last executing test programs: 20.462714701s ago: executing program 0 (id=2421): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, r2, r3, 0x0, 0x80000001, 0x80000001, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffff7ff}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r7, 0x541b, 0x0) connect$bt_sco(r7, &(0x7f0000000040), 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000600)={0x1f, @none}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) shutdown(r7, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000840) 18.958409098s ago: executing program 0 (id=2426): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000000)) socket$qrtr(0x2a, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42902) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) dup2(r6, r5) 12.714706609s ago: executing program 0 (id=2443): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000800)={0x1, 0x5}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x0, 0x69, &(0x7f00000001c0)=""/105}, {0x5000, 0x1a, &(0x7f0000000340)=""/26}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r2, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) 12.618094799s ago: executing program 0 (id=2446): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000000020000000000"], 0x58}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x800) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x84001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='neigh_update\x00'}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x58) 10.032983581s ago: executing program 0 (id=2449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 9.813219893s ago: executing program 1 (id=2451): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10000000000016, 0x0) 7.628280354s ago: executing program 4 (id=2456): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getrusage(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setitimer(0x2, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) mmap(&(0x7f00002a3000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 7.575716504s ago: executing program 1 (id=2467): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10000000000016, 0x0) 7.316175845s ago: executing program 1 (id=2460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="0100000000000000eedc13"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 6.528925219s ago: executing program 2 (id=2462): socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 6.24539038s ago: executing program 1 (id=2463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bc2c, 0x25dfdbff, {0xa, 0x18, 0x80, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0xa01}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x64) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1}, 0x18) sendmmsg(r6, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)="bd9593e9b985b0f3", 0x8}], 0x1, &(0x7f0000001700)=ANY=[], 0x2d0}}], 0x1, 0x0) 6.068371321s ago: executing program 3 (id=2464): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f0000"], 0x50}}, 0x0) 6.064327141s ago: executing program 2 (id=2465): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000000020000000000"], 0x58}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x800) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x84001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='neigh_update\x00'}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x58) 5.926816322s ago: executing program 3 (id=2466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000280)=0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.613357108s ago: executing program 2 (id=2468): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x700}, @device_b, @device_a, @random="df60736d1503", {0x7, 0x9}}, 0x1, 0x1, 0x802e, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.612375858s ago: executing program 4 (id=2469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x5, &(0x7f00000006c0)={0x100000001, 0x400}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0xadaf, 0x5c9502) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000180)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000600), 0x4) 2.473149208s ago: executing program 1 (id=2470): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)={0x5, 0x0, 0x200000, 0x0, 0x4, "a05c7b5d00008023e9c5bcf5ff7700"}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b71, &(0x7f00000003c0)={0x0, 0x2, 0x400, 0x3, 0x1a}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) semctl$IPC_RMID(0x0, 0x0, 0x0) 2.11002887s ago: executing program 3 (id=2471): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) 1.096922805s ago: executing program 4 (id=2472): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000140), 0x80800) socket$netlink(0x10, 0x3, 0x15) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 793.686676ms ago: executing program 2 (id=2473): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0xffff) 714.129377ms ago: executing program 1 (id=2474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="0100000000000000eedc13"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 643.898477ms ago: executing program 2 (id=2475): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000740)={{0x1, 0x3, 0x2, 0x8, 'syz0\x00', 0x3}, 0x3, 0x0, 0x0, r0, 0x7, 0x9, 'syz0\x00', &(0x7f00000006c0)=['/dev/v4l-subdev#\x00', '\x00', '\x00', 'sched_switch\x00', 'sched_switch\x00', '/dev/v4l-subdev#\x00', 'GPL\x00'], 0x42}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='!,\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB='&\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="1fe381aa93f3322876757c3fde4b17cf219503175f2bd561f4000000890534a6be6a70139098a43bc6558eb25f245dc8304f24bc3f2788af05e56fddb7bb0bf8ea7ac47bf99fcd369201a29a9d340d7196e61ac641afa9e03d33fb9cc8c3b5fc1d2525d476f7a2b90831694fe3ed34742549eb6efbc41c7a8995cc1494dddb850531524e2cba9fc9560114c2ffef664ad5a2485486d9857eb54e0cebe05f4b16172938548117e552b9c4596fef2832949bc2fe6009dabe09cc0302b2be4a87fe7b2ddfe21469764b97ca4e2e98fe9b1d32d50000000000000065d0b6c21da231b7c827229f98efb71a7e8316a32030f3f16eded5f5786e3d611f915226ad928800045a2526ea97ee6445d1", @ANYRES64=0x0], 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 548.192838ms ago: executing program 3 (id=2476): socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 547.996978ms ago: executing program 4 (id=2477): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100001000000", @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f0000"], 0x50}}, 0x0) 379.398479ms ago: executing program 3 (id=2478): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 341.036249ms ago: executing program 4 (id=2479): unshare(0x2a020400) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1e8) 220.177879ms ago: executing program 3 (id=2480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bc2c, 0x25dfdbff, {0xa, 0x18, 0x80, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0xa01}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x64) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1}, 0x18) sendmmsg(r6, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)="bd9593e9b985b0f3", 0x8}], 0x1, &(0x7f0000001700)=ANY=[], 0x2d0}}], 0x1, 0x0) 174.490599ms ago: executing program 4 (id=2481): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000000020000000000"], 0x58}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x800) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x84001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='neigh_update\x00'}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x58) 170.77232ms ago: executing program 0 (id=2482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x5, &(0x7f00000006c0)={0x100000001, 0x400}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0xadaf, 0x5c9502) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000180)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000600), 0x4) 0s ago: executing program 2 (id=2483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000280)=0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa91bbb6753 code=0x7ffc0000 [ 217.580018][ T26] audit: type=1326 audit(1731790213.264:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91bbb6719 code=0x7ffc0000 [ 218.414599][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 220.766203][ T6123] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 220.774960][ T6123] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 222.915425][ T6142] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 222.922311][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 222.944182][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 222.977721][ T6142] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 222.984443][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.009027][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 223.052298][ T6147] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 223.058938][ T6147] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.088311][ T6147] vhci_hcd vhci_hcd.0: Device attached [ 223.102102][ T4238] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 223.152320][ T4189] vhci_hcd: vhci_device speed not set [ 223.222891][ T6158] sp0: Synchronizing with TNC [ 223.233647][ T4189] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 223.242632][ T6142] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 223.249174][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.532986][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.613908][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.684584][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 223.837409][ T4238] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 223.930897][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.970005][ T4238] usb 5-1: config 0 descriptor?? [ 224.025263][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.034135][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.658107][ T4238] kye 0003:0458:0153.0004: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.4-1/input0 [ 224.858140][ T1110] usb 5-1: USB disconnect, device number 5 [ 225.038733][ T6154] vhci_hcd: connection closed [ 225.038875][ T6148] vhci_hcd: connection closed [ 225.044151][ T6145] vhci_hcd: connection closed [ 225.049038][ T6143] vhci_hcd: connection reset by peer [ 225.050657][ T4420] vhci_hcd: stop threads [ 225.065572][ T4420] vhci_hcd: release socket [ 225.076121][ T6179] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 225.084392][ T6179] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 225.097571][ T4420] vhci_hcd: disconnect device [ 225.111808][ T4420] vhci_hcd: stop threads [ 225.116726][ T4420] vhci_hcd: release socket [ 225.121271][ T4420] vhci_hcd: disconnect device [ 225.126379][ T4238] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 225.134177][ T4420] vhci_hcd: stop threads [ 225.147837][ T4420] vhci_hcd: release socket [ 225.153521][ T4420] vhci_hcd: disconnect device [ 225.158766][ T4420] vhci_hcd: stop threads [ 225.163553][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 225.171515][ T4420] vhci_hcd: release socket [ 225.177223][ T4420] vhci_hcd: disconnect device [ 225.412229][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 225.552314][ T4238] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 225.566886][ T4238] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 225.579686][ T4238] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 225.597579][ T4238] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 225.612174][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.628201][ T4238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.635417][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.652098][ T1107] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 225.661215][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.687249][ T1107] usb 2-1: config 0 descriptor?? [ 225.852170][ T4238] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 225.861260][ T4238] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 226.020871][ T4238] usb 3-1: Product: syz [ 226.025973][ T4238] usb 3-1: Manufacturer: syz [ 226.030659][ T4238] usb 3-1: SerialNumber: syz [ 226.038729][ T4238] usb 3-1: config 0 descriptor?? [ 226.111300][ T4238] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 226.272444][ T1107] appletouch 2-1:0.0: Failed to request geyser raw mode [ 226.290852][ T4238] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 226.358527][ T1107] appletouch: probe of 2-1:0.0 failed with error -5 [ 226.622978][ T4238] usb 3-1: USB disconnect, device number 7 [ 226.638442][ T1107] usb 2-1: USB disconnect, device number 5 [ 226.788166][ T4238] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 226.856170][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 227.552237][ T1107] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 227.852004][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 229.131870][ T1107] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 229.143113][ T4189] vhci_hcd: vhci_device speed not set [ 229.149596][ T1107] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.159622][ T1107] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.582184][ T1107] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.595619][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.604050][ T1107] usb 2-1: Product: syz [ 229.608305][ T1107] usb 2-1: Manufacturer: syz [ 229.613126][ T1107] usb 2-1: SerialNumber: syz [ 229.732083][ T6225] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 229.740245][ T6225] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 230.072600][ T1107] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 230.292402][ T1110] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 230.302107][ T1107] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 231.019416][ T1107] usb 2-1: USB disconnect, device number 6 [ 231.282089][ T1110] usb 4-1: Using ep0 maxpacket: 32 [ 231.296409][ T6240] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 231.313782][ T6240] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 231.404785][ T1110] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.424113][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.453121][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.468858][ T1110] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 231.482200][ T1110] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 231.491258][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.503294][ T1110] usb 4-1: config 0 descriptor?? [ 231.542097][ T1107] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 231.952227][ T1107] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.961219][ T1107] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.972104][ T1107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.981724][ T1107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 231.993722][ T1107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 232.073078][ T6250] sp0: Synchronizing with TNC [ 232.293586][ T1107] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.490823][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.626674][ T1107] usb 2-1: Product: syz [ 232.694875][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 232.704730][ T1107] usb 2-1: Manufacturer: syz [ 232.715159][ T1110] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 232.732003][ T1110] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 232.739266][ T1110] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 232.749401][ T1110] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 232.777593][ T1110] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 232.832717][ T1107] cdc_wdm 2-1:1.0: skipping garbage [ 232.837977][ T1107] cdc_wdm 2-1:1.0: skipping garbage [ 232.860908][ T1110] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 232.879701][ T1107] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 232.907704][ T1107] cdc_wdm 2-1:1.0: Unknown control protocol [ 232.931194][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.046856][ T1107] usb 2-1: USB disconnect, device number 7 [ 233.064474][ T1110] usb 4-1: USB disconnect, device number 5 [ 234.033749][ T6278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 234.042191][ T6278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 235.311489][ T6265] sctp: failed to load transform for md5: -4 [ 235.721253][ T6297] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 235.748239][ T6297] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 236.157192][ T6301] sp0: Synchronizing with TNC [ 236.782118][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 236.871463][ T6319] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 236.878022][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.892243][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 236.947002][ T6322] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 236.953568][ T6322] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.969629][ T6322] vhci_hcd vhci_hcd.0: Device attached [ 236.981032][ T6319] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 236.987580][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.995459][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 237.013612][ T6319] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 237.020354][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.032161][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 237.056610][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.064138][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.089594][ T6319] device bridge_slave_1 left promiscuous mode [ 237.107373][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.115411][ T6331] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 237.123697][ T6331] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 237.141224][ T6319] device bridge_slave_0 left promiscuous mode [ 237.147947][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.152362][ T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.155592][ T4189] vhci_hcd: vhci_device speed not set [ 237.172861][ T13] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 237.188114][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.198942][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 237.217130][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 237.232025][ T4189] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 237.343074][ T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.394442][ T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.582376][ T13] usb 4-1: Product: syz [ 237.587827][ T13] usb 4-1: Manufacturer: syz [ 237.633102][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 237.641022][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 237.982011][ T6327] vhci_hcd: connection closed [ 237.984670][ T4309] vhci_hcd: stop threads [ 238.000501][ T6325] vhci_hcd: connection closed [ 238.007085][ T6323] vhci_hcd: connection closed [ 238.014212][ T6320] vhci_hcd: connection reset by peer [ 238.362743][ T4309] vhci_hcd: release socket [ 238.367258][ T4309] vhci_hcd: disconnect device [ 238.375965][ T4309] vhci_hcd: stop threads [ 238.380394][ T4309] vhci_hcd: release socket [ 238.385723][ T4309] vhci_hcd: disconnect device [ 238.390711][ T4309] vhci_hcd: stop threads [ 238.394867][ T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 238.405537][ T4309] vhci_hcd: release socket [ 238.420209][ T4309] vhci_hcd: disconnect device [ 238.422499][ T13] cdc_wdm 4-1:1.0: Unknown control protocol [ 238.470079][ T4309] vhci_hcd: stop threads [ 238.478900][ T13] usb 4-1: USB disconnect, device number 6 [ 238.481988][ T4309] vhci_hcd: release socket [ 238.499247][ T4309] vhci_hcd: disconnect device [ 238.618008][ T6351] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 238.662535][ T6351] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 240.060897][ T6371] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 240.077392][ T6371] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 242.362084][ T4189] vhci_hcd: vhci_device speed not set [ 242.503987][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'. [ 242.942150][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 244.182380][ T23] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.218837][ T23] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 244.250717][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.263467][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 244.279638][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 244.322299][ T6419] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 244.331142][ T6419] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 244.442234][ T23] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.451594][ T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.459697][ T23] usb 5-1: Product: syz [ 244.464058][ T23] usb 5-1: Manufacturer: syz [ 244.513468][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 244.518774][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 244.530009][ T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 244.536526][ T23] cdc_wdm 5-1:1.0: Unknown control protocol [ 244.562058][ T1107] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 244.805359][ T23] usb 5-1: USB disconnect, device number 6 [ 244.852017][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 244.992196][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.006468][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.043652][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.056772][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.070108][ T1107] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 245.079510][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.123506][ T1107] usb 3-1: config 0 descriptor?? [ 246.204602][ T1107] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 246.211658][ T1107] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 246.310417][ T1107] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 246.443262][ T1107] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 246.601994][ T1107] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 246.635819][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 246.698965][ T1107] ntrig 0003:1B96:000A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 246.780451][ T1107] usb 3-1: USB disconnect, device number 8 [ 247.811801][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 248.582159][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.593339][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.604875][ T7] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 248.613923][ T6471] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 248.614028][ T6471] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 248.622747][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.649266][ T7] usb 5-1: config 0 descriptor?? [ 249.682156][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 249.724884][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 249.744353][ T7] usb 5-1: USB disconnect, device number 7 [ 250.028347][ T6498] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 250.102103][ T6498] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 250.919281][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 251.587980][ T1107] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 251.862054][ T1107] usb 5-1: Using ep0 maxpacket: 32 [ 252.902094][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.921995][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.934116][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.981521][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 253.010515][ T1107] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 253.030229][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.071979][ T1107] usb 5-1: config 0 descriptor?? [ 254.238958][ T6533] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 254.272228][ T1107] usbhid 5-1:0.0: can't add hid device: -71 [ 254.284703][ T1107] usbhid: probe of 5-1:0.0 failed with error -71 [ 254.309271][ T6533] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 254.470796][ T1107] usb 5-1: USB disconnect, device number 8 [ 255.136057][ T4189] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 255.676568][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.682928][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.762671][ T4189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.819273][ T4189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.855098][ T4189] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 255.877039][ T4189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.092290][ T4189] usb 1-1: config 0 descriptor?? [ 256.191308][ T6570] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 256.244114][ T6570] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 256.572153][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 256.645752][ T4189] kye 0003:0458:0153.0007: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.0-1/input0 [ 256.876418][ T4189] usb 1-1: USB disconnect, device number 4 [ 256.992206][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD2, skipping [ 257.003273][ T21] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 257.012941][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.025369][ T21] usb 3-1: config 0 descriptor?? [ 257.350321][ T4189] usb 3-1: USB disconnect, device number 9 [ 263.412126][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 264.332636][ T13] usb 1-1: string descriptor 0 read error: -71 [ 264.345611][ T13] usb 1-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93 [ 264.421966][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.720951][ T13] usb 1-1: config 0 descriptor?? [ 264.752674][ T13] usb 1-1: can't set config #0, error -71 [ 265.221384][ T6700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 265.246087][ T13] usb 1-1: USB disconnect, device number 5 [ 265.576822][ T6707] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 265.619862][ T6707] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 266.104876][ T6720] sp0: Synchronizing with TNC [ 267.151987][ T6723] netlink: 68 bytes leftover after parsing attributes in process `syz.2.734'. [ 270.325656][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 273.103327][ T6780] sp0: Synchronizing with TNC [ 274.659256][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 275.928535][ T6807] overlayfs: missing 'lowerdir' [ 277.047795][ T6826] netlink: 68 bytes leftover after parsing attributes in process `syz.4.766'. [ 279.874522][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 280.586988][ T6865] overlayfs: missing 'lowerdir' [ 283.367889][ T4207] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 284.347889][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 284.652745][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.684699][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.947299][ T4207] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 285.106646][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.242896][ T4207] usb 3-1: config 0 descriptor?? [ 285.682063][ T1107] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 285.766948][ T4207] kye 0003:0458:0153.0008: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 286.019175][ T4207] usb 3-1: USB disconnect, device number 10 [ 286.078657][ T6918] overlayfs: missing 'lowerdir' [ 286.083805][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 286.302591][ T1107] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 286.318456][ T1107] usb 1-1: config 0 has no interface number 0 [ 286.492289][ T1107] usb 1-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c [ 286.505586][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.515711][ T1107] usb 1-1: Product: syz [ 286.519986][ T1107] usb 1-1: Manufacturer: syz [ 286.524877][ T1107] usb 1-1: SerialNumber: syz [ 286.538704][ T1107] usb 1-1: config 0 descriptor?? [ 286.595704][ T1107] gspca_main: spca508-2.14.0 probing 0130:0130 [ 286.657838][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 287.350018][ T1107] gspca_spca508: reg_read err -32 [ 287.942441][ T1107] gspca_spca508: reg_read err -71 [ 287.962275][ T1107] gspca_spca508: reg_read err -71 [ 287.987867][ T1107] gspca_spca508: reg_read err -71 [ 288.022068][ T1107] gspca_spca508: reg write: error -71 [ 288.027789][ T1107] spca508: probe of 1-1:0.26 failed with error -71 [ 288.069128][ T1107] usb 1-1: USB disconnect, device number 6 [ 289.076601][ T6970] overlayfs: missing 'lowerdir' [ 289.162052][ T6721] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 289.534249][ T6721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.568893][ T6721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.611527][ T6721] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 289.631562][ T6721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.707419][ T6721] usb 4-1: config 0 descriptor?? [ 290.432773][ T6721] kye 0003:0458:0153.0009: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0 [ 290.725170][ T6721] usb 4-1: USB disconnect, device number 7 [ 291.161508][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 292.278426][ T7007] overlayfs: missing 'lowerdir' [ 293.352933][ T4207] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 294.013066][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.082915][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.099813][ T7031] process 'syz.0.832' launched './file0' with NULL argv: empty string added [ 294.132119][ T4207] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 294.178405][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.243612][ T4207] usb 3-1: config 0 descriptor?? [ 294.250525][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 294.264769][ T7033] tmpfs: Bad value for 'mpol' [ 294.294380][ T1107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 294.355001][ T1107] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 294.789376][ T4207] kye 0003:0458:0153.000B: hidraw1: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 294.985976][ T6721] usb 3-1: USB disconnect, device number 11 [ 295.361103][ T7048] overlayfs: missing 'lowerdir' [ 298.353862][ T7075] syz.2.846 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 298.397048][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'. [ 299.169508][ T7089] overlayfs: missing 'workdir' [ 299.262280][ T1107] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 299.468287][ T7099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.480903][ T7098] tipc: Started in network mode [ 299.486437][ T7098] tipc: Node identity aee93d1a6c9, cluster identity 4711 [ 299.499439][ T7098] tipc: Enabled bearer , priority 7 [ 299.508156][ T7098] ªªªªªª: renamed from syzkaller0 [ 299.526891][ T7098] tipc: Disabling bearer [ 299.662285][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.673490][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.683934][ T1107] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 299.693502][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.595002][ T1107] usb 3-1: config 0 descriptor?? [ 301.490608][ T7120] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 301.519082][ T7120] CIFS: Unable to determine destination address [ 302.102772][ T1107] usbhid 3-1:0.0: can't add hid device: -71 [ 302.108837][ T7132] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 302.116978][ T7132] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 302.145649][ T1107] usbhid: probe of 3-1:0.0 failed with error -71 [ 302.170971][ T1107] usb 3-1: USB disconnect, device number 12 [ 302.271402][ T7135] sp0: Synchronizing with TNC [ 302.762103][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 302.790538][ T7140] overlayfs: missing 'workdir' [ 303.054471][ T7144] tipc: Started in network mode [ 303.105573][ T7144] tipc: Node identity 76b1cc0109e6, cluster identity 4711 [ 303.304645][ T7144] tipc: Enabled bearer , priority 7 [ 303.850116][ T7141] tipc: Disabling bearer [ 304.162681][ T6721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 304.297047][ T7163] fuse: Bad value for 'fd' [ 304.652349][ T4207] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 305.102092][ T6721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.127691][ T6721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.158082][ T6721] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 305.178396][ T6721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.203530][ T6721] usb 1-1: config 0 descriptor?? [ 305.362123][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 305.612087][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 305.862822][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.880223][ T7] usb 3-1: config 0 has no interface number 0 [ 305.954659][ T6721] kye 0003:0458:0153.000C: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.0-1/input0 [ 306.058583][ T7177] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 306.059678][ T6721] usb 1-1: USB disconnect, device number 7 [ 306.066913][ T7177] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 306.092500][ T7] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 306.107582][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.133099][ T7] usb 3-1: Product: syz [ 306.138510][ T7] usb 3-1: Manufacturer: syz [ 306.145889][ T7] usb 3-1: SerialNumber: syz [ 306.176190][ T7] usb 3-1: config 0 descriptor?? [ 306.217932][ T7] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 306.907830][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 306.907845][ T26] audit: type=1326 audit(1731790303.034:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 306.953609][ T7182] overlayfs: missing 'workdir' [ 306.990566][ T26] audit: type=1326 audit(1731790303.064:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 307.026362][ T26] audit: type=1326 audit(1731790303.064:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 307.129168][ T26] audit: type=1326 audit(1731790303.074:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 307.162297][ T7] gspca_spca1528: reg_w err -110 [ 307.192176][ T7] spca1528: probe of 3-1:0.1 failed with error -110 [ 308.642046][ T4207] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 308.649785][ T4207] usb 4-1: can't read configurations, error -71 [ 308.912096][ T26] audit: type=1326 audit(1731790303.074:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 308.960200][ T7] usb 3-1: USB disconnect, device number 13 [ 308.984587][ T26] audit: type=1326 audit(1731790303.074:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 309.575396][ T26] audit: type=1326 audit(1731790303.074:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 309.674604][ T26] audit: type=1326 audit(1731790303.074:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 309.695529][ T7205] fuse: Bad value for 'fd' [ 309.709021][ T26] audit: type=1326 audit(1731790303.074:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 309.769900][ T26] audit: type=1326 audit(1731790303.094:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c1fc47719 code=0x7ffc0000 [ 309.946187][ T7211] sp0: Synchronizing with TNC [ 310.728135][ T4207] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 310.762305][ T4630] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.846009][ T7223] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 310.854273][ T7223] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 311.112265][ T4207] usb 4-1: Using ep0 maxpacket: 16 [ 311.132290][ T4630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.155064][ T4630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.186955][ T4630] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 311.209040][ T4630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.237391][ T4630] usb 1-1: config 0 descriptor?? [ 311.258298][ T4207] usb 4-1: config 0 has an invalid interface number: 26 but max is 0 [ 311.269948][ T4207] usb 4-1: config 0 has no interface number 0 [ 311.452205][ T4207] usb 4-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c [ 311.470190][ T4207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.486640][ T4207] usb 4-1: Product: syz [ 311.494236][ T4207] usb 4-1: Manufacturer: syz [ 311.499375][ T4207] usb 4-1: SerialNumber: syz [ 311.508643][ T4207] usb 4-1: config 0 descriptor?? [ 311.554324][ T4207] gspca_main: spca508-2.14.0 probing 0130:0130 [ 311.782150][ T4207] gspca_spca508: reg_read err -32 [ 311.871844][ T4630] kye 0003:0458:0153.000D: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.0-1/input0 [ 311.936933][ T7234] overlayfs: missing 'lowerdir' [ 312.026221][ T23] usb 1-1: USB disconnect, device number 8 [ 312.042904][ T4207] gspca_spca508: reg_read err -71 [ 312.062638][ T4207] gspca_spca508: reg_read err -71 [ 312.092200][ T4207] gspca_spca508: reg_read err -71 [ 312.116752][ T4207] gspca_spca508: reg write: error -71 [ 312.132987][ T4207] spca508: probe of 4-1:0.26 failed with error -71 [ 312.148228][ T4207] usb 4-1: USB disconnect, device number 9 [ 315.079313][ T7278] overlayfs: missing 'lowerdir' [ 315.271680][ T7286] tmpfs: Unknown parameter 'usrquota' [ 315.351963][ T4207] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 315.736276][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 315.752721][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.795084][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.808542][ T4207] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 315.822083][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.851693][ T4207] usb 3-1: config 0 descriptor?? [ 316.261984][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 316.432468][ T1107] usb 2-1: config 0 has an invalid interface number: 26 but max is 0 [ 316.502317][ T4207] kye 0003:0458:0153.000E: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 316.536788][ T1107] usb 2-1: config 0 has no interface number 0 [ 317.027608][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.035984][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.040820][ T4207] usb 3-1: USB disconnect, device number 14 [ 317.122266][ T1107] usb 2-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c [ 317.145441][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.204586][ T1107] usb 2-1: Product: syz [ 317.211677][ T1107] usb 2-1: Manufacturer: syz [ 317.218881][ T1107] usb 2-1: SerialNumber: syz [ 317.248199][ T1107] usb 2-1: config 0 descriptor?? [ 317.405212][ T1107] gspca_main: spca508-2.14.0 probing 0130:0130 [ 317.609138][ T7307] sp0: Synchronizing with TNC [ 319.376398][ T1107] gspca_spca508: reg_read err -32 [ 319.482569][ T1107] gspca_spca508: reg_read err -71 [ 319.512384][ T1107] gspca_spca508: reg_read err -71 [ 319.536035][ T1107] gspca_spca508: reg_read err -71 [ 319.562271][ T1107] gspca_spca508: reg_read err -71 [ 319.582418][ T1107] gspca_spca508: reg write: error -71 [ 319.588921][ T1107] spca508: probe of 2-1:0.26 failed with error -71 [ 319.655254][ T1107] usb 2-1: USB disconnect, device number 8 [ 319.692182][ T4207] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 319.932120][ T4207] usb 3-1: Using ep0 maxpacket: 32 [ 320.052292][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.088865][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.102302][ T4207] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 320.121167][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.338583][ T4207] usb 3-1: config 0 descriptor?? [ 320.369855][ T7329] overlayfs: missing 'lowerdir' [ 321.385911][ T7339] sp0: Synchronizing with TNC [ 322.145089][ T4207] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 322.153618][ T4207] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 322.187218][ T4207] ft260 0003:0403:6030.000F: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 322.422144][ T4238] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 322.452200][ T4207] ft260 0003:0403:6030.000F: failed to retrieve chip version [ 322.472084][ T4207] ft260: probe of 0003:0403:6030.000F failed with error -71 [ 323.713410][ T4207] usb 3-1: USB disconnect, device number 15 [ 324.212840][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.315930][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.544298][ T4238] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 324.707095][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.825133][ T4238] usb 4-1: config 0 descriptor?? [ 325.067547][ T7373] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 325.076528][ T7373] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 325.409386][ T7380] binder: 7379:7380 ioctl c0306201 0 returned -14 [ 325.542519][ T4238] usbhid 4-1:0.0: can't add hid device: -71 [ 325.555144][ T4238] usbhid: probe of 4-1:0.0 failed with error -71 [ 326.396358][ T4238] usb 4-1: USB disconnect, device number 10 [ 328.122089][ T4211] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 328.402344][ T4211] usb 2-1: Using ep0 maxpacket: 32 [ 328.582092][ T4211] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 328.586864][ T1110] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 328.661603][ T7425] sp0: Synchronizing with TNC [ 329.132503][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.194452][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.314630][ T1110] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 329.387860][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.429622][ T1110] usb 1-1: config 0 descriptor?? [ 329.682249][ T4211] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 329.694829][ T7432] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 329.703641][ T7432] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 329.721939][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 329.741964][ T4211] usb 2-1: Product: syz [ 329.759679][ T4211] usb 2-1: Manufacturer: syz [ 329.803666][ T4211] usb 2-1: SerialNumber: syz [ 329.844279][ T4211] usb 2-1: config 0 descriptor?? [ 329.862169][ T4211] usb 2-1: can't set config #0, error -71 [ 329.885215][ T4211] usb 2-1: USB disconnect, device number 9 [ 330.040758][ T1110] kye 0003:0458:0153.0010: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.0-1/input0 [ 330.254773][ T7447] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 330.263333][ T7447] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 330.500579][ T7198] usb 1-1: USB disconnect, device number 9 [ 331.573787][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.972'. [ 333.056416][ T7464] tipc: Can't bind to reserved service type 2 [ 333.107665][ T7470] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 333.116316][ T7470] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 333.358754][ T7474] sp0: Synchronizing with TNC [ 333.782972][ T7198] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 334.081977][ T7198] usb 3-1: Using ep0 maxpacket: 32 [ 334.346480][ T7487] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 334.355561][ T7487] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 334.603048][ T7198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.697170][ T7198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.843677][ T7198] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.920387][ T7198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.937575][ T7198] usb 3-1: config 0 descriptor?? [ 335.068211][ T7493] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 335.076731][ T7493] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 335.192337][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 335.472091][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 335.602869][ T23] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 335.620272][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 335.682404][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 335.734419][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.807830][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.821381][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 335.836437][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.844135][ T7198] hub 3-1:0.0: USB hub found [ 335.939037][ T7198] hub 3-1:0.0: 1 port detected [ 336.682408][ T7198] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 336.698867][ T7198] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 336.745221][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 336.751400][ T23] usbtmc 5-1:16.0: can't read capabilities [ 336.952158][ T7198] usbhid 3-1:0.0: can't add hid device: -71 [ 336.958209][ T7198] usbhid: probe of 3-1:0.0 failed with error -71 [ 336.982067][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 337.000944][ T7514] usbtmc 5-1:16.0: Unable to send data, error -71 [ 337.049024][ T4630] usb 5-1: USB disconnect, device number 9 [ 337.057546][ T7198] usb 3-1: USB disconnect, device number 16 [ 337.958934][ T7527] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 337.967106][ T7527] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 338.054576][ T7523] binder: 7522:7523 ioctl c0306201 0 returned -14 [ 339.553355][ T7547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 339.573663][ T7546] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 339.581945][ T7546] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 340.252471][ T7549] kvm: pic: single mode not supported [ 340.252627][ T7549] kvm: pic: level sensitive irq not supported [ 344.081015][ T7591] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 344.095335][ T7591] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 345.895280][ T7606] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 345.903856][ T7606] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 346.275803][ T7607] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 347.436491][ T7625] sp0: Synchronizing with TNC [ 348.467931][ T7637] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 348.476269][ T7637] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 350.103120][ T7664] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 352.217542][ T7694] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 352.226180][ T7694] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 352.260903][ T7693] sp0: Synchronizing with TNC [ 353.029859][ T7705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'. [ 353.233007][ T7707] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 353.241628][ T7707] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 354.986227][ T7723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 356.287578][ T7735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 357.070941][ T7751] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 357.278656][ T7751] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 358.405455][ T7768] sp0: Synchronizing with TNC [ 360.324970][ T7786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 362.382259][ T7802] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 362.390388][ T7802] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 363.701402][ T7818] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1074'. [ 363.721117][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 364.514340][ T7822] sp0: Synchronizing with TNC [ 365.706034][ T7850] tmpfs: Unknown parameter 'grpquota' [ 366.432311][ T7859] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 366.440444][ T7859] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 366.599842][ T7833] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 367.442801][ T7871] mmap: syz.0.1092 (7871) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 367.731517][ T7880] fuse: Bad value for 'group_id' [ 368.884912][ T7902] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 368.893696][ T7902] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 371.035006][ T7925] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 371.217899][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 371.217917][ T26] audit: type=1326 audit(1731790367.344:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.4.1109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa91bbb6719 code=0x0 [ 371.909752][ T7932] fuse: Bad value for 'group_id' [ 373.683789][ T7962] fuse: Bad value for 'group_id' [ 373.911799][ T7967] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 374.142225][ T4630] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 374.281370][ T26] audit: type=1326 audit(1731790370.404:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.1127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb709b4e719 code=0x0 [ 374.888081][ T4630] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 374.955821][ T4630] usb 2-1: config 0 has no interface number 0 [ 374.987861][ T4630] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=ed.8e [ 375.015267][ T4630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.143685][ T4630] usb 2-1: config 0 descriptor?? [ 375.478927][ T4238] usb 2-1: USB disconnect, device number 10 [ 376.602770][ T8017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 378.811332][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.100057][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.186986][ T26] audit: type=1326 audit(1731790376.314:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.1.1144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd97bfbf719 code=0x0 [ 381.094985][ T8057] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 381.185345][ T8063] sp0: Synchronizing with TNC [ 382.749759][ T7198] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 383.675882][ T7198] usb 2-1: Using ep0 maxpacket: 8 [ 383.931454][ T7198] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 383.943317][ T7198] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.957515][ T7198] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 383.994815][ T8098] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 384.062301][ T7198] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 384.071988][ T7198] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 384.096248][ T7198] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 384.202914][ T7198] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 384.228104][ T7198] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 384.251678][ T7198] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 387.042135][ T7198] usb 2-1: string descriptor 0 read error: -71 [ 387.049297][ T7198] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 387.142453][ T7198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.153326][ T7198] usb 2-1: can't set config #168, error -71 [ 388.207631][ T7198] usb 2-1: USB disconnect, device number 11 [ 388.875826][ T8141] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.102010][ T4238] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 393.262110][ T4208] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 393.538367][ T8183] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 393.602076][ T4208] usb 4-1: Using ep0 maxpacket: 8 [ 393.643337][ T4238] usb 5-1: Using ep0 maxpacket: 16 [ 393.722043][ T4238] usb 5-1: device descriptor read/all, error -71 [ 394.444993][ T4208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 394.780465][ T4208] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 395.041969][ T4208] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 395.050093][ T4208] usb 4-1: Product: syz [ 395.102437][ T4208] usb 4-1: Manufacturer: syz [ 395.107065][ T4208] usb 4-1: SerialNumber: syz [ 395.182306][ T4208] usb 4-1: can't set config #1, error -71 [ 395.212159][ T4208] usb 4-1: USB disconnect, device number 11 [ 395.324004][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1198'. [ 396.880664][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 396.892066][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 397.760518][ T8229] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 399.245201][ T8240] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 399.502197][ T7198] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 399.782731][ T7198] usb 5-1: Using ep0 maxpacket: 16 [ 399.932898][ T7198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.010693][ T7198] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 400.222718][ T7198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.563507][ T7198] usb 5-1: config 0 descriptor?? [ 403.303955][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 403.322159][ T7198] usbhid 5-1:0.0: can't add hid device: -71 [ 403.328286][ T7198] usbhid: probe of 5-1:0.0 failed with error -71 [ 403.391436][ T7198] usb 5-1: USB disconnect, device number 12 [ 403.794924][ T8277] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 405.522391][ T8291] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 405.531008][ T8291] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 406.547076][ T8298] sp0: Synchronizing with TNC [ 406.726484][ T6721] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 407.092164][ T6721] usb 1-1: Using ep0 maxpacket: 8 [ 407.343341][ T6721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.361977][ T6721] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice=51.2c [ 407.380581][ T6721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.390710][ T6721] usb 1-1: config 0 descriptor?? [ 407.508389][ T8303] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 407.576100][ T8303] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 409.448607][ T8324] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 410.107361][ T8336] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 410.116413][ T8336] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 410.742145][ T4238] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 410.864239][ T6721] usb 1-1: USB disconnect, device number 10 [ 410.944150][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 411.092099][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 411.212244][ T4238] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 411.228804][ T8346] sp0: Synchronizing with TNC [ 411.255108][ T4238] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 411.304973][ T4238] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 411.362459][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 412.042300][ T4238] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 412.070128][ T4238] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 412.159394][ T4238] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 412.206785][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.277647][ T4238] usb 4-1: config 0 descriptor?? [ 412.487218][ T8354] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 412.495431][ T8354] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 412.650136][ T4238] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 413.286102][ T8361] fuse: Unknown parameter 'grou00000000000000000000' [ 414.602539][ T4211] usb 4-1: USB disconnect, device number 12 [ 414.635039][ T4211] usblp0: removed [ 414.896935][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'. [ 415.055825][ T8384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 415.081021][ T8386] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 415.089519][ T8386] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 415.833101][ T8391] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 415.842021][ T8391] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 416.712725][ T8397] fuse: Unknown parameter 'group_i00000000000000000000' [ 419.496905][ T8425] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 420.383779][ T8428] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 420.391961][ T8428] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 420.750218][ T8433] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 420.758447][ T8433] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 420.901833][ T8438] fuse: Unknown parameter 'group_i00000000000000000000' [ 421.839171][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 421.928867][ T8445] device syz_tun entered promiscuous mode [ 421.989871][ T8445] device macsec1 entered promiscuous mode [ 422.507232][ T8445] batman_adv: batadv0: Adding interface: macsec1 [ 422.939756][ T8445] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.038303][ T8445] batman_adv: batadv0: Interface activated: macsec1 [ 423.249289][ T4177] Bluetooth: Frame is too long (len 16, expected len 4) [ 423.264326][ T8445] syz.1.1270 (8445) used greatest stack depth: 19608 bytes left [ 424.340925][ T8475] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.727284][ T8483] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 425.735616][ T8483] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 426.720258][ T8489] fuse: Unknown parameter 'group_i00000000000000000000' [ 426.976555][ T8501] sp0: Synchronizing with TNC [ 429.055026][ T8523] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 429.167633][ T8530] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 429.176013][ T8530] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 429.649435][ T8532] fuse: Unknown parameter 'group_id00000000000000000000' [ 431.352001][ T4207] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 432.214671][ T8568] fuse: Unknown parameter 'group_id00000000000000000000' [ 432.491956][ T4207] usb 3-1: Using ep0 maxpacket: 32 [ 432.508931][ T8574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 432.530597][ T8577] sp0: Synchronizing with TNC [ 432.612289][ T4207] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 432.626380][ T4207] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 432.635086][ T8579] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 432.635209][ T8579] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 432.666839][ T4207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 432.682395][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.698653][ T4207] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.715931][ T4207] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 432.740621][ T4207] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 432.758809][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.779325][ T4207] usb 3-1: config 0 descriptor?? [ 433.175733][ T4207] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 435.632594][ T6721] usb 3-1: USB disconnect, device number 17 [ 435.659606][ T6721] usblp0: removed [ 435.683425][ T8612] fuse: Unknown parameter 'group_id00000000000000000000' [ 436.320079][ T8624] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 436.505887][ T8625] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 436.518381][ T8625] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 436.960752][ T8635] sp0: Synchronizing with TNC [ 437.076424][ T8641] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.1330'. [ 437.092878][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'. [ 439.002188][ T1107] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 439.202307][ T8655] fuse: Bad value for 'user_id' [ 439.322254][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 439.938762][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.952958][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.982368][ T1107] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 440.067264][ T1107] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 440.093927][ T1107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 440.107651][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 440.262852][ T1107] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 440.270976][ T8664] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 440.283233][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 440.313249][ T1107] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 440.333090][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.357036][ T8664] team0: Port device netdevsim0 added [ 440.358338][ T1107] usb 2-1: config 0 descriptor?? [ 440.388382][ T8667] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 440.502709][ T8667] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 440.539101][ T8664] syz.0.1338 (8664) used greatest stack depth: 19480 bytes left [ 440.600733][ T8667] team0: Port device netdevsim0 removed [ 440.617078][ T8667] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 440.636330][ T8674] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 440.738570][ T1107] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 440.857246][ T8682] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 440.865853][ T8682] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 442.193324][ T8694] fuse: Bad value for 'user_id' [ 442.286000][ T1325] usb 2-1: USB disconnect, device number 12 [ 442.481888][ T1325] usblp0: removed [ 443.237521][ T8721] netlink: 'syz.1.1355': attribute type 10 has an invalid length. [ 443.519360][ T8715] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 443.562153][ T8715] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 443.578918][ T8721] team0: Port device netdevsim0 added [ 444.050698][ T8735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 445.154696][ T8747] fuse: Bad value for 'user_id' [ 445.361799][ T8749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1360'. [ 449.258948][ T8774] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 449.267264][ T8774] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 449.332049][ T4207] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 449.666570][ T8783] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.162904][ T4207] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 450.179642][ T4207] usb 3-1: can't read configurations, error -71 [ 450.197116][ T8794] fuse: Bad value for 'fd' [ 451.635608][ T4209] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 452.731135][ T8825] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 452.739486][ T8825] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 453.409718][ T7198] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 453.609417][ T8837] fuse: Bad value for 'fd' [ 453.779066][ T4209] usb 4-1: device not accepting address 13, error -71 [ 453.834444][ T8838] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 454.798243][ T8848] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 455.231710][ T7198] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 455.385721][ T7198] usb 5-1: can't read configurations, error -71 [ 455.533649][ T4207] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 456.907059][ T8877] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 456.915658][ T8877] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 457.317048][ T4207] usb 3-1: Using ep0 maxpacket: 32 [ 457.762858][ T4207] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 457.776746][ T4207] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 457.897371][ T4207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 458.293961][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 458.329147][ T4207] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 458.342494][ T8890] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 458.360093][ T4207] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 458.764356][ T4207] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 458.783134][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.807790][ T4207] usb 3-1: config 0 descriptor?? [ 458.832052][ T4207] usb 3-1: can't set config #0, error -71 [ 458.840383][ T4207] usb 3-1: USB disconnect, device number 20 [ 459.464900][ T7198] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 459.924985][ T7198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.937416][ T7198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.947469][ T7198] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.971335][ T7198] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.982096][ T7198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.184875][ T7198] usb 2-1: config 0 descriptor?? [ 462.152041][ T8925] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 462.160152][ T8925] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 462.242955][ T7198] usbhid 2-1:0.0: can't add hid device: -71 [ 462.257889][ T7198] usbhid: probe of 2-1:0.0 failed with error -71 [ 462.957176][ T8936] block nbd1: NBD_DISCONNECT [ 462.987199][ T8936] block nbd1: Send disconnect failed -22 [ 463.028492][ T7198] usb 2-1: USB disconnect, device number 13 [ 463.258553][ T8928] block nbd1: Disconnected due to user request. [ 463.282547][ T8928] block nbd1: shutting down sockets [ 464.122127][ T8865] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 464.924795][ T8865] usb 1-1: Using ep0 maxpacket: 32 [ 465.350316][ T1325] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 465.424685][ T8865] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 465.459596][ T8865] usb 1-1: can't read configurations, error -71 [ 465.915837][ T8975] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 465.924693][ T8975] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 466.067762][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.088502][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.116621][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 466.135500][ T1325] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 466.146966][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.387483][ T1325] usb 4-1: config 0 descriptor?? [ 466.854811][ T8983] sp0: Synchronizing with TNC [ 467.597423][ T1325] plantronics 0003:047F:FFFF.0011: report_id 46541 is invalid [ 467.695513][ T1325] plantronics 0003:047F:FFFF.0011: item 0 4 1 8 parsing failed [ 467.722401][ T1325] plantronics 0003:047F:FFFF.0011: parse failed [ 467.745365][ T1325] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22 [ 467.756508][ T1325] usb 4-1: USB disconnect, device number 15 [ 468.492565][ T8993] overlayfs: missing 'workdir' [ 469.436569][ T8998] fuse: Bad value for 'fd' [ 469.691017][ T9012] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 470.003139][ T9012] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 470.452483][ T1107] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 471.072271][ T1107] usb 5-1: Using ep0 maxpacket: 32 [ 471.292384][ T1107] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 471.326012][ T1107] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 472.155341][ T1107] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 472.164815][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 472.174515][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 472.184191][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.197189][ T1107] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 472.206460][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.267072][ T1107] usb 5-1: config 0 descriptor?? [ 473.378432][ T1107] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 473.772388][ T1107] usb 5-1: USB disconnect, device number 15 [ 473.856416][ T1107] usblp0: removed [ 474.022706][ T9051] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 478.185508][ T9068] vivid-001: kernel_thread() failed [ 478.492445][ T1325] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 479.539770][ T9084] syz.2.1461 (9084): /proc/9080/oom_adj is deprecated, please use /proc/9080/oom_score_adj instead. [ 479.551042][ T1325] usb 4-1: Using ep0 maxpacket: 32 [ 480.086656][ T1325] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 480.122866][ T1325] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 480.302203][ T1325] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 480.311766][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 480.336529][ T1325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 480.347619][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 480.488415][ T1325] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 480.990278][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.143375][ T1325] usb 4-1: config 0 descriptor?? [ 481.217821][ T1325] usb 4-1: can't set config #0, error -71 [ 481.579734][ T1325] usb 4-1: USB disconnect, device number 16 [ 481.830406][ T9130] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 482.141972][ T4207] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 483.432609][ T4207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.160649][ T4207] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 484.254006][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.302660][ T4207] usb 1-1: config 0 descriptor?? [ 484.445093][ T9180] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 484.453720][ T9180] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 485.002156][ T4207] usbhid 1-1:0.0: can't add hid device: -71 [ 485.021439][ T4207] usbhid: probe of 1-1:0.0 failed with error -71 [ 485.167433][ T4207] usb 1-1: USB disconnect, device number 13 [ 489.679293][ T9256] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 489.687452][ T9256] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 491.409382][ T9275] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1506'. [ 491.420341][ T9275] tipc: Invalid UDP bearer configuration [ 491.420392][ T9275] tipc: Enabling of bearer rejected, failed to enable media [ 494.301962][ T9302] block nbd0: Device being setup by another task [ 494.360428][ T9305] block nbd0: shutting down sockets [ 494.572259][ T9317] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 494.580588][ T9317] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 497.750695][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 502.215262][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.221597][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.383738][ T9375] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 502.392312][ T9375] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 505.092388][ T4207] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 505.331373][ T4158] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 505.932787][ T4207] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 505.980342][ T4158] usb 2-1: Using ep0 maxpacket: 8 [ 506.090135][ T4207] usb 3-1: config 0 has no interface number 0 [ 506.160645][ T4207] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 506.283037][ T4158] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 506.983326][ T9421] tmpfs: Unknown parameter 'usrquota' [ 507.023060][ T4158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.033334][ T4158] usb 2-1: config 0 descriptor?? [ 507.072114][ T4207] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 507.087764][ T4207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.096311][ T4207] usb 3-1: Product: syz [ 507.100982][ T4207] usb 3-1: Manufacturer: syz [ 507.121934][ T4207] usb 3-1: SerialNumber: syz [ 507.147924][ T4207] usb 3-1: config 0 descriptor?? [ 507.182292][ T9402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 507.310428][ T9429] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 507.319031][ T9429] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 507.785654][ T4158] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 507.800363][ T4207] as10x_usb: device has been detected [ 507.808922][ T4207] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 507.818007][ T4158] asix: probe of 2-1:0.0 failed with error -71 [ 507.844243][ T4158] usb 2-1: USB disconnect, device number 14 [ 508.192591][ T4207] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 508.416340][ T4207] as10x_usb: error during firmware upload part1 [ 508.425948][ T4207] Registered device PCTV Systems picoStick (74e) [ 508.437328][ T4207] usb 3-1: USB disconnect, device number 21 [ 509.492026][ T4207] Unregistered device PCTV Systems picoStick (74e) [ 509.493868][ T4207] as10x_usb: device has been disconnected [ 513.152398][ T9480] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 513.251369][ T9482] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 513.259995][ T9482] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 514.021943][ T4158] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 514.301984][ T4158] usb 5-1: Using ep0 maxpacket: 8 [ 514.322783][ T9491] fuse: Unknown parameter 'user_i00000000000000000000' [ 514.462254][ T4158] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 514.482366][ T4158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.493312][ T4158] usb 5-1: config 0 descriptor?? [ 517.261932][ T4158] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 517.412612][ T4158] asix: probe of 5-1:0.0 failed with error -71 [ 517.421438][ T4158] usb 5-1: USB disconnect, device number 16 [ 518.270258][ T9536] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 518.278410][ T9536] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 518.764540][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 518.811038][ T9534] fuse: Unknown parameter 'user_i00000000000000000000' [ 519.405872][ T26] audit: type=1326 audit(1731790515.534:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.4.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91bbb6719 code=0x7ffc0000 [ 519.497380][ T26] audit: type=1326 audit(1731790515.534:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.4.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91bbb6719 code=0x7ffc0000 [ 520.431961][ T7198] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 521.262151][ T4209] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 521.271071][ T7198] usb 3-1: Using ep0 maxpacket: 8 [ 521.407949][ T7198] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 521.414268][ T9592] fuse: Unknown parameter 'user_id00000000000000000000' [ 521.426925][ T7198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.686228][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1600'. [ 521.724972][ T9572] bridge0: port 3(vlan2) entered blocking state [ 521.746565][ T9572] bridge0: port 3(vlan2) entered disabled state [ 521.762184][ T7198] usb 3-1: config 0 descriptor?? [ 522.131948][ T4209] usb 1-1: unable to get BOS descriptor or descriptor too short [ 522.201949][ T4209] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 522.214840][ T4209] usb 1-1: can't read configurations, error -71 [ 524.269607][ T9632] fuse: Unknown parameter 'user_id00000000000000000000' [ 524.471986][ T7198] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 524.487098][ T7198] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 524.498908][ T7198] asix: probe of 3-1:0.0 failed with error -71 [ 524.524188][ T7198] usb 3-1: USB disconnect, device number 22 [ 525.197129][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'. [ 526.662421][ T9671] fuse: Unknown parameter 'user_id00000000000000000000' [ 527.661679][ T9681] vivid-004: disconnect [ 528.114454][ T9673] vivid-004: reconnect [ 528.745591][ T4238] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 531.592050][ T4238] usb 2-1: device not accepting address 15, error -71 [ 531.763899][ T9720] sp0: Synchronizing with TNC [ 532.293542][ T9731] device bond_slave_0 entered promiscuous mode [ 532.300044][ T9731] device bond_slave_1 entered promiscuous mode [ 532.337013][ T9731] device macsec1 entered promiscuous mode [ 532.343029][ T9731] device bond0 entered promiscuous mode [ 532.354852][ T9731] device bond0 left promiscuous mode [ 532.361333][ T9731] device bond_slave_0 left promiscuous mode [ 532.367430][ T9731] device bond_slave_1 left promiscuous mode [ 532.595651][ T9740] fuse: Bad value for 'fd' [ 534.369820][ T9774] fuse: Bad value for 'fd' [ 536.993486][ T9812] sp0: Synchronizing with TNC [ 537.065512][ T9816] fuse: Unknown parameter '0x0000000000000004' [ 537.885728][ T9830] capability: warning: `syz.2.1673' uses 32-bit capabilities (legacy support in use) [ 538.858061][ T9850] 9pnet: Insufficient options for proto=fd [ 539.026011][ T9855] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 539.035064][ T9855] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 539.937674][ T9888] fuse: Unknown parameter '0x0000000000000004' [ 540.999795][ T9902] device bond_slave_0 entered promiscuous mode [ 541.006050][ T9902] device bond_slave_1 entered promiscuous mode [ 541.063215][ T9902] device macsec1 entered promiscuous mode [ 541.084901][ T9902] device bond0 entered promiscuous mode [ 541.113232][ T9902] device bond0 left promiscuous mode [ 541.132554][ T9902] device bond_slave_0 left promiscuous mode [ 541.138555][ T9902] device bond_slave_1 left promiscuous mode [ 541.263103][ T9916] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 541.271233][ T9916] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 543.820488][ T9939] fuse: Unknown parameter '0x0000000000000004' [ 544.043938][ T9952] sp0: Synchronizing with TNC [ 545.184667][ T9967] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 545.192911][ T9967] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 546.027987][ T9973] device bond_slave_0 entered promiscuous mode [ 546.034250][ T9973] device bond_slave_1 entered promiscuous mode [ 546.049168][ T9973] device macsec2 entered promiscuous mode [ 546.078260][ T9973] device bond0 entered promiscuous mode [ 546.396355][ T9973] device bond0 left promiscuous mode [ 546.502906][ T9973] device bond_slave_0 left promiscuous mode [ 546.509062][ T9973] device bond_slave_1 left promiscuous mode [ 546.884235][ T9983] fuse: Unknown parameter '0x0000000000000004' [ 547.687939][T10002] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 547.696191][T10002] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 547.796330][T10004] sp0: Synchronizing with TNC [ 551.345789][T10053] sp0: Synchronizing with TNC [ 551.521906][T10058] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 551.530658][T10058] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 551.691996][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 551.942245][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 552.084498][ T7] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 552.147421][ T7] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 552.572876][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 552.591254][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 552.603541][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 552.615057][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 552.769550][ T7] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 552.953479][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.246071][ T7] usb 2-1: config 0 descriptor?? [ 553.266913][T10074] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 553.275056][T10074] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 554.337603][ T7] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 555.468239][T10094] usb 2-1: USB disconnect, device number 17 [ 555.647389][T10094] usblp0: removed [ 557.370868][T10124] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 557.379084][T10124] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 558.752054][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 559.097583][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 559.232085][ T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 559.240450][ T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 559.307951][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 559.367733][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 559.401150][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 559.435834][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 559.490611][ T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 559.507508][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.694761][ T7] usb 5-1: config 0 descriptor?? [ 560.671954][T10164] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 560.680057][T10164] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 560.743443][ T7] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 561.094693][ T4189] usb 5-1: USB disconnect, device number 17 [ 561.264892][ T4189] usblp0: removed [ 562.622397][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.637519][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.526654][T10199] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 563.809816][T10207] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 563.818594][T10207] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 565.172391][ T21] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 565.249521][T10219] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 565.262947][T10219] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 565.275807][T10219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.562088][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 565.702615][ T21] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 565.806211][T10219] syz.0.1780 (10219) used greatest stack depth: 19032 bytes left [ 565.834575][ T21] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 565.871843][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 565.935380][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.981286][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 566.032304][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 566.069158][ T21] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 566.095040][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.128004][ T21] usb 2-1: config 0 descriptor?? [ 566.770951][ T21] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 566.996869][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1788'. [ 567.015752][ T7] usb 2-1: USB disconnect, device number 18 [ 567.039304][ T7] usblp0: removed [ 567.158442][T10242] device bridge0 entered promiscuous mode [ 567.346569][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 569.361333][T10242] team0: Port device team_slave_1 removed [ 569.892428][T10248] infiniband syz0: set active [ 569.897387][T10248] infiniband syz0: added bond0 [ 569.910839][T10248] infiniband syz0: Couldn't open port 1 [ 569.949726][T10241] device bridge0 left promiscuous mode [ 569.958916][T10248] RDS/IB: syz0: added [ 569.964068][T10248] smc: adding ib device syz0 with port count 1 [ 569.970375][T10248] smc: ib device syz0 port 1 has pnetid [ 572.361966][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 572.621852][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 572.742018][ T7] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 572.780942][ T7] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 572.811309][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 572.831558][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 572.871851][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 572.902044][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 572.945617][ T7] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 572.976034][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.019509][ T7] usb 4-1: config 0 descriptor?? [ 573.659187][ T7] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 573.945896][ T7] usb 4-1: USB disconnect, device number 17 [ 574.027411][ T7] usblp0: removed [ 574.319694][T10307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 574.331493][T10307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 574.343016][T10307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.762038][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 579.052002][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 579.197398][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 579.218565][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 579.412608][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 579.422914][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 579.432883][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 579.443364][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 579.456650][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 579.468485][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.487694][ T23] usb 1-1: config 0 descriptor?? [ 580.317118][ T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 580.520047][ T23] usb 1-1: USB disconnect, device number 16 [ 580.556695][ T23] usblp0: removed [ 583.298414][T10392] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 583.332112][T10392] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 583.517288][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 583.925297][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 583.934930][T10405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.019169][T10450] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 589.090643][T10453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 589.790647][T10450] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 590.176390][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 590.189241][T10468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.085921][T10509] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 595.122712][T10512] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 595.314784][T10512] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 596.250346][T10527] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 596.259056][T10527] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 596.268113][T10527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.215719][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 601.555809][T10565] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 601.563991][T10565] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 602.318090][T10575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 602.329917][T10575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 602.342226][T10575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.925292][T10578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 604.101983][ T21] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 605.341838][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 605.512387][ T21] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 605.584267][T10612] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 605.593333][T10612] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 605.723618][ T21] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 605.897914][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 606.161740][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 606.180523][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 606.218089][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 606.261827][ T21] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 606.271065][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.327377][ T21] usb 1-1: config 0 descriptor?? [ 606.391960][ T21] usb 1-1: can't set config #0, error -71 [ 606.427411][ T21] usb 1-1: USB disconnect, device number 17 [ 606.691441][T10624] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 606.707426][T10624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.783226][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1893'. [ 607.594185][T10635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 610.112283][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 610.292803][ T21] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 610.572166][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 610.621431][T10655] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 610.641982][T10655] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 610.892021][ T21] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 610.900387][ T21] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 610.931883][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 610.940925][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 610.963375][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 610.970910][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 610.993687][T10666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.009054][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 611.032590][ T21] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 611.057281][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.076506][ T21] usb 2-1: config 0 descriptor?? [ 611.451957][ T1110] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 611.475078][ T21] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 611.574558][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1909'. [ 611.854351][ T21] usb 2-1: USB disconnect, device number 19 [ 612.002299][ T21] usblp0: removed [ 612.412028][ T1110] usb 4-1: Using ep0 maxpacket: 32 [ 612.532217][ T1110] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 612.591854][ T1110] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.612571][ T1110] usb 4-1: config 0 interface 0 has no altsetting 0 [ 612.639755][ T1110] usb 4-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 612.666563][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.718723][ T1110] usb 4-1: config 0 descriptor?? [ 613.265261][ T1110] wacom 0003:056A:00C4.0012: unknown main item tag 0x0 [ 613.308249][ T1110] wacom 0003:056A:00C4.0012: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.3-1/input0 [ 613.481466][ T21] usb 4-1: USB disconnect, device number 18 [ 613.613857][T10698] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 613.622418][T10698] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 613.746283][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 615.666055][T10256] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 615.957749][T10256] usb 4-1: Using ep0 maxpacket: 32 [ 616.091998][T10256] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 616.110189][T10256] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 616.138258][T10256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 616.169075][T10256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 616.185132][T10256] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 616.197655][T10256] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 616.215918][T10256] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 616.228129][T10256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.256868][T10256] usb 4-1: config 0 descriptor?? [ 616.401862][T10094] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 616.535582][T10256] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 616.765710][ T21] usb 4-1: USB disconnect, device number 19 [ 616.790151][ T21] usblp0: removed [ 616.812138][T10094] usb 3-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 616.842275][T10094] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 616.891841][T10094] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.919131][T10094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.952659][T10094] usb 3-1: config 0 descriptor?? [ 617.014494][T10094] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 617.072309][T10736] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 617.080441][T10736] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 618.917195][T10256] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 619.365755][ T7] usb 3-1: USB disconnect, device number 23 [ 619.816301][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 620.264553][T10256] usb 4-1: Using ep0 maxpacket: 16 [ 620.402173][T10256] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.431115][T10256] usb 4-1: config 0 has no interfaces? [ 620.642046][T10256] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 620.662478][T10256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.670485][T10256] usb 4-1: Product: syz [ 620.743789][T10774] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 620.752219][T10774] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 620.770223][T10256] usb 4-1: Manufacturer: syz [ 620.805943][T10256] usb 4-1: SerialNumber: syz [ 620.815238][T10256] usb 4-1: config 0 descriptor?? [ 621.074881][ T4207] usb 4-1: USB disconnect, device number 20 [ 622.920879][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 624.726963][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.733341][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.893497][T10851] netlink: 'syz.0.1962': attribute type 9 has an invalid length. [ 627.236858][T10870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1966'. [ 628.081927][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 629.640300][T10883] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 629.679118][T10883] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 633.100754][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1980'. [ 635.445453][T10937] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 635.453729][T10937] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 636.441470][T10957] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 636.453747][T10957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.697552][T10958] input: syz0 as /devices/virtual/input/input10 [ 637.715434][T10958] input: failed to attach handler leds to device input10, error: -6 [ 637.781950][T10965] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 640.248494][T10982] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 640.256622][T10982] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 641.196929][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 641.205910][T11006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.712520][ T4209] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 643.352770][ T4209] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 643.405232][ T4209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.624811][ T4209] usb 2-1: config 0 descriptor?? [ 644.082002][ T4209] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 644.105857][ T4209] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 644.565662][ T4209] [drm:udl_init] *ERROR* Selecting channel failed [ 644.769141][ T4209] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 645.056276][ T4209] [drm] Initialized udl on minor 2 [ 645.083408][ T4209] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 645.165839][ T4209] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 645.376531][ T4209] usb 2-1: USB disconnect, device number 20 [ 645.613781][T11059] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 645.634647][T11059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.632872][ T4177] Bluetooth: hci4: Ignoring error of Inquiry Cancel command [ 649.762506][ T4238] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 651.023181][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 651.222307][ T4238] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 651.285409][ T4238] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 651.533787][ T4238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 651.741887][ T4238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 651.793475][ T4238] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 652.293983][ T4238] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 653.047751][ T4238] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 653.203157][ T4238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.243745][ T4238] usb 3-1: config 0 descriptor?? [ 653.402623][ T4238] usb 3-1: can't set config #0, error -71 [ 653.570507][T11144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2048'. [ 654.283097][ T4238] usb 3-1: USB disconnect, device number 24 [ 658.854236][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2059'. [ 664.581850][T10094] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 664.891988][T10094] usb 5-1: Using ep0 maxpacket: 16 [ 665.022614][T10094] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 665.262532][T10094] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 665.303767][T10094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.339332][T10094] usb 5-1: Product: syz [ 665.349185][T10094] usb 5-1: Manufacturer: syz [ 665.371702][T10094] usb 5-1: SerialNumber: syz [ 665.443325][T10094] usb 5-1: config 0 descriptor?? [ 667.159254][ T1325] usb 5-1: USB disconnect, device number 18 [ 669.682642][T11292] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 669.690919][T11292] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 672.556030][T11328] qnx6: unable to read the first superblock [ 673.447172][T11320] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 673.456324][T11320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.113339][T11352] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 675.122081][T11352] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 675.672126][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 678.375302][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 678.384231][T11391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.115003][T11398] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 679.123337][T11398] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 680.562881][T11415] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 680.571825][T11415] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 680.580668][T11415] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 680.589601][T11415] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 681.272180][T11421] netlink: 'syz.4.2123': attribute type 1 has an invalid length. [ 681.283754][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 683.611987][T11451] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 683.624914][T11451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.692755][T11459] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 685.700889][T11459] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 685.714735][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.732976][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.029899][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: macsec1 [ 688.040157][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.146830][T11484] device vlan2 entered promiscuous mode [ 688.396078][T11484] device syz_tun entered promiscuous mode [ 688.407848][T11484] device syz_tun left promiscuous mode [ 688.856862][T11514] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 688.865246][T11514] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 692.073186][T11555] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 692.081364][T11555] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 693.653831][T11569] netlink: 'syz.4.2163': attribute type 4 has an invalid length. [ 694.186352][T11574] netlink: 'syz.4.2163': attribute type 4 has an invalid length. [ 695.435284][T11576] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 695.444135][T11576] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 695.453210][T11576] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 695.462028][T11576] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.658549][T11606] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 697.666752][T11606] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 697.889412][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: macsec1 [ 697.899661][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.910445][T11611] device vlan2 entered promiscuous mode [ 697.916148][T11611] device syz_tun entered promiscuous mode [ 697.924251][T11611] device syz_tun left promiscuous mode [ 701.216551][ T8865] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 701.611836][ T8865] usb 5-1: Using ep0 maxpacket: 32 [ 701.923784][ T8865] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 702.031965][ T8865] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 702.051911][ T8865] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 702.069305][ T8865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 702.079636][ T8865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 702.096795][ T8865] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 702.115971][ T8865] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 702.127198][ T8865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.138686][ T8865] usb 5-1: config 0 descriptor?? [ 702.403316][ T8865] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 702.623501][T10256] usb 5-1: USB disconnect, device number 19 [ 702.665776][T10256] usblp0: removed [ 704.158947][ T26] audit: type=1326 audit(1731790700.284:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.0.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad0a17719 code=0x7ffc0000 [ 704.197899][ T26] audit: type=1326 audit(1731790700.324:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.0.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad0a17719 code=0x7ffc0000 [ 704.221334][ T26] audit: type=1326 audit(1731790700.344:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.0.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad0a17719 code=0x7ffc0000 [ 704.261005][ T26] audit: type=1326 audit(1731790700.344:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.0.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad0a17719 code=0x7ffc0000 [ 704.809100][ T26] audit: type=1326 audit(1731790700.344:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.0.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad0a17719 code=0x7ffc0000 [ 704.984832][ T26] audit: type=1326 audit(1731790700.344:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.0.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad0a17719 code=0x7ffc0000 [ 706.389349][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'. [ 706.511958][ T1110] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 706.519800][ T1325] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 706.771884][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 706.892095][ T1110] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 706.900654][ T1325] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 706.912437][ T1110] usb 2-1: config 0 has no interface number 1 [ 706.918692][ T1325] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 706.936191][ T1110] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 706.948696][ T1325] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 706.964182][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.978650][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 706.997093][ T1325] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 707.011870][ T1110] usb 2-1: config 0 descriptor?? [ 707.023531][ T1325] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 707.046400][ T1325] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 707.057374][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.072788][ T1110] usb 2-1: MIDIStreaming interface descriptor not found [ 707.108981][ T1325] usb 5-1: config 0 descriptor?? [ 707.160830][ T1110] gspca_main: spca561-2.14.0 probing abcd:cdee [ 707.416596][ T1325] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 707.680768][ T4158] usb 5-1: USB disconnect, device number 20 [ 707.932273][ T1110] spca561: probe of 2-1:0.0 failed with error -22 [ 708.092902][T11720] team0 (unregistering): Port device team_slave_0 removed [ 708.121118][ T4158] usblp0: removed [ 708.155860][T11720] team0 (unregistering): Port device team_slave_1 removed [ 708.387841][T10256] usb 2-1: USB disconnect, device number 21 [ 709.720559][T11744] xt_CT: No such helper "pptp" [ 710.356136][T11752] sch_fq: defrate 0 ignored. [ 711.852419][ T4209] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 712.832032][ T4209] usb 2-1: Using ep0 maxpacket: 32 [ 712.953368][ T4209] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 712.989402][ T4209] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 713.089113][ T4209] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 713.189296][ T4209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 713.314177][ T4209] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 713.450127][ T4209] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 713.629148][ T4209] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 713.734494][ T4209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.820726][ T4209] usb 2-1: config 0 descriptor?? [ 713.852017][ T4209] usb 2-1: can't set config #0, error -71 [ 713.877142][ T4209] usb 2-1: USB disconnect, device number 22 [ 715.182179][T11801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2230'. [ 716.095305][T11822] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 716.108048][T11822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.001976][T11828] xt_CT: No such helper "pptp" [ 717.971833][ T21] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 718.176999][T11850] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 718.185917][T11850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.371836][ T6721] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 720.422089][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 720.601923][ T21] usb 1-1: device descriptor read/all, error -71 [ 720.772067][ T6721] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 720.785709][ T6721] usb 5-1: config 0 has no interface number 1 [ 720.874766][ T6721] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 720.894397][ T6721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.914978][ T6721] usb 5-1: config 0 descriptor?? [ 720.931995][ T6721] usb 5-1: can't set config #0, error -71 [ 720.939505][ T6721] usb 5-1: USB disconnect, device number 21 [ 721.736566][T11886] xt_CT: No such helper "pptp" [ 723.065577][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2259'. [ 724.466618][T11920] team0 (unregistering): Port device team_slave_0 removed [ 727.553339][T11952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2270'. [ 729.520037][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2286'. [ 731.893333][T12022] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 731.902214][T12022] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 732.398005][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2298'. [ 734.971010][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2310'. [ 735.508306][ T26] audit: type=1326 audit(1731790731.634:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.0.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad0a17719 code=0x7fc00000 [ 735.686377][ T26] audit: type=1326 audit(1731790731.784:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.0.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ad0a17719 code=0x7fc00000 [ 735.730541][ T26] audit: type=1326 audit(1731790731.784:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.0.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad0a17719 code=0x7fc00000 [ 737.446093][T12098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2324'. [ 737.577063][T12102] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 737.586152][T12102] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 739.033859][ T1110] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 741.661990][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 741.835011][T12140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2336'. [ 741.882373][ T1110] usb 2-1: device descriptor read/all, error -71 [ 742.810749][T12155] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.100345][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'. [ 746.926898][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.934475][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.340458][T12214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2359'. [ 751.441842][ T1110] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 752.362101][ T1110] usb 2-1: device descriptor read/64, error -71 [ 752.733568][T12261] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 753.353792][T12261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.587667][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'. [ 756.611078][T12296] device netdevsim0 entered promiscuous mode [ 756.737869][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 758.777871][ T23] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 760.058113][ T23] usb 2-1: device descriptor read/64, error -71 [ 760.344727][ T23] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 760.426945][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 760.562153][ T23] usb 2-1: device descriptor read/64, error -71 [ 760.702027][ T23] usb usb2-port1: attempt power cycle [ 761.122372][ T23] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 762.564297][ T23] usb 2-1: device not accepting address 29, error -71 [ 764.061993][ T6721] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 764.092434][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2416'. [ 764.251864][ T6721] usb 4-1: device descriptor read/64, error -71 [ 764.891921][ T6721] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 766.721829][ T6721] usb 4-1: device descriptor read/64, error -71 [ 766.928623][ T6721] usb usb4-port1: attempt power cycle [ 767.454890][T12428] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 767.471062][T12428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.585816][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2429'. [ 770.726159][ T1325] Bluetooth: hci4: command 0x0405 tx timeout [ 770.851859][ T23] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 771.071904][ T23] usb 5-1: device descriptor read/64, error -71 [ 771.362226][ T23] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 771.957315][ T23] usb 5-1: device descriptor read/64, error -71 [ 772.082717][ T23] usb usb5-port1: attempt power cycle [ 772.961771][ T23] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 773.090854][ T23] usb 5-1: device descriptor read/8, error -71 [ 773.225411][T12484] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 773.238255][T12484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.722106][ T8865] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 773.840336][T12482] ODEBUG: Out of memory. ODEBUG disabled [ 774.053608][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'. [ 774.831809][ T8865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.866261][ T8865] usb 3-1: config 0 has no interfaces? [ 774.991806][ T8865] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 775.001232][ T8865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.017551][ T8865] usb 3-1: config 0 descriptor?? [ 778.737568][T12523] overlayfs: failed to resolve './file1': -2 [ 778.743870][T12482] syz.2.2439 (12482): drop_caches: 2 [ 779.753714][ T1325] usb 3-1: USB disconnect, device number 26 [ 786.859947][T12607] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2477'. [ 787.864335][ C0] ------------[ cut here ]------------ [ 787.870208][ C0] WARNING: CPU: 0 PID: 12631 at net/mac80211/tx.c:4851 __ieee80211_beacon_get+0x183d/0x2080 [ 787.880357][ C0] Modules linked in: [ 787.884282][ C0] CPU: 0 PID: 12631 Comm: syz.3.2480 Not tainted 5.15.172-syzkaller #0 [ 787.892543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 787.902622][ C0] RIP: 0010:__ieee80211_beacon_get+0x183d/0x2080 [ 787.908962][ C0] Code: ff e8 17 cd b4 f7 0f 0b e9 4b fa ff ff e8 0b cd b4 f7 0f 0b e9 3b fe ff ff e8 ff cc b4 f7 0f 0b e9 06 ee ff ff e8 f3 cc b4 f7 <0f> 0b e9 91 f0 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 2d ea [ 787.928658][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010246 [ 787.934763][ C0] RAX: ffffffff89cba6ad RBX: 0000000000000000 RCX: ffff8880271c3b80 [ 787.942772][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 787.950742][ C0] RBP: ffffc90000007a70 R08: ffffffff89cb9738 R09: ffffffff89cb910b [ 787.958829][ C0] R10: 0000000000000003 R11: ffff8880271c3b80 R12: dffffc0000000000 [ 787.966827][ C0] R13: ffff888061eecc80 R14: ffff888061eee298 R15: 1ffff92000000f18 [ 787.974844][ C0] FS: 00007fb707f846c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 787.983803][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.990393][ C0] CR2: 000000110c24c30e CR3: 000000007adcd000 CR4: 00000000003506f0 [ 787.998446][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 788.006439][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 788.014438][ C0] Call Trace: [ 788.017813][ C0] [ 788.020655][ C0] ? __warn+0x15b/0x300 [ 788.024889][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 788.030618][ C0] ? report_bug+0x1b7/0x2e0 [ 788.035164][ C0] ? handle_bug+0x3d/0x70 [ 788.039498][ C0] ? exc_invalid_op+0x16/0x40 [ 788.044199][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 788.049231][ C0] ? __ieee80211_beacon_get+0x29b/0x2080 [ 788.054887][ C0] ? __ieee80211_beacon_get+0x8c8/0x2080 [ 788.060515][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 788.066265][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 788.072046][ C0] ? mark_lock+0x98/0x340 [ 788.076457][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 788.082536][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 788.087612][ C0] ? mark_lock+0x98/0x340 [ 788.092046][ C0] ieee80211_beacon_get_tim+0xb7/0x950 [ 788.097580][ C0] ? __ieee80211_beacon_get+0x2080/0x2080 [ 788.103383][ C0] ? read_lock_is_recursive+0x10/0x10 [ 788.108803][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 788.114854][ C0] mac80211_hwsim_beacon_tx+0xe2/0x8a0 [ 788.120371][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 788.125666][ C0] __iterate_interfaces+0x21e/0x4b0 [ 788.130932][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 788.137310][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 788.143662][ C0] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 788.150731][ C0] mac80211_hwsim_beacon+0xa7/0x180 [ 788.156115][ C0] ? hw_scan_work+0xe70/0xe70 [ 788.160864][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 788.166171][ C0] ? hrtimer_interrupt+0x980/0x980 [ 788.171374][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 788.177547][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 788.182760][ C0] handle_softirqs+0x3a7/0x930 [ 788.187653][ C0] ? __irq_exit_rcu+0x157/0x240 [ 788.192590][ C0] ? do_softirq+0x240/0x240 [ 788.197149][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 788.202445][ C0] __irq_exit_rcu+0x157/0x240 [ 788.207175][ C0] ? irq_exit_rcu+0x20/0x20 [ 788.211760][ C0] irq_exit_rcu+0x5/0x20 [ 788.216054][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 788.221979][ C0] [ 788.224967][ C0] [ 788.227950][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 788.234035][ C0] RIP: 0010:___slab_alloc+0xa36/0xe10 [ 788.239606][ C0] Code: 00 00 44 8b 6c 24 10 0f 84 53 f6 ff ff fb e9 4d f6 ff ff e8 6c e1 6a 08 41 f7 c5 00 02 00 00 0f 84 37 fe ff ff fb 8b 6c 24 10 84 f6 ff ff 0f 0b e9 69 f8 ff ff e8 49 e1 6a 08 e9 66 f7 ff ff [ 788.259466][ C0] RSP: 0018:ffffc900032a7b38 EFLAGS: 00000206 [ 788.265618][ C0] RAX: aa56e3fdd2749500 RBX: ffff8880b903dca0 RCX: ffffffff9686af03 [ 788.273674][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90540 [ 788.281756][ C0] RBP: 00000000ffffffff R08: ffffffff8186f220 R09: fffffbfff1bd2d3e [ 788.289767][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea0001e611c0 [ 788.297889][ C0] R13: 0000000000000286 R14: ffffffff7fff0000 R15: ffff8880170413c0 [ 788.305950][ C0] ? trace_hardirqs_on+0x30/0x80 [ 788.311011][ C0] ? apparmor_sk_alloc_security+0x73/0x100 [ 788.316940][ C0] kmem_cache_alloc_trace+0x1a0/0x290 [ 788.322388][ C0] ? apparmor_sk_alloc_security+0x73/0x100 [ 788.328294][ C0] apparmor_sk_alloc_security+0x73/0x100 [ 788.334033][ C0] security_sk_alloc+0x6d/0xa0 [ 788.338895][ C0] sk_prot_alloc+0xfa/0x200 [ 788.343479][ C0] sk_alloc+0x35/0x310 [ 788.347640][ C0] unix_create1+0xb4/0x640 [ 788.352107][ C0] unix_create+0x146/0x1f0 [ 788.356598][ C0] __sock_create+0x460/0x8f0 [ 788.361237][ C0] __sys_socketpair+0x335/0x700 [ 788.366161][ C0] ? __ia32_sys_socket+0x80/0x80 [ 788.371194][ C0] ? vtime_user_exit+0x2d1/0x400 [ 788.376303][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 788.382361][ C0] __x64_sys_socketpair+0x97/0xb0 [ 788.387466][ C0] do_syscall_64+0x3b/0xb0 [ 788.391953][ C0] ? clear_bhb_loop+0x15/0x70 [ 788.396661][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 788.402644][ C0] RIP: 0033:0x7fb709b4e719 [ 788.407144][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.426847][ C0] RSP: 002b:00007fb707f84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 788.435318][ C0] RAX: ffffffffffffffda RBX: 00007fb709d06130 RCX: 00007fb709b4e719 [ 788.443364][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 788.451460][ C0] RBP: 00007fb709bc175e R08: 0000000000000000 R09: 0000000000000000 [ 788.459522][ C0] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 788.467536][ C0] R13: 0000000000000000 R14: 00007fb709d06130 R15: 00007ffd73dd19f8 [ 788.475602][ C0] [ 788.478719][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 788.486001][ C0] CPU: 0 PID: 12631 Comm: syz.3.2480 Not tainted 5.15.172-syzkaller #0 [ 788.494239][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 788.504288][ C0] Call Trace: [ 788.507577][ C0] [ 788.510418][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 788.515098][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 788.520884][ C0] ? panic+0x860/0x860 [ 788.525009][ C0] ? __ieee80211_beacon_get+0x1790/0x2080 [ 788.530749][ C0] ? __ieee80211_beacon_get+0x1790/0x2080 [ 788.536475][ C0] panic+0x318/0x860 [ 788.540378][ C0] ? __warn+0x16a/0x300 [ 788.544536][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 788.549744][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 788.555910][ C0] ? __warn+0x16a/0x300 [ 788.560066][ C0] ? __warn+0x29a/0x300 [ 788.564225][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 788.569943][ C0] __warn+0x2b2/0x300 [ 788.573943][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 788.579683][ C0] report_bug+0x1b7/0x2e0 [ 788.584030][ C0] handle_bug+0x3d/0x70 [ 788.588309][ C0] exc_invalid_op+0x16/0x40 [ 788.592814][ C0] asm_exc_invalid_op+0x16/0x20 [ 788.597715][ C0] RIP: 0010:__ieee80211_beacon_get+0x183d/0x2080 [ 788.604064][ C0] Code: ff e8 17 cd b4 f7 0f 0b e9 4b fa ff ff e8 0b cd b4 f7 0f 0b e9 3b fe ff ff e8 ff cc b4 f7 0f 0b e9 06 ee ff ff e8 f3 cc b4 f7 <0f> 0b e9 91 f0 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 2d ea [ 788.623948][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010246 [ 788.630046][ C0] RAX: ffffffff89cba6ad RBX: 0000000000000000 RCX: ffff8880271c3b80 [ 788.638019][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.646024][ C0] RBP: ffffc90000007a70 R08: ffffffff89cb9738 R09: ffffffff89cb910b [ 788.654000][ C0] R10: 0000000000000003 R11: ffff8880271c3b80 R12: dffffc0000000000 [ 788.662016][ C0] R13: ffff888061eecc80 R14: ffff888061eee298 R15: 1ffff92000000f18 [ 788.669996][ C0] ? __ieee80211_beacon_get+0x29b/0x2080 [ 788.675635][ C0] ? __ieee80211_beacon_get+0x8c8/0x2080 [ 788.681266][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 788.687090][ C0] ? mark_lock+0x98/0x340 [ 788.691467][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 788.697451][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 788.702483][ C0] ? mark_lock+0x98/0x340 [ 788.706834][ C0] ieee80211_beacon_get_tim+0xb7/0x950 [ 788.712301][ C0] ? __ieee80211_beacon_get+0x2080/0x2080 [ 788.718033][ C0] ? read_lock_is_recursive+0x10/0x10 [ 788.723408][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 788.729405][ C0] mac80211_hwsim_beacon_tx+0xe2/0x8a0 [ 788.734865][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 788.740086][ C0] __iterate_interfaces+0x21e/0x4b0 [ 788.745295][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 788.751586][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 788.757828][ C0] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 788.764890][ C0] mac80211_hwsim_beacon+0xa7/0x180 [ 788.770097][ C0] ? hw_scan_work+0xe70/0xe70 [ 788.774775][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 788.779988][ C0] ? hrtimer_interrupt+0x980/0x980 [ 788.785115][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 788.791192][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 788.796308][ C0] handle_softirqs+0x3a7/0x930 [ 788.801101][ C0] ? __irq_exit_rcu+0x157/0x240 [ 788.805957][ C0] ? do_softirq+0x240/0x240 [ 788.810496][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 788.815697][ C0] __irq_exit_rcu+0x157/0x240 [ 788.820373][ C0] ? irq_exit_rcu+0x20/0x20 [ 788.824889][ C0] irq_exit_rcu+0x5/0x20 [ 788.829145][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 788.834779][ C0] [ 788.837704][ C0] [ 788.840635][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 788.846631][ C0] RIP: 0010:___slab_alloc+0xa36/0xe10 [ 788.852008][ C0] Code: 00 00 44 8b 6c 24 10 0f 84 53 f6 ff ff fb e9 4d f6 ff ff e8 6c e1 6a 08 41 f7 c5 00 02 00 00 0f 84 37 fe ff ff fb 8b 6c 24 10 84 f6 ff ff 0f 0b e9 69 f8 ff ff e8 49 e1 6a 08 e9 66 f7 ff ff [ 788.871613][ C0] RSP: 0018:ffffc900032a7b38 EFLAGS: 00000206 [ 788.877686][ C0] RAX: aa56e3fdd2749500 RBX: ffff8880b903dca0 RCX: ffffffff9686af03 [ 788.885744][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90540 [ 788.893724][ C0] RBP: 00000000ffffffff R08: ffffffff8186f220 R09: fffffbfff1bd2d3e [ 788.901702][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea0001e611c0 [ 788.909684][ C0] R13: 0000000000000286 R14: ffffffff7fff0000 R15: ffff8880170413c0 [ 788.917661][ C0] ? trace_hardirqs_on+0x30/0x80 [ 788.922612][ C0] ? apparmor_sk_alloc_security+0x73/0x100 [ 788.928424][ C0] kmem_cache_alloc_trace+0x1a0/0x290 [ 788.933802][ C0] ? apparmor_sk_alloc_security+0x73/0x100 [ 788.939638][ C0] apparmor_sk_alloc_security+0x73/0x100 [ 788.945273][ C0] security_sk_alloc+0x6d/0xa0 [ 788.950058][ C0] sk_prot_alloc+0xfa/0x200 [ 788.954561][ C0] sk_alloc+0x35/0x310 [ 788.958630][ C0] unix_create1+0xb4/0x640 [ 788.963052][ C0] unix_create+0x146/0x1f0 [ 788.967489][ C0] __sock_create+0x460/0x8f0 [ 788.972084][ C0] __sys_socketpair+0x335/0x700 [ 788.976939][ C0] ? __ia32_sys_socket+0x80/0x80 [ 788.981878][ C0] ? vtime_user_exit+0x2d1/0x400 [ 788.986821][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 788.992932][ C0] __x64_sys_socketpair+0x97/0xb0 [ 788.997972][ C0] do_syscall_64+0x3b/0xb0 [ 789.002391][ C0] ? clear_bhb_loop+0x15/0x70 [ 789.007084][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 789.012985][ C0] RIP: 0033:0x7fb709b4e719 [ 789.017407][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.037008][ C0] RSP: 002b:00007fb707f84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 789.045424][ C0] RAX: ffffffffffffffda RBX: 00007fb709d06130 RCX: 00007fb709b4e719 [ 789.053403][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 789.061379][ C0] RBP: 00007fb709bc175e R08: 0000000000000000 R09: 0000000000000000 [ 789.069348][ C0] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 789.077317][ C0] R13: 0000000000000000 R14: 00007fb709d06130 R15: 00007ffd73dd19f8 [ 789.085303][ C0] [ 789.088720][ C0] Kernel Offset: disabled [ 789.099927][ C0] Rebooting in 86400 seconds..