last executing test programs: 9.109232201s ago: executing program 2 (id=1791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x58, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x7, {[@mss={0x1e, 0x4, 0xa101}, @mptcp=@capable={0x1e, 0x14, 0xf, 0x1, 0x5, 0x1ff, [0x56]}, @exp_fastopen={0xfe, 0xb, 0xf989, "38d7fc99000000"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x1, 0x0, 0x9}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}]}}}}}}}}, 0x0) 8.957805699s ago: executing program 2 (id=1793): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x48, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @val={0x10, 0x1, 0x50}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8.70335208s ago: executing program 2 (id=1797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e80)="f07a174792731bf6ec966dd7f08c47cc70e12b789135b4d9ac16578daec36f59d5ca7257e7cf195e4bd7ca8c1d225cc09e62186fafd01d62c34b430622fccdebbf429ef1d309f8a95e66b5d5733dee3b678ce6bbf6ebb24c061f2b10fab10dd24da866c4ef56c9f6f561a69c3bf0cded57a1fe7de16b7bce84a51dd665942046", 0x80}], 0x1, &(0x7f0000000fc0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4080}], 0x1, 0x2000) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/115, 0x73}], 0x2}}], 0x1, 0x60, 0x0) 8.442591163s ago: executing program 2 (id=1799): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x195) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, 0xd1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x11, 0x0, @fd_index=0x3, 0x2, {0x0, r0}, 0x6b, 0x2, 0x1, {0x0, 0x0, r0}}) io_uring_enter(r1, 0x3516, 0x4, 0x0, 0x0, 0x0) 8.026500506s ago: executing program 4 (id=1804): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0xa000, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 7.899029296s ago: executing program 4 (id=1807): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, r3, r4, 0x7, 0x1, 0xfffffff8, 0x6d4, {0x2, 0x2, 0xff, 0x9ee, 0xff6e, 0x81, 0x6, 0x10, 0xa349, 0x7f0b, 0x1000, 0xd2b3e186, 0x2c, 0xffff8000, "9dd213b071619e7136463715d556533e11d59b956a8a0bac3bb432085facf3cc"}}) 7.782244816s ago: executing program 4 (id=1809): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 7.535101428s ago: executing program 3 (id=1811): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000840)={0x40, 0x1, 0x28, "701dbca1a5199b006d954e287b2d0ada3a2c58411ee3414013c97f91e7bd851187baea760edcaf25"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x7, 0x48, "820260319eb4698c3e1663cb8726c260f485034f8e43c35ed06bcba5b99061cd5681ddc224f34412e51dad7d30e064ad2daa77c00ca5235d6f8cdfc3aa60c64f6be41d0fd386afa6"}, 0x0, 0x0, 0x0, 0x0}) 7.363808168s ago: executing program 2 (id=1813): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(0x3) 6.937157785s ago: executing program 2 (id=1819): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) 5.177841379s ago: executing program 3 (id=1830): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)={0x6}, 0x8) 5.177612988s ago: executing program 4 (id=1831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffc) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x200, {[@timestamp={0x8, 0xa, 0x10001, 0x8}]}}}}}}}}, 0x0) 5.001949399s ago: executing program 4 (id=1834): r0 = syz_io_uring_setup(0xd4, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x2c0c, &(0x7f00000000c0)={0x0, 0xecf0, 0x1000, 0x1, 0x2ea}, &(0x7f0000000580)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0xa, 0x0, @fd, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x12ff, 0x22, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x2358, 0xc40d, 0x28, 0x0, 0x0) 4.858424006s ago: executing program 1 (id=1835): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000100), 0x4) 4.843115825s ago: executing program 3 (id=1836): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r0, 0x1) 4.666543346s ago: executing program 4 (id=1837): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) 4.633256643s ago: executing program 1 (id=1838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x14004841) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x1000f) 4.395697891s ago: executing program 1 (id=1840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000a78000/0x3000)=nil, 0x3000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.818521598s ago: executing program 3 (id=1842): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x18, &(0x7f0000000dc0)={0x20, 0xb, 0x6, "a37e9473f102"}, 0x0, 0x0, 0x0, 0x0}) 3.203262322s ago: executing program 0 (id=1844): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0x84ec1, 0x0, 0x20000002, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0xc, 0x6000, @fd_index=0xc0a, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x0, {0x1, r3}}) io_uring_enter(r0, 0x627, 0x14, 0x43, 0x0, 0x0) 2.814244794s ago: executing program 1 (id=1845): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x195) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, 0xd1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x11, 0x0, @fd_index=0x3, 0x2, {0x0, r0}, 0x6b, 0x2, 0x1, {0x0, 0x0, r0}}) io_uring_enter(r1, 0x3516, 0x4, 0x0, 0x0, 0x0) 2.714532768s ago: executing program 0 (id=1846): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/1, 0x1}, 0x20000007}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.489868527s ago: executing program 0 (id=1847): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 2.338159011s ago: executing program 0 (id=1848): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.619204969s ago: executing program 1 (id=1849): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120101000d0067204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.090370048s ago: executing program 0 (id=1850): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9d4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x32314142}}) 1.090114621s ago: executing program 3 (id=1851): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000006300)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003340)="db", 0x1}], 0x1, 0x0, 0x0, 0x20008800}}], 0x1, 0x40090) 1.015507529s ago: executing program 1 (id=1852): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6gretap0\x00', &(0x7f0000000180)=@ethtool_gfeatures}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) 262.615756ms ago: executing program 3 (id=1853): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC], 0x0) 0s ago: executing program 0 (id=1854): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0x10, 0x6, "357a07529c00"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="f5636a"], 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): axPacketSize 0 [ 194.999376][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.749'. [ 195.008418][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.030031][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.036100][ T840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.037508][ T7821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.086488][ T840] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.113625][ T840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.134457][ T840] usb 2-1: config 0 descriptor?? [ 195.614993][ T840] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 195.629534][ T840] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 195.722087][ T5896] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 195.799237][ T5892] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.903149][ T5896] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.912209][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.950079][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.960684][ T5896] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.975721][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.987348][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.999157][ T5896] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.008540][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.016784][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.035926][ T5896] usb 5-1: Product: syz [ 196.040463][ T5896] usb 5-1: Manufacturer: syz [ 196.045286][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.062675][ T5896] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 196.071978][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.099881][ T5892] usb 3-1: config 0 descriptor?? [ 196.302851][ T840] usb 5-1: USB disconnect, device number 15 [ 196.507642][ T840] usb 2-1: USB disconnect, device number 16 [ 196.557845][ T5892] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 196.594295][ T5892] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 197.229052][ T840] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.418781][ T840] usb 5-1: Using ep0 maxpacket: 8 [ 197.427892][ T840] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 197.448544][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.488158][ T840] usb 5-1: config 0 descriptor?? [ 197.519351][ T7861] netlink: 44 bytes leftover after parsing attributes in process `syz.1.768'. [ 197.601203][ T7861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'. [ 197.640284][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.648444][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.655812][ T7861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.708892][ T840] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 198.242694][ T7879] input: syz0 as /devices/virtual/input/input28 [ 198.716873][ T840] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 198.727399][ T840] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 198.748156][ T840] asix 5-1:0.0: probe with driver asix failed with error -71 [ 198.766910][ T840] usb 5-1: USB disconnect, device number 16 [ 198.778746][ T5891] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.884798][ T7899] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 198.900213][ T5892] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 198.909188][ T5892] usb 3-1: device reset changed ep0 maxpacket size! [ 198.917937][ T51] usb 3-1: USB disconnect, device number 14 [ 198.950789][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.963303][ T5891] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 198.976750][ T5891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.996157][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.005968][ T5891] usb 4-1: Product: syz [ 199.010554][ T5891] usb 4-1: Manufacturer: syz [ 199.015185][ T5891] usb 4-1: SerialNumber: syz [ 199.058923][ T51] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 199.208925][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 199.217015][ T51] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 199.225974][ T51] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 199.234769][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 199.244102][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.244456][ T7889] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.253876][ T51] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.300398][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.331405][ T51] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 199.344513][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.382575][ T51] usb 3-1: config 0 descriptor?? [ 199.542647][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.553490][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.639208][ T51] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 199.728452][ T7919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.902266][ T7889] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 200.122634][ T5891] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 200.144010][ T5891] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 200.155218][ T51] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.259026][ T7928] loop8: detected capacity change from 0 to 7 [ 200.267829][ T7928] Dev loop8: unable to read RDB block 7 [ 200.274452][ T7928] loop8: AHDI p1 p3 p4 [ 200.279219][ T7928] loop8: partition table partially beyond EOD, truncated [ 200.286831][ T7928] loop8: p1 start 975770946 is beyond EOD, truncated [ 200.294076][ T7928] loop8: p3 start 6514546 is beyond EOD, truncated [ 200.333671][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 200.354399][ T51] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 200.377041][ T51] usb 2-1: config 0 has no interface number 0 [ 200.377798][ T840] usb 4-1: USB disconnect, device number 16 [ 200.393471][ T51] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 200.413235][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.416981][ T840] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 200.428753][ T51] usb 2-1: Product: syz [ 200.468715][ T51] usb 2-1: Manufacturer: syz [ 200.473543][ T51] usb 2-1: SerialNumber: syz [ 200.511343][ T5891] usb 3-1: USB disconnect, device number 15 [ 200.544571][ T51] usb 2-1: config 0 descriptor?? [ 200.565325][ T5891] usblp0: removed [ 201.157191][ T7949] dccp_v6_rcv: dropped packet with invalid checksum [ 201.600720][ T5894] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 201.838822][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 201.861663][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.885283][ T5894] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.907810][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.292743][ T5894] usb 4-1: config 0 descriptor?? [ 202.456124][ T7984] capability: warning: `syz.4.810' uses deprecated v2 capabilities in a way that may be insecure [ 202.552866][ T5894] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 202.904358][ T51] kaweth 2-1:0.235: Firmware present in device. [ 202.948772][ T51] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 202.975650][ T51] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 203.031847][ T5896] usb 4-1: USB disconnect, device number 17 [ 203.038588][ T51] usb 2-1: USB disconnect, device number 17 [ 203.065310][ T7995] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.257699][ T7998] [U]  [ 203.260791][ T7998] [U] K{ [ 203.264541][ T7998] [U] t 1ŠFfˊ`GJgo/mC [ 203.274782][ T7998] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 203.296617][ T7998] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 203.313113][ T7998] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 203.355464][ T7999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.355575][ T7998] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 203.363104][ T7999] IPv6: NLM_F_CREATE should be set when creating new route [ 203.390820][ T7998] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 203.416038][ T7998] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 203.431948][ T7998] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< HID v0.00 Device [syz0] on syz1 [ 210.121365][ T5894] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 210.291674][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.309414][ T5894] usb 5-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.324141][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.331720][ T5894] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 210.344278][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.373954][ T5894] usb 5-1: config 0 descriptor?? [ 210.478837][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 210.611375][ T51] usb 5-1: USB disconnect, device number 18 [ 210.638754][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 210.657140][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 210.692573][ T9] usb 3-1: config 0 has no interface number 0 [ 210.737085][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 210.761669][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 210.781239][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.801821][ T9] usb 3-1: Product: syz [ 210.811999][ T9] usb 3-1: Manufacturer: syz [ 210.816656][ T9] usb 3-1: SerialNumber: syz [ 210.842572][ T9] usb 3-1: config 0 descriptor?? [ 210.853877][ T9] smsc75xx v1.0.0 [ 210.958893][ T5894] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 211.120778][ T5894] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.137785][ T5894] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.160357][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.193821][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 211.221861][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 211.257461][ T5894] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.267137][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.277975][ T8130] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.291541][ T5894] usb 4-1: Product: syz [ 211.295821][ T5894] usb 4-1: Manufacturer: syz [ 211.326208][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 211.338717][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 211.349862][ T5894] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 211.365580][ T5894] cdc_wdm 4-1:1.0: Unknown control protocol [ 211.619399][ T51] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 211.694616][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 211.716369][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 211.761534][ T5894] usb 4-1: USB disconnect, device number 20 [ 211.788889][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 211.816032][ T51] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 211.833692][ T51] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.844109][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.855314][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.865452][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 211.865545][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 211.865624][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 211.865668][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 211.865710][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 211.903393][ T51] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.921632][ T51] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.940487][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 211.954999][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 211.966260][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.973571][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 212.223936][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 212.238162][ T51] usb 2-1: usb_control_msg returned -32 [ 212.238995][ T9] usb 3-1: USB disconnect, device number 16 [ 212.251543][ T51] usbtmc 2-1:16.0: can't read capabilities [ 212.481154][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.887'. [ 212.509075][ T8154] [U]  [ 212.511909][ T8154] [U] K{ [ 212.524912][ T8154] [U] t 1ŠFfˊ`GJgo/mC [ 212.571084][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.887'. [ 212.575790][ T8154] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 212.638828][ T8154] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 212.649705][ T8154] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 212.736690][ T51] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 212.749560][ T8154] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 212.758715][ T51] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 212.806169][ T51] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 212.833290][ T8154] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 212.854704][ T51] hid-generic 0000:0004:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 212.879752][ T8154] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 212.988891][ T8154] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< -90 [ 220.858348][ T8256] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 221.097208][ T5892] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 221.143538][ T5892] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 221.187854][ T9] usb 3-1: USB disconnect, device number 19 [ 221.372447][ T5838] usb 5-1: USB disconnect, device number 21 [ 221.384746][ T5838] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 221.854774][ T8295] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.425928][ T8314] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 222.536137][ T9] usb 2-1: USB disconnect, device number 22 [ 223.078717][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 223.231004][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.256196][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.298418][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.321041][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.346576][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.358337][ T9] usb 2-1: config 0 descriptor?? [ 223.805690][ T9] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 223.888279][ T9] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 224.381097][ T8357] input: syz1 as /devices/virtual/input/input31 [ 224.479421][ T51] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 224.661698][ T51] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.677328][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.706231][ T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.723765][ T51] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.742540][ T51] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.776035][ T51] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.798099][ T51] usb 3-1: Product: syz [ 224.808102][ T51] usb 3-1: Manufacturer: syz [ 224.840305][ T51] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 225.285555][ T5896] usb 3-1: USB disconnect, device number 20 [ 225.748869][ T5838] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 225.900855][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 225.908096][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.915135][ T51] usb 2-1: USB disconnect, device number 23 [ 225.931523][ T5838] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.941260][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.961916][ T5838] usb 4-1: config 0 descriptor?? [ 226.199209][ T5838] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 226.539257][ T5838] usb 4-1: USB disconnect, device number 22 [ 227.079653][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 227.158843][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 227.199562][ T5894] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 227.229992][ T8409] IPv4: Oversized IP packet from 127.202.26.0 [ 227.362115][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 227.377598][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.400066][ T9] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 227.416728][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.428143][ T9] usb 3-1: config 0 has no interface number 0 [ 227.446778][ T9] usb 3-1: config 0 interface 230 has no altsetting 0 [ 227.468009][ T9] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 227.482587][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.492866][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.503305][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.532332][ T9] usb 3-1: Product: syz [ 227.536545][ T9] usb 3-1: Manufacturer: syz [ 227.544155][ T5894] usb 1-1: Product: syz [ 227.548353][ T5894] usb 1-1: Manufacturer: syz [ 227.567368][ T9] usb 3-1: SerialNumber: syz [ 227.572350][ T5894] usb 1-1: SerialNumber: syz [ 227.694593][ T9] usb 3-1: config 0 descriptor?? [ 227.720718][ T9] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 227.744994][ T9] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 227.938342][ T5894] usb 1-1: 0:2 : does not exist [ 227.953033][ T5894] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 228.021094][ T5894] usb 1-1: USB disconnect, device number 21 [ 228.050315][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 228.419441][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.848557][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.993'. [ 229.862302][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 230.072605][ T9] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 230.179418][ T9] usb 3-1: USB disconnect, device number 21 [ 230.268386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.288908][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 231.808747][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 232.084891][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 232.093332][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.117802][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.128269][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.159336][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.188539][ T9] usb 1-1: config 0 descriptor?? [ 232.202108][ T9] hub 1-1:0.0: USB hub found [ 232.269099][ T5892] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 232.429489][ T9] hub 1-1:0.0: 1 port detected [ 232.430431][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 232.445300][ T5892] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 232.455296][ T5892] usb 5-1: config 0 has no interface number 0 [ 232.465472][ T5892] usb 5-1: config 0 interface 184 has no altsetting 0 [ 232.485083][ T5892] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 232.494874][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.505597][ T5892] usb 5-1: Product: syz [ 232.510013][ T5892] usb 5-1: Manufacturer: syz [ 232.514733][ T5892] usb 5-1: SerialNumber: syz [ 232.522913][ T5892] usb 5-1: config 0 descriptor?? [ 232.536125][ T5892] smsc75xx v1.0.0 [ 232.629074][ T51] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 232.816413][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 232.839582][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.869425][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.895593][ T51] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 232.928723][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.960640][ T51] usb 3-1: config 0 descriptor?? [ 233.417806][ T51] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.001D/input/input32 [ 233.513513][ T51] appleir 0003:05AC:8241.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 233.780638][ T9] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 233.787960][ T5892] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 233.798753][ T9] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 233.803183][ T9] usbhid 1-1:0.0: can't add hid device: -32 [ 233.829983][ T5892] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 233.834947][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 233.852448][ T5892] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 233.880564][ T9] usb 1-1: USB disconnect, device number 22 [ 233.891989][ T5892] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 233.908330][ T5892] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 233.938848][ T5892] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 233.954477][ T5892] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 234.005204][ T5892] usb 5-1: USB disconnect, device number 22 [ 234.140182][ T9] usb 3-1: USB disconnect, device number 22 [ 235.380120][ T5892] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 235.887775][ T5892] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 235.918303][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.936167][ T5892] usb 3-1: Product: syz [ 235.941052][ T5892] usb 3-1: Manufacturer: syz [ 235.945704][ T5892] usb 3-1: SerialNumber: syz [ 236.005577][ T5892] usb 3-1: config 0 descriptor?? [ 236.367803][ T8553] syzkaller1: entered promiscuous mode [ 236.380466][ T8553] syzkaller1: entered allmulticast mode [ 237.057746][ T5892] usb 3-1: non-Atmel transceiver xxxx5e80 [ 237.288744][ T5892] usb 3-1: Firmware version (0.0) predates our first public release. [ 237.296899][ T5892] usb 3-1: Please update to version 0.2 or newer [ 237.329165][ T5892] usb 3-1: atusb_probe: initialization failed, error = -19 [ 237.393090][ T5892] usb 3-1: USB disconnect, device number 23 [ 237.966611][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 237.994932][ T8591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.136632][ T8591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.166088][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 239.363277][ T30] audit: type=1326 audit(1743855927.628:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.4.1067" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 239.510602][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 239.535104][ T8634] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 239.584999][ T8634] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 239.610141][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 239.639085][ T8637] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 239.672008][ T8637] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 242.188816][ T5838] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 242.360743][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.383724][ T5838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.414769][ T5838] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.429963][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.445525][ T5838] usb 1-1: SerialNumber: syz [ 242.450251][ T5891] IPVS: starting estimator thread 0... [ 242.451562][ T8700] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 242.568989][ T8702] IPVS: using max 28 ests per chain, 67200 per kthread [ 242.691389][ T5838] usb 1-1: 0:2 : does not exist [ 242.784792][ T5838] usb 1-1: USB disconnect, device number 23 [ 242.990370][ T5894] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 243.050514][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.158842][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 243.166405][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.178097][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.188232][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 243.198145][ T5894] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 243.210540][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.222510][ T5894] usb 4-1: config 0 descriptor?? [ 243.372937][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.409714][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 243.438529][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.458303][ T9] usb 2-1: config 0 descriptor?? [ 243.659792][ T5894] apple 0003:05AC:0274.001E: unknown main item tag 0x4 [ 243.683155][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 243.689496][ T5894] apple 0003:05AC:0274.001E: unexpected long global item [ 243.703867][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 243.728967][ T5894] apple 0003:05AC:0274.001E: parse failed [ 243.734860][ T5894] apple 0003:05AC:0274.001E: probe with driver apple failed with error -22 [ 243.750014][ T9] usb 2-1: USB disconnect, device number 24 [ 243.882859][ T5896] usb 4-1: USB disconnect, device number 23 [ 244.012319][ T8743] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1116'. [ 244.258723][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 244.408692][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 244.451689][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.488947][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 244.520495][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.563710][ T9] usb 2-1: config 0 descriptor?? [ 244.579766][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 244.601500][ T5896] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 244.624547][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 244.772239][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.803086][ T5896] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 244.834032][ T9] usb 2-1: USB disconnect, device number 25 [ 244.840091][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 244.844118][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.875626][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 244.886109][ T5896] usb 1-1: config 0 descriptor?? [ 245.048271][ T8712] ldusb: No device or device unplugged -19 [ 245.127726][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 245.149804][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 245.164920][ T5896] usb 1-1: USB disconnect, device number 24 [ 245.338873][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 245.510504][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.520796][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 245.530505][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.542872][ T9] usb 5-1: config 0 descriptor?? [ 245.628760][ T5894] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 245.639306][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 245.808787][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 245.815839][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 245.824229][ T5894] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 245.833729][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.842195][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.854580][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 245.865179][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.865225][ T5894] usb 4-1: config 0 descriptor?? [ 245.886437][ T10] usb 1-1: config 0 descriptor?? [ 245.896529][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 245.909986][ T5896] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 245.919252][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 245.975261][ T9] lg-g15 0003:046D:C222.001F: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 246.071197][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.085481][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.101566][ T5896] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.115120][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1135'. [ 246.125063][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.133772][ T5896] usb 2-1: Product: syz [ 246.138199][ T5896] usb 2-1: Manufacturer: syz [ 246.144629][ T10] usb 1-1: USB disconnect, device number 25 [ 246.144878][ T5896] usb 2-1: SerialNumber: syz [ 246.165957][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 246.199072][ T5892] usb 5-1: USB disconnect, device number 23 [ 246.416900][ T5896] usb 2-1: 0:2 : does not exist [ 246.432470][ T5896] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 246.459735][ T5896] usb 2-1: USB disconnect, device number 26 [ 246.659596][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.077579][ T30] audit: type=1326 audit(1743855935.338:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.1141" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 247.146356][ T5894] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 247.168359][ T5894] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 247.190036][ T5894] asix 4-1:0.0: probe with driver asix failed with error -71 [ 247.221011][ T5894] usb 4-1: USB disconnect, device number 24 [ 247.353941][ T8806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.690535][ T8814] team0 (unregistering): Port device team_slave_0 removed [ 247.737934][ T8814] team0 (unregistering): Port device team_slave_1 removed [ 247.979473][ T5894] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 248.159021][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 248.177276][ T5894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.202952][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.215739][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.228204][ T5894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.250621][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.263590][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.539811][ T5894] usb 3-1: GET_CAPABILITIES returned 0 [ 248.555987][ T5894] usbtmc 3-1:16.0: can't read capabilities [ 248.788362][ T5894] usb 3-1: USB disconnect, device number 24 [ 249.439136][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 249.608855][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 249.632868][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.682467][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.755664][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 249.806942][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.869051][ T10] usb 2-1: config 0 descriptor?? [ 250.366137][ T36] tipc: Subscription rejected, illegal request [ 250.428175][ T10] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0020/input/input33 [ 250.482952][ T10] sony 0003:054C:03D5.0020: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 250.720176][ T10] usb 2-1: USB disconnect, device number 27 [ 252.668976][ T5891] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 252.840742][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 252.851619][ T5891] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 252.868687][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.888482][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.904219][ T5891] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.925192][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.945979][ T5891] usb 3-1: Product: syz [ 252.958660][ T5891] usb 3-1: Manufacturer: syz [ 252.963318][ T5891] usb 3-1: SerialNumber: syz [ 253.068894][ T5892] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 253.260717][ T5892] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 253.279743][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.288042][ T5892] usb 4-1: Product: syz [ 253.293856][ T5892] usb 4-1: Manufacturer: syz [ 253.298758][ T5892] usb 4-1: SerialNumber: syz [ 253.311111][ T5892] usb 4-1: config 0 descriptor?? [ 253.397701][ T5891] usb 3-1: 0:2 : does not exist [ 253.636060][ T10] usb 4-1: USB disconnect, device number 25 [ 253.924385][ T8938] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1196'. [ 254.000277][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 254.077805][ T5891] usb 3-1: USB disconnect, device number 25 [ 254.340710][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.553164][ T8954] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 254.828374][ T8965] tls_set_device_offload: netdev not found [ 255.086827][ T8972] netlink: 'syz.1.1211': attribute type 10 has an invalid length. [ 255.098707][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 255.109119][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.117669][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.229853][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.237128][ T8972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.244913][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.252146][ T8972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.300348][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 255.310225][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.321602][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.359784][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.364826][ T8972] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 255.408792][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.478879][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.499116][ T10] usb 5-1: config 0 descriptor?? [ 255.838764][ T5891] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 255.946205][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 255.969155][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0021/input/input34 [ 255.988849][ T5892] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 256.007008][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 256.015435][ T10] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 256.022293][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.062105][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 256.083589][ T5891] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 256.095400][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.111113][ T5891] usb 1-1: Product: syz [ 256.115329][ T5891] usb 1-1: Manufacturer: syz [ 256.147041][ T5891] usb 1-1: SerialNumber: syz [ 256.176363][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.196145][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.219534][ T5892] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 256.241475][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.247858][ T10] usb 5-1: USB disconnect, device number 24 [ 256.250786][ T5891] usb 1-1: config 0 descriptor?? [ 256.322361][ T5892] usb 3-1: config 0 descriptor?? [ 256.506514][ T5891] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 256.790451][ T5891] usb 1-1: USB disconnect, device number 26 [ 257.355186][ T9013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.359082][ T5892] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #100: -71 [ 257.370715][ T9013] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 257.386094][ T9013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.392967][ T5892] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 257.403116][ T5892] uclogic 0003:256C:006D.0022: failed probing pen v1 parameters: -71 [ 257.412077][ T5892] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 257.416919][ T9013] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 257.420312][ T5892] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 257.447374][ T5892] usb 3-1: USB disconnect, device number 26 [ 257.485443][ T9013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.506540][ T9013] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 257.535112][ T9013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.546795][ T9013] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 257.558166][ T9013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 257.573276][ T9013] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 257.838811][ T5896] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 257.946372][ T30] audit: type=1326 audit(1743855946.208:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.3.1237" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 258.060310][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.071973][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.083191][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.096494][ T5896] usb 2-1: New USB device found, idVendor=0408, idProduct=ffff, bcdDevice= 0.00 [ 258.105938][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.116312][ T5896] usb 2-1: config 0 descriptor?? [ 258.128876][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 258.228928][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 258.298894][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 258.306220][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.318108][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.328513][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.342315][ T5892] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.351564][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.363614][ T5892] usb 1-1: config 0 descriptor?? [ 258.400586][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 258.410077][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.425077][ T10] usb 3-1: config 0 descriptor?? [ 258.433713][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 258.549044][ T5896] hid-generic 0003:0408:FFFF.0023: unknown main item tag 0x1 [ 258.556765][ T5896] hid-generic 0003:0408:FFFF.0023: unbalanced collection at end of report description [ 258.567825][ T5896] hid-generic 0003:0408:FFFF.0023: probe with driver hid-generic failed with error -22 [ 258.639689][ T10] gspca_spca508: reg_read err -32 [ 258.647573][ T10] gspca_spca508: reg_read err -32 [ 258.653826][ T10] gspca_spca508: reg_read err -32 [ 258.659839][ T10] gspca_spca508: reg_read err -32 [ 258.775636][ T5838] usb 2-1: USB disconnect, device number 28 [ 258.808161][ T5892] HID 045e:07da: Invalid code 65791 type 1 [ 258.851149][ T5892] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0024/input/input35 [ 258.866861][ T10] gspca_spca508: reg write: error -71 [ 258.881311][ T10] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 258.894090][ T5892] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 258.898008][ T10] usb 3-1: USB disconnect, device number 27 [ 259.080144][ T5896] usb 1-1: USB disconnect, device number 27 [ 259.378992][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 259.463669][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 259.549984][ T9050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.557287][ T9050] IPv6: NLM_F_CREATE should be set when creating new route [ 259.557665][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 259.564622][ T9050] IPv6: NLM_F_CREATE should be set when creating new route [ 259.564656][ T9050] IPv6: NLM_F_CREATE should be set when creating new route [ 259.567597][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 259.619447][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 259.640567][ T9050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.717853][ T9077] loop2: detected capacity change from 0 to 7 [ 260.777989][ T9077] Dev loop2: unable to read RDB block 7 [ 260.802385][ T9077] loop2: unable to read partition table [ 260.816348][ T9077] loop2: partition table beyond EOD, truncated [ 260.845231][ T9077] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 261.067080][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.074562][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.338934][ T5838] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 261.458702][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 261.519152][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 261.536592][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.548479][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 261.611165][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.621769][ T5838] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 261.628241][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 261.631160][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 261.643821][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.644493][ T5896] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 261.698997][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 261.727128][ T5838] usb 1-1: config 0 descriptor?? [ 261.818868][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 261.831651][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 261.848712][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.867097][ T5896] usb 2-1: Product: syz [ 261.884054][ T5896] usb 2-1: Manufacturer: syz [ 261.901113][ T5896] usb 2-1: SerialNumber: syz [ 261.921700][ T5896] usb 2-1: config 0 descriptor?? [ 262.151200][ T5896] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 262.178127][ T5838] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0025/input/input36 [ 262.201171][ T9087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 262.207540][ T9087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.214261][ T9087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.221629][ T9087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.236203][ T9087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.293731][ T5838] sony 0003:054C:03D5.0025: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 262.377578][ T5838] usb 1-1: USB disconnect, device number 28 [ 262.956493][ T5896] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 262.984594][ T5896] usb 2-1: USB disconnect, device number 29 [ 263.965455][ T9123] netlink: 'syz.4.1273': attribute type 11 has an invalid length. [ 264.178777][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 264.206290][ T9128] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.258879][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 264.258999][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 264.265969][ T56] Bluetooth: hci2: command 0x0406 tx timeout [ 264.277037][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 264.287310][ T9128] bridge0: port 3(bond3) entered blocking state [ 264.293871][ T9128] bridge0: port 3(bond3) entered disabled state [ 264.301044][ T9128] bond3: entered allmulticast mode [ 264.309375][ T9128] bond3: entered promiscuous mode [ 264.315143][ T9128] bridge0: port 3(bond3) entered blocking state [ 264.321590][ T9128] bridge0: port 3(bond3) entered forwarding state [ 264.332873][ T150] bridge0: port 3(bond3) entered disabled state [ 264.451328][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 264.460766][ T9134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.573931][ T9134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.278959][ T30] audit: type=1326 audit(1743855955.538:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.4.1308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 267.306564][ T30] audit: type=1326 audit(1743855955.538:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.4.1308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 267.329013][ T5896] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 267.338453][ T30] audit: type=1326 audit(1743855955.538:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.4.1308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 267.408043][ T30] audit: type=1326 audit(1743855955.538:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.4.1308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 267.447365][ T30] audit: type=1326 audit(1743855955.538:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.4.1308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 267.488962][ T5891] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 267.508888][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 267.517207][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.533845][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.590454][ T5896] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 267.609910][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.621138][ T5896] usb 3-1: config 0 descriptor?? [ 267.658661][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 267.666399][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.677900][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.687824][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 267.703071][ T5891] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 267.712754][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.733880][ T5891] usb 1-1: config 0 descriptor?? [ 267.900865][ T5892] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 267.958726][ T51] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 268.066441][ T5896] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0026/input/input37 [ 268.088737][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 268.096587][ T5892] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 268.105390][ T5892] usb 2-1: config 0 has no interface number 0 [ 268.113103][ T5892] usb 2-1: config 0 interface 230 has no altsetting 0 [ 268.122429][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 268.134305][ T51] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 268.144394][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.154112][ T5892] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 268.169764][ T51] usb 4-1: config 0 descriptor?? [ 268.175641][ T9220] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 268.188856][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.214672][ T5896] sony 0003:054C:03D5.0026: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 268.228689][ T5892] usb 2-1: Product: syz [ 268.232920][ T5892] usb 2-1: Manufacturer: syz [ 268.237566][ T5892] usb 2-1: SerialNumber: syz [ 268.250664][ T5891] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0027/input/input38 [ 268.269480][ T5896] usb 3-1: USB disconnect, device number 28 [ 268.285826][ T5892] usb 2-1: config 0 descriptor?? [ 268.295765][ T5892] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 268.310418][ T5891] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0027/input/input39 [ 268.333040][ T5892] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 268.425737][ T5891] kye 0003:0458:5011.0027: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 268.716940][ T51] elan 0003:04F3:0755.0028: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 268.890334][ T9] usb 4-1: USB disconnect, device number 26 [ 269.370549][ C1] kye 0003:0458:5011.0027: usb_submit_urb(ctrl) failed: -1 [ 270.002438][ T9262] loop9: detected capacity change from 0 to 7 [ 270.015822][ T9262] Dev loop9: unable to read RDB block 7 [ 270.022931][ T9262] loop9: AHDI p3 p4 [ 270.027055][ T9262] loop9: partition table partially beyond EOD, truncated [ 270.035149][ T9262] loop9: p3 start 1869967406 is beyond EOD, truncated [ 270.173161][ T9] usb 1-1: USB disconnect, device number 29 [ 270.663304][ T5892] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 270.874238][ T9] usb 2-1: USB disconnect, device number 30 [ 271.219347][ T5838] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 271.400730][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 271.464720][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.497973][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.548580][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 271.671476][ T5838] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 271.808732][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.830448][ T5838] usb 4-1: config 0 descriptor?? [ 272.279017][ T5892] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 272.304163][ T5838] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0029/input/input40 [ 272.392000][ T5838] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0029/input/input41 [ 272.451063][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.461526][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.493494][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.495241][ T5838] kye 0003:0458:5011.0029: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 272.517689][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.552723][ T5892] usb 2-1: Product: syz [ 272.556998][ T5892] usb 2-1: Manufacturer: syz [ 272.580829][ T5892] usb 2-1: SerialNumber: syz [ 272.831244][ T5892] usb 2-1: 0:2 : does not exist [ 272.857401][ T5892] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 272.926367][ T9319] raw_sendmsg: syz.2.1355 forgot to set AF_INET. Fix it! [ 272.942767][ T5892] usb 2-1: USB disconnect, device number 31 [ 273.211835][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.369217][ C0] kye 0003:0458:5011.0029: usb_submit_urb(ctrl) failed: -1 [ 274.159430][ T5894] usb 4-1: USB disconnect, device number 27 [ 275.228454][ T9383] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 277.724251][ T9465] input: syz1 as /devices/virtual/input/input42 [ 278.608743][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 278.626747][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'. [ 278.675942][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'. [ 278.781850][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.808846][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.865651][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.923963][ T9] usb 4-1: config 0 descriptor?? [ 279.174931][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 279.181129][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 279.228126][ T9] usb 4-1: USB disconnect, device number 28 [ 279.668788][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 279.950751][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 279.961118][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.976742][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 280.000865][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.041838][ T9] usb 4-1: config 0 descriptor?? [ 280.059310][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 280.093256][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 280.459355][ T9] usb 4-1: USB disconnect, device number 29 [ 280.482721][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 281.019718][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 281.190095][ T9519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.272946][ T9523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.285163][ T9523] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 281.325313][ T9523] bond3: (slave vcan1): Error -95 calling set_mac_address [ 281.793780][ T9536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.323124][ T9560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4057627977 (129844095264 ns) > initial count (116011992608 ns). Using initial count to start timer. [ 284.111504][ T9610] input: syz0 as /devices/virtual/input/input43 [ 285.290562][ T9628] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 285.600589][ T51] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 285.791454][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 285.825639][ T51] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 285.851537][ T51] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 285.881722][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.902443][ T51] usb 5-1: Product: syz [ 285.906668][ T51] usb 5-1: Manufacturer: syz [ 285.934304][ T51] usb 5-1: SerialNumber: syz [ 285.963609][ T51] usb 5-1: config 0 descriptor?? [ 285.995830][ T51] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 286.188986][ T5896] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 286.230805][ T3915] usb 5-1: Failed to submit usb control message: -71 [ 286.241634][ T51] usb 5-1: USB disconnect, device number 25 [ 286.258029][ T3915] usb 5-1: unable to send the bmi data to the device: -71 [ 286.265617][ T3915] usb 5-1: unable to get target info from device [ 286.272099][ T3915] usb 5-1: could not get target info (-71) [ 286.278216][ T3915] usb 5-1: could not probe fw (-71) [ 286.401994][ T5896] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 286.414579][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.434183][ T5896] usb 3-1: config 0 descriptor?? [ 287.159063][ T51] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 287.328965][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 287.338388][ T51] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 287.367435][ T51] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.397975][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.420955][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.433022][ T51] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.446393][ T51] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.455914][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.677807][ T5896] usb 3-1: Cannot set autoneg [ 287.695858][ T51] usb 2-1: usb_control_msg returned -32 [ 287.722344][ T5896] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 287.742768][ T51] usbtmc 2-1:16.0: can't read capabilities [ 287.789178][ T5896] usb 3-1: USB disconnect, device number 29 [ 288.291258][ T5896] usb 2-1: USB disconnect, device number 32 [ 288.372315][ T9706] lo: entered allmulticast mode [ 288.397581][ T9706] lo: left allmulticast mode [ 288.860965][ T9716] dccp_invalid_packet: P.type (SYNCACK) not Data || [Data]Ack, while P.X == 0 [ 288.934223][ T9722] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1514'. [ 288.944471][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 289.713060][ T9747] syzkaller1: entered promiscuous mode [ 289.719021][ T5838] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 289.727982][ T9747] syzkaller1: entered allmulticast mode [ 289.788798][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 289.868856][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 289.886594][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 289.909601][ T5838] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 289.927229][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.948720][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 289.959832][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.972257][ T5838] usb 3-1: Product: syz [ 289.978885][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 289.989003][ T5838] usb 3-1: Manufacturer: syz [ 289.993649][ T5838] usb 3-1: SerialNumber: syz [ 290.008732][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.018523][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 290.037122][ T5838] usb 3-1: config 0 descriptor?? [ 290.069369][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 290.078682][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 290.087780][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.109463][ T9] usb 4-1: config 0 descriptor?? [ 290.115835][ T5838] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 290.178738][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 290.203873][ T10] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 290.233898][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.259116][ T10] usb 5-1: Product: syz [ 290.263383][ T10] usb 5-1: Manufacturer: syz [ 290.280993][ T10] usb 5-1: SerialNumber: syz [ 290.299528][ T10] usb 5-1: config 0 descriptor?? [ 290.310934][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 290.332213][ T12] usb 3-1: Failed to submit usb control message: -71 [ 290.332421][ T5896] usb 3-1: USB disconnect, device number 30 [ 290.339717][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 290.365275][ T12] usb 3-1: unable to get target info from device [ 290.372437][ T12] usb 3-1: could not get target info (-71) [ 290.378378][ T12] usb 3-1: could not probe fw (-71) [ 290.654320][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.002A/input/input46 [ 290.753885][ T9] kye 0003:0458:5010.002A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 291.523856][ T10] gspca_topro: reg_w err -71 [ 291.559048][ T10] gspca_topro: Sensor soi763a [ 291.611801][ T10] usb 5-1: USB disconnect, device number 26 [ 291.714192][ C0] kye 0003:0458:5010.002A: usb_submit_urb(ctrl) failed: -1 [ 291.920778][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 292.093386][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 292.110788][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 292.130504][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.148734][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.158741][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.188284][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.207321][ T9803] ALSA: seq fatal error: cannot create timer (-16) [ 292.211908][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.290039][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.502158][ T5894] usb 4-1: USB disconnect, device number 30 [ 292.537067][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 292.547534][ T9] usbtmc 3-1:16.0: can't read capabilities [ 292.839463][ T51] usb 3-1: USB disconnect, device number 31 [ 294.278793][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 294.439017][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 294.457808][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.477328][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.487753][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.503141][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.516490][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.566911][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.789131][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 294.798926][ T9] usbtmc 1-1:16.0: can't read capabilities [ 294.959097][ T9867] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1572'. [ 295.045311][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.054849][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.064006][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.073135][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.099666][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.108863][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.118015][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.127128][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.137326][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.146466][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.155550][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.164754][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.184360][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.193637][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.202778][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.217110][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.243527][ T5892] usb 1-1: USB disconnect, device number 30 [ 295.436755][ T9884] loop6: detected capacity change from 0 to 524287999 [ 295.444936][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.454187][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.462576][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.471807][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.488629][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.497880][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.513806][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.523135][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.560782][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.570100][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.579227][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.588410][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.599488][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.608776][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.616916][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.626258][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.634280][ T9884] ldm_validate_partition_table(): Disk read failed. [ 295.647576][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.656855][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.667059][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.676301][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.684525][ T5896] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 295.684798][ T9884] Dev loop6: unable to read RDB block 0 [ 295.702084][ T9884] loop6: unable to read partition table [ 295.708002][ T9884] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 295.732550][ T9888] ldm_validate_partition_table(): Disk read failed. [ 295.776056][ T9888] Dev loop6: unable to read RDB block 0 [ 295.796509][ T9888] loop6: unable to read partition table [ 295.804290][ T9888] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 295.860663][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.902090][ T5896] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 295.934594][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.970294][ T5896] usb 5-1: config 0 descriptor?? [ 296.038157][ T5894] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 296.068350][ T5894] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.439879][ T5894] usb 5-1: USB disconnect, device number 27 [ 297.176119][ T9933] syzkaller1: entered promiscuous mode [ 297.191020][ T9933] syzkaller1: entered allmulticast mode [ 297.790015][ T51] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 297.979255][ T51] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 298.000595][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.014177][ T51] usb 3-1: Product: syz [ 298.021748][ T51] usb 3-1: Manufacturer: syz [ 298.026469][ T51] usb 3-1: SerialNumber: syz [ 298.041081][ T51] usb 3-1: config 0 descriptor?? [ 298.057032][ T51] ch341 3-1:0.0: ch341-uart converter detected [ 299.094782][ T51] ch341-uart ttyUSB0: break control not supported, using simulated break [ 299.119178][ T51] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 299.150400][ T51] usb 3-1: USB disconnect, device number 32 [ 299.171899][ T51] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 299.192716][ T51] ch341 3-1:0.0: device disconnected [ 299.401069][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 300.641797][T10023] loop0: detected capacity change from 0 to 128 [ 300.687287][T10023] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 300.701153][T10023] loop0: partition table partially beyond EOD, truncated [ 300.724589][T10023] loop0: p1 size 348879409 extends beyond EOD, truncated [ 300.857633][ T6073] udevd[6073]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 301.289132][ T5891] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 301.494556][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 301.594886][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 301.608760][ T5891] usb 2-1: can't read configurations, error -71 [ 301.738830][T10046] syz_tun: entered promiscuous mode [ 301.759344][T10046] syz_tun: left promiscuous mode [ 302.941527][ T5838] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 303.154488][ T5838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.179035][ T5838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.228894][ T5838] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.258789][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.272904][ T5838] usb 2-1: SerialNumber: syz [ 303.475060][T10084] syz_tun: entered promiscuous mode [ 303.501436][T10084] syz_tun: left promiscuous mode [ 303.521711][ T5838] usb 2-1: 0:2 : does not exist [ 303.591507][ T5838] usb 2-1: USB disconnect, device number 35 [ 303.823197][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.156901][ T30] audit: type=1326 audit(1743855993.418:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1681" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 305.269360][ T5838] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 305.421661][ T5896] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 305.429321][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 305.431638][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 305.457221][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 305.471070][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 305.500331][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 305.512799][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 305.532008][ T5838] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 305.558323][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.576603][ T5838] usb 3-1: Product: syz [ 305.581246][ T5838] usb 3-1: Manufacturer: syz [ 305.585915][ T5838] usb 3-1: SerialNumber: syz [ 305.604495][ T5838] usb 3-1: config 0 descriptor?? [ 305.622198][ T5896] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.634782][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.655792][ T5896] usb 2-1: config 0 descriptor?? [ 305.667795][ T5896] cp210x 2-1:0.0: cp210x converter detected [ 305.682737][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 305.696038][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 306.045405][ T5838] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 306.063841][ T5838] input input48: Device does not respond to id packet M [ 306.073938][ T5896] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 306.080418][ T5838] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 306.096939][ T5838] input input48: Device does not respond to id packet P [ 306.114722][ T5838] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 306.122793][ T5838] input input48: Device does not respond to id packet B [ 306.136424][ T5838] input input48: Device does not respond to id packet N [ 306.307030][ T5896] usb 2-1: cp210x converter now attached to ttyUSB0 [ 306.318826][ T51] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 306.356296][ T5838] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 306.399391][ T5838] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 306.408352][ T5838] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 306.416997][ T5838] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 306.433702][ T5838] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input48 [ 306.453687][T10149] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 306.481905][ T5838] usb 3-1: USB disconnect, device number 33 [ 306.502037][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.531520][ T51] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 306.546247][ T5891] usb 2-1: USB disconnect, device number 36 [ 306.568260][ T51] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 306.589660][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.609539][ T51] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.636162][ T5891] cp210x 2-1:0.0: device disconnected [ 306.645745][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.672095][ T51] usb 4-1: Product: syz [ 306.676475][ T51] usb 4-1: Manufacturer: syz [ 306.684763][ T51] usb 4-1: SerialNumber: syz [ 306.696485][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 306.871943][T10157] netlink: 'syz.4.1696': attribute type 4 has an invalid length. [ 306.912699][T10144] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 306.921681][T10144] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 307.069874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 307.540210][T10144] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 307.547569][T10144] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 307.601078][ T5891] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 307.775654][ T51] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 307.783451][ T51] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 307.800726][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.813524][ T51] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 307.827807][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 307.846568][ T5891] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 307.856561][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.865870][ T5891] usb 2-1: Product: syz [ 307.870792][ T5891] usb 2-1: Manufacturer: syz [ 307.875556][ T5891] usb 2-1: SerialNumber: syz [ 307.904175][ T5891] usb 2-1: config 0 descriptor?? [ 307.926038][ T5891] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 307.971100][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.001504][ T5891] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 308.047523][ T5891] usb 2-1: media controller created [ 308.053468][ T51] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 308.130419][ T51] usb 4-1: USB disconnect, device number 31 [ 308.162432][ T51] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 308.175148][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.201223][T10180] loop6: detected capacity change from 0 to 524287999 [ 308.374296][ T5891] DVB: Unable to find symbol tda10046_attach() [ 308.400587][ T5891] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 308.419855][ T5891] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 308.754200][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 308.784732][T10192] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1708'. [ 308.831006][T10192] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1708'. [ 308.890993][ T5891] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 308.939410][ T5891] usb 2-1: USB disconnect, device number 37 [ 309.032544][T10196] syz_tun: entered allmulticast mode [ 309.076515][T10195] syz_tun: left allmulticast mode [ 310.150123][T10217] TCP: TCP_TX_DELAY enabled [ 310.649193][ T5891] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 310.814387][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.847450][ T5892] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 310.864280][ T5891] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.874547][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.894517][ T5891] usb 2-1: config 0 descriptor?? [ 310.904157][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 310.952809][T10245] netlink: 'syz.0.1733': attribute type 10 has an invalid length. [ 310.965796][T10245] hsr_slave_0: left promiscuous mode [ 310.973287][T10245] hsr_slave_1: left promiscuous mode [ 311.019194][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 311.027017][ T5892] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 311.035810][ T5892] usb 4-1: config 0 has no interface number 0 [ 311.042650][ T5892] usb 4-1: config 0 interface 184 has no altsetting 0 [ 311.053530][ T5892] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 311.065454][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.074410][ T5892] usb 4-1: Product: syz [ 311.079585][ T5892] usb 4-1: Manufacturer: syz [ 311.084245][ T5892] usb 4-1: SerialNumber: syz [ 311.089662][T10248] syzkaller1: entered promiscuous mode [ 311.095181][T10248] syzkaller1: entered allmulticast mode [ 311.112760][ T5892] usb 4-1: config 0 descriptor?? [ 311.131050][ T5892] smsc75xx v1.0.0 [ 311.312913][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 311.334514][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 311.344261][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 311.555889][ T5891] pwc: recv_control_msg error -71 req 04 val 1300 [ 311.583578][ T5891] pwc: recv_control_msg error -71 req 04 val 1400 [ 311.605152][ T5891] pwc: recv_control_msg error -71 req 02 val 2000 [ 311.621492][ T5891] pwc: recv_control_msg error -71 req 02 val 2100 [ 311.639439][ T5891] pwc: recv_control_msg error -71 req 04 val 1500 [ 311.647322][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 311.654676][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 311.661998][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 311.669366][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 311.683015][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 311.691115][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 311.698476][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 311.712190][ T5891] pwc: Registered as video103. [ 311.725692][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50 [ 311.759291][ T5891] usb 2-1: USB disconnect, device number 38 [ 311.968454][ T30] audit: type=1326 audit(1743856000.228:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 312.017365][ T30] audit: type=1326 audit(1743856000.238:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 312.042426][ T30] audit: type=1326 audit(1743856000.238:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 312.077808][ T30] audit: type=1326 audit(1743856000.238:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 312.102690][ T30] audit: type=1326 audit(1743856000.238:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 312.144162][ T30] audit: type=1326 audit(1743856000.238:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 312.166646][ T30] audit: type=1326 audit(1743856000.238:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 312.246012][ T30] audit: type=1326 audit(1743856000.238:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 312.305962][ T30] audit: type=1326 audit(1743856000.238:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 312.343614][ T30] audit: type=1326 audit(1743856000.248:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 312.365649][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.410209][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 312.426460][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 312.456339][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 312.536211][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 312.573888][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 312.599135][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 312.650460][ T5892] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 312.714704][ T5892] usb 4-1: USB disconnect, device number 32 [ 312.859662][ T5891] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 313.009241][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 313.039521][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 313.057571][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 313.073343][ T5891] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 313.083335][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.091856][ T5891] usb 2-1: Product: syz [ 313.096181][ T5891] usb 2-1: Manufacturer: syz [ 313.104365][ T5891] usb 2-1: SerialNumber: syz [ 313.128414][ T5891] usb 2-1: config 0 descriptor?? [ 313.173724][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 313.186574][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.202317][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 313.212400][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.233615][ T9] usb 1-1: config 0 descriptor?? [ 313.563647][ T5891] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 313.672541][ T9] cypress 0003:04B4:07B1.002C: unknown main item tag 0x0 [ 313.686166][ T9] cypress 0003:04B4:07B1.002C: unknown main item tag 0x0 [ 313.694243][ T9] cypress 0003:04B4:07B1.002C: unknown main item tag 0x0 [ 313.702225][ T9] cypress 0003:04B4:07B1.002C: unknown main item tag 0x0 [ 313.710624][ T9] cypress 0003:04B4:07B1.002C: unknown main item tag 0x0 [ 313.721130][ T9] cypress 0003:04B4:07B1.002C: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0 [ 313.899249][ T5894] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 313.905356][ T51] usb 1-1: USB disconnect, device number 31 [ 313.978751][ T5891] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 314.069267][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 314.084783][ T5894] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 314.106424][ T5894] usb 4-1: config 179 has no interface number 0 [ 314.115779][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 314.132186][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 314.144677][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 314.162904][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 314.176519][ T5894] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 314.203217][ T5894] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 314.228969][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.248841][ T9] usb 2-1: USB disconnect, device number 39 [ 314.283997][T10302] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 314.655326][ T5838] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input51 [ 314.896122][T10302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.953003][T10302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.277775][ T9] usb 4-1: USB disconnect, device number 33 [ 315.277843][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 315.292112][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 315.300484][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.459390][T10348] loop6: detected capacity change from 0 to 524287999 [ 315.737206][T10355] syz_tun: entered allmulticast mode [ 315.764786][T10354] syz_tun: left allmulticast mode [ 318.299041][T10435] cgroup: fork rejected by pids controller in /syz2 [ 318.527707][ T56] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 319.219088][ T5894] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 319.408731][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 319.432932][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.446626][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.476438][ T5894] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.500359][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.518816][ T5838] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 319.539090][ T5894] usb 5-1: config 0 descriptor?? [ 319.678833][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 319.690075][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.706594][ T5838] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 319.726282][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.735544][ T5838] usb 4-1: Product: syz [ 319.744885][ T5838] usb 4-1: Manufacturer: syz [ 319.768689][ T5838] usb 4-1: SerialNumber: syz [ 319.801149][ T5838] usb 4-1: config 0 descriptor?? [ 319.975625][ T5894] HID 045e:07da: Invalid code 65791 type 1 [ 320.006326][ T5894] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002D/input/input52 [ 320.045356][ T5894] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 320.265145][ T5838] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 320.654910][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.668162][ T5838] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 320.673813][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.690569][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.700678][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.710267][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.916831][ T5892] usb 4-1: USB disconnect, device number 34 [ 320.920674][ T5838] usb 5-1: USB disconnect, device number 28 [ 321.330408][T11322] chnl_net:caif_netlink_parms(): no params data found [ 321.607602][T11351] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 321.713895][T11358] mmap: syz.1.1832 (11358) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 321.917400][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.943335][T11364] kvm: Disabled LAPIC found during irq injection [ 321.950462][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.972614][T11322] bridge_slave_0: entered allmulticast mode [ 321.985562][T11322] bridge_slave_0: entered promiscuous mode [ 321.998543][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.011065][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.025831][T11322] bridge_slave_1: entered allmulticast mode [ 322.046584][T11322] bridge_slave_1: entered promiscuous mode [ 322.234220][T11322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.268500][T11322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.396268][T11322] team0: Port device team_slave_0 added [ 322.421705][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.423635][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.440631][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.455911][T11322] team0: Port device team_slave_1 added [ 322.580290][ T56] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 322.590060][ T56] Bluetooth: hci2: Injecting HCI hardware error event [ 322.598934][ T56] Bluetooth: hci2: hardware error 0x00 [ 322.760751][T11322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.787191][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.819409][ T5851] Bluetooth: hci0: command tx timeout [ 322.894967][T11322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.034404][T11322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.049002][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.077128][T11322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.168695][ T5894] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 323.374153][ T5894] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 323.374848][T11322] hsr_slave_0: entered promiscuous mode [ 323.386469][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.419924][T11322] hsr_slave_1: entered promiscuous mode [ 323.438533][T11322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.457456][ T5894] usb 4-1: Product: syz [ 323.457472][T11322] Cannot create hsr debugfs directory [ 323.477754][ T5894] usb 4-1: Manufacturer: syz [ 323.492954][ T5894] usb 4-1: SerialNumber: syz [ 323.524533][ T5894] usb 4-1: config 0 descriptor?? [ 324.149011][T11411] cgroup: fork rejected by pids controller in /syz1 [ 324.411762][T11322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.462549][T11322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.593661][ T5894] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 324.649969][T11322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.669788][ T56] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 324.719763][T11322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.813026][ T5894] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 324.835356][ T5894] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 324.850929][T11322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.861909][ T5894] asix 4-1:0.0: probe with driver asix failed with error -71 [ 324.870136][T11322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.899217][ T56] Bluetooth: hci0: command tx timeout [ 324.917564][ T5894] usb 4-1: USB disconnect, device number 35 [ 325.067926][T11322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.157803][T11322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.886991][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.948684][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.206105][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.294469][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.357991][T11322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.585105][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.616128][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.746242][T11322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.838834][ T5892] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 326.888268][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.925097][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.967673][T11322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.979159][ T56] Bluetooth: hci0: command tx timeout [ 327.013545][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.039837][T11322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.087214][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.115194][ T5894] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 327.115417][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.142407][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.182888][ T5892] usb 4-1: Product: syz [ 327.187113][ T5892] usb 4-1: Manufacturer: syz [ 327.206041][ T5892] usb 4-1: SerialNumber: syz [ 327.313352][ T5894] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 327.348808][ T5894] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 327.396023][ T5894] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 327.435868][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.471977][ T5892] usb 4-1: 0:2 : does not exist [ 327.480593][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.491105][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.508395][ T5894] usb 1-1: Product: syz [ 327.512863][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.522323][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.525570][ T5892] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 327.529774][ T5894] usb 1-1: Manufacturer: syz [ 327.529796][ T5894] usb 1-1: SerialNumber: syz [ 327.554868][ T5894] usb 1-1: config 0 descriptor?? [ 327.560710][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.582793][T11973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 327.630759][T11973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 327.641928][ T5892] usb 4-1: USB disconnect, device number 36 [ 327.650995][ T13] bridge_slave_1: left allmulticast mode [ 327.695466][ T13] bridge_slave_1: left promiscuous mode [ 327.724887][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.840194][ T13] bridge_slave_0: left allmulticast mode [ 327.858632][ T13] bridge_slave_0: left promiscuous mode [ 327.864623][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.873341][ T3915] [ 327.875918][ T3915] ============================= [ 327.881509][ T3915] WARNING: suspicious RCU usage [ 327.886939][ T3915] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Not tainted [ 327.894074][ T3915] ----------------------------- [ 327.899035][ T3915] net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! [ 327.907813][ T3915] [ 327.907813][ T3915] other info that might help us debug this: [ 327.907813][ T3915] [ 327.918783][ T3915] [ 327.918783][ T3915] rcu_scheduler_active = 2, debug_locks = 1 [ 327.926967][ T3915] 3 locks held by kworker/u8:7/3915: [ 327.932865][ T3915] #0: ffff88806022a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 327.944234][ T3915] #1: ffffc9000c947c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 327.957266][ T3915] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 327.967042][ T3915] [ 327.967042][ T3915] stack backtrace: [ 327.973445][ T3915] CPU: 1 UID: 0 PID: 3915 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 327.973475][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.973490][ T3915] Workqueue: bond0 bond_mii_monitor [ 327.973530][ T3915] Call Trace: [ 327.973538][ T3915] [ 327.973547][ T3915] dump_stack_lvl+0x241/0x360 [ 327.973583][ T3915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.973613][ T3915] ? __pfx__printk+0x10/0x10 [ 327.973644][ T3915] ? print_lock+0x171/0x1a0 [ 327.973675][ T3915] lockdep_rcu_suspicious+0x175/0x200 [ 327.973703][ T3915] dev_deactivate_queue+0x8f/0x1b0 [ 327.973736][ T3915] dev_deactivate_many+0x14c/0xca0 [ 327.973772][ T3915] ? __pfx_dev_deactivate_many+0x10/0x10 [ 327.973809][ T3915] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 327.973842][ T3915] dev_deactivate+0x186/0x280 [ 327.973876][ T3915] ? __pfx_dev_deactivate+0x10/0x10 [ 327.973904][ T3915] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 327.973925][ T3915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.973947][ T3915] ? sched_clock+0x4a/0x70 [ 327.973981][ T3915] ? rfc2863_policy+0x1ce/0x3f0 [ 327.974006][ T3915] linkwatch_do_dev+0x10a/0x170 [ 327.974029][ T3915] ethtool_op_get_link+0x15/0x60 [ 327.974059][ T3915] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 327.974090][ T3915] bond_check_dev_link+0x1fb/0x4b0 [ 327.974123][ T3915] ? __pfx_bond_check_dev_link+0x10/0x10 [ 327.974168][ T3915] bond_mii_monitor+0x49d/0x3170 [ 327.974205][ T3915] ? bond_mii_monitor+0x17f/0x3170 [ 327.974235][ T3915] ? __pfx_bond_mii_monitor+0x10/0x10 [ 327.974266][ T3915] ? register_lock_class+0x54/0x330 [ 327.974295][ T3915] ? __lock_acquire+0xad5/0xd80 [ 327.974319][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 327.974357][ T3915] ? process_scheduled_works+0x9cb/0x18e0 [ 327.974375][ T3915] process_scheduled_works+0xac3/0x18e0 [ 327.974423][ T3915] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.974459][ T3915] ? assign_work+0x367/0x3d0 [ 327.974487][ T3915] worker_thread+0x870/0xd50 [ 327.974520][ T3915] ? __kthread_parkme+0x1a8/0x200 [ 327.974541][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 327.974565][ T3915] kthread+0x7b7/0x940 [ 327.974598][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 327.974623][ T3915] ? __pfx_kthread+0x10/0x10 [ 327.974648][ T3915] ? __pfx_kthread+0x10/0x10 [ 327.974671][ T3915] ? __pfx_kthread+0x10/0x10 [ 327.974691][ T3915] ? __pfx_kthread+0x10/0x10 [ 327.974717][ T3915] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.974737][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 327.974760][ T3915] ? __pfx_kthread+0x10/0x10 [ 327.974788][ T3915] ret_from_fork+0x4b/0x80 [ 327.974808][ T3915] ? __pfx_kthread+0x10/0x10 [ 327.974836][ T3915] ret_from_fork_asm+0x1a/0x30 [ 327.974867][ T3915] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.280688][T11973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 328.282012][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.288085][T11973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 328.306379][ T3915] [ 328.313121][ T3915] ============================= [ 328.317992][ T3915] WARNING: suspicious RCU usage [ 328.324053][ T3915] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Not tainted [ 328.330922][ T3915] ----------------------------- [ 328.335795][ T3915] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 328.345180][ T3915] [ 328.345180][ T3915] other info that might help us debug this: [ 328.345180][ T3915] [ 328.355491][ T3915] [ 328.355491][ T3915] rcu_scheduler_active = 2, debug_locks = 1 [ 328.363784][ T3915] 3 locks held by kworker/u8:7/3915: [ 328.369144][ T3915] #0: ffff88806022a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 328.380344][ T3915] #1: ffffc9000c947c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 328.393366][ T3915] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 328.403151][ T3915] [ 328.403151][ T3915] stack backtrace: [ 328.409111][ T3915] CPU: 1 UID: 0 PID: 3915 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 328.409133][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.409144][ T3915] Workqueue: bond0 bond_mii_monitor [ 328.409171][ T3915] Call Trace: [ 328.409183][ T3915] [ 328.409193][ T3915] dump_stack_lvl+0x241/0x360 [ 328.409230][ T3915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.409258][ T3915] ? __pfx__printk+0x10/0x10 [ 328.409294][ T3915] lockdep_rcu_suspicious+0x175/0x200 [ 328.409316][ T3915] dev_deactivate_many+0x228/0xca0 [ 328.409353][ T3915] ? __pfx_dev_deactivate_many+0x10/0x10 [ 328.409402][ T3915] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 328.409428][ T3915] dev_deactivate+0x186/0x280 [ 328.409451][ T3915] ? __pfx_dev_deactivate+0x10/0x10 [ 328.409471][ T3915] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 328.409521][ T3915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.409543][ T3915] ? sched_clock+0x4a/0x70 [ 328.409575][ T3915] ? rfc2863_policy+0x1ce/0x3f0 [ 328.409600][ T3915] linkwatch_do_dev+0x10a/0x170 [ 328.409617][ T3915] ethtool_op_get_link+0x15/0x60 [ 328.409640][ T3915] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 328.409668][ T3915] bond_check_dev_link+0x1fb/0x4b0 [ 328.409701][ T3915] ? __pfx_bond_check_dev_link+0x10/0x10 [ 328.409746][ T3915] bond_mii_monitor+0x49d/0x3170 [ 328.409779][ T3915] ? bond_mii_monitor+0x17f/0x3170 [ 328.409811][ T3915] ? __pfx_bond_mii_monitor+0x10/0x10 [ 328.409845][ T3915] ? register_lock_class+0x54/0x330 [ 328.409872][ T3915] ? __lock_acquire+0xad5/0xd80 [ 328.409896][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.409931][ T3915] ? process_scheduled_works+0x9cb/0x18e0 [ 328.409948][ T3915] process_scheduled_works+0xac3/0x18e0 [ 328.410002][ T3915] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.410036][ T3915] ? assign_work+0x367/0x3d0 [ 328.410065][ T3915] worker_thread+0x870/0xd50 [ 328.410094][ T3915] ? __kthread_parkme+0x1a8/0x200 [ 328.410117][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 328.410145][ T3915] kthread+0x7b7/0x940 [ 328.410176][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 328.410202][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.410226][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.410246][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.410266][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.410295][ T3915] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.410314][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.410337][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.410368][ T3915] ret_from_fork+0x4b/0x80 [ 328.410384][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.410405][ T3915] ret_from_fork_asm+0x1a/0x30 [ 328.410438][ T3915] [ 328.410597][ T3915] [ 328.672553][ T3915] ============================= [ 328.677476][ T3915] WARNING: suspicious RCU usage [ 328.682431][ T3915] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Not tainted [ 328.689284][ T3915] ----------------------------- [ 328.694165][ T3915] net/sched/sch_generic.c:1301 suspicious rcu_dereference_protected() usage! [ 328.703026][ T3915] [ 328.703026][ T3915] other info that might help us debug this: [ 328.703026][ T3915] [ 328.713548][ T3915] [ 328.713548][ T3915] rcu_scheduler_active = 2, debug_locks = 1 [ 328.721796][ T3915] 3 locks held by kworker/u8:7/3915: [ 328.728377][ T3915] #0: ffff88806022a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 328.741326][ T3915] #1: ffffc9000c947c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 328.754688][ T3915] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 328.764508][ T3915] [ 328.764508][ T3915] stack backtrace: [ 328.770868][ T3915] CPU: 1 UID: 0 PID: 3915 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 328.770898][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.770914][ T3915] Workqueue: bond0 bond_mii_monitor [ 328.770947][ T3915] Call Trace: [ 328.770956][ T3915] [ 328.770965][ T3915] dump_stack_lvl+0x241/0x360 [ 328.771001][ T3915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.771032][ T3915] ? __pfx__printk+0x10/0x10 [ 328.771064][ T3915] ? print_lock+0x171/0x1a0 [ 328.771096][ T3915] lockdep_rcu_suspicious+0x175/0x200 [ 328.771125][ T3915] dev_reset_queue+0x88/0x1b0 [ 328.771159][ T3915] dev_deactivate_many+0x61d/0xca0 [ 328.771191][ T3915] ? dev_deactivate_many+0x2e5/0xca0 [ 328.771224][ T3915] ? __pfx_dev_deactivate_many+0x10/0x10 [ 328.771261][ T3915] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 328.771288][ T3915] dev_deactivate+0x186/0x280 [ 328.771321][ T3915] ? __pfx_dev_deactivate+0x10/0x10 [ 328.771349][ T3915] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 328.771372][ T3915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.771394][ T3915] ? sched_clock+0x4a/0x70 [ 328.771427][ T3915] ? rfc2863_policy+0x1ce/0x3f0 [ 328.771453][ T3915] linkwatch_do_dev+0x10a/0x170 [ 328.771477][ T3915] ethtool_op_get_link+0x15/0x60 [ 328.771508][ T3915] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 328.771538][ T3915] bond_check_dev_link+0x1fb/0x4b0 [ 328.771570][ T3915] ? __pfx_bond_check_dev_link+0x10/0x10 [ 328.771618][ T3915] bond_mii_monitor+0x49d/0x3170 [ 328.771661][ T3915] ? bond_mii_monitor+0x17f/0x3170 [ 328.771704][ T3915] ? __pfx_bond_mii_monitor+0x10/0x10 [ 328.771736][ T3915] ? register_lock_class+0x54/0x330 [ 328.771771][ T3915] ? __lock_acquire+0xad5/0xd80 [ 328.771797][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.771842][ T3915] ? process_scheduled_works+0x9cb/0x18e0 [ 328.771865][ T3915] process_scheduled_works+0xac3/0x18e0 [ 328.771922][ T3915] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.771958][ T3915] ? assign_work+0x367/0x3d0 [ 328.771988][ T3915] worker_thread+0x870/0xd50 [ 328.772029][ T3915] ? __kthread_parkme+0x1a8/0x200 [ 328.772061][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 328.772086][ T3915] kthread+0x7b7/0x940 [ 328.772118][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 328.772144][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.772171][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.772200][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.772229][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.772257][ T3915] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.772276][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.772300][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.772330][ T3915] ret_from_fork+0x4b/0x80 [ 328.772352][ T3915] ? __pfx_kthread+0x10/0x10 [ 328.772381][ T3915] ret_from_fork_asm+0x1a/0x30 [ 328.772419][ T3915] [ 329.109076][ T3915] [ 329.111470][ T3915] ============================= [ 329.116349][ T3915] WARNING: suspicious RCU usage [ 329.121270][ T3915] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Not tainted [ 329.128064][ T3915] ----------------------------- [ 329.132981][ T3915] net/sched/sch_generic.c:1332 suspicious rcu_dereference_protected() usage! [ 329.142971][ T3915] [ 329.142971][ T3915] other info that might help us debug this: [ 329.142971][ T3915] [ 329.153292][ T3915] [ 329.153292][ T3915] rcu_scheduler_active = 2, debug_locks = 1 [ 329.161598][ T3915] 3 locks held by kworker/u8:7/3915: [ 329.161825][ T5894] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 329.166891][ T3915] #0: ffff88806022a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 329.185927][ T3915] #1: ffffc9000c947c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 329.198955][ T3915] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 329.208742][ T3915] [ 329.208742][ T3915] stack backtrace: [ 329.214663][ T3915] CPU: 1 UID: 0 PID: 3915 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 329.214692][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.214706][ T3915] Workqueue: bond0 bond_mii_monitor [ 329.214733][ T3915] Call Trace: [ 329.214739][ T3915] [ 329.214745][ T3915] dump_stack_lvl+0x241/0x360 [ 329.214772][ T3915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.214801][ T3915] ? __pfx__printk+0x10/0x10 [ 329.214841][ T3915] lockdep_rcu_suspicious+0x175/0x200 [ 329.214869][ T3915] dev_deactivate_many+0x93b/0xca0 [ 329.214897][ T3915] ? __pfx_dev_deactivate_many+0x10/0x10 [ 329.214922][ T3915] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 329.214948][ T3915] dev_deactivate+0x186/0x280 [ 329.214981][ T3915] ? __pfx_dev_deactivate+0x10/0x10 [ 329.215007][ T3915] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 329.215024][ T3915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.215039][ T3915] ? sched_clock+0x4a/0x70 [ 329.215062][ T3915] ? rfc2863_policy+0x1ce/0x3f0 [ 329.215083][ T3915] linkwatch_do_dev+0x10a/0x170 [ 329.215107][ T3915] ethtool_op_get_link+0x15/0x60 [ 329.215137][ T3915] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 329.215164][ T3915] bond_check_dev_link+0x1fb/0x4b0 [ 329.215186][ T3915] ? __pfx_bond_check_dev_link+0x10/0x10 [ 329.215218][ T3915] bond_mii_monitor+0x49d/0x3170 [ 329.215259][ T3915] ? bond_mii_monitor+0x17f/0x3170 [ 329.215298][ T3915] ? __pfx_bond_mii_monitor+0x10/0x10 [ 329.215323][ T3915] ? register_lock_class+0x54/0x330 [ 329.215342][ T3915] ? __lock_acquire+0xad5/0xd80 [ 329.215358][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 329.215417][ T3915] ? process_scheduled_works+0x9cb/0x18e0 [ 329.215440][ T3915] process_scheduled_works+0xac3/0x18e0 [ 329.215492][ T3915] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.215518][ T3915] ? assign_work+0x367/0x3d0 [ 329.215541][ T3915] worker_thread+0x870/0xd50 [ 329.215584][ T3915] ? __kthread_parkme+0x1a8/0x200 [ 329.215613][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 329.215634][ T3915] kthread+0x7b7/0x940 [ 329.215657][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 329.215675][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.215699][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.215728][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.215754][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.215780][ T3915] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.215794][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 329.215810][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.215832][ T3915] ret_from_fork+0x4b/0x80 [ 329.215853][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.215882][ T3915] ret_from_fork_asm+0x1a/0x30 [ 329.215918][ T3915] [ 329.215945][ T5851] Bluetooth: hci0: command tx timeout [ 329.533390][ T3915] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 329.542981][ T3915] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3915, name: kworker/u8:7 [ 329.559581][ T3915] preempt_count: 0, expected: 0 [ 329.564527][ T3915] RCU nest depth: 1, expected: 0 [ 329.569573][ T3915] 3 locks held by kworker/u8:7/3915: [ 329.574898][ T3915] #0: ffff88806022a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 329.610827][ T3915] #1: ffffc9000c947c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 329.628690][ T5851] Bluetooth: hci1: command tx timeout [ 329.638621][ T3915] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 329.648501][ T3915] CPU: 1 UID: 0 PID: 3915 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 329.648530][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.648545][ T3915] Workqueue: bond0 bond_mii_monitor [ 329.648581][ T3915] Call Trace: [ 329.648589][ T3915] [ 329.648598][ T3915] dump_stack_lvl+0x241/0x360 [ 329.648635][ T3915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.648689][ T3915] __might_resched+0x558/0x6c0 [ 329.648724][ T3915] ? __pfx___might_resched+0x10/0x10 [ 329.648770][ T3915] down_read+0x90/0xa50 [ 329.648801][ T3915] ? __local_bh_enable_ip+0x168/0x200 [ 329.648821][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 329.648847][ T3915] ? __local_bh_enable_ip+0x168/0x200 [ 329.648869][ T3915] ? __pfx_down_read+0x10/0x10 [ 329.648894][ T3915] ? dev_deactivate_many+0xa9b/0xca0 [ 329.648924][ T3915] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 329.648955][ T3915] ? dev_get_flags+0x147/0x1d0 [ 329.648980][ T3915] wext_netdev_notifier_call+0x1f/0x120 [ 329.649018][ T3915] notifier_call_chain+0x1a5/0x3f0 [ 329.649053][ T3915] netdev_state_change+0x123/0x1a0 [ 329.649083][ T3915] ? __pfx_netdev_state_change+0x10/0x10 [ 329.649113][ T3915] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 329.649136][ T3915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.649157][ T3915] ? sched_clock+0x4a/0x70 [ 329.649192][ T3915] ? rfc2863_policy+0x1ce/0x3f0 [ 329.649218][ T3915] linkwatch_do_dev+0x112/0x170 [ 329.649242][ T3915] ethtool_op_get_link+0x15/0x60 [ 329.649273][ T3915] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 329.649303][ T3915] bond_check_dev_link+0x1fb/0x4b0 [ 329.649337][ T3915] ? __pfx_bond_check_dev_link+0x10/0x10 [ 329.649385][ T3915] bond_mii_monitor+0x49d/0x3170 [ 329.649428][ T3915] ? bond_mii_monitor+0x17f/0x3170 [ 329.649473][ T3915] ? __pfx_bond_mii_monitor+0x10/0x10 [ 329.649505][ T3915] ? register_lock_class+0x54/0x330 [ 329.649535][ T3915] ? __lock_acquire+0xad5/0xd80 [ 329.649560][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 329.649606][ T3915] ? process_scheduled_works+0x9cb/0x18e0 [ 329.649630][ T3915] process_scheduled_works+0xac3/0x18e0 [ 329.649695][ T3915] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.649731][ T3915] ? assign_work+0x367/0x3d0 [ 329.649762][ T3915] worker_thread+0x870/0xd50 [ 329.649804][ T3915] ? __kthread_parkme+0x1a8/0x200 [ 329.649834][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 329.649860][ T3915] kthread+0x7b7/0x940 [ 329.649892][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 329.649919][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.649957][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.650003][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.650031][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.650058][ T3915] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.650076][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 329.650099][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.650128][ T3915] ret_from_fork+0x4b/0x80 [ 329.650149][ T3915] ? __pfx_kthread+0x10/0x10 [ 329.650178][ T3915] ret_from_fork_asm+0x1a/0x30 [ 329.650216][ T3915] [ 329.945864][ T3915] [ 329.948244][ T3915] ============================= [ 329.953122][ T3915] [ BUG: Invalid wait context ] [ 329.957977][ T3915] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Tainted: G W [ 329.966304][ T3915] ----------------------------- [ 329.971144][ T3915] kworker/u8:7/3915 is trying to lock: [ 329.976597][ T3915] ffffffff900f0790 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 329.986101][ T3915] other info that might help us debug this: [ 329.992162][ T3915] context-{5:5} [ 329.995615][ T3915] 3 locks held by kworker/u8:7/3915: [ 330.000891][ T3915] #0: ffff88806022a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 330.011967][ T3915] #1: ffffc9000c947c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 330.024853][ T3915] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 330.034531][ T3915] stack backtrace: [ 330.038243][ T3915] CPU: 0 UID: 0 PID: 3915 Comm: kworker/u8:7 Tainted: G W 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 330.038267][ T3915] Tainted: [W]=WARN [ 330.038273][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.038284][ T3915] Workqueue: bond0 bond_mii_monitor [ 330.038306][ T3915] Call Trace: [ 330.038313][ T3915] [ 330.038319][ T3915] dump_stack_lvl+0x241/0x360 [ 330.038343][ T3915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.038364][ T3915] ? __pfx__printk+0x10/0x10 [ 330.038387][ T3915] __lock_acquire+0xc30/0xd80 [ 330.038412][ T3915] lock_acquire+0x116/0x2f0 [ 330.038426][ T3915] ? wext_netdev_notifier_call+0x1f/0x120 [ 330.038454][ T3915] down_read+0xb3/0xa50 [ 330.038473][ T3915] ? wext_netdev_notifier_call+0x1f/0x120 [ 330.038496][ T3915] ? __local_bh_enable_ip+0x168/0x200 [ 330.038511][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 330.038528][ T3915] ? __local_bh_enable_ip+0x168/0x200 [ 330.038542][ T3915] ? __pfx_down_read+0x10/0x10 [ 330.038560][ T3915] ? dev_deactivate_many+0xa9b/0xca0 [ 330.038582][ T3915] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 330.038601][ T3915] ? dev_get_flags+0x147/0x1d0 [ 330.038619][ T3915] wext_netdev_notifier_call+0x1f/0x120 [ 330.038647][ T3915] notifier_call_chain+0x1a5/0x3f0 [ 330.038669][ T3915] netdev_state_change+0x123/0x1a0 [ 330.038689][ T3915] ? __pfx_netdev_state_change+0x10/0x10 [ 330.038709][ T3915] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 330.038725][ T3915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 330.038739][ T3915] ? sched_clock+0x4a/0x70 [ 330.038762][ T3915] ? rfc2863_policy+0x1ce/0x3f0 [ 330.038778][ T3915] linkwatch_do_dev+0x112/0x170 [ 330.038793][ T3915] ethtool_op_get_link+0x15/0x60 [ 330.038816][ T3915] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 330.038838][ T3915] bond_check_dev_link+0x1fb/0x4b0 [ 330.038859][ T3915] ? __pfx_bond_check_dev_link+0x10/0x10 [ 330.038903][ T3915] bond_mii_monitor+0x49d/0x3170 [ 330.038929][ T3915] ? bond_mii_monitor+0x17f/0x3170 [ 330.038955][ T3915] ? __pfx_bond_mii_monitor+0x10/0x10 [ 330.038977][ T3915] ? register_lock_class+0x54/0x330 [ 330.038995][ T3915] ? __lock_acquire+0xad5/0xd80 [ 330.039011][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 330.039035][ T3915] ? process_scheduled_works+0x9cb/0x18e0 [ 330.039053][ T3915] process_scheduled_works+0xac3/0x18e0 [ 330.039081][ T3915] ? __pfx_process_scheduled_works+0x10/0x10 [ 330.039102][ T3915] ? assign_work+0x367/0x3d0 [ 330.039121][ T3915] worker_thread+0x870/0xd50 [ 330.039145][ T3915] ? __kthread_parkme+0x1a8/0x200 [ 330.039166][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 330.039184][ T3915] kthread+0x7b7/0x940 [ 330.039206][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 330.039225][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.039245][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.039284][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.039306][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.039327][ T3915] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.039343][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 330.039361][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.039383][ T3915] ret_from_fork+0x4b/0x80 [ 330.039406][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.039428][ T3915] ret_from_fork_asm+0x1a/0x30 [ 330.039449][ T3915] [ 330.418773][ T5894] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 330.546062][ T5894] usb 1-1: USB disconnect, device number 32 [ 330.568717][ T3915] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 330.579110][ T3915] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3915, name: kworker/u8:7 [ 330.588346][ T3915] preempt_count: 0, expected: 0 [ 330.593258][ T3915] RCU nest depth: 1, expected: 0 [ 330.598218][ T3915] INFO: lockdep is turned off. [ 330.603226][ T3915] CPU: 0 UID: 0 PID: 3915 Comm: kworker/u8:7 Tainted: G W 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 330.603260][ T3915] Tainted: [W]=WARN [ 330.603267][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.603280][ T3915] Workqueue: bond0 bond_mii_monitor [ 330.603313][ T3915] Call Trace: [ 330.603321][ T3915] [ 330.603328][ T3915] dump_stack_lvl+0x241/0x360 [ 330.603370][ T3915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.603398][ T3915] ? __pfx__printk+0x10/0x10 [ 330.603425][ T3915] ? rcu_is_watching+0x15/0xb0 [ 330.603454][ T3915] __might_resched+0x558/0x6c0 [ 330.603481][ T3915] ? __pfx___might_resched+0x10/0x10 [ 330.603504][ T3915] ? br_get_link_ksettings+0x376/0x420 [ 330.603534][ T3915] ? __pfx_br_get_link_ksettings+0x10/0x10 [ 330.603564][ T3915] ? rcu_is_watching+0x15/0xb0 [ 330.603591][ T3915] __mutex_lock+0x12c/0x10c0 [ 330.603621][ T3915] ? tee_netdev_event+0x86/0x460 [ 330.603645][ T3915] ? __pfx___mutex_lock+0x10/0x10 [ 330.603674][ T3915] ? net_generic+0x1f/0x240 [ 330.603698][ T3915] tee_netdev_event+0x86/0x460 [ 330.603719][ T3915] ? nft_offload_netdev_event+0x27d/0x360 [ 330.603746][ T3915] notifier_call_chain+0x1a5/0x3f0 [ 330.603775][ T3915] netdev_state_change+0x123/0x1a0 [ 330.603802][ T3915] ? __pfx_netdev_state_change+0x10/0x10 [ 330.603830][ T3915] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 330.603851][ T3915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 330.603872][ T3915] ? sched_clock+0x4a/0x70 [ 330.603902][ T3915] ? rfc2863_policy+0x1ce/0x3f0 [ 330.603924][ T3915] linkwatch_do_dev+0x112/0x170 [ 330.603946][ T3915] ethtool_op_get_link+0x15/0x60 [ 330.603976][ T3915] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 330.604005][ T3915] bond_check_dev_link+0x1fb/0x4b0 [ 330.604034][ T3915] ? __pfx_bond_check_dev_link+0x10/0x10 [ 330.604067][ T3915] bond_mii_monitor+0x49d/0x3170 [ 330.604101][ T3915] ? bond_mii_monitor+0x17f/0x3170 [ 330.604134][ T3915] ? __pfx_bond_mii_monitor+0x10/0x10 [ 330.604162][ T3915] ? register_lock_class+0x54/0x330 [ 330.604186][ T3915] ? __lock_acquire+0xad5/0xd80 [ 330.604207][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 330.604238][ T3915] ? process_scheduled_works+0x9cb/0x18e0 [ 330.604261][ T3915] process_scheduled_works+0xac3/0x18e0 [ 330.604296][ T3915] ? __pfx_process_scheduled_works+0x10/0x10 [ 330.604324][ T3915] ? assign_work+0x367/0x3d0 [ 330.604348][ T3915] worker_thread+0x870/0xd50 [ 330.604384][ T3915] ? __kthread_parkme+0x1a8/0x200 [ 330.604410][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 330.604434][ T3915] kthread+0x7b7/0x940 [ 330.604462][ T3915] ? __pfx_worker_thread+0x10/0x10 [ 330.604486][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.604512][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.604539][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.604566][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.604593][ T3915] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.604612][ T3915] ? lockdep_hardirqs_on+0x9d/0x150 [ 330.604634][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.604662][ T3915] ret_from_fork+0x4b/0x80 [ 330.604682][ T3915] ? __pfx_kthread+0x10/0x10 [ 330.604708][ T3915] ret_from_fork_asm+0x1a/0x30 [ 330.604734][ T3915] [ 331.320486][ T13] bond2 (unregistering): (slave gretap1): Releasing active interface [ 331.351109][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 331.404609][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.418027][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.427698][ T13] bond0 (unregistering): Released all slaves [ 331.442436][ T13] bond1 (unregistering): (slave veth3): Releasing backup interface [ 331.452099][ T13] veth3: left promiscuous mode [ 331.457712][ T13] bond1 (unregistering): Released all slaves [ 331.473535][ T13] bond2 (unregistering): Released all slaves [ 331.699210][ T5851] Bluetooth: hci1: command tx timeout [ 331.874849][ T13] hsr_slave_0: left promiscuous mode [ 331.883058][ T13] hsr_slave_1: left promiscuous mode [ 331.891233][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.898776][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.907524][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.918210][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.932068][ T13] veth1_macvtap: left promiscuous mode [ 331.937632][ T13] veth0_macvtap: left promiscuous mode [ 331.944652][ T13] veth1_vlan: left promiscuous mode [ 331.951723][ T13] veth0_vlan: left promiscuous mode [ 332.163569][ T13] team0 (unregistering): Port device team_slave_1 removed [ 332.191349][ T13] team0 (unregistering): Port device team_slave_0 removed