last executing test programs: 1m5.310794015s ago: executing program 1 (id=770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0xd0f, 0x8070bd28, 0x1000000, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x1, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0xfffffffb, 0x3}}}}]}, 0x44}}, 0x0) 1m4.972483157s ago: executing program 1 (id=774): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) 1m4.698979306s ago: executing program 1 (id=779): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.316030219s ago: executing program 1 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 1m3.119252183s ago: executing program 1 (id=794): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1m2.973290515s ago: executing program 1 (id=796): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f00000081c0)={0x2020}, 0x2020) 1m2.532710305s ago: executing program 32 (id=796): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f00000081c0)={0x2020}, 0x2020) 6.150532742s ago: executing program 2 (id=1235): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.011299154s ago: executing program 5 (id=1241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {0x4, 0x1}, 0x8, 0x40, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4, 0x2a4, &(0x7f0000000200)="5847fae5a2559658fabee8434e401576ba35f8d0b69629e6706e6f9332fb6978d84b315fa4b2fa3640a636040a2078767ac2ed777d84f2882c"}) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 4.223924477s ago: executing program 0 (id=1246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000090000040"]) 4.180645165s ago: executing program 2 (id=1248): fsopen(&(0x7f0000000400)='ceph\x00', 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 3.808457487s ago: executing program 2 (id=1250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004e40)=@newtfilter={0x480, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x200, 0x9cf6, 0x6, {0x4, 0x0, 0x1, 0x3, 0x2, 0xe}, {0x0, 0x1, 0x4, 0x3b31, 0x30}, 0x8, 0x4d, 0xffc}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x8, 0x8, 0xde, 0x3, 0x0, 0x3d00, 0x6, 0xffffff2f, 0x8, 0x9, 0x5, 0xfffffffe, 0x9, 0x4, 0x1, 0x401, 0x9, 0xa, 0x7, 0x3d, 0x1, 0x81, 0xa, 0x2, 0x0, 0x9, 0xba, 0x6, 0x101, 0x8001, 0x1, 0x7, 0x800, 0x7, 0x2, 0x6, 0x8d9e, 0x7, 0xc, 0x2, 0x5, 0x10001, 0x5, 0xe, 0xfffffff9, 0x30f, 0xfffffff7, 0x1000, 0xbb, 0xffff, 0x1, 0x2b, 0x80, 0x2, 0x200, 0x6, 0x3, 0x3, 0x8, 0x6, 0x8, 0x8, 0x6, 0x7, 0x7fff, 0x7fff, 0x6, 0x400, 0x40, 0x2, 0x1341, 0xfff, 0x2, 0x2, 0x3, 0x2, 0xffffffff, 0x8000, 0x80000001, 0x7c, 0x9, 0x4, 0x1551, 0x2, 0x6, 0x2b, 0x4, 0x0, 0x5, 0xff, 0x4, 0x10001, 0x6, 0xa8f9, 0x4, 0x5, 0x80, 0x7, 0x5, 0xc0, 0x401, 0x1, 0xfffffff9, 0x2, 0x4, 0x7ff, 0x101, 0x5, 0xff, 0x7, 0x6, 0x6, 0x1, 0xfffffffe, 0x10000, 0x0, 0x2, 0x80000001, 0x1000, 0x8, 0xda, 0x80000000, 0x7, 0x2, 0x5c34, 0x7ff, 0x7, 0x3, 0x1, 0x6, 0x4, 0x401, 0xd, 0x4, 0x7, 0x1, 0x1, 0x2, 0xaf8, 0x9, 0xfffeffff, 0xb, 0x81, 0x2, 0x0, 0x1000, 0x5, 0x4, 0x8, 0x10001, 0x6, 0x1, 0xcb, 0x1, 0x7fff, 0x5616, 0x5, 0x401, 0x1000, 0x1, 0x10000003, 0x400, 0x7, 0x3ff, 0xfffffffb, 0x1000, 0xfffff47f, 0x2, 0x4, 0x0, 0x6, 0x5, 0x47, 0x1, 0x8, 0x7f, 0xfb1, 0x3, 0x79f4, 0x800, 0x19, 0xb, 0x6, 0x4, 0x9, 0xe, 0x6, 0xffffffff, 0x5cf, 0x6, 0x3ff, 0x2, 0x7, 0x4, 0x2, 0xd, 0xcf0, 0x4, 0x6, 0x1000, 0x1, 0x10000, 0x18, 0x3ff, 0x9, 0x10000, 0x3, 0x9, 0x7fffffff, 0x27, 0x23, 0x10, 0x3, 0x1, 0x9, 0x3, 0xa, 0xb, 0x2, 0xf, 0x8, 0xa6dc, 0x75f5, 0x6, 0x9, 0x1ec6, 0x4, 0x401, 0x0, 0x9, 0x8, 0x2, 0x7ff, 0x4, 0x280, 0x3c, 0xc, 0x4, 0x9, 0x0, 0x400, 0xe6ae, 0x4, 0x5, 0xd29, 0xfffffffa, 0x5, 0xd42, 0x5]}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x480}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.686242543s ago: executing program 0 (id=1253): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) 3.606058887s ago: executing program 5 (id=1255): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xff00, r2, &(0x7f0000000140)="24a12e", 0x3, 0x6, 0x0, 0x0, r2}]) 3.560503113s ago: executing program 2 (id=1256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) recvmmsg$unix(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000001d80)=""/240, 0xf0}, {&(0x7f00000020c0)=""/45, 0x2d}], 0x2}}], 0x1, 0x40000000, 0x0) 3.124924638s ago: executing program 5 (id=1259): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) 2.983471582s ago: executing program 5 (id=1261): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@dmm={0x7, 0x24, 0x14, 0x101}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x5, 0x8000}]}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0xffffff39, {0x10, 0x10, 0xe, 0x6, 0x10, 0x10, 0x10, 0x1000, 0x10, 0x10, 0x12, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.570574629s ago: executing program 2 (id=1266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {0x4, 0x1}, 0x8, 0x40, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4, 0x2a4, &(0x7f0000000200)="5847fae5a2559658fabee8434e401576ba35f8d0b69629e6706e6f9332fb6978d84b315fa4b2fa3640a636040a2078767ac2ed777d84f2882c"}) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 2.415648442s ago: executing program 0 (id=1268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.174540614s ago: executing program 4 (id=1270): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0xfffffffd}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x40041, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x1}}, 0x10, 0x0}, 0x40000c0) 2.00811621s ago: executing program 4 (id=1271): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 1.923599184s ago: executing program 3 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 1.781793091s ago: executing program 0 (id=1273): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) read(r0, &(0x7f0000000180)=""/119, 0x77) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x891b, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 1.631927501s ago: executing program 4 (id=1274): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = dup(r0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r3 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x8a000) 1.467568103s ago: executing program 4 (id=1275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000140)="2e0f78be0a009c0f72d5a9baf80c66b8ce0c7d8a66efbafc0cb80858ef67640f01c30f0866b9690a000066b89ba9746866bac189227b0f30baf80c66b8cad7de8b66efbafc0cb80569ef0f01df260f01c9", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.467315198s ago: executing program 3 (id=1276): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) 1.368111216s ago: executing program 0 (id=1277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 1.276894638s ago: executing program 2 (id=1278): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5100}}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) 1.207571697s ago: executing program 3 (id=1279): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 961.467354ms ago: executing program 3 (id=1280): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x9) close_range(r2, r3, 0x0) 641.454044ms ago: executing program 0 (id=1281): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 545.18052ms ago: executing program 3 (id=1282): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendto$inet6(r1, &(0x7f0000000600)="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", 0x200, 0x1, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 327.618944ms ago: executing program 3 (id=1283): syz_open_dev$sg(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@loopback, @in6=@empty}}, {{@in6=@local}, 0x0, @in=@broadcast}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 302.902862ms ago: executing program 4 (id=1284): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x31}) 279.906569ms ago: executing program 5 (id=1285): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)='%', 0x1}], 0x1}, 0x0) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)='<', 0x1}], 0x1}, 0xc085) 71.582045ms ago: executing program 5 (id=1286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x9, 0xfb, 0xc, 0x5, 0x5, 0xfe, 0x4, 0x6, 0xfc, 0x7f, 0x9, 0xe4, 0x11, 0x0, 0x7f, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x100000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x6c, 0x0, 0x8000000000000, 0xc54, 0xfffffffffffffff9, 0x9, 0x0, 0x1, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=1287): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)="77844923fbde9d724b", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c6256}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): : config 0 descriptor?? [ 126.083393][ T5833] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 126.337885][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 126.346803][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 126.355885][ T5833] usb 2-1: USB disconnect, device number 7 [ 126.375050][ T5833] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 126.812464][ T5927] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 126.823815][ T5927] asix 1-1:0.0: probe with driver asix failed with error -71 [ 126.864875][ T5927] usb 1-1: USB disconnect, device number 7 [ 127.096724][ T5896] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 127.261118][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.272535][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.286136][ T5896] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.295725][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.304827][ T5896] usb 5-1: Product: syz [ 127.312473][ T5896] usb 5-1: Manufacturer: syz [ 127.318474][ T5896] usb 5-1: SerialNumber: syz [ 127.579606][ T5896] usb 5-1: 0:2 : does not exist [ 127.610550][ T5896] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 127.683141][ T5896] usb 5-1: USB disconnect, device number 6 [ 127.725728][ T6620] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 127.741734][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.751236][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.798408][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.805715][ T6620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.814005][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.821281][ T6620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.853183][ T6620] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 127.921118][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.335598][ T6658] syzkaller1: entered promiscuous mode [ 129.341496][ T6658] syzkaller1: entered allmulticast mode [ 129.853287][ T6671] kvm: Disabled LAPIC found during irq injection [ 129.884759][ T47] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.938786][ T47] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.949270][ T5896] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 130.118368][ T5896] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 130.129147][ T5896] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 130.156907][ T5896] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 130.178503][ T5896] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 130.206550][ T5896] usb 4-1: config 220 has no interface number 2 [ 130.213067][ T5896] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 130.272375][ T5896] usb 4-1: config 220 interface 0 has no altsetting 0 [ 130.282875][ T5896] usb 4-1: config 220 interface 76 has no altsetting 0 [ 130.302181][ T5896] usb 4-1: config 220 interface 1 has no altsetting 0 [ 130.330841][ T5896] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 130.356322][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.365153][ T5896] usb 4-1: Product: syz [ 130.370213][ T5896] usb 4-1: Manufacturer: syz [ 130.377846][ T5896] usb 4-1: SerialNumber: syz [ 130.624006][ T5896] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 130.643460][ T5896] usb 4-1: No valid video chain found. [ 130.664327][ T5896] usb 4-1: selecting invalid altsetting 0 [ 130.692939][ T5896] usb 4-1: selecting invalid altsetting 0 [ 130.712681][ T5896] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 130.750105][ T5896] usb 4-1: USB disconnect, device number 12 [ 131.111110][ T6698] loop6: detected capacity change from 0 to 524287999 [ 131.148568][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.170489][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.180476][ T13] loop: Write error at byte offset 1, length 4096. [ 131.187573][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 131.197226][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 131.209031][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.218327][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 131.233274][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.242624][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 131.522023][ T6709] capability: warning: `syz.1.303' uses 32-bit capabilities (legacy support in use) [ 131.975250][ T6727] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 131.995580][ T6727] netlink: 68 bytes leftover after parsing attributes in process `syz.2.311'. [ 132.396442][ T5927] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 132.571453][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.583253][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.606480][ T5927] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.623529][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.638011][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.647445][ T5927] usb 4-1: Product: syz [ 132.651975][ T5927] usb 4-1: Manufacturer: syz [ 132.657561][ T5927] usb 4-1: SerialNumber: syz [ 132.682252][ T5927] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 132.690925][ T5927] cdc_ncm 4-1:1.0: bind() failure [ 132.820601][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.827471][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930454][ T5899] usb 4-1: USB disconnect, device number 13 [ 133.052249][ T6761] input: syz0 as /devices/virtual/input/input11 [ 133.497049][ T5895] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.686773][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 133.701601][ T5895] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 133.726025][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.756664][ T5927] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.757698][ T5895] usb 1-1: config 0 descriptor?? [ 133.791440][ T5895] gspca_main: sunplus-2.14.0 probing 041e:400b [ 133.914005][ T6780] kvm: user requested TSC rate below hardware speed [ 133.934238][ T5927] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 133.955448][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.991956][ T5927] usb 5-1: config 0 descriptor?? [ 135.006075][ T5895] gspca_sunplus: reg_w_riv err -71 [ 135.036363][ T5895] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 135.087183][ T5895] usb 1-1: USB disconnect, device number 8 [ 135.245797][ T5927] usb 5-1: Cannot set autoneg [ 135.276832][ T5927] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 135.316572][ T5927] usb 5-1: USB disconnect, device number 7 [ 136.456566][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 136.587748][ T6835] netlink: 'syz.4.359': attribute type 4 has an invalid length. [ 136.618820][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 136.639741][ T6835] netlink: 'syz.4.359': attribute type 4 has an invalid length. [ 136.657350][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 136.686926][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 136.723440][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 136.758372][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 136.790502][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 136.847538][ T47] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 136.849614][ T6835] syz.4.359 (6835) used greatest stack depth: 19456 bytes left [ 136.857015][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.913108][ T47] usb 4-1: Product: syz [ 136.941084][ T47] usb 4-1: Manufacturer: syz [ 136.945735][ T47] usb 4-1: SerialNumber: syz [ 136.973326][ T47] usb 4-1: config 0 descriptor?? [ 137.196413][ T5896] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.378792][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.418951][ T47] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 137.442092][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.452303][ T47] input input12: Device does not respond to id packet M [ 137.466503][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.480563][ T47] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 137.490037][ T47] input input12: Device does not respond to id packet P [ 137.506414][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.526007][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.534952][ T47] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 137.541473][ T47] input input12: Device does not respond to id packet B [ 137.563577][ T5896] usb 3-1: config 0 descriptor?? [ 137.758610][ T47] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 137.770587][ T47] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 137.777409][ T47] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 137.794953][ T47] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 137.815982][ T47] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 137.864985][ T47] usb 4-1: USB disconnect, device number 14 [ 138.012040][ T5896] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 138.042699][ T5896] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 138.425261][ T6864] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 138.544381][ T6864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.552436][ T5896] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.649756][ T6870] bond1: (slave gretap1): making interface the new active one [ 138.666630][ T6870] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 138.736613][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 138.747414][ T5896] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 138.792316][ T5896] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 138.802252][ T5896] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 138.820823][ T5896] usb 5-1: config 250 has no interface number 0 [ 138.831180][ T5896] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 138.848877][ T5896] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 138.859935][ T5896] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 138.886166][ T5896] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 138.916775][ T5896] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 138.966312][ T5896] usb 5-1: config 250 interface 228 has no altsetting 0 [ 138.981652][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 139.006308][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 139.009008][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 139.040867][ T5896] usb 5-1: Product: syz [ 139.071628][ T5896] usb 5-1: SerialNumber: syz [ 139.134336][ T5896] hub 5-1:250.228: bad descriptor, ignoring hub [ 139.159675][ T5896] hub 5-1:250.228: probe with driver hub failed with error -5 [ 139.341107][ T5896] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 139.436332][ T5897] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.605069][ T5897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.678275][ T5897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.912110][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.924689][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.935078][ T5897] usb 4-1: Product: syz [ 139.943119][ T5897] usb 4-1: Manufacturer: syz [ 139.953959][ T5897] usb 4-1: SerialNumber: syz [ 139.970116][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.985213][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.159466][ T5899] usb 3-1: USB disconnect, device number 7 [ 140.246881][ T5833] usb 5-1: USB disconnect, device number 8 [ 140.283206][ T5833] usblp1: removed [ 141.048818][ T5897] cdc_ncm 4-1:1.0: bind() failure [ 141.073244][ T5897] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 141.106705][ T5897] cdc_ncm 4-1:1.1: bind() failure [ 141.261767][ T30] audit: type=1326 audit(1744026998.036:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 141.290146][ T5897] usb 4-1: USB disconnect, device number 15 [ 141.329581][ T6928] capability: warning: `syz.0.395' uses deprecated v2 capabilities in a way that may be insecure [ 141.342572][ T30] audit: type=1326 audit(1744026998.066:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 141.402034][ T30] audit: type=1326 audit(1744026998.066:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 141.427577][ T30] audit: type=1326 audit(1744026998.066:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 141.450252][ T30] audit: type=1326 audit(1744026998.076:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 141.476698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.488759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.497740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 141.547618][ T30] audit: type=1326 audit(1744026998.076:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 141.573299][ T30] audit: type=1326 audit(1744026998.076:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 141.595134][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.610462][ T30] audit: type=1326 audit(1744026998.076:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 141.632943][ T30] audit: type=1326 audit(1744026998.076:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 141.662060][ T30] audit: type=1326 audit(1744026998.086:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 142.358089][ T5899] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 142.518854][ T5899] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.541614][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.573807][ T5899] usb 5-1: config 0 descriptor?? [ 142.671881][ T5899] cp210x 5-1:0.0: cp210x converter detected [ 142.690181][ T6958] loop2: detected capacity change from 0 to 7 [ 142.731188][ T6958] Dev loop2: unable to read RDB block 7 [ 142.744079][ T6958] loop2: unable to read partition table [ 142.757631][ T6958] loop2: partition table beyond EOD, truncated [ 142.767836][ T6962] input: syz0 as /devices/virtual/input/input13 [ 142.775564][ T6958] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.816939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 143.101315][ T5899] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 143.139310][ T5899] usb 5-1: cp210x converter now attached to ttyUSB0 [ 143.337393][ T5899] usb 5-1: USB disconnect, device number 9 [ 143.367550][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.440754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 143.475917][ T5899] cp210x 5-1:0.0: device disconnected [ 143.708457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.409640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.028116][ T5897] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 145.221433][ T5897] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 145.242626][ T5897] usb 3-1: config 0 has no interface number 0 [ 145.253892][ T5897] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 145.277770][ T5897] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 1792, setting to 64 [ 145.289435][ T5897] usb 3-1: config 0 interface 113 has no altsetting 0 [ 145.300870][ T5897] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 145.314195][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.323824][ T5897] usb 3-1: Product: syz [ 145.328467][ T5897] usb 3-1: Manufacturer: syz [ 145.333201][ T5897] usb 3-1: SerialNumber: syz [ 145.342468][ T5897] usb 3-1: config 0 descriptor?? [ 145.349320][ T6990] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.363602][ C1] usb 3-1: NFC: Urb failure (status -71) [ 145.366832][ T5927] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 145.372484][ C1] usb 3-1: NFC: Urb failure (status -71) [ 145.388415][ T5897] usb 3-1: NFC: Unable to get FW version [ 145.397664][ T5897] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -71 [ 145.486602][ T5833] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.556375][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 145.568568][ T5927] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 145.587852][ T5927] usb 4-1: config 0 has no interface number 0 [ 145.594054][ T5927] usb 4-1: config 0 interface 230 has no altsetting 0 [ 145.619908][ T5927] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 145.636497][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.645750][ T5897] usb 3-1: USB disconnect, device number 8 [ 145.648138][ T5927] usb 4-1: Product: syz [ 145.655939][ T5927] usb 4-1: Manufacturer: syz [ 145.677023][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.696662][ T5927] usb 4-1: SerialNumber: syz [ 145.705407][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.727662][ T5927] usb 4-1: config 0 descriptor?? [ 145.741683][ T5927] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 145.749215][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.780953][ T5833] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.800119][ T5927] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 145.807899][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.821887][ T5833] usb 5-1: config 0 descriptor?? [ 146.270258][ T5833] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 146.311854][ T5833] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 147.684238][ T7039] pim6reg1: entered promiscuous mode [ 147.691708][ T7039] pim6reg1: entered allmulticast mode [ 148.071253][ T5927] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 148.158567][ T5833] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.311207][ T5893] usb 5-1: USB disconnect, device number 10 [ 148.338220][ T5833] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 148.356370][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.388703][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.423251][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 148.460184][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.514630][ T5833] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.542541][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.592266][ T5833] usb 1-1: config 0 descriptor?? [ 148.621472][ T7042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.077904][ T5833] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 149.121280][ T5833] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 149.181281][ T5833] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 149.358214][ T5833] usb 1-1: USB disconnect, device number 9 [ 149.461445][ T5927] usb 4-1: USB disconnect, device number 16 [ 149.816644][ T5893] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.996476][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 150.006523][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.021383][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.040005][ T5893] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 150.057806][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.099615][ T5893] usb 3-1: config 0 descriptor?? [ 150.251561][ T1150] tipc: Subscription rejected, illegal request [ 150.527119][ T5893] apple 0003:05AC:0274.0008: unknown main item tag 0x4 [ 150.534192][ T5893] apple 0003:05AC:0274.0008: unexpected long global item [ 150.548481][ T5893] apple 0003:05AC:0274.0008: parse failed [ 150.555935][ T5893] apple 0003:05AC:0274.0008: probe with driver apple failed with error -22 [ 150.657241][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 150.824675][ T5893] usb 3-1: USB disconnect, device number 9 [ 151.263953][ T7102] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 151.424893][ T7102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.495174][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 151.495194][ T30] audit: type=1326 audit(1744027008.266:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.464" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x0 [ 151.519097][ T7106] bond1: (slave gretap1): making interface the new active one [ 151.540446][ T7106] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.106388][ T5897] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.133155][ T7128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.256722][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 152.271681][ T5897] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 152.296622][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.316522][ T5897] usb 3-1: config 0 has no interface number 0 [ 152.333506][ T5897] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 152.365319][ T5897] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.381592][ T5897] usb 3-1: config 0 interface 52 has no altsetting 0 [ 152.395319][ T5897] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 152.413274][ T5897] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 152.425744][ T5897] usb 3-1: Manufacturer: syz [ 152.454437][ T5897] usb 3-1: config 0 descriptor?? [ 152.700008][ T5897] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input15 [ 153.104496][ T5897] usb 3-1: USB disconnect, device number 10 [ 153.110682][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 154.101106][ T7170] mmap: syz.1.486 (7170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.716370][ T5896] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 154.898498][ T5896] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 154.950328][ T5896] usb 3-1: config 150 has no interface number 0 [ 154.977510][ T5896] usb 3-1: config 150 interface 204 has no altsetting 0 [ 154.990254][ T5896] usb 3-1: config 150 interface 1 has no altsetting 0 [ 155.028642][ T5896] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 155.050362][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.077510][ T5896] usb 3-1: Product: syz [ 155.086366][ T5895] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.095254][ T5896] usb 3-1: Manufacturer: syz [ 155.116750][ T5897] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.128642][ T5896] usb 3-1: SerialNumber: syz [ 155.345227][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.366816][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.389446][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.400719][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.418044][ T5896] xr_serial 3-1:150.204: xr_serial converter detected [ 155.443983][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.457576][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.477339][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.490887][ T5897] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.517207][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.525380][ T5895] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.543357][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.552962][ T5897] usb 2-1: config 0 descriptor?? [ 155.569081][ T5895] usb 1-1: config 0 descriptor?? [ 155.993034][ T5897] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 156.005999][ T5895] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 156.022620][ T5897] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 156.043809][ T5895] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 156.220826][ T5896] usb 3-1: xr_serial converter now attached to ttyUSB0 [ 156.477872][ T5927] usb 3-1: USB disconnect, device number 11 [ 156.512320][ T5927] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 156.566523][ T5927] xr_serial 3-1:150.204: device disconnected [ 157.386747][ C0] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 157.415708][ T5897] usb 1-1: USB disconnect, device number 10 [ 158.181970][ T5895] usb 2-1: USB disconnect, device number 8 [ 158.570873][ T7224] syzkaller1: entered promiscuous mode [ 158.583401][ T7224] syzkaller1: entered allmulticast mode [ 158.687647][ T5895] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 158.876316][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 158.925800][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.952532][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.978289][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 158.997464][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.018448][ T5895] usb 4-1: config 0 descriptor?? [ 159.037468][ T5895] hub 4-1:0.0: USB hub found [ 159.237231][ T5895] hub 4-1:0.0: 1 port detected [ 160.280812][ T7261] netlink: 372 bytes leftover after parsing attributes in process `syz.0.522'. [ 160.502144][ T5895] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 160.519043][ T5895] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 160.571393][ T5895] usbhid 4-1:0.0: can't add hid device: -32 [ 160.609641][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 160.697407][ T5895] usb 4-1: USB disconnect, device number 17 [ 161.716363][ T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 161.796619][ T5895] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.876747][ T47] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 161.896194][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.904370][ T47] usb 4-1: Product: syz [ 161.918988][ T47] usb 4-1: Manufacturer: syz [ 161.929139][ T47] usb 4-1: SerialNumber: syz [ 161.945130][ T47] usb 4-1: config 0 descriptor?? [ 161.962132][ T47] ch341 4-1:0.0: ch341-uart converter detected [ 161.986355][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 161.997190][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.016950][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.046420][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.106293][ T5895] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.115460][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.164737][ T5895] usb 1-1: config 0 descriptor?? [ 162.614275][ T5895] HID 045e:07da: Invalid code 65791 type 1 [ 162.641842][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 162.645140][ T5895] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000B/input/input17 [ 162.712309][ T5895] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 162.826746][ T5895] usb 1-1: USB disconnect, device number 11 [ 162.898063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 162.969218][ T47] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 163.205916][ T5927] usb 4-1: USB disconnect, device number 18 [ 163.276976][ T5927] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 163.318591][ T5927] ch341 4-1:0.0: device disconnected [ 163.459385][ T7308] pim6reg1: entered promiscuous mode [ 163.464986][ T7308] pim6reg1: entered allmulticast mode [ 163.689694][ T5833] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.876296][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 163.888811][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.916677][ T7313] syz.2.544 (7313) used greatest stack depth: 18952 bytes left [ 163.920420][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.948637][ T5833] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.958222][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.006742][ T5833] usb 5-1: config 0 descriptor?? [ 164.028741][ T5833] hub 5-1:0.0: USB hub found [ 164.045506][ T7328] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.253145][ T5833] hub 5-1:0.0: 1 port detected [ 165.182276][ T7346] input: syz1 as /devices/virtual/input/input19 [ 165.458647][ T5833] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 165.465533][ T5833] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 165.483074][ T5833] usbhid 5-1:0.0: can't add hid device: -32 [ 165.493266][ T5833] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 165.526509][ T5895] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 165.534615][ T5833] usb 5-1: USB disconnect, device number 11 [ 165.706427][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 165.745694][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.780419][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.816452][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.854135][ T5895] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.876168][ T5895] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.886551][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.949795][ T7366] raw_sendmsg: syz.2.566 forgot to set AF_INET. Fix it! [ 166.107196][ T5895] usb 4-1: GET_CAPABILITIES returned 0 [ 166.112977][ T5895] usbtmc 4-1:16.0: can't read capabilities [ 166.313850][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.318724][ T7375] loop0: detected capacity change from 0 to 128 [ 166.323308][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.332395][ T7375] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 166.344952][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.352717][ T7375] loop0: partition table partially beyond EOD, [ 166.354061][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.362075][ T7375] truncated [ 166.369513][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.382752][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.382815][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.382865][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.383094][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.419393][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.428484][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.437554][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.447399][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.456601][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.465699][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 166.486944][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 166.502444][ T7375] loop0: p1 size 348879409 extends beyond EOD, truncated [ 166.550884][ T5895] usb 4-1: USB disconnect, device number 19 [ 166.652401][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.571'. [ 166.674517][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 166.786511][ T5894] udevd[5894]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 167.040591][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 167.098597][ T7386] netlink: 104 bytes leftover after parsing attributes in process `syz.2.575'. [ 167.107153][ T7387] loop9: detected capacity change from 0 to 7 [ 167.131740][ T7386] netlink: 104 bytes leftover after parsing attributes in process `syz.2.575'. [ 167.144907][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.185021][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.224595][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.260243][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.292881][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.343429][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.390277][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.454105][ T7387] ldm_validate_partition_table(): Disk read failed. [ 167.466192][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.580'. [ 167.474222][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.514385][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.525295][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.580'. [ 167.536160][ T7387] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.550328][ T7387] Dev loop9: unable to read RDB block 0 [ 167.558336][ T7387] loop9: unable to read partition table [ 167.564306][ T7387] loop9: partition table beyond EOD, truncated [ 167.571860][ T7387] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 167.854774][ T7412] input: syz0 as /devices/virtual/input/input20 [ 169.407695][ T7451] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 169.590836][ T7451] bond1: entered promiscuous mode [ 169.627050][ T7451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.712385][ T7457] bond1: (slave bridge1): making interface the new active one [ 169.720832][ T7457] bridge1: entered promiscuous mode [ 169.746882][ T7457] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 170.206996][ T7481] cgroup: fork rejected by pids controller in /syz0 [ 171.066474][ T5896] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.273545][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.313552][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 171.330617][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 171.353317][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.371861][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.410550][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.437826][ T5896] usb 3-1: config 0 descriptor?? [ 171.445853][ T7844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.636398][ T5833] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.650656][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.774273][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.818487][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.874202][ T5833] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.892511][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.913895][ T5896] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 171.923360][ T5833] usb 5-1: config 0 descriptor?? [ 171.959229][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.977050][ T5896] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.160489][ T5833] usbhid 5-1:0.0: can't add hid device: -71 [ 172.172660][ T5833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 172.193662][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.215682][ T5833] usb 5-1: USB disconnect, device number 12 [ 172.678899][ T1102] bridge_slave_1: left allmulticast mode [ 172.684898][ T1102] bridge_slave_1: left promiscuous mode [ 172.702560][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.746340][ T5833] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.767144][ T1102] bridge_slave_0: left allmulticast mode [ 172.772912][ T1102] bridge_slave_0: left promiscuous mode [ 172.816468][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.936840][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 172.955966][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.987366][ T5833] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 173.016359][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.058908][ T5833] usb 5-1: config 0 descriptor?? [ 173.067206][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.077211][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.085577][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.097086][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.105068][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.117955][ T5833] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 173.146713][ T5833] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 173.423072][ T5833] usb 5-1: USB disconnect, device number 13 [ 173.446161][ T5833] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 174.039166][ T5896] usb 3-1: USB disconnect, device number 12 [ 174.108439][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.125198][ T8396] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 174.143710][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.160637][ T1102] bond0 (unregistering): Released all slaves [ 174.567030][ T8398] bond2: entered allmulticast mode [ 174.582510][ T8398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.981922][ T8421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.048170][ T1102] hsr_slave_0: left promiscuous mode [ 175.060558][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 175.074622][ T1102] hsr_slave_1: left promiscuous mode [ 175.083731][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.105020][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.124445][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.156375][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.219168][ T55] Bluetooth: hci0: command tx timeout [ 175.227282][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 175.248971][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 175.260316][ T1102] veth1_macvtap: left promiscuous mode [ 175.266344][ T1102] veth0_macvtap: left promiscuous mode [ 175.272755][ T1102] veth1_vlan: left promiscuous mode [ 175.279961][ T1102] veth0_vlan: left promiscuous mode [ 175.325018][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 175.363616][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 175.377719][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 175.394701][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 175.414396][ T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 175.435200][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.467269][ T9] usb 5-1: Product: syz [ 175.471520][ T9] usb 5-1: Manufacturer: syz [ 175.476159][ T9] usb 5-1: SerialNumber: syz [ 175.538768][ T9] usb 5-1: config 0 descriptor?? [ 175.961735][ T5899] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 175.969727][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 175.980613][ T9] input input22: Device does not respond to id packet M [ 175.993512][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 176.005560][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 176.012549][ T9] input input22: Device does not respond to id packet P [ 176.029405][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 176.035758][ T9] input input22: Device does not respond to id packet B [ 176.044952][ T9] input input22: Device does not respond to id packet N [ 176.176867][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 176.189774][ T5899] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 176.198586][ T5899] usb 4-1: config 0 has no interface number 0 [ 176.205783][ T5899] usb 4-1: config 0 interface 230 has no altsetting 0 [ 176.220547][ T5899] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 176.229967][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.238584][ T5899] usb 4-1: Product: syz [ 176.242817][ T5899] usb 4-1: Manufacturer: syz [ 176.249754][ T5899] usb 4-1: SerialNumber: syz [ 176.258370][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 176.272595][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 176.281617][ T5899] usb 4-1: config 0 descriptor?? [ 176.294524][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 176.304276][ T5899] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 176.311850][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 176.321443][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 176.335353][ T5899] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 176.381531][ T9] usb 5-1: USB disconnect, device number 14 [ 176.477802][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 176.535002][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 177.110687][ T8435] netlink: 830 bytes leftover after parsing attributes in process `syz.2.652'. [ 177.297933][ T55] Bluetooth: hci0: command tx timeout [ 177.866896][ T8374] chnl_net:caif_netlink_parms(): no params data found [ 178.288587][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.304641][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.323153][ T8374] bridge_slave_0: entered allmulticast mode [ 178.344980][ T8374] bridge_slave_0: entered promiscuous mode [ 178.386148][ T8496] netlink: 'syz.2.669': attribute type 12 has an invalid length. [ 178.403502][ T8496] netlink: 'syz.2.669': attribute type 29 has an invalid length. [ 178.425605][ T8496] netlink: 148 bytes leftover after parsing attributes in process `syz.2.669'. [ 178.456347][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.479163][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.507440][ T8374] bridge_slave_1: entered allmulticast mode [ 178.531712][ T8374] bridge_slave_1: entered promiscuous mode [ 178.629486][ T5899] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 178.711906][ T8374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.804163][ T8374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.838976][ T5897] usb 4-1: USB disconnect, device number 20 [ 178.960199][ T8374] team0: Port device team_slave_0 added [ 178.967451][ T5899] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 178.987590][ T8374] team0: Port device team_slave_1 added [ 179.018806][ T8506] tipc: Started in network mode [ 179.023871][ T8506] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 179.048046][ T8506] tipc: Enabled bearer , priority 10 [ 179.082115][ T8506] netlink: 14 bytes leftover after parsing attributes in process `syz.1.673'. [ 179.154463][ T5899] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.167747][ T8506] tipc: Resetting bearer [ 179.180702][ T5899] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 179.192542][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.205721][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 179.219598][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 179.238240][ T5899] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.256677][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.268612][ T8506] tipc: Disabling bearer [ 179.272433][ T5899] usb 3-1: Product: syz [ 179.288751][ T5899] usb 3-1: Manufacturer: syz [ 179.301793][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.319009][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.320536][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 179.352736][ T8374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.369370][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.378190][ T55] Bluetooth: hci0: command tx timeout [ 179.413097][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.464319][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 179.516914][ T5899] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 179.522895][ T5899] cdc_wdm 3-1:1.0: Unknown control protocol [ 179.579821][ T8374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.733983][ T5899] usb 3-1: USB disconnect, device number 13 [ 179.915720][ T8374] hsr_slave_0: entered promiscuous mode [ 179.958984][ T8374] hsr_slave_1: entered promiscuous mode [ 179.965469][ T8374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.023252][ T8374] Cannot create hsr debugfs directory [ 181.458042][ T55] Bluetooth: hci0: command tx timeout [ 182.538701][ T8583] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 182.699299][ T5899] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 182.793011][ T8374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.845526][ T8588] Â: renamed from pim6reg1 [ 182.888600][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.899967][ T8374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.927055][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.972167][ T5899] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 182.984979][ T8374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.012424][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.041068][ T8374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.057698][ T5899] usb 2-1: config 0 descriptor?? [ 183.323736][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.442763][ T8374] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.495328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.502573][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.523376][ T5899] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 183.566445][ T5899] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 183.606677][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.613893][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.625505][ T5899] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000D/input/input23 [ 183.672444][ T30] audit: type=1326 audit(1744027040.436:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.2.705" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x0 [ 183.716917][ T5899] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 183.806370][ T5897] usb 2-1: USB disconnect, device number 9 [ 183.987110][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.103260][ T8374] veth0_vlan: entered promiscuous mode [ 184.153085][ T8374] veth1_vlan: entered promiscuous mode [ 184.668604][ T8374] veth0_macvtap: entered promiscuous mode [ 184.700971][ T8374] veth1_macvtap: entered promiscuous mode [ 184.733748][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.745411][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.773134][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.796600][ T8637] loop9: detected capacity change from 0 to 7 [ 184.804818][ T8637] buffer_io_error: 4 callbacks suppressed [ 184.804838][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.826554][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.858801][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.876461][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.884469][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.899715][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.936599][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.956335][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.977424][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.989688][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.999882][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.052492][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.082145][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.112374][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.132832][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.165587][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.165675][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.191595][ T8637] ldm_validate_partition_table(): Disk read failed. [ 185.209273][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.225317][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.246554][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.265083][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.292005][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.305777][ T8637] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.322547][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.333952][ T8637] Dev loop9: unable to read RDB block 0 [ 185.345847][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.373388][ T8637] loop9: unable to read partition table [ 185.382845][ T8637] loop9: partition table beyond EOD, truncated [ 185.392748][ T8637] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 185.429117][ T8374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.470474][ T8374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.533547][ T8374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.563522][ T8374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.039204][ T8618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.101130][ T8618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.225498][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.251852][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.531598][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 187.844903][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 190.807172][ T8830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.120003][ T8842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.770'. [ 192.186565][ T5896] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 192.266549][ T5833] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 192.370327][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.404964][ T5896] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.446332][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 192.454577][ T5896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.471172][ T5833] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 192.489175][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.497975][ T5896] usb 1-1: Product: syz [ 192.502370][ T5896] usb 1-1: Manufacturer: syz [ 192.504211][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.515695][ T5896] usb 1-1: SerialNumber: syz [ 192.535987][ T5833] usb 4-1: Product: syz [ 192.543044][ T5833] usb 4-1: Manufacturer: syz [ 192.553720][ T5833] usb 4-1: SerialNumber: syz [ 192.564496][ T5833] usb 4-1: config 0 descriptor?? [ 192.579125][ T5833] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 193.199688][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.370316][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 193.386070][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.405859][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.440260][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 193.456916][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.471079][ T9] usb 3-1: config 0 descriptor?? [ 193.798128][ T5896] cdc_ncm 1-1:1.0: bind() failure [ 193.820125][ T5833] gspca_topro: reg_w err -71 [ 193.825790][ T5896] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 193.848070][ T5896] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 193.865173][ T5833] gspca_topro: Sensor soi763a [ 193.867625][ T5896] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 193.899286][ T5833] usb 4-1: USB disconnect, device number 21 [ 193.911725][ T9] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 193.917290][ T5896] usb 1-1: USB disconnect, device number 12 [ 194.216393][ T9] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 194.260544][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270176][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.348918][ T9] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 194.455336][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.465448][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.488385][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.505700][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.520270][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.754839][ T9] ft260 0003:0403:6030.000E: failed to retrieve status: -71 [ 194.778310][ T9] ft260 0003:0403:6030.000E: failed to reset I2C controller: -71 [ 194.846546][ T9] usb 3-1: USB disconnect, device number 14 [ 194.886416][ T47] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 195.117374][ T8919] chnl_net:caif_netlink_parms(): no params data found [ 195.126671][ T47] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 195.135764][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.196310][ T47] usb 4-1: Product: syz [ 195.200565][ T47] usb 4-1: Manufacturer: syz [ 195.205192][ T47] usb 4-1: SerialNumber: syz [ 195.232404][ T47] usb 4-1: config 0 descriptor?? [ 195.253213][ T47] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 195.485980][ T30] audit: type=1326 audit(1744027052.256:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 195.507845][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.515278][ T30] audit: type=1326 audit(1744027052.256:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 195.586873][ T30] audit: type=1326 audit(1744027052.266:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 195.608643][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.661653][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.688428][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.699737][ T30] audit: type=1326 audit(1744027052.266:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 195.734663][ T8919] bridge_slave_0: entered allmulticast mode [ 195.762274][ T8919] bridge_slave_0: entered promiscuous mode [ 195.782956][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.792312][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.822824][ T8919] bridge_slave_1: entered allmulticast mode [ 195.843375][ T8919] bridge_slave_1: entered promiscuous mode [ 196.032940][ T8951] netlink: 'syz.4.810': attribute type 10 has an invalid length. [ 196.089634][ T8951] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 196.114625][ T8919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.151152][ T8919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.266638][ T5899] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 196.322914][ T8919] team0: Port device team_slave_0 added [ 196.359020][ T8919] team0: Port device team_slave_1 added [ 196.436429][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 196.448067][ T5899] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 196.464258][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.471530][ T5899] usb 3-1: config 179 has no interface number 0 [ 196.486849][ T5899] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 196.488042][ T47] gspca_sunplus: reg_r err -71 [ 196.502352][ T5899] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 196.516881][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.523712][ T5899] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.543897][ T47] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 196.581447][ T55] Bluetooth: hci2: command tx timeout [ 196.601975][ T47] usb 4-1: USB disconnect, device number 22 [ 196.608013][ T8919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.629173][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.637235][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.663616][ T8919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.665499][ T5899] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 196.735002][ T5899] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 196.773068][ T5899] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 196.805403][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.820354][ T8919] hsr_slave_0: entered promiscuous mode [ 196.842850][ T8949] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 196.844728][ T8919] hsr_slave_1: entered promiscuous mode [ 196.882577][ T8919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.913912][ T8919] Cannot create hsr debugfs directory [ 197.153297][ T5899] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input24 [ 197.351920][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.377034][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.652556][ T5833] usb 3-1: USB disconnect, device number 15 [ 197.652619][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 197.666900][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 197.675334][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.004290][ T8919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.034854][ T8919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.068400][ T8919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.111323][ T8919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.182552][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 198.656582][ T55] Bluetooth: hci2: command tx timeout [ 198.744554][ T8919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.798492][ T8919] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.820495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.827772][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.878858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.886394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.156089][ T8919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.249228][ T8919] veth0_vlan: entered promiscuous mode [ 199.279894][ T8919] veth1_vlan: entered promiscuous mode [ 199.385275][ T8919] veth0_macvtap: entered promiscuous mode [ 199.408352][ T8919] veth1_macvtap: entered promiscuous mode [ 199.440338][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.466731][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.490663][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.514409][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.543282][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.560995][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.571070][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.581853][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.591773][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.602372][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.619478][ T8919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.654241][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.665722][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.675750][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.692309][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.702281][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.716578][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.736023][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.748324][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.759830][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.775703][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.791619][ T8919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.825597][ T8919] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.834488][ T8919] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.846133][ T8919] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.857980][ T8919] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.096373][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.130432][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.202062][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.211314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.736423][ T55] Bluetooth: hci2: command tx timeout [ 202.356345][ T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.532484][ T47] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.583208][ T47] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 202.599152][ T47] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.608509][ T47] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.621897][ T47] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.658687][ T47] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.661302][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.864'. [ 202.676903][ T47] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.676934][ T47] usb 6-1: Product: syz [ 202.676951][ T47] usb 6-1: Manufacturer: syz [ 202.683509][ T47] cdc_wdm 6-1:1.0: skipping garbage [ 202.740775][ T47] cdc_wdm 6-1:1.0: skipping garbage [ 202.762282][ T47] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 202.784315][ T47] cdc_wdm 6-1:1.0: Unknown control protocol [ 202.817140][ T55] Bluetooth: hci2: command tx timeout [ 202.862757][ T9084] netlink: 'syz.2.869': attribute type 1 has an invalid length. [ 202.877500][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.864'. [ 202.922631][ T5833] usb 6-1: USB disconnect, device number 2 [ 203.045881][ T9084] bond2: entered promiscuous mode [ 203.086818][ T9084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.128575][ T9087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.138079][ T9087] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 203.148961][ T9087] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 203.164707][ T9087] bond2: (slave ip6gre1): making interface the new active one [ 203.175728][ T9087] ip6gre1: entered promiscuous mode [ 203.188152][ T9087] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 203.227445][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 203.400713][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.419299][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 203.443254][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.489722][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.534729][ T9] usb 5-1: Product: syz [ 203.565763][ T9] usb 5-1: Manufacturer: syz [ 203.585178][ T9] usb 5-1: SerialNumber: syz [ 203.872782][ T9088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.038776][ T5833] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 204.226658][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 204.240614][ T5833] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 204.255418][ T5833] usb 1-1: config 0 has no interface number 0 [ 204.268488][ T5833] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 204.278400][ T5899] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 204.287166][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.296132][ T5833] usb 1-1: Product: syz [ 204.300953][ T5833] usb 1-1: Manufacturer: syz [ 204.305849][ T5833] usb 1-1: SerialNumber: syz [ 204.317613][ T5833] usb 1-1: config 0 descriptor?? [ 204.453299][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.466518][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.477449][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.490817][ T5899] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.503240][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.515300][ T5899] usb 3-1: config 0 descriptor?? [ 204.515629][ T9088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.734961][ T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 204.754702][ T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 204.755122][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.801215][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.938520][ T5833] usb 1-1: USB disconnect, device number 13 [ 204.981480][ T5899] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 205.018351][ T47] usb 5-1: USB disconnect, device number 15 [ 205.019437][ T5899] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 205.030789][ T47] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 205.173897][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.376513][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 205.630425][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.5.888'. [ 205.707864][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.5.888'. [ 206.247284][ C1] plantronics 0003:047F:FFFF.000F: usb_submit_urb(ctrl) failed: -1 [ 207.050090][ T47] usb 3-1: USB disconnect, device number 16 [ 207.349829][ T9193] loop8: detected capacity change from 0 to 7 [ 207.389850][ T9193] Dev loop8: unable to read RDB block 7 [ 207.395508][ T9193] loop8: unable to read partition table [ 207.441906][ T9199] loop0: detected capacity change from 0 to 7 [ 207.474111][ T9199] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 207.479892][ T9193] loop8: partition table beyond EOD, truncated [ 207.486361][ T9199] loop0: partition table partially beyond EOD, truncated [ 207.493616][ T9193] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 207.493616][ T9193] ) failed (rc=-5) [ 207.509255][ T9199] loop0: p1 size 3797445902 extends beyond EOD, truncated [ 207.556438][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.050708][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 208.066497][ T5833] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 208.090685][ T9214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.256478][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 208.299165][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.311021][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.361186][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.396650][ T5833] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 208.417521][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.469472][ T5833] usb 4-1: config 0 descriptor?? [ 208.920794][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 208.920961][ T5833] playstation 0003:054C:05C4.0010: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 209.302899][ T5833] playstation 0003:054C:05C4.0010: Failed to retrieve feature with reportID 163: -32 [ 209.314382][ T5833] playstation 0003:054C:05C4.0010: Failed to retrieve DualShock4 firmware info: -32 [ 209.365726][ T5833] playstation 0003:054C:05C4.0010: Failed to get firmware info from DualShock4 [ 209.393497][ T5833] playstation 0003:054C:05C4.0010: HW/FW version data in sysfs will be invalid. [ 209.421107][ T5833] playstation 0003:054C:05C4.0010: Invalid gyro calibration data for axis (4), disabling calibration. [ 209.439480][ T5833] playstation 0003:054C:05C4.0010: Invalid gyro calibration data for axis (5), disabling calibration. [ 209.576526][ T5833] playstation 0003:054C:05C4.0010: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 209.637299][ T5833] playstation 0003:054C:05C4.0010: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 209.661956][ T5833] playstation 0003:054C:05C4.0010: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 209.699341][ T5833] input: HID 054c:05c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0010/input/input25 [ 209.755936][ T5833] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0010/input/input26 [ 209.810486][ T5833] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0010/input/input27 [ 209.965046][ T5833] playstation 0003:054C:05C4.0010: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 210.028989][ T5833] usb 4-1: USB disconnect, device number 23 [ 210.836723][ T5895] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.027152][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 211.045350][ T5895] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 211.077553][ T5895] usb 5-1: config 0 has no interface number 0 [ 211.116883][ T5895] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 211.166155][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.174500][ T5895] usb 5-1: Product: syz [ 211.186919][ T5895] usb 5-1: Manufacturer: syz [ 211.215197][ T5895] usb 5-1: SerialNumber: syz [ 211.256881][ T5895] usb 5-1: config 0 descriptor?? [ 211.285232][ T5895] smsc95xx v2.0.0 [ 211.696464][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 211.705726][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 211.917727][ T9285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.289888][ T5895] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 212.315628][ T5895] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 212.336908][ T5895] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 212.361958][ T5895] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 212.390712][ T5895] usb 5-1: USB disconnect, device number 16 [ 213.054198][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.076549][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.084364][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.094562][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.105858][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.270925][ T9313] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 213.414251][ T9319] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 213.425679][ T9319] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 213.452676][ T9319] bond1: (slave wireguard0): making interface the new active one [ 213.465758][ T9319] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 213.547383][ T5895] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 213.678933][ T5897] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 213.730416][ T5895] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.746310][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.772796][ T5895] usb 3-1: config 0 descriptor?? [ 213.794673][ T5895] cp210x 3-1:0.0: cp210x converter detected [ 213.836376][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 213.849812][ T9311] chnl_net:caif_netlink_parms(): no params data found [ 213.865151][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.896499][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.916677][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.946338][ T5897] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 213.957500][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.992722][ T5897] usb 1-1: config 0 descriptor?? [ 214.183359][ T9311] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.192677][ T9311] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.206520][ T5895] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 214.216928][ T9311] bridge_slave_0: entered allmulticast mode [ 214.227139][ T9311] bridge_slave_0: entered promiscuous mode [ 214.237509][ T9311] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.244865][ T9311] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.253131][ T9311] bridge_slave_1: entered allmulticast mode [ 214.262190][ T9311] bridge_slave_1: entered promiscuous mode [ 214.379607][ T9311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.407633][ T9311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.433038][ T5897] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 214.440914][ T5895] usb 3-1: cp210x converter now attached to ttyUSB0 [ 214.457937][ T5897] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 214.476615][ T5897] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 214.485538][ T5897] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 214.506878][ T5897] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 214.534297][ T5897] input: HID 0955:7214 Haptics as /devices/virtual/input/input28 [ 214.622277][ T5896] usb 3-1: USB disconnect, device number 17 [ 214.624434][ T9322] random: crng reseeded on system resumption [ 214.654797][ T5897] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 214.665207][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.670312][ T9311] team0: Port device team_slave_0 added [ 214.695518][ T5897] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 214.715233][ T5896] cp210x 3-1:0.0: device disconnected [ 214.755105][ T9311] team0: Port device team_slave_1 added [ 214.973776][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.984795][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.034215][ T9311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.060699][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.075833][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.110220][ T9311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.160562][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.185279][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.217448][ T5850] Bluetooth: hci2: command tx timeout [ 215.311614][ T5893] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 215.328176][ T5896] usb 1-1: USB disconnect, device number 14 [ 215.361042][ T5893] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.392905][ T5893] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.434714][ T9311] hsr_slave_0: entered promiscuous mode [ 215.458219][ T5893] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.475974][ T9311] hsr_slave_1: entered promiscuous mode [ 215.493523][ T9311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.532400][ T9311] Cannot create hsr debugfs directory [ 216.147173][ T9351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.958'. [ 216.160077][ T9311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.201784][ T9351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.958'. [ 216.213073][ T9351] Zero length message leads to an empty skb [ 216.373298][ T9311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.558173][ T9311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.696337][ T5895] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 216.746922][ T9311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.876389][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 216.889363][ T5895] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 216.900949][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 216.930782][ T5895] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.952499][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.966511][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.003156][ T5895] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 217.015824][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.044739][ T5895] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.074628][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.090632][ T9311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.113139][ T9311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.128443][ T9311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.132759][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.157384][ T9311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.158309][ T5895] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 217.187043][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.199205][ T5895] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.213903][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.225906][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.243247][ T5895] usb 3-1: string descriptor 0 read error: -22 [ 217.250309][ T5895] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 217.306810][ T5850] Bluetooth: hci2: command tx timeout [ 217.311341][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.388607][ T5895] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 217.391508][ T9311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.433573][ T9311] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.475486][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.482764][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.511438][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.518776][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.656758][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.723896][ T9311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.769038][ T5928] usb 3-1: USB disconnect, device number 18 [ 217.854464][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.872283][ T9311] veth0_vlan: entered promiscuous mode [ 217.881515][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 217.901973][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.923205][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.945385][ T9311] veth1_vlan: entered promiscuous mode [ 217.962908][ T5899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.975771][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.042086][ T5899] usb 5-1: config 0 descriptor?? [ 218.077143][ T9363] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 218.149988][ T9311] veth0_macvtap: entered promiscuous mode [ 218.170419][ T9311] veth1_macvtap: entered promiscuous mode [ 218.218657][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.234555][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.246146][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.270231][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.285034][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.316550][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.336298][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.352821][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.363641][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.375683][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.386492][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.399563][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.433348][ T9311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.473966][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.485684][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.498886][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.512859][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.524256][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.536143][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.547544][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.548509][ T5899] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 218.558861][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.579814][ T5899] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 218.585495][ T9311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.597043][ T5899] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 218.600699][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 218.649173][ T9311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.693886][ T9311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.759274][ T9311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.796314][ T9311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.834432][ T9311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.854720][ T9311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.937632][ T9385] syzkaller0: entered allmulticast mode [ 218.968240][ T5899] usb 5-1: USB disconnect, device number 17 [ 219.022409][ T9385] syzkaller0 (unregistering): left allmulticast mode [ 219.292604][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.329576][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.377999][ T5850] Bluetooth: hci2: command tx timeout [ 219.441197][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.459465][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.042092][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 221.125133][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 221.456385][ T5850] Bluetooth: hci2: command tx timeout [ 221.778738][ T5896] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 221.900797][ T9459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1002'. [ 221.936301][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 221.943680][ T5896] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 221.961741][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.007816][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.059509][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.112565][ T5896] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.136028][ T5896] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.155038][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.429791][ T5896] usb 5-1: usb_control_msg returned -32 [ 222.456799][ T5896] usbtmc 5-1:16.0: can't read capabilities [ 223.457501][ T5833] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 223.492776][ T5895] usb 5-1: USB disconnect, device number 18 [ 223.689371][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.752604][ T5833] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 223.779465][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.900083][ T5833] usb 1-1: config 0 descriptor?? [ 224.178820][ T5833] usbhid 1-1:0.0: can't add hid device: -71 [ 224.206442][ T5833] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 224.254818][ T5833] usb 1-1: USB disconnect, device number 15 [ 224.731008][ T5833] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 224.926492][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 224.963424][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.034021][ T5833] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 225.064437][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.100167][ T5833] usb 1-1: config 0 descriptor?? [ 225.587765][ T5833] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 225.646282][ T5899] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 225.830452][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 225.868589][ T5899] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 225.896278][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.952334][ T5899] usb 6-1: config 0 descriptor?? [ 225.970898][ T9529] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 226.066323][ T5928] usb 1-1: USB disconnect, device number 16 [ 226.400221][ T5899] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 226.621856][ T5897] usb 6-1: USB disconnect, device number 3 [ 228.123100][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 228.159043][ T9605] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1064'. [ 228.186055][ T9605] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1064'. [ 228.287867][ T9611] fuse: Bad value for 'fd' [ 228.318106][ T9589] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.342111][ T9589] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 228.343382][ T9588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.373350][ T9588] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 228.448870][ T9589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.479269][ T9589] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 228.500450][ T9588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.520776][ T9588] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 228.546315][ T9589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.558646][ T9589] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 228.568883][ T9588] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.594891][ T9588] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 228.621475][ T9589] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 228.624573][ T9588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.624599][ T9588] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 228.625435][ T9589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.630762][ T9589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.639106][ T9589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.657454][ T9588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.657484][ T9588] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 229.215646][ T9641] netlink: 1052 bytes leftover after parsing attributes in process `syz.4.1079'. [ 229.376633][ T5897] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 229.556209][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.557366][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.592176][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.593338][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 229.602656][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.633677][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.663654][ T5897] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.684796][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.717238][ T5897] usb 6-1: config 0 descriptor?? [ 230.201646][ T5897] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 230.237854][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 230.259076][ T5897] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 230.814171][ T5897] usb 6-1: USB disconnect, device number 4 [ 231.216499][ T5896] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 231.389909][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 231.412117][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 231.420263][ T5896] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 231.449400][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.484295][ T5896] usb 1-1: config 0 descriptor?? [ 232.057663][ T5896] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0016/input/input30 [ 232.126884][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.183726][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.210426][ T5896] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0016/input/input31 [ 232.347147][ T5896] kye 0003:0458:5013.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 232.444112][ T5896] usb 1-1: USB disconnect, device number 17 [ 233.053389][ T30] audit: type=1326 audit(1744027089.826:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7fc00000 [ 233.468839][ T5896] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 233.656864][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 233.666516][ T5896] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 233.674820][ T5896] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.696364][ T5896] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.716278][ T5896] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.736290][ T5896] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.741436][ T30] audit: type=1326 audit(1744027090.516:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f64579 code=0x7fc00000 [ 233.774256][ T5896] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.813441][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.067039][ T5896] usb 3-1: usb_control_msg returned -32 [ 234.072702][ T5896] usbtmc 3-1:16.0: can't read capabilities [ 234.225849][ T30] audit: type=1326 audit(1744027090.996:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 234.274050][ T30] audit: type=1326 audit(1744027091.026:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 234.303064][ T30] audit: type=1326 audit(1744027091.026:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 234.331491][ T30] audit: type=1326 audit(1744027091.026:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 234.383579][ T30] audit: type=1326 audit(1744027091.026:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 234.427748][ T30] audit: type=1326 audit(1744027091.026:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 234.482683][ T30] audit: type=1326 audit(1744027091.146:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 234.507925][ T30] audit: type=1326 audit(1744027091.216:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 234.510857][ T5833] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 234.584683][ T9733] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1114'. [ 234.709809][ T5833] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 234.725526][ T5833] usb 1-1: config 0 has no interface number 0 [ 234.732285][ T5833] usb 1-1: New USB device found, idVendor=0bda, idProduct=8050, bcdDevice=83.c4 [ 234.748676][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.799272][ T5833] r8152-cfgselector 1-1: Unknown version 0x0000 [ 234.802079][ T9739] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 234.805577][ T5833] r8152-cfgselector 1-1: config 0 descriptor?? [ 234.842147][ T5833] hub 1-1:0.116: bad descriptor, ignoring hub [ 234.851845][ T5833] hub 1-1:0.116: probe with driver hub failed with error -5 [ 235.014987][ T5896] usb 3-1: USB disconnect, device number 19 [ 235.204222][ T5893] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 235.406487][ T5895] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 235.578248][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.590449][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.622550][ T5895] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 235.646298][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.683606][ T5895] usb 4-1: config 0 descriptor?? [ 235.763116][ T9760] netlink: 'syz.2.1125': attribute type 1 has an invalid length. [ 235.861027][ T9760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.937865][ T9762] bond3: (slave gretap1): making interface the new active one [ 235.967065][ T9762] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 235.996418][ T5833] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 236.166259][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 236.187315][ T5895] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 236.189153][ T5833] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 236.194683][ T5895] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 236.223852][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.254711][ T5833] usb 1-1: Product: syz [ 236.256442][ T5895] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0017/input/input32 [ 236.274578][ T5833] usb 1-1: Manufacturer: syz [ 236.286304][ T5833] usb 1-1: SerialNumber: syz [ 236.303018][ T5895] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 236.323987][ T5833] usb 1-1: config 0 descriptor?? [ 236.352370][ T5833] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 236.491133][ T5899] usb 4-1: USB disconnect, device number 24 [ 237.765554][ T5833] gspca_topro: reg_r err -71 [ 237.777941][ T5833] gspca_topro: Sensor soi763a [ 237.806556][ T5896] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 237.824729][ T5833] usb 1-1: USB disconnect, device number 19 [ 238.076710][ T9794] kvm: kvm [9793]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x102005c02090103 [ 238.221184][ T5896] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 238.229230][ T5896] usb 3-1: can't read configurations, error -71 [ 239.346317][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 239.506306][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 239.527650][ T5896] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 239.548530][ T5896] usb 3-1: config 0 has no interface number 1 [ 239.562634][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.576854][ T5896] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 239.588238][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.597171][ T5896] usb 3-1: Product: syz [ 239.601549][ T5896] usb 3-1: Manufacturer: syz [ 239.606713][ T5896] usb 3-1: SerialNumber: syz [ 239.641894][ T5896] usb 3-1: config 0 descriptor?? [ 239.871285][ T5896] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 239.920653][ T5896] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 239.958708][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 239.958730][ T30] audit: type=1326 audit(1744027096.736:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.5.1156" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x0 [ 240.009217][ T5896] usb 3-1: USB disconnect, device number 22 [ 241.374013][ T9857] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 241.537275][ T9861] bond2: (slave gretap1): making interface the new active one [ 241.550461][ T9861] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 241.773010][ T9870] syz_tun: entered allmulticast mode [ 241.810853][ T9869] syz_tun: left allmulticast mode [ 242.086549][ C1] Unknown status report in ack skb [ 245.006572][ T5833] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 245.196269][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 245.226638][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 245.258548][ T5833] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 245.286394][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 245.315267][ T5833] usb 4-1: Product: syz [ 245.335882][ T5833] usb 4-1: Manufacturer: syz [ 245.352500][ T5833] usb 4-1: SerialNumber: syz [ 245.375861][ T5833] usb 4-1: config 0 descriptor?? [ 245.399870][ T9939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.412114][ T5833] hub 4-1:0.0: bad descriptor, ignoring hub [ 245.454392][ T5833] hub 4-1:0.0: probe with driver hub failed with error -5 [ 246.142054][ T30] audit: type=1800 audit(1744027102.886:147): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1195" name="file1" dev="tmpfs" ino=445 res=0 errno=0 [ 246.203895][ T9939] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 246.238875][ T9939] usb 4-1: device reset changed ep0 maxpacket size! [ 246.293497][ T5833] usb 4-1: USB disconnect, device number 25 [ 246.467330][ T5833] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 246.656502][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 246.668563][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.699518][ T5833] usb 4-1: config 0 has no interfaces? [ 246.706295][ T5895] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 246.720686][ T5833] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 246.740881][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.758610][ T5833] usb 4-1: Product: syz [ 246.763258][ T5833] usb 4-1: Manufacturer: syz [ 246.768303][ T5833] usb 4-1: SerialNumber: syz [ 246.788023][ T5833] usb 4-1: config 0 descriptor?? [ 246.922341][ T5895] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 246.938885][ T5895] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 246.977278][ T5895] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 246.996709][ T5895] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 247.022030][ T5895] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 247.041877][ T5896] usb 4-1: USB disconnect, device number 26 [ 247.076700][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.090687][ T5895] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 247.100875][ T5895] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 247.120230][ T5895] usb 5-1: Product: syz [ 247.127758][ T5895] usb 5-1: Manufacturer: syz [ 247.134130][ T5895] usb 5-1: SerialNumber: syz [ 247.151670][ T5895] usb 5-1: config 0 descriptor?? [ 247.160741][ T9987] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 247.212565][ T5895] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 247.231261][ T5895] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 247.457074][T10009] syzkaller1: entered promiscuous mode [ 247.471735][T10009] syzkaller1: entered allmulticast mode [ 247.753548][T10017] netlink: 'syz.2.1213': attribute type 25 has an invalid length. [ 247.762175][T10017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1213'. [ 247.831030][ T5833] usb 5-1: USB disconnect, device number 19 [ 247.883590][ T5833] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 248.306482][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 248.367939][T10030] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.621851][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.644938][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.683116][ T5896] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 248.722927][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.757637][ T5896] usb 6-1: SerialNumber: syz [ 248.988006][ T5896] usb 6-1: 0:2 : does not exist [ 249.083534][ T5896] usb 6-1: USB disconnect, device number 5 [ 249.394620][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.711122][ T30] audit: type=1326 audit(1744027106.486:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 249.763740][ T30] audit: type=1326 audit(1744027106.486:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 249.794095][ T30] audit: type=1326 audit(1744027106.486:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 249.816139][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.844651][ T30] audit: type=1326 audit(1744027106.486:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 249.866675][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.880871][ T30] audit: type=1326 audit(1744027106.486:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 249.906315][ T30] audit: type=1326 audit(1744027106.516:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 249.935296][ T30] audit: type=1326 audit(1744027106.516:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 249.961942][ T30] audit: type=1326 audit(1744027106.516:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 249.983962][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.006290][ T30] audit: type=1326 audit(1744027106.516:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 250.036594][ T5899] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 250.198846][ T5899] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 250.213380][ T5899] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 250.222832][ T5899] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 250.236369][ T5899] usb 6-1: config 220 has no interface number 2 [ 250.242950][ T5899] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 250.259636][ T5899] usb 6-1: config 220 interface 0 has no altsetting 0 [ 250.266976][ T5899] usb 6-1: config 220 interface 76 has no altsetting 0 [ 250.274277][ T5899] usb 6-1: config 220 interface 1 has no altsetting 0 [ 250.285424][ T5899] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 250.295223][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.303771][ T5899] usb 6-1: Product: syz [ 250.308768][ T5899] usb 6-1: Manufacturer: syz [ 250.313601][ T5899] usb 6-1: SerialNumber: syz [ 250.539749][ T5899] usb 6-1: selecting invalid altsetting 0 [ 250.562029][ T5899] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 250.573176][ T5899] usb 6-1: No valid video chain found. [ 250.592968][ T5899] usb 6-1: selecting invalid altsetting 0 [ 250.606243][ T5899] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 250.628087][ T5899] usb 6-1: USB disconnect, device number 6 [ 250.722001][ T5833] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 250.954365][ T5833] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.963586][ T5833] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.984331][ T5833] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.007172][ T5833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 251.036267][ T5833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 251.059083][ T5833] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.068856][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.099550][ T5833] usb 5-1: Product: syz [ 251.110374][ T5833] usb 5-1: Manufacturer: syz [ 251.167808][ T5833] cdc_wdm 5-1:1.0: skipping garbage [ 251.206902][ T5833] cdc_wdm 5-1:1.0: skipping garbage [ 251.219865][ T5833] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 251.225842][ T5833] cdc_wdm 5-1:1.0: Unknown control protocol [ 251.440059][ T5896] usb 5-1: USB disconnect, device number 20 [ 252.481950][T10112] input: syz1 as /devices/virtual/input/input33 [ 252.947131][T10128] input: syz1 as /devices/virtual/input/input34 [ 253.496461][ T5927] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 253.717708][ T5927] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.736764][ T5927] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 253.791133][ T5927] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.836748][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.867304][ T5927] usb 6-1: Product: syz [ 253.871547][ T5927] usb 6-1: Manufacturer: syz [ 253.896005][ T5927] usb 6-1: SerialNumber: syz [ 254.154617][T10137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 254.423510][T10162] netlink: 'syz.4.1271': attribute type 12 has an invalid length. [ 254.801567][T10137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 255.023109][ T5927] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 255.029930][ T5927] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 255.056887][ T5927] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 255.250624][ T5927] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 255.343473][ T5927] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 255.452562][ T5927] usb 6-1: USB disconnect, device number 7 [ 255.483836][ T5927] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 255.710548][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721785][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.768548][T10190] trusted_key: syz.3.1282 sent an empty control message without MSG_MORE. [ 256.083519][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 256.128838][T10194] bridge_slave_1: left allmulticast mode [ 256.134552][T10194] bridge_slave_1: left promiscuous mode [ 256.156995][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.187734][T10194] bridge_slave_0: left allmulticast mode [ 256.203556][T10194] bridge_slave_0: left promiscuous mode [ 256.243310][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.258811][ T36] [ 256.261423][ T36] ============================= [ 256.266387][ T36] WARNING: suspicious RCU usage [ 256.271310][ T36] 6.15.0-rc1-syzkaller #0 Not tainted [ 256.278668][ T36] ----------------------------- [ 256.283571][ T36] net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! [ 256.293944][ T36] [ 256.293944][ T36] other info that might help us debug this: [ 256.293944][ T36] [ 256.305059][ T36] [ 256.305059][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 256.313950][ T36] 3 locks held by kworker/u8:2/36: [ 256.319605][ T36] #0: ffff888061707948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 256.331397][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 256.345397][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 256.355783][ T36] [ 256.355783][ T36] stack backtrace: [ 256.363240][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 256.363270][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.363285][ T36] Workqueue: bond0 bond_mii_monitor [ 256.363324][ T36] Call Trace: [ 256.363333][ T36] [ 256.363343][ T36] dump_stack_lvl+0x241/0x360 [ 256.363380][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.363411][ T36] ? __pfx__printk+0x10/0x10 [ 256.363446][ T36] ? print_lock+0x171/0x1a0 [ 256.363484][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 256.363515][ T36] dev_deactivate_queue+0x8f/0x1b0 [ 256.363551][ T36] dev_deactivate_many+0x14c/0xca0 [ 256.363589][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 256.363626][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 256.363654][ T36] dev_deactivate+0x186/0x280 [ 256.363688][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 256.363717][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 256.363739][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.363766][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 256.363792][ T36] linkwatch_do_dev+0x10a/0x170 [ 256.363816][ T36] ethtool_op_get_link+0x15/0x60 [ 256.363848][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 256.363878][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 256.363910][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 256.363958][ T36] bond_mii_monitor+0x49d/0x3170 [ 256.364001][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 256.364033][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 256.364072][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 256.364104][ T36] ? register_lock_class+0x54/0x330 [ 256.364133][ T36] ? __lock_acquire+0xad5/0xd80 [ 256.364157][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.364203][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 256.364227][ T36] process_scheduled_works+0xac3/0x18e0 [ 256.364284][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.364320][ T36] ? assign_work+0x367/0x3d0 [ 256.364350][ T36] worker_thread+0x870/0xd50 [ 256.364392][ T36] ? __kthread_parkme+0x1a8/0x200 [ 256.364424][ T36] ? __pfx_worker_thread+0x10/0x10 [ 256.364450][ T36] kthread+0x7b7/0x940 [ 256.364488][ T36] ? __pfx_worker_thread+0x10/0x10 [ 256.364515][ T36] ? __pfx_kthread+0x10/0x10 [ 256.364542][ T36] ? __pfx_kthread+0x10/0x10 [ 256.364570][ T36] ? __pfx_kthread+0x10/0x10 [ 256.364599][ T36] ? __pfx_kthread+0x10/0x10 [ 256.364628][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.364647][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.364671][ T36] ? __pfx_kthread+0x10/0x10 [ 256.364701][ T36] ret_from_fork+0x4b/0x80 [ 256.364723][ T36] ? __pfx_kthread+0x10/0x10 [ 256.364752][ T36] ret_from_fork_asm+0x1a/0x30 [ 256.364790][ T36] [ 256.650209][ T36] [ 256.652807][ T36] ============================= [ 256.658089][ T36] WARNING: suspicious RCU usage [ 256.663088][ T36] 6.15.0-rc1-syzkaller #0 Not tainted [ 256.668886][ T36] ----------------------------- [ 256.673828][ T36] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 256.683032][ T36] [ 256.683032][ T36] other info that might help us debug this: [ 256.683032][ T36] [ 256.696104][ T36] [ 256.696104][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 256.704291][ T36] 3 locks held by kworker/u8:2/36: [ 256.709561][ T36] #0: ffff888061707948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 256.720918][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 256.734476][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 256.744410][ T36] [ 256.744410][ T36] stack backtrace: [ 256.750409][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 256.750439][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.750454][ T36] Workqueue: bond0 bond_mii_monitor [ 256.750488][ T36] Call Trace: [ 256.750497][ T36] [ 256.750505][ T36] dump_stack_lvl+0x241/0x360 [ 256.750542][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.750572][ T36] ? __pfx__printk+0x10/0x10 [ 256.750617][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 256.750656][ T36] dev_deactivate_many+0x228/0xca0 [ 256.750697][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 256.750730][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 256.750756][ T36] dev_deactivate+0x186/0x280 [ 256.750791][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 256.750820][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 256.750843][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.750869][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 256.750895][ T36] linkwatch_do_dev+0x10a/0x170 [ 256.750921][ T36] ethtool_op_get_link+0x15/0x60 [ 256.750952][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 256.750982][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 256.751014][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 256.751061][ T36] bond_mii_monitor+0x49d/0x3170 [ 256.751104][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 256.751137][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 256.751175][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 256.751207][ T36] ? register_lock_class+0x54/0x330 [ 256.751237][ T36] ? __lock_acquire+0xad5/0xd80 [ 256.751261][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.751303][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 256.751327][ T36] process_scheduled_works+0xac3/0x18e0 [ 256.751384][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.751420][ T36] ? assign_work+0x367/0x3d0 [ 256.751450][ T36] worker_thread+0x870/0xd50 [ 256.751494][ T36] ? __kthread_parkme+0x1a8/0x200 [ 256.751526][ T36] ? __pfx_worker_thread+0x10/0x10 [ 256.751551][ T36] kthread+0x7b7/0x940 [ 256.751583][ T36] ? __pfx_worker_thread+0x10/0x10 [ 256.751612][ T36] ? __pfx_kthread+0x10/0x10 [ 256.751647][ T36] ? __pfx_kthread+0x10/0x10 [ 256.751677][ T36] ? __pfx_kthread+0x10/0x10 [ 256.751706][ T36] ? __pfx_kthread+0x10/0x10 [ 256.751749][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.751768][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.751792][ T36] ? __pfx_kthread+0x10/0x10 [ 256.751822][ T36] ret_from_fork+0x4b/0x80 [ 256.751844][ T36] ? __pfx_kthread+0x10/0x10 [ 256.751873][ T36] ret_from_fork_asm+0x1a/0x30 [ 256.751912][ T36] [ 256.752061][ T36] [ 257.021282][ T36] ============================= [ 257.027465][ T36] WARNING: suspicious RCU usage [ 257.032445][ T36] 6.15.0-rc1-syzkaller #0 Not tainted [ 257.038012][ T36] ----------------------------- [ 257.042928][ T36] net/sched/sch_generic.c:1301 suspicious rcu_dereference_protected() usage! [ 257.051834][ T36] [ 257.051834][ T36] other info that might help us debug this: [ 257.051834][ T36] [ 257.064108][ T36] [ 257.064108][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 257.074910][ T36] 3 locks held by kworker/u8:2/36: [ 257.080183][ T36] #0: ffff888061707948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 257.091687][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 257.106394][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 257.117426][ T36] [ 257.117426][ T36] stack backtrace: [ 257.123458][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 257.123491][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.123506][ T36] Workqueue: bond0 bond_mii_monitor [ 257.123541][ T36] Call Trace: [ 257.123549][ T36] [ 257.123560][ T36] dump_stack_lvl+0x241/0x360 [ 257.123596][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.123627][ T36] ? __pfx__printk+0x10/0x10 [ 257.123665][ T36] ? print_lock+0x171/0x1a0 [ 257.123697][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 257.123727][ T36] dev_reset_queue+0x88/0x1b0 [ 257.123760][ T36] dev_deactivate_many+0x61d/0xca0 [ 257.123793][ T36] ? dev_deactivate_many+0x2e5/0xca0 [ 257.123826][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 257.123863][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 257.123891][ T36] dev_deactivate+0x186/0x280 [ 257.123924][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 257.123953][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 257.123975][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.124001][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 257.124026][ T36] linkwatch_do_dev+0x10a/0x170 [ 257.124050][ T36] ethtool_op_get_link+0x15/0x60 [ 257.124081][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 257.124111][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 257.124143][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 257.124191][ T36] bond_mii_monitor+0x49d/0x3170 [ 257.124233][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 257.124265][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 257.124302][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 257.124334][ T36] ? register_lock_class+0x54/0x330 [ 257.124363][ T36] ? __lock_acquire+0xad5/0xd80 [ 257.124388][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 257.124433][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 257.124457][ T36] process_scheduled_works+0xac3/0x18e0 [ 257.124514][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.124549][ T36] ? assign_work+0x367/0x3d0 [ 257.124579][ T36] worker_thread+0x870/0xd50 [ 257.124621][ T36] ? __kthread_parkme+0x1a8/0x200 [ 257.124652][ T36] ? __pfx_worker_thread+0x10/0x10 [ 257.124684][ T36] kthread+0x7b7/0x940 [ 257.124715][ T36] ? __pfx_worker_thread+0x10/0x10 [ 257.124742][ T36] ? __pfx_kthread+0x10/0x10 [ 257.124769][ T36] ? __pfx_kthread+0x10/0x10 [ 257.124797][ T36] ? __pfx_kthread+0x10/0x10 [ 257.124825][ T36] ? __pfx_kthread+0x10/0x10 [ 257.124853][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.124873][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 257.124896][ T36] ? __pfx_kthread+0x10/0x10 [ 257.124926][ T36] ret_from_fork+0x4b/0x80 [ 257.124947][ T36] ? __pfx_kthread+0x10/0x10 [ 257.124976][ T36] ret_from_fork_asm+0x1a/0x30 [ 257.125014][ T36] [ 257.416348][ T36] [ 257.418751][ T36] ============================= [ 257.423657][ T36] WARNING: suspicious RCU usage [ 257.428607][ T36] 6.15.0-rc1-syzkaller #0 Not tainted [ 257.434002][ T36] ----------------------------- [ 257.438921][ T36] net/sched/sch_generic.c:1332 suspicious rcu_dereference_protected() usage! [ 257.447753][ T36] [ 257.447753][ T36] other info that might help us debug this: [ 257.447753][ T36] [ 257.458043][ T36] [ 257.458043][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 257.466126][ T36] 3 locks held by kworker/u8:2/36: [ 257.471407][ T36] #0: ffff888061707948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 257.482585][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 257.495599][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 257.506853][ T36] [ 257.506853][ T36] stack backtrace: [ 257.512792][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 257.512821][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.512836][ T36] Workqueue: bond0 bond_mii_monitor [ 257.512871][ T36] Call Trace: [ 257.512879][ T36] [ 257.512889][ T36] dump_stack_lvl+0x241/0x360 [ 257.512927][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.512958][ T36] ? __pfx__printk+0x10/0x10 [ 257.513001][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 257.513032][ T36] dev_deactivate_many+0x93b/0xca0 [ 257.513072][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 257.513109][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 257.513137][ T36] dev_deactivate+0x186/0x280 [ 257.513171][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 257.513200][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 257.513222][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.513249][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 257.513275][ T36] linkwatch_do_dev+0x10a/0x170 [ 257.513300][ T36] ethtool_op_get_link+0x15/0x60 [ 257.513338][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 257.513369][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 257.513401][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 257.513448][ T36] bond_mii_monitor+0x49d/0x3170 [ 257.513491][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 257.513524][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 257.513562][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 257.513594][ T36] ? register_lock_class+0x54/0x330 [ 257.513623][ T36] ? __lock_acquire+0xad5/0xd80 [ 257.513649][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 257.513694][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 257.513719][ T36] process_scheduled_works+0xac3/0x18e0 [ 257.513776][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.513812][ T36] ? assign_work+0x367/0x3d0 [ 257.513842][ T36] worker_thread+0x870/0xd50 [ 257.513884][ T36] ? __kthread_parkme+0x1a8/0x200 [ 257.513916][ T36] ? __pfx_worker_thread+0x10/0x10 [ 257.513941][ T36] kthread+0x7b7/0x940 [ 257.513973][ T36] ? __pfx_worker_thread+0x10/0x10 [ 257.514000][ T36] ? __pfx_kthread+0x10/0x10 [ 257.514027][ T36] ? __pfx_kthread+0x10/0x10 [ 257.514056][ T36] ? __pfx_kthread+0x10/0x10 [ 257.514084][ T36] ? __pfx_kthread+0x10/0x10 [ 257.514113][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.514133][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 257.514156][ T36] ? __pfx_kthread+0x10/0x10 [ 257.514187][ T36] ret_from_fork+0x4b/0x80 [ 257.514209][ T36] ? __pfx_kthread+0x10/0x10 [ 257.514239][ T36] ret_from_fork_asm+0x1a/0x30 [ 257.514277][ T36] [ 257.559897][ T36] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 257.785933][ T36] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 36, name: kworker/u8:2 [ 257.795033][ T36] preempt_count: 0, expected: 0 [ 257.799971][ T36] RCU nest depth: 1, expected: 0 [ 257.804927][ T36] 3 locks held by kworker/u8:2/36: [ 257.810200][ T36] #0: ffff888061707948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 257.823671][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 257.836727][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 257.846576][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 257.846605][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.846620][ T36] Workqueue: bond0 bond_mii_monitor [ 257.846654][ T36] Call Trace: [ 257.846663][ T36] [ 257.846672][ T36] dump_stack_lvl+0x241/0x360 [ 257.846707][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.846755][ T36] __might_resched+0x558/0x6c0 [ 257.846787][ T36] ? __pfx___might_resched+0x10/0x10 [ 257.846832][ T36] down_read+0x90/0xa50 [ 257.846862][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 257.846883][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 257.846911][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 257.846933][ T36] ? __pfx_down_read+0x10/0x10 [ 257.846958][ T36] ? dev_deactivate_many+0xa9b/0xca0 [ 257.846989][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 257.847021][ T36] ? dev_get_flags+0x147/0x1d0 [ 257.847049][ T36] wext_netdev_notifier_call+0x1f/0x120 [ 257.847086][ T36] notifier_call_chain+0x1a5/0x3f0 [ 257.847123][ T36] netdev_state_change+0x123/0x1a0 [ 257.847152][ T36] ? __pfx_netdev_state_change+0x10/0x10 [ 257.847184][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 257.847207][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.847234][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 257.847260][ T36] linkwatch_do_dev+0x112/0x170 [ 257.847285][ T36] ethtool_op_get_link+0x15/0x60 [ 257.847317][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 257.847347][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 257.847380][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 257.847429][ T36] bond_mii_monitor+0x49d/0x3170 [ 257.847472][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 257.847505][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 257.847543][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 257.847584][ T36] ? register_lock_class+0x54/0x330 [ 257.847613][ T36] ? __lock_acquire+0xad5/0xd80 [ 257.847639][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 257.847683][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 257.847707][ T36] process_scheduled_works+0xac3/0x18e0 [ 257.847758][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.847793][ T36] ? assign_work+0x367/0x3d0 [ 257.847823][ T36] worker_thread+0x870/0xd50 [ 257.847862][ T36] ? __kthread_parkme+0x1a8/0x200 [ 257.847892][ T36] ? __pfx_worker_thread+0x10/0x10 [ 257.847918][ T36] kthread+0x7b7/0x940 [ 257.847950][ T36] ? __pfx_worker_thread+0x10/0x10 [ 257.847977][ T36] ? __pfx_kthread+0x10/0x10 [ 257.848004][ T36] ? __pfx_kthread+0x10/0x10 [ 257.848033][ T36] ? __pfx_kthread+0x10/0x10 [ 257.848061][ T36] ? __pfx_kthread+0x10/0x10 [ 257.848090][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.848110][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 257.848134][ T36] ? __pfx_kthread+0x10/0x10 [ 257.848164][ T36] ret_from_fork+0x4b/0x80 [ 257.848187][ T36] ? __pfx_kthread+0x10/0x10 [ 257.848217][ T36] ret_from_fork_asm+0x1a/0x30 [ 257.848255][ T36] [ 257.848280][ T36] [ 258.138503][ T36] ============================= [ 258.143353][ T36] [ BUG: Invalid wait context ] [ 258.148202][ T36] 6.15.0-rc1-syzkaller #0 Tainted: G W [ 258.155132][ T36] ----------------------------- [ 258.159973][ T36] kworker/u8:2/36 is trying to lock: [ 258.165288][ T36] ffffffff900f0790 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 258.174830][ T36] other info that might help us debug this: [ 258.180729][ T36] context-{5:5} [ 258.184189][ T36] 3 locks held by kworker/u8:2/36: [ 258.189300][ T36] #0: ffff888061707948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 258.200381][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 258.213277][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 258.222963][ T36] stack backtrace: [ 258.226699][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 258.226730][ T36] Tainted: [W]=WARN [ 258.226737][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.226749][ T36] Workqueue: bond0 bond_mii_monitor [ 258.226776][ T36] Call Trace: [ 258.226783][ T36] [ 258.226791][ T36] dump_stack_lvl+0x241/0x360 [ 258.226818][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.226841][ T36] ? __pfx__printk+0x10/0x10 [ 258.226867][ T36] __lock_acquire+0xc30/0xd80 [ 258.226888][ T36] lock_acquire+0x116/0x2f0 [ 258.226904][ T36] ? wext_netdev_notifier_call+0x1f/0x120 [ 258.226935][ T36] down_read+0xb3/0xa50 [ 258.226956][ T36] ? wext_netdev_notifier_call+0x1f/0x120 [ 258.226981][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 258.226998][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.227017][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 258.227034][ T36] ? __pfx_down_read+0x10/0x10 [ 258.227054][ T36] ? dev_deactivate_many+0xa9b/0xca0 [ 258.227078][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 258.227098][ T36] ? dev_get_flags+0x147/0x1d0 [ 258.227116][ T36] wext_netdev_notifier_call+0x1f/0x120 [ 258.227142][ T36] notifier_call_chain+0x1a5/0x3f0 [ 258.227166][ T36] netdev_state_change+0x123/0x1a0 [ 258.227189][ T36] ? __pfx_netdev_state_change+0x10/0x10 [ 258.227212][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 258.227229][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.227248][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 258.227273][ T36] linkwatch_do_dev+0x112/0x170 [ 258.227291][ T36] ethtool_op_get_link+0x15/0x60 [ 258.227316][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 258.227340][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 258.227364][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 258.227393][ T36] bond_mii_monitor+0x49d/0x3170 [ 258.227419][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 258.227443][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 258.227468][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 258.227492][ T36] ? register_lock_class+0x54/0x330 [ 258.227511][ T36] ? __lock_acquire+0xad5/0xd80 [ 258.227529][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.227554][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 258.227573][ T36] process_scheduled_works+0xac3/0x18e0 [ 258.227602][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.227625][ T36] ? assign_work+0x367/0x3d0 [ 258.227644][ T36] worker_thread+0x870/0xd50 [ 258.227669][ T36] ? __kthread_parkme+0x1a8/0x200 [ 258.227691][ T36] ? __pfx_worker_thread+0x10/0x10 [ 258.227710][ T36] kthread+0x7b7/0x940 [ 258.227732][ T36] ? __pfx_worker_thread+0x10/0x10 [ 258.227752][ T36] ? __pfx_kthread+0x10/0x10 [ 258.227773][ T36] ? __pfx_kthread+0x10/0x10 [ 258.227795][ T36] ? __pfx_kthread+0x10/0x10 [ 258.227817][ T36] ? __pfx_kthread+0x10/0x10 [ 258.227839][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.227854][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.227872][ T36] ? __pfx_kthread+0x10/0x10 [ 258.227895][ T36] ret_from_fork+0x4b/0x80 [ 258.227912][ T36] ? __pfx_kthread+0x10/0x10 [ 258.227934][ T36] ret_from_fork_asm+0x1a/0x30 [ 258.227955][ T36] [ 258.547553][ T36] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 258.559540][ T36] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 36, name: kworker/u8:2 [ 258.568772][ T36] preempt_count: 0, expected: 0 [ 258.573678][ T36] RCU nest depth: 1, expected: 0 [ 258.580676][ T36] INFO: lockdep is turned off. [ 258.585458][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 258.585483][ T36] Tainted: [W]=WARN [ 258.585489][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.585499][ T36] Workqueue: bond0 bond_mii_monitor [ 258.585526][ T36] Call Trace: [ 258.585533][ T36] [ 258.585539][ T36] dump_stack_lvl+0x241/0x360 [ 258.585563][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.585585][ T36] ? __pfx__printk+0x10/0x10 [ 258.585605][ T36] ? rcu_is_watching+0x15/0xb0 [ 258.585627][ T36] __might_resched+0x558/0x6c0 [ 258.585647][ T36] ? __pfx___might_resched+0x10/0x10 [ 258.585664][ T36] ? br_get_link_ksettings+0x376/0x420 [ 258.585687][ T36] ? __pfx_br_get_link_ksettings+0x10/0x10 [ 258.585709][ T36] ? rcu_is_watching+0x15/0xb0 [ 258.585729][ T36] __mutex_lock+0x12c/0x10c0 [ 258.585752][ T36] ? tee_netdev_event+0x86/0x460 [ 258.585770][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 258.585792][ T36] ? net_generic+0x1f/0x240 [ 258.585809][ T36] tee_netdev_event+0x86/0x460 [ 258.585826][ T36] ? nft_offload_netdev_event+0x27d/0x360 [ 258.585846][ T36] notifier_call_chain+0x1a5/0x3f0 [ 258.585867][ T36] netdev_state_change+0x123/0x1a0 [ 258.585888][ T36] ? __pfx_netdev_state_change+0x10/0x10 [ 258.585908][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 258.585924][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.585941][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 258.585956][ T36] linkwatch_do_dev+0x112/0x170 [ 258.585972][ T36] ethtool_op_get_link+0x15/0x60 [ 258.585994][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 258.586016][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 258.586037][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 258.586062][ T36] bond_mii_monitor+0x49d/0x3170 [ 258.586086][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 258.586107][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 258.586131][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 258.586151][ T36] ? register_lock_class+0x54/0x330 [ 258.586179][ T36] ? __lock_acquire+0xad5/0xd80 [ 258.586199][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.586236][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 258.586261][ T36] process_scheduled_works+0xac3/0x18e0 [ 258.586294][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.586314][ T36] ? assign_work+0x367/0x3d0 [ 258.586335][ T36] worker_thread+0x870/0xd50 [ 258.586367][ T36] ? __kthread_parkme+0x1a8/0x200 [ 258.586397][ T36] ? __pfx_worker_thread+0x10/0x10 [ 258.586425][ T36] kthread+0x7b7/0x940 [ 258.586446][ T36] ? __pfx_worker_thread+0x10/0x10 [ 258.586463][ T36] ? __pfx_kthread+0x10/0x10 [ 258.586485][ T36] ? __pfx_kthread+0x10/0x10 [ 258.586505][ T36] ? __pfx_kthread+0x10/0x10 [ 258.586524][ T36] ? __pfx_kthread+0x10/0x10 [ 258.586544][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.586557][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.586573][ T36] ? __pfx_kthread+0x10/0x10 [ 258.586593][ T36] ret_from_fork+0x4b/0x80 [ 258.586609][ T36] ? __pfx_kthread+0x10/0x10 [ 258.586629][ T36] ret_from_fork_asm+0x1a/0x30 [ 258.586648][ T36] [ 258.915042][T10194] bond0: (slave bridge0): Releasing backup interface