscuous mode [ 1098.198107][ T60] pimreg (unregistering): left allmulticast mode [ 1098.224732][ T60] pim6reg (unregistering): left allmulticast mode [ 1099.273224][T18828] loop8: detected capacity change from 0 to 8 [ 1099.314614][T18828] Dev loop8: unable to read RDB block 8 [ 1099.320325][T18828] loop8: unable to read partition table [ 1099.331978][T18828] loop8: partition table beyond EOD, truncated [ 1099.356913][ T5837] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1099.368749][T18828] loop_reread_partitions: partition scan of loop8 (x黕>鄸 ) failed (rc=-5) [ 1099.396547][ T5837] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1099.442439][ T5837] usb 2-1: USB disconnect, device number 58 [ 1101.169404][T18535] veth0_macvtap: entered promiscuous mode [ 1101.175740][ T5918] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1101.275780][T18535] veth1_macvtap: entered promiscuous mode [ 1101.369725][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 1101.382842][ T5918] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1101.422413][ T5918] usb 2-1: config 179 has no interface number 0 [ 1101.454605][T18535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.493198][ T5918] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1101.970650][ T5871] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1102.327807][T18890] syz.3.3347 (18890): drop_caches: 1 [ 1102.328727][T18887] syz.3.3347 (18887): drop_caches: 1 [ 1102.342671][ T5918] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1102.364498][ T5918] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1102.377323][T18535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.428005][ T5918] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1102.524379][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.527100][ T30] kauditd_printk_skb: 319 callbacks suppressed [ 1102.527115][ T30] audit: type=1326 audit(1751253231.786:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1102.543762][ T60] IPVS: stop unused estimator thread 0... [ 1102.585323][ T5918] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1102.601703][T18535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.612887][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.629333][ T30] audit: type=1326 audit(1751253231.866:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1102.632065][T18535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.660672][T18535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.680800][T18535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.682534][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1102.716453][ T5918] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1102.730983][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.744447][ T30] audit: type=1326 audit(1751253231.866:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=57 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1102.776966][ T5871] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1102.812174][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.822951][T18873] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1102.924357][ T30] audit: type=1326 audit(1751253231.866:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1102.967103][ T5871] usb 5-1: config 0 descriptor?? [ 1103.042523][ T30] audit: type=1326 audit(1751253231.866:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1103.095803][ T30] audit: type=1326 audit(1751253231.916:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1103.119268][ T30] audit: type=1326 audit(1751253231.916:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1103.184413][T12120] usb 2-1: USB disconnect, device number 59 [ 1103.189640][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1103.198693][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1103.210577][ T30] audit: type=1326 audit(1751253231.946:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1103.239930][ T30] audit: type=1326 audit(1751253231.946:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1103.328401][ T30] audit: type=1326 audit(1751253231.946:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.2.3349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1103.415486][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.422923][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.422950][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.422975][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.464254][ T6251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.472103][ T6251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.519766][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.524186][ T5837] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1103.563960][ T6249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.597702][ T6249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.605725][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.613176][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.647812][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.682656][ T5871] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1103.715848][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.736912][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.750314][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1103.757362][ T5871] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1103.799042][ T5837] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1103.811853][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.825568][ T5837] usb 4-1: config 0 descriptor?? [ 1103.894240][ T5871] usb 5-1: USB disconnect, device number 19 [ 1103.939585][T18928] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1103.963336][T18928] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1103.984939][T18928] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1104.044506][T12120] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1104.119097][T18921] fido_id[18921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1104.226218][T12120] usb 3-1: Using ep0 maxpacket: 16 [ 1104.254478][ T5837] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1104.261922][ T5837] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1104.285574][T12120] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1104.297775][T12120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1104.310166][ T5837] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1104.317828][ T5837] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1104.366121][ T5837] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1104.376865][T12120] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1104.388911][T12120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.408419][ T5837] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1104.445745][T12120] usb 3-1: Product: syz [ 1104.449958][T12120] usb 3-1: Manufacturer: syz [ 1104.504192][T12120] usb 3-1: SerialNumber: syz [ 1104.545736][T12120] usb 3-1: config 0 descriptor?? [ 1104.565362][T12120] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1104.619175][T12120] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1104.665865][T18946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1105.189665][T12120] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1105.212607][T12120] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1105.267777][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1105.290778][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1105.299812][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1105.314862][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1105.324761][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1105.773709][ T5842] Bluetooth: hci1: ACL packet too small [ 1105.936030][ T6258] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.972243][T18951] chnl_net:caif_netlink_parms(): no params data found [ 1106.019010][ T5920] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1106.041564][T12120] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1106.051878][T12120] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1106.059054][T12120] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1106.092824][T12120] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1106.103796][T12120] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1106.112457][T12120] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1106.132864][T12120] usb 3-1: USB disconnect, device number 9 [ 1106.216768][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 1106.238797][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1106.280182][ T6258] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.303955][T16564] usb 4-1: USB disconnect, device number 14 [ 1106.318749][ T5920] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1106.339293][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.385175][ T5920] usb 2-1: Product: syz [ 1106.394546][ T5920] usb 2-1: Manufacturer: syz [ 1106.401100][ T5920] usb 2-1: SerialNumber: syz [ 1106.424857][ T5920] usb 2-1: config 0 descriptor?? [ 1106.451885][ T6258] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.455744][ T5920] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1106.498453][ T5920] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1106.608628][ T6258] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.833071][T18951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.841876][T18951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.858104][T18951] bridge_slave_0: entered allmulticast mode [ 1106.874308][T18951] bridge_slave_0: entered promiscuous mode [ 1106.885617][T18951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.912582][T18951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.928278][T18951] bridge_slave_1: entered allmulticast mode [ 1106.936794][T18951] bridge_slave_1: entered promiscuous mode [ 1107.004394][ T5871] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1107.055524][ T5920] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1107.164420][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 1107.177328][T18951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.181117][ T5871] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1107.201101][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.212595][ T5871] usb 4-1: config 0 descriptor?? [ 1107.230817][ T5871] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1107.297608][T18951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.376577][ T5842] Bluetooth: hci3: command tx timeout [ 1107.546556][ T30] kauditd_printk_skb: 1028 callbacks suppressed [ 1107.546573][ T30] audit: type=1326 audit(1751253236.806:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa3558 code=0x7ffc0000 [ 1107.612190][ T30] audit: type=1326 audit(1751253236.806:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa3558 code=0x7ffc0000 [ 1107.643122][T18951] team0: Port device team_slave_0 added [ 1107.707837][T18951] team0: Port device team_slave_1 added [ 1107.797728][ T30] audit: type=1326 audit(1751253236.806:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa3558 code=0x7ffc0000 [ 1107.953338][ T30] audit: type=1326 audit(1751253236.806:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa3558 code=0x7ffc0000 [ 1108.055918][ T6258] bridge_slave_1: left allmulticast mode [ 1108.063908][ T6258] bridge_slave_1: left promiscuous mode [ 1108.098436][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.121555][ T30] audit: type=1326 audit(1751253236.806:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa3558 code=0x7ffc0000 [ 1108.182359][ T5842] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1108.182754][ T6258] bridge_slave_0: left allmulticast mode [ 1108.191006][ T5842] Bluetooth: hci1: Injecting HCI hardware error event [ 1108.193214][ T5842] Bluetooth: hci1: hardware error 0x00 [ 1108.217266][ T30] audit: type=1326 audit(1751253236.806:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa3558 code=0x7ffc0000 [ 1108.242887][ T30] audit: type=1326 audit(1751253236.806:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1108.248404][ T6258] bridge_slave_0: left promiscuous mode [ 1108.282570][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.305747][T10970] usb 4-1: USB disconnect, device number 15 [ 1108.344410][ T30] audit: type=1326 audit(1751253236.806:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa3558 code=0x7ffc0000 [ 1108.371468][ T30] audit: type=1326 audit(1751253236.806:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1108.408963][ T30] audit: type=1326 audit(1751253236.836:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa3558 code=0x7ffc0000 [ 1108.603814][ T6258] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1109.083042][ T6258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.096346][ T6258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.123149][ T6258] bond0 (unregistering): Released all slaves [ 1109.142963][ T5920] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1109.198446][ T5920] em28xx 2-1:0.0: board has no eeprom [ 1109.324438][ T5920] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1109.411872][ T5920] em28xx 2-1:0.0: dvb set to bulk mode. [ 1109.418018][T12120] em28xx 2-1:0.0: Binding DVB extension [ 1109.445555][T16005] Bluetooth: hci3: command tx timeout [ 1109.478844][ T5920] usb 2-1: USB disconnect, device number 60 [ 1109.515074][ T5920] em28xx 2-1:0.0: Disconnecting em28xx [ 1109.560091][T12120] em28xx 2-1:0.0: Registering input extension [ 1109.570276][ T5920] em28xx 2-1:0.0: Closing input extension [ 1109.675623][ T6258] bond1 (unregistering): Released all slaves [ 1109.805090][ T5920] em28xx 2-1:0.0: Freeing device [ 1109.840319][T18951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.884792][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.916404][T18951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.105079][ T6258] tipc: Disabling bearer [ 1110.174275][ T5920] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1110.182803][T18951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.190094][ T6258] tipc: Left network mode [ 1110.198247][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.257592][T18951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.324369][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1110.356086][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.370678][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.385160][ T6258] IPVS: stopping backup sync thread 10784 ... [ 1110.397958][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1110.426060][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1110.435559][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.504461][ T5920] usb 2-1: config 0 descriptor?? [ 1110.623384][T18951] hsr_slave_0: entered promiscuous mode [ 1110.633037][T18951] hsr_slave_1: entered promiscuous mode [ 1110.659336][T18951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.669253][T18951] Cannot create hsr debugfs directory [ 1110.917867][ T5920] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1110.932839][ T5920] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1110.955628][ T5920] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1110.963093][ T5920] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1111.021440][ T5920] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1111.061891][ T5920] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1111.525253][ T5842] Bluetooth: hci3: command tx timeout [ 1112.154370][T16564] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1112.356623][T16564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.374294][T16564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.394719][T16564] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1112.429961][T16564] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1112.449813][T16564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.482082][T16564] usb 4-1: config 0 descriptor?? [ 1112.680247][ T5871] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1112.848248][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1112.882543][ T5871] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1112.913027][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1112.935587][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.944211][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1112.952645][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1112.964651][ T5871] usb 3-1: Product: syz [ 1112.975364][ T5871] usb 3-1: Manufacturer: syz [ 1112.979133][T18951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1112.990586][ T5871] usb 3-1: SerialNumber: syz [ 1112.990727][ T5921] usb 2-1: USB disconnect, device number 61 [ 1113.006284][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1113.009383][ T5871] usb 3-1: config 0 descriptor?? [ 1113.013729][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1113.037746][ T5871] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1113.049298][T18951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1113.071364][ T5871] usb 3-1: Detected FT-X [ 1113.096173][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1113.119526][T18951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1113.133059][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1113.196886][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1113.215238][T18951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1113.230702][T16564] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1113.246100][ T5871] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1113.264721][ T5871] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1113.279855][ T5871] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1113.316288][T16564] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1113.385829][ T5871] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1113.390056][T16564] usb 4-1: USB disconnect, device number 16 [ 1113.426818][ T5871] usb 3-1: USB disconnect, device number 10 [ 1113.502859][ T5871] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1113.565183][ T5871] ftdi_sio 3-1:0.0: device disconnected [ 1113.595725][T19101] fido_id[19101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1113.618792][ T5842] Bluetooth: hci3: command tx timeout [ 1114.094694][T16564] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1114.143732][T18951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.244414][ T5921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1114.266337][T16564] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.547358][ T5921] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1114.612075][T16564] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1114.657222][ T5921] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1114.809958][T18951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.829429][T16564] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1114.857844][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.865064][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.872748][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1114.882726][T16564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1114.896243][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1114.907505][T16564] usb 2-1: SerialNumber: syz [ 1114.934484][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1114.950244][ T5921] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1114.977715][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1115.005662][ T5921] usb 4-1: Product: syz [ 1115.010132][ T5921] usb 4-1: Manufacturer: syz [ 1115.015578][T16160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.022807][T16160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.031455][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 1115.064755][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 1115.110760][ T5921] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1115.142658][T16564] usb 2-1: 0:2 : does not exist [ 1115.151539][ T5921] cdc_wdm 4-1:1.0: Unknown control protocol [ 1115.248325][T16564] usb 2-1: USB disconnect, device number 62 [ 1115.341896][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1115.571969][T18951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.640469][T19148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1115.680204][T19145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1115.840802][ T5921] usb 4-1: USB disconnect, device number 17 [ 1115.861803][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.869018][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.913270][T18951] veth0_vlan: entered promiscuous mode [ 1115.963439][T18951] veth1_vlan: entered promiscuous mode [ 1116.014323][ T5947] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1116.135734][T18951] veth0_macvtap: entered promiscuous mode [ 1116.177331][T18951] veth1_macvtap: entered promiscuous mode [ 1116.184633][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 1116.198764][ T5947] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1116.234430][ T5947] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1116.265572][ T5947] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1116.294230][ T5947] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.324396][ T5947] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1116.329465][T18951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.353919][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.460602][T18951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.585942][T18951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.604211][T18951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.612949][T18951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.613571][ T5947] usb 2-1: GET_CAPABILITIES returned 0 [ 1116.639196][T18951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.644226][ T5947] usbtmc 2-1:16.0: can't read capabilities [ 1116.778306][ T6258] hsr_slave_0: left promiscuous mode [ 1116.794363][ T6258] hsr_slave_1: left promiscuous mode [ 1116.800563][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.809733][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.818563][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.829267][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.882874][ T5871] usb 2-1: USB disconnect, device number 63 [ 1116.946388][ T6258] veth1_macvtap: left promiscuous mode [ 1116.952670][ T6258] veth1_vlan: left promiscuous mode [ 1116.959199][ T6258] veth0_vlan: left promiscuous mode [ 1117.156015][ T6258] pimreg (unregistering): left allmulticast mode [ 1117.704798][ T5871] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1117.902360][ T5871] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1117.942972][ T5871] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1117.960807][ T5871] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1117.997257][ T5871] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1118.031709][ T5871] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1118.044032][ T5871] usb 3-1: Manufacturer: syz [ 1118.070902][ T5871] usb 3-1: SerialNumber: syz [ 1118.285081][ T6258] team0 (unregistering): Port device team_slave_1 removed [ 1118.341089][ T5871] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 1118.359655][ T5871] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input99 [ 1118.391005][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1118.398221][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1118.405538][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1118.412517][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1118.419549][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1118.426564][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1118.434021][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1118.441132][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1118.447939][ C0] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1118.471811][ T6258] team0 (unregistering): Port device team_slave_0 removed [ 1118.478901][ T5871] usb 3-1: USB disconnect, device number 11 [ 1119.324581][T10970] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1119.504957][T10970] usb 3-1: Using ep0 maxpacket: 8 [ 1119.512438][T10970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1119.533301][T10970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1119.544986][T10970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1119.555712][T10970] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1119.571463][T10970] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1119.581092][T10970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.864350][T10970] usb 3-1: GET_CAPABILITIES returned 0 [ 1119.890111][T10970] usbtmc 3-1:16.0: can't read capabilities [ 1120.043116][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.061078][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.106489][ T5921] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1120.139991][T12120] usb 3-1: USB disconnect, device number 12 [ 1120.202311][ T6251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.219920][ T6251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.274584][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 1120.292452][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1120.313405][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1120.328146][ T5921] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1120.366642][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.374902][ T6258] IPVS: stop unused estimator thread 0... [ 1120.410685][ T5921] usb 2-1: Product: syz [ 1120.425234][ T5921] usb 2-1: Manufacturer: syz [ 1120.429898][ T5921] usb 2-1: SerialNumber: syz [ 1120.466460][ T5921] usb 2-1: config 0 descriptor?? [ 1120.486113][T19270] buffer_io_error: 18 callbacks suppressed [ 1120.486129][T19270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1120.488631][ T5921] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1120.494590][T19270] Buffer I/O error on dev loop6, logical block 1, async page read [ 1120.505478][ T5921] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1120.517543][T19270] Buffer I/O error on dev loop6, logical block 2, async page read [ 1120.544458][T19270] Buffer I/O error on dev loop6, logical block 3, async page read [ 1120.552989][T19271] Buffer I/O error on dev loop6, logical block 0, async page read [ 1120.569057][T19271] Buffer I/O error on dev loop6, logical block 1, async page read [ 1120.587371][T19271] Buffer I/O error on dev loop6, logical block 2, async page read [ 1120.597311][T19271] Buffer I/O error on dev loop6, logical block 3, async page read [ 1120.610232][T19270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1120.618703][T19270] Buffer I/O error on dev loop6, logical block 1, async page read [ 1120.971816][ T5954] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1121.099885][ T5921] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1121.127516][ T5921] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1121.362214][ T5954] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1121.541262][ T5954] usb 1-1: USB disconnect, device number 24 [ 1121.765839][ T5845] tipc: Resetting bearer [ 1121.788310][ T5921] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1121.801481][ T5921] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1121.808655][ T5845] bridge0: port 3(syz_tun) entered disabled state [ 1121.816302][ T5921] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1121.832663][ T5921] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1121.845677][T16005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1121.845786][ T5921] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1121.856319][ T5845] syz_tun (unregistering): left allmulticast mode [ 1121.860909][ T5921] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1121.867911][T16005] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1121.880296][ T5954] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1121.883423][ T5921] usb 2-1: USB disconnect, device number 64 [ 1121.900657][T12120] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1121.904702][ T5845] syz_tun (unregistering): left promiscuous mode [ 1121.925023][T16005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1121.934578][ T5845] bridge0: port 3(syz_tun) entered disabled state [ 1121.942582][T16005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1121.955948][ T5845] tipc: Disabling bearer [ 1121.963804][T16005] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1122.053425][ T6251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.067453][ T5954] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1122.081275][ T5954] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1122.093046][ T5954] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1122.094016][T12120] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1122.105250][ T5954] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1122.121997][ T5954] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1122.133038][ T5954] usb 1-1: Manufacturer: syz [ 1122.143455][ T5954] usb 1-1: SerialNumber: syz [ 1122.153586][T12120] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1122.167657][T12120] usb 4-1: config 0 interface 0 altsetting 191 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1122.180791][T12120] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1122.191724][T12120] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1122.205264][T12120] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1122.218172][T12120] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1122.227424][T12120] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1122.232044][ T6251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.250489][T12120] usb 4-1: Product: syz [ 1122.258491][T12120] usb 4-1: Manufacturer: syz [ 1122.274675][T12120] usb 4-1: SerialNumber: syz [ 1122.282165][T12120] usb 4-1: config 0 descriptor?? [ 1122.309976][T12120] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1122.398777][ T5954] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1122.409033][ T6251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.443298][ T5954] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input100 [ 1122.482977][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1122.490092][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1122.497181][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1122.504178][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1122.511172][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1122.518211][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1122.525198][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1122.533569][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1122.536144][T12120] usb 4-1: USB disconnect, device number 18 [ 1122.540360][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1122.583734][ T5954] usb 1-1: USB disconnect, device number 25 [ 1122.610859][ T6251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.095698][T19288] chnl_net:caif_netlink_parms(): no params data found [ 1123.185038][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1123.196209][ T6251] bridge_slave_1: left allmulticast mode [ 1123.202294][ T6251] bridge_slave_1: left promiscuous mode [ 1123.213690][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.225524][ T6251] bridge_slave_0: left allmulticast mode [ 1123.236860][ T6251] bridge_slave_0: left promiscuous mode [ 1123.256980][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.273752][ T6251] tipc: Resetting bearer [ 1123.841827][ T6251] team0: Port device geneve0 removed [ 1123.883002][ T6251] tipc: Disabling bearer [ 1123.942371][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.956386][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.974733][ T6251] bond0 (unregistering): Released all slaves [ 1123.995015][ T6251] bond1 (unregistering): Released all slaves [ 1124.005725][ T5842] Bluetooth: hci2: command tx timeout [ 1124.080487][T19307] ipvlan2: entered promiscuous mode [ 1124.084882][ T5837] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1124.255058][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 1124.286295][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1124.371084][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1124.395867][ T5837] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1124.453789][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.474028][ T5837] usb 5-1: Product: syz [ 1124.478558][ T5837] usb 5-1: Manufacturer: syz [ 1124.508732][ T5837] usb 5-1: SerialNumber: syz [ 1124.518520][ T5837] usb 5-1: config 0 descriptor?? [ 1124.536626][ T5837] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1124.549057][ T5837] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1124.623157][T19344] veth1_to_bond: entered allmulticast mode [ 1124.690248][T19344] veth1_to_bond: left allmulticast mode [ 1124.699697][T19288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.774466][T19288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.804776][T19288] bridge_slave_0: entered allmulticast mode [ 1124.858936][T19288] bridge_slave_0: entered promiscuous mode [ 1124.936171][T19288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.956183][T19288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.963550][T19288] bridge_slave_1: entered allmulticast mode [ 1124.987368][T19288] bridge_slave_1: entered promiscuous mode [ 1125.023805][T19359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1125.172121][ T5837] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1125.190811][ T5837] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1125.228131][T19288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.283355][T19288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.509290][T19288] team0: Port device team_slave_0 added [ 1125.530239][T19288] team0: Port device team_slave_1 added [ 1125.600077][T19288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.618456][T19288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.654529][T19288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.707641][T19288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.725739][T19288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.789631][T19288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.808795][ T6251] tipc: Disabling bearer [ 1125.817561][ T6251] tipc: Left network mode [ 1125.822476][ T5837] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1125.831837][ T5837] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1125.849060][ T5837] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1125.861897][ T5837] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1125.872386][ T5837] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1125.885131][ T5837] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1125.901188][ T5837] usb 5-1: USB disconnect, device number 20 [ 1126.024411][ T5918] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1126.039223][T19288] hsr_slave_0: entered promiscuous mode [ 1126.080345][T19288] hsr_slave_1: entered promiscuous mode [ 1126.088726][ T5842] Bluetooth: hci2: command tx timeout [ 1126.091583][T19288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1126.107020][T19288] Cannot create hsr debugfs directory [ 1126.188804][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 1126.225193][ T5918] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1126.241300][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.255560][ T5918] usb 1-1: Product: syz [ 1126.259828][ T5918] usb 1-1: Manufacturer: syz [ 1126.269846][ T5918] usb 1-1: SerialNumber: syz [ 1126.279442][ T5918] usb 1-1: config 0 descriptor?? [ 1126.292348][ T5918] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1126.302635][ T5918] usb 1-1: Detected FT-X [ 1126.535750][ T5918] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1126.558524][ T5918] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1126.579192][ T5918] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1126.599710][ T5918] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1126.627136][ T5918] usb 1-1: USB disconnect, device number 26 [ 1126.655099][ T5918] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1126.677425][ T5918] ftdi_sio 1-1:0.0: device disconnected [ 1126.764680][ T5954] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1126.924664][ T5954] usb 5-1: device descriptor read/64, error -71 [ 1127.175027][ T5954] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1127.316618][ T5954] usb 5-1: device descriptor read/64, error -71 [ 1127.365306][ T5918] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1127.465104][ T5954] usb usb5-port1: attempt power cycle [ 1127.545705][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 1127.553871][T19288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1127.562898][ T5918] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1127.582621][ T5918] usb 2-1: config 179 has no interface number 0 [ 1127.589359][ T5918] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1127.638749][ T5918] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1127.664282][ T5918] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1127.690721][T19288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1127.706385][ T5918] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1127.720168][ T5918] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1127.757723][ T5918] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1127.760664][T19288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1127.798184][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.824260][ T5954] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1127.830271][T19288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1127.837560][T19414] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1127.847405][ T5954] usb 5-1: device descriptor read/8, error -71 [ 1128.090787][ T5918] usb 2-1: USB disconnect, device number 65 [ 1128.090844][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1128.105118][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1128.134318][ T5954] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1128.169465][ T5842] Bluetooth: hci2: command tx timeout [ 1128.175903][ T5954] usb 5-1: device descriptor read/8, error -71 [ 1128.235066][T19288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.289681][ T5954] usb usb5-port1: unable to enumerate USB device [ 1128.300077][T19288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.330774][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.337912][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.423839][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.431133][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.677407][T19454] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3511'. [ 1128.704598][ T5921] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1128.830317][T19288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.884823][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 1128.894268][T12120] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1128.909529][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1128.936874][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1128.977423][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1128.990354][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.001814][ T5921] usb 1-1: Product: syz [ 1129.006434][ T5921] usb 1-1: Manufacturer: syz [ 1129.011057][ T5921] usb 1-1: SerialNumber: syz [ 1129.035773][T19288] veth0_vlan: entered promiscuous mode [ 1129.045657][ T5921] usb 1-1: config 0 descriptor?? [ 1129.077284][ T5921] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1129.088366][T12120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.101856][ T5921] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1129.112685][T12120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.118691][T19288] veth1_vlan: entered promiscuous mode [ 1129.129982][T12120] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1129.151797][T12120] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1129.161484][T12120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.238545][T12120] usb 4-1: config 0 descriptor?? [ 1129.243277][T19288] veth0_macvtap: entered promiscuous mode [ 1129.263200][T19288] veth1_macvtap: entered promiscuous mode [ 1129.318215][ T6251] batman_adv: batadv0: Interface deactivated: dummy0 [ 1129.334867][ T6251] batman_adv: batadv0: Removing interface: dummy0 [ 1129.342796][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.361147][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.370154][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.377695][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.403221][ T6251] veth1_macvtap: left promiscuous mode [ 1129.411661][ T6251] veth0_macvtap: left promiscuous mode [ 1129.668646][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.676692][ T5921] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1129.702410][ T5921] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1129.713893][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.726798][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.734947][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.742488][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.750319][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.778104][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.801251][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.844685][T12120] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1129.899184][T12120] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1129.940108][T12120] usb 4-1: USB disconnect, device number 19 [ 1129.955412][ T5837] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1130.072094][T19484] fido_id[19484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1130.180262][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.194270][ T5954] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1130.218217][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.228715][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1130.254385][ T5837] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1130.262988][ T5842] Bluetooth: hci2: command tx timeout [ 1130.263571][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.309033][ T5837] usb 5-1: config 0 descriptor?? [ 1130.331044][ T5921] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1130.342981][ T5921] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1130.354346][ T5921] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1130.375060][ T5954] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1130.384247][ T5954] usb 2-1: config 0 has no interface number 0 [ 1130.390384][ T5954] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1130.414701][ T5954] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1130.423793][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.441295][ T5954] usb 2-1: Product: syz [ 1130.476302][ T5954] usb 2-1: Manufacturer: syz [ 1130.480977][ T5954] usb 2-1: SerialNumber: syz [ 1130.523488][ T5954] usb 2-1: config 0 descriptor?? [ 1130.576516][ T5921] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1130.593597][ T5921] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1130.622393][ T5921] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1130.653387][ T5921] usb 1-1: USB disconnect, device number 27 [ 1130.745569][T16564] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1130.759939][ T5837] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1130.781917][ T5837] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1130.791732][ T5837] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1130.811403][ T5837] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1130.823854][ T5837] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1130.836521][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 1130.844794][ T5837] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1130.910403][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 1130.915177][T16564] usb 4-1: Using ep0 maxpacket: 8 [ 1130.933284][T16564] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1130.955346][T16564] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1130.974338][T16564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.982389][T16564] usb 4-1: Product: syz [ 1130.987119][T16564] usb 4-1: Manufacturer: syz [ 1130.991737][T16564] usb 4-1: SerialNumber: syz [ 1131.020605][T16564] usb 4-1: config 0 descriptor?? [ 1131.040930][T16564] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1131.297579][T19504] netlink: 'syz.0.3519': attribute type 10 has an invalid length. [ 1131.386650][ T5954] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1131.473509][T16564] gspca_zc3xx: reg_w_i err -71 [ 1131.708523][T19504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.717346][T19504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.733944][T19504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.741224][T19504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.748812][T19504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.756032][T19504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.772075][T19504] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1131.785630][ T6258] ------------[ cut here ]------------ [ 1131.791499][ T6258] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 1131.811159][T19288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.820394][ T6258] WARNING: CPU: 0 PID: 6258 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 1131.830992][ T6258] Modules linked in: [ 1131.835344][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: kworker/u8:12 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1131.841242][T19288] batman_adv: batadv0: Interface activated: batadv_slave_1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1131.846589][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1131.846623][ T6258] Workqueue: bond0 bond_mii_monitor [ 1131.846652][ T6258] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 1131.846677][ T6258] Code: 7c fe ff ff e8 de 24 69 f8 c6 05 d4 db 33 06 01 90 48 c7 c7 80 c0 92 8c 48 c7 c6 f8 96 9c 8d ba 48 00 00 00 e8 4e cd 2c f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 1131.846694][ T6258] RSP: 0018:ffffc900053a7670 EFLAGS: 00010246 [ 1131.846712][ T6258] RAX: 71a93748bfeec900 RBX: ffff888022bb4000 RCX: ffff88802b275a00 [ 1131.846727][ T6258] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1131.846740][ T6258] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1131.846752][ T6258] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 1ffff1100457685d [ 1131.846767][ T6258] R13: dffffc0000000000 R14: ffffffff8c1c48a8 R15: 0000000000000000 [ 1131.846782][ T6258] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 1131.846797][ T6258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1131.846811][ T6258] CR2: 00007ffc84ff9f98 CR3: 00000000779ea000 CR4: 00000000003526f0 [ 1131.846829][ T6258] Call Trace: [ 1131.846838][ T6258] [ 1131.846846][ T6258] ? ethtool_op_get_link+0xd/0x70 [ 1131.846873][ T6258] ethtool_op_get_link+0x15/0x70 [ 1131.846893][ T6258] bond_check_dev_link+0x447/0x6c0 [ 1131.846922][ T6258] ? __pfx_bond_check_dev_link+0x10/0x10 [ 1131.846963][ T6258] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1131.846987][ T6258] bond_mii_monitor+0x428/0x2e00 [ 1131.847006][ T6258] ? __lock_acquire+0xab9/0xd20 [ 1131.847035][ T6258] ? bond_mii_monitor+0x153/0x2e00 [ 1131.847069][ T6258] ? __pfx_bond_mii_monitor+0x10/0x10 [ 1131.847092][ T6258] ? register_lock_class+0x51/0x320 [ 1131.847118][ T6258] ? __lock_acquire+0xab9/0xd20 [ 1131.847157][ T6258] ? process_scheduled_works+0x9ef/0x17b0 [ 1131.847187][ T6258] ? _raw_spin_unlock_irq+0x23/0x50 [ 1131.847210][ T6258] ? process_scheduled_works+0x9ef/0x17b0 [ 1131.847233][ T6258] ? process_scheduled_works+0x9ef/0x17b0 [ 1131.847260][ T6258] process_scheduled_works+0xade/0x17b0 [ 1131.847314][ T6258] ? __pfx_process_scheduled_works+0x10/0x10 [ 1131.847356][ T6258] worker_thread+0x8a0/0xda0 [ 1131.847407][ T6258] kthread+0x70e/0x8a0 [ 1131.847430][ T6258] ? __pfx_worker_thread+0x10/0x10 [ 1131.847454][ T6258] ? __pfx_kthread+0x10/0x10 [ 1131.847476][ T6258] ? _raw_spin_unlock_irq+0x23/0x50 [ 1131.847498][ T6258] ? lockdep_hardirqs_on+0x9c/0x150 [ 1131.847519][ T6258] ? __pfx_kthread+0x10/0x10 [ 1131.847541][ T6258] ret_from_fork+0x3fc/0x770 [ 1131.847567][ T6258] ? __pfx_ret_from_fork+0x10/0x10 [ 1131.847597][ T6258] ? __switch_to_asm+0x39/0x70 [ 1131.847616][ T6258] ? __switch_to_asm+0x33/0x70 [ 1131.847632][ T6258] ? __pfx_kthread+0x10/0x10 [ 1131.847652][ T6258] ret_from_fork_asm+0x1a/0x30 [ 1131.847684][ T6258] [ 1131.916556][T19288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.919635][ T6258] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1131.919652][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: kworker/u8:12 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1131.919673][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1131.919685][ T6258] Workqueue: bond0 bond_mii_monitor [ 1131.919711][ T6258] Call Trace: [ 1131.919718][ T6258] [ 1131.919727][ T6258] dump_stack_lvl+0x99/0x250 [ 1131.919755][ T6258] ? __asan_memcpy+0x40/0x70 [ 1131.919778][ T6258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1131.919801][ T6258] ? __pfx__printk+0x10/0x10 [ 1131.919833][ T6258] panic+0x2db/0x790 [ 1131.919861][ T6258] ? __pfx_panic+0x10/0x10 [ 1131.919893][ T6258] ? ret_from_fork_asm+0x1a/0x30 [ 1131.919917][ T6258] __warn+0x31b/0x4b0 [ 1131.919938][ T6258] ? __linkwatch_sync_dev+0x303/0x350 [ 1131.919962][ T6258] ? __linkwatch_sync_dev+0x303/0x350 [ 1131.919982][ T6258] report_bug+0x2be/0x4f0 [ 1131.920003][ T6258] ? __linkwatch_sync_dev+0x303/0x350 [ 1131.920024][ T6258] ? __linkwatch_sync_dev+0x303/0x350 [ 1131.920043][ T6258] ? __linkwatch_sync_dev+0x305/0x350 [ 1131.920063][ T6258] handle_bug+0x84/0x160 [ 1131.920081][ T6258] exc_invalid_op+0x1a/0x50 [ 1131.920097][ T6258] asm_exc_invalid_op+0x1a/0x20 [ 1131.920113][ T6258] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 1131.920142][ T6258] Code: 7c fe ff ff e8 de 24 69 f8 c6 05 d4 db 33 06 01 90 48 c7 c7 80 c0 92 8c 48 c7 c6 f8 96 9c 8d ba 48 00 00 00 e8 4e cd 2c f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 1131.920164][ T6258] RSP: 0018:ffffc900053a7670 EFLAGS: 00010246 [ 1131.920179][ T6258] RAX: 71a93748bfeec900 RBX: ffff888022bb4000 RCX: ffff88802b275a00 [ 1131.920192][ T6258] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1131.920203][ T6258] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1131.920214][ T6258] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 1ffff1100457685d [ 1131.920227][ T6258] R13: dffffc0000000000 R14: ffffffff8c1c48a8 R15: 0000000000000000 [ 1131.920256][ T6258] ? ethtool_op_get_link+0xd/0x70 [ 1131.920280][ T6258] ethtool_op_get_link+0x15/0x70 [ 1131.920299][ T6258] bond_check_dev_link+0x447/0x6c0 [ 1131.920325][ T6258] ? __pfx_bond_check_dev_link+0x10/0x10 [ 1131.920356][ T6258] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1131.920378][ T6258] bond_mii_monitor+0x428/0x2e00 [ 1131.920398][ T6258] ? __lock_acquire+0xab9/0xd20 [ 1131.920425][ T6258] ? bond_mii_monitor+0x153/0x2e00 [ 1131.920457][ T6258] ? __pfx_bond_mii_monitor+0x10/0x10 [ 1131.920479][ T6258] ? register_lock_class+0x51/0x320 [ 1131.920505][ T6258] ? __lock_acquire+0xab9/0xd20 [ 1131.920537][ T6258] ? process_scheduled_works+0x9ef/0x17b0 [ 1131.920567][ T6258] ? _raw_spin_unlock_irq+0x23/0x50 [ 1131.920586][ T6258] ? process_scheduled_works+0x9ef/0x17b0 [ 1131.920609][ T6258] ? process_scheduled_works+0x9ef/0x17b0 [ 1131.920633][ T6258] process_scheduled_works+0xade/0x17b0 [ 1131.920684][ T6258] ? __pfx_process_scheduled_works+0x10/0x10 [ 1131.920724][ T6258] worker_thread+0x8a0/0xda0 [ 1131.920772][ T6258] kthread+0x70e/0x8a0 [ 1131.920794][ T6258] ? __pfx_worker_thread+0x10/0x10 [ 1131.920817][ T6258] ? __pfx_kthread+0x10/0x10 [ 1131.920838][ T6258] ? _raw_spin_unlock_irq+0x23/0x50 [ 1131.920858][ T6258] ? lockdep_hardirqs_on+0x9c/0x150 [ 1131.920878][ T6258] ? __pfx_kthread+0x10/0x10 [ 1131.920896][ T6258] ret_from_fork+0x3fc/0x770 [ 1131.920922][ T6258] ? __pfx_ret_from_fork+0x10/0x10 [ 1131.920950][ T6258] ? __switch_to_asm+0x39/0x70 [ 1131.920966][ T6258] ? __switch_to_asm+0x33/0x70 [ 1131.920982][ T6258] ? __pfx_kthread+0x10/0x10 [ 1131.921001][ T6258] ret_from_fork_asm+0x1a/0x30 [ 1131.921034][ T6258] [ 1131.927863][ T6258] Kernel Offset: disabled