last executing test programs: 6.968980554s ago: executing program 0 (id=2309): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1ff}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 6.866840058s ago: executing program 0 (id=2311): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x7, 0x2, 0x0, 0x2}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002940)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0x10, 0xa}, {0xffe0, 0x5}}, ["", "", ""]}, 0x24}}, 0xc880) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}}}, 0xa) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 5.99083311s ago: executing program 0 (id=2315): syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f00004d2000/0x1000)=nil, 0x1000, 0x0) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{}, @hci_ev_le_remote_conn_param_req}}, 0x9) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x1, 0x2, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x5, &(0x7f0000000100)=@raw=[@tail_call], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xe8, &(0x7f0000000300)=""/232, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xd2, 0xf6, 0xf0, 0x20, 0xbc7, 0x8, 0x88ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x46, 0xff, 0xd5, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffd8a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x2}]}}}]}, 0x3c}}, 0x0) 5.50570776s ago: executing program 4 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x44}, &(0x7f0000000300)='./file1/file0\x00', 0x18}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x1000}, 0x33db) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000003000000110000001c00098008"], 0x30}}, 0x0) 4.610676681s ago: executing program 4 (id=2333): creat(&(0x7f0000002840)='./file0\x00', 0x0) mount(&(0x7f0000002880)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, &(0x7f0000002940)=',(/%\x00') 4.523785234s ago: executing program 4 (id=2334): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1ff}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 4.436138549s ago: executing program 4 (id=2335): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]}) set_robust_list(&(0x7f0000000100), 0x18) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90a24fc60080004000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2c, 0x4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000012c0)="edb8f45edd4797499f69a988927242aecab13b47889ef568bd665869219208fc9378ce384dcaa0fb320e0c442a1f1eb330d19168c6bfda8d252cf58a7018a5226c3674790bd3bc00ddd3173cecf25b3004e16b010fd88046155a2bdb78b2b3a4c303a57bafbb9909cee49f7ae25146dd4d181ac55312184598a85d8d040bf771", 0x80}]) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT], 0x110}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x10, 0x9, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc}}, @RTA_FLOW={0x8, 0xb, 0x6}]}, 0x34}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002100fe88a43de1a400000000000000007d01ff020000000000000000000000000001000022eb27"], 0xfdef) r8 = openat$cgroup_int(r3, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x7e, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xee, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) write$cgroup_int(r8, &(0x7f0000000180), 0x12) 4.193386579s ago: executing program 0 (id=2337): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000071101f000000000066000000000000009500000000000000cd472c9289072938bc9c6ce79c31657525a15f7c566ab0a0879eac7decc602dc52dda9498c8eabecd25822e4b41d41c5c371af14a1dfb04bd306186702e92c0c24a19dab7f05d8e170b4f5515c01b2ef2842db7582cfb4f58105e41ba6034437ab4aedc300"/162], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r7 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc3, 0x73, 0x9, 0x8, 0xfe9, 0xdb51, 0x79b0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0x91, 0xba}}]}}]}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 3.658366993s ago: executing program 1 (id=2341): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{}, "cefd917c366d3ee1", "f2221da76b62436bdb06dda7f1bfa5cced0062136fa6068165b5b4cac6d386ec", "2fe1ebd5", "4ca6934c03c14bf4"}, 0x38) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0x800, 0x4) 3.602000807s ago: executing program 1 (id=2342): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, r5, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x58}, 0x1, 0xffffffff00000003}, 0x0) 2.589786353s ago: executing program 1 (id=2344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000019c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x58, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 1.893756094s ago: executing program 3 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x2}}]}, 0x20}}, 0x0) 1.854408068s ago: executing program 2 (id=2346): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1ff}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 1.82801847s ago: executing program 3 (id=2347): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000050000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x90) 1.796552261s ago: executing program 2 (id=2348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) ioctl$KVM_SET_PIT2(r1, 0xae64, 0x0) 1.740636792s ago: executing program 1 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x24}}, 0x0) 1.74023456s ago: executing program 3 (id=2350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 1.707448829s ago: executing program 0 (id=2351): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3f, 0x8, 0x41, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 1.688118166s ago: executing program 3 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) 1.671255098s ago: executing program 1 (id=2353): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x15, 0xa, 0x801}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={0x0}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8901) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000240), 0x4) io_setup(0x20fe, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="74a615c43ca6bb0000", 0x9}]) close(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002040002800c0004400000df"], 0xe0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) 1.57805067s ago: executing program 3 (id=2354): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1.498569248s ago: executing program 2 (id=2355): sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40286608, &(0x7f0000000180)={@id={0x40011, 0x0, @b}}) 1.490139064s ago: executing program 0 (id=2356): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/171, 0xab}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 444.767338ms ago: executing program 1 (id=2357): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x98, 0x70, 0x31, 0x8, 0x681, 0x10, 0xabe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xaf, 0x7}}]}}]}}, 0x0) 331.675675ms ago: executing program 2 (id=2358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x100, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 279.031286ms ago: executing program 4 (id=2359): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0xa0, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xbcb0}]}]}]}, 0xa0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 215.41449ms ago: executing program 2 (id=2360): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)=0xe00) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) 74.844466ms ago: executing program 4 (id=2361): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x101a02, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 69.731644ms ago: executing program 3 (id=2362): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000280)) 0s ago: executing program 2 (id=2363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000), 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 64'. [ 237.124019][ T5147] usb 2-1: USB disconnect, device number 10 [ 239.085824][ T8403] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 239.094143][ T8403] netlink: 224 bytes leftover after parsing attributes in process `syz.2.971'. [ 239.156283][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 239.216325][ T8410] netlink: 'syz.2.973': attribute type 21 has an invalid length. [ 239.341602][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.396547][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.415813][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.109511][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.119104][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.138171][ T9] usb 5-1: config 0 descriptor?? [ 240.189411][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 240.211168][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 240.242519][ T9] usb 5-1: USB disconnect, device number 10 [ 240.298974][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 240.468762][ T8428] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.979'. [ 240.552311][ T8429] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.672181][ T8435] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 240.690831][ T8435] netlink: 224 bytes leftover after parsing attributes in process `syz.2.982'. [ 240.855222][ T8441] netlink: 'syz.2.985': attribute type 21 has an invalid length. [ 240.897738][ T5144] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 241.093766][ T5144] usb 1-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 241.107775][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 241.130758][ T5144] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 241.182162][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.221288][ T5144] usb 1-1: config 0 descriptor?? [ 241.371956][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 241.749718][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.884190][ T5144] usb 1-1: bad CDC descriptors [ 241.915798][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.959749][ T9] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 242.002898][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.051339][ T9] usb 5-1: config 0 descriptor?? [ 242.073212][ T8469] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 242.086312][ T8469] netlink: 224 bytes leftover after parsing attributes in process `syz.1.995'. [ 242.334851][ T8470] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 242.427107][ T8470] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 242.679277][ T5098] usb 1-1: USB disconnect, device number 18 [ 242.687174][ T9] usb 5-1: USB disconnect, device number 11 [ 242.855400][ T8479] netlink: 'syz.0.1000': attribute type 21 has an invalid length. [ 242.995046][ T5225] udevd[5225]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.011912][ T5144] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 243.229625][ T5144] usb 4-1: too many configurations: 12, using maximum allowed: 8 [ 243.370056][ T8489] vim2m vim2m.0: vidioc_s_fmt queue busy [ 243.617809][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.637933][ T5144] usb 4-1: config 0 has no interfaces? [ 243.649414][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.698603][ T5144] usb 4-1: config 0 has no interfaces? [ 243.729175][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.786396][ T5144] usb 4-1: config 0 has no interfaces? [ 243.805176][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.824483][ T5144] usb 4-1: config 0 has no interfaces? [ 243.840015][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.856435][ T5144] usb 4-1: config 0 has no interfaces? [ 243.885802][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.953867][ T5144] usb 4-1: config 0 has no interfaces? [ 243.984102][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.011209][ T5144] usb 4-1: config 0 has no interfaces? [ 244.038750][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.050249][ T5144] usb 4-1: config 0 has no interfaces? [ 244.055773][ T5144] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 244.065619][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.097754][ T5144] usb 4-1: config 0 descriptor?? [ 244.223953][ T8518] netlink: 'syz.1.1014': attribute type 21 has an invalid length. [ 244.836945][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 245.009070][ T5098] usb 4-1: USB disconnect, device number 12 [ 245.086238][ T29] audit: type=1326 audit(1721766295.666:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.126317][ T29] audit: type=1326 audit(1721766295.666:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.149146][ T29] audit: type=1326 audit(1721766295.666:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.172265][ T29] audit: type=1326 audit(1721766295.666:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.201527][ T29] audit: type=1326 audit(1721766295.666:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.233221][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 245.244429][ T29] audit: type=1326 audit(1721766295.666:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.263564][ T8] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 245.294056][ T8] usb 3-1: config 0 has no interface number 0 [ 245.302506][ T29] audit: type=1326 audit(1721766295.666:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.329840][ T8] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 245.349938][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.364848][ T8] usb 3-1: Product: syz [ 245.370797][ T29] audit: type=1326 audit(1721766295.666:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.399610][ T8] usb 3-1: Manufacturer: syz [ 245.404261][ T8] usb 3-1: SerialNumber: syz [ 245.416117][ T8] usb 3-1: config 0 descriptor?? [ 245.421900][ T29] audit: type=1326 audit(1721766295.666:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 245.458808][ T29] audit: type=1326 audit(1721766295.666:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434fb75f19 code=0x7ffc0000 [ 246.794670][ T5105] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 246.883984][ T8565] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 247.019642][ T9] usb 3-1: USB disconnect, device number 13 [ 249.423954][ T8604] ufs: You didn't specify the type of your ufs filesystem [ 249.423954][ T8604] [ 249.423954][ T8604] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 249.423954][ T8604] [ 249.423954][ T8604] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 249.455419][ T8604] ufs: ufstype=old is supported read-only [ 249.466071][ T8604] ufs: ufs_fill_super(): bad magic number [ 250.081493][ T5105] Bluetooth: hci3: unexpected subevent 0x0e length: 244 > 15 [ 250.380345][ T5096] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 251.659439][ T8631] vim2m vim2m.0: vidioc_s_fmt queue busy [ 252.422050][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 253.343953][ T8662] ufs: You didn't specify the type of your ufs filesystem [ 253.343953][ T8662] [ 253.343953][ T8662] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 253.343953][ T8662] [ 253.343953][ T8662] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 253.375581][ T8662] ufs: ufstype=old is supported read-only [ 253.384859][ T8662] ufs: ufs_fill_super(): bad magic number [ 254.007106][ T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 254.296219][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 254.405218][ T5096] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 254.414215][ T5096] Bluetooth: hci3: Injecting HCI hardware error event [ 254.424465][ T5096] Bluetooth: hci3: hardware error 0x00 [ 254.472110][ T47] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.587578][ T47] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.620976][ T47] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 254.639352][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.656317][ T47] hub 3-1:4.0: USB hub found [ 254.686222][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 254.703340][ T8682] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 254.826877][ T5105] Bluetooth: hci3: unexpected subevent 0x0e length: 244 > 15 [ 256.443276][ T8694] vim2m vim2m.0: vidioc_s_fmt queue busy [ 256.835441][ T5096] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 256.848811][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.855347][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.930993][ T47] hub 3-1:4.0: 2 ports detected [ 258.079301][ T47] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 258.092893][ T47] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 258.224292][ T47] usb 3-1: USB disconnect, device number 14 [ 258.349919][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 258.400684][ T8708] veth0: entered promiscuous mode [ 258.927515][ T5096] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 260.970241][ T5096] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 261.565164][ T8736] sched: RT throttling activated [ 265.944117][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 266.021503][ T8757] veth0: entered promiscuous mode [ 266.165190][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1098'. [ 267.872378][ T8784] ufs: You didn't specify the type of your ufs filesystem [ 267.872378][ T8784] [ 267.872378][ T8784] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 267.872378][ T8784] [ 267.872378][ T8784] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 267.906791][ T8784] ufs: ufstype=old is supported read-only [ 267.915086][ T8784] ufs: ufs_fill_super(): bad magic number [ 267.975572][ T5224] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 268.577133][ T5224] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 268.614866][ T5224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 272.155571][ T5224] usb 2-1: Product: syz [ 272.159796][ T5224] usb 2-1: Manufacturer: syz [ 272.179517][ T5224] usb 2-1: SerialNumber: syz [ 272.221547][ T5224] usb 2-1: config 0 descriptor?? [ 272.243300][ T5224] usb 2-1: can't set config #0, error -71 [ 272.250766][ T5224] usb 2-1: USB disconnect, device number 11 [ 273.157948][ T8837] ufs: You didn't specify the type of your ufs filesystem [ 273.157948][ T8837] [ 273.157948][ T8837] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 273.157948][ T8837] [ 273.157948][ T8837] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 273.189043][ T8837] ufs: ufstype=old is supported read-only [ 273.197667][ T8837] ufs: ufs_fill_super(): bad magic number [ 273.603563][ T5098] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 273.973106][ T5098] usb 4-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 274.002256][ T5098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.023084][ T5098] usb 4-1: Product: syz [ 274.029998][ T5098] usb 4-1: Manufacturer: syz [ 274.870839][ T5098] usb 4-1: SerialNumber: syz [ 274.904373][ T5098] usb 4-1: config 0 descriptor?? [ 275.111299][ T8859] input: syz1 as /devices/virtual/input/input15 [ 276.200439][ T9] usb 4-1: USB disconnect, device number 13 [ 276.472130][ T8879] ufs: You didn't specify the type of your ufs filesystem [ 276.472130][ T8879] [ 276.472130][ T8879] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 276.472130][ T8879] [ 276.472130][ T8879] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 276.503148][ T8879] ufs: ufstype=old is supported read-only [ 276.511103][ T8879] ufs: ufs_fill_super(): bad magic number [ 277.654604][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 277.967589][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.983823][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.999623][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 278.011224][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.720870][ T8901] syz.3.1137: attempt to access beyond end of device [ 278.720870][ T8901] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 278.745300][ T9] usb 1-1: config 0 descriptor?? [ 278.751760][ T8901] syz.3.1137: attempt to access beyond end of device [ 278.751760][ T8901] loop3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 278.767884][ T8901] Mount JFS Failure: -5 [ 278.772469][ T8901] jfs_mount failed w/return code = -5 [ 279.070894][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 279.134225][ T5224] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.643580][ T25] usb 1-1: USB disconnect, device number 19 [ 279.763862][ T5224] usb 3-1: Using ep0 maxpacket: 32 [ 279.799898][ T8914] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 279.826467][ T5224] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 279.858136][ T5224] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.872704][ T5224] usb 3-1: config 1 interface 0 has no altsetting 0 [ 279.884160][ T5224] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 280.663780][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.671833][ T5224] usb 3-1: Product: syz [ 280.677222][ T5224] usb 3-1: Manufacturer: syz [ 280.681854][ T5224] usb 3-1: SerialNumber: syz [ 280.695900][ T8900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 280.706214][ T8900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 280.937351][ T8894] netlink: 'syz.2.1135': attribute type 4 has an invalid length. [ 281.124271][ T5224] usb 3-1: USB disconnect, device number 15 [ 281.360078][ T8932] ufs: You didn't specify the type of your ufs filesystem [ 281.360078][ T8932] [ 281.360078][ T8932] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 281.360078][ T8932] [ 281.360078][ T8932] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 281.391075][ T8932] ufs: ufstype=old is supported read-only [ 281.398367][ T8932] ufs: ufs_fill_super(): bad magic number [ 282.894138][ T5224] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 283.189270][ T5224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.421750][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 283.431741][ T5224] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.508087][ T5224] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 283.524986][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.547945][ T5224] usb 2-1: config 0 descriptor?? [ 283.568375][ T5224] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 283.646705][ T8966] syz.2.1156: attempt to access beyond end of device [ 283.646705][ T8966] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 283.673109][ T8966] syz.2.1156: attempt to access beyond end of device [ 283.673109][ T8966] loop2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 283.698273][ T8966] Mount JFS Failure: -5 [ 283.715979][ T8966] jfs_mount failed w/return code = -5 [ 284.093965][ T5224] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 284.834035][ T5224] usb 1-1: Using ep0 maxpacket: 32 [ 285.243992][ T5224] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 285.254247][ T5224] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.268110][ T5224] usb 1-1: config 1 interface 0 has no altsetting 0 [ 285.312462][ T5224] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 285.324861][ T5224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.333214][ T5224] usb 1-1: Product: syz [ 285.343485][ T5224] usb 1-1: Manufacturer: syz [ 285.353734][ T5224] usb 1-1: SerialNumber: syz [ 285.409472][ T8975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 285.440276][ T8975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 285.732689][ T8971] netlink: 'syz.0.1160': attribute type 4 has an invalid length. [ 285.869872][ T5224] usb 1-1: USB disconnect, device number 20 [ 285.889113][ T5146] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.136374][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 286.151633][ T5146] usb 5-1: config 1 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.166001][ T5146] usb 5-1: config 1 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.178425][ T5146] usb 5-1: config 1 interface 0 has no altsetting 0 [ 286.194921][ T5146] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.40 [ 286.212050][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.234296][ T5146] usb 5-1: Manufacturer: 싅༤뛶ミ訶鸊Ꞵ숛慄鶨㬠Ⲑ嗘⩲己靦῅ե䒅忽縬鱄 [ 286.270455][ T5146] usb 5-1: SerialNumber: syz [ 286.358723][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 286.367829][ T9008] netlink: 'syz.2.1173': attribute type 2 has an invalid length. [ 286.472630][ T5142] usb 2-1: USB disconnect, device number 12 [ 286.529064][ T5224] kernel write not supported for file /snd/seq (pid: 5224 comm: kworker/1:7) [ 286.578280][ T5146] usbhid 5-1:1.0: can't add hid device: -71 [ 286.610198][ T5146] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 286.648646][ T5146] usb 5-1: USB disconnect, device number 12 [ 286.736904][ T9022] Bluetooth: MGMT ver 1.23 [ 286.798497][ T9020] xt_SECMARK: unable to map security context 'system_u:object_r:devicekit_exec_t:s0' [ 287.083771][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 288.883317][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 288.898284][ T5096] Bluetooth: hci5: command 0x0419 tx timeout [ 289.040725][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.054113][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.066863][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.074185][ T5224] kernel write not supported for file /snd/seq (pid: 5224 comm: kworker/1:7) [ 289.080090][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.216239][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.446770][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.447871][ T9] usb 4-1: config 0 descriptor?? [ 289.712434][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.770104][ T25] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 289.799477][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.803945][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 289.824660][ C0] eth0: bad gso: type: 1, size: 1408 [ 289.840358][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 289.856202][ T25] usb 3-1: config 0 descriptor?? [ 289.879087][ T9] usb 4-1: USB disconnect, device number 14 [ 289.891717][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 291.995304][ T9079] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 297.630486][ T47] usb 3-1: USB disconnect, device number 16 [ 301.134080][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 302.064987][ T9] usb 1-1: device descriptor read/all, error -71 [ 303.243139][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.255263][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.264158][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.272531][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.281402][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.290470][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.299454][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.308589][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.324188][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.332639][ T9147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.664078][ T9154] vivid-000: ================= START STATUS ================= [ 303.686544][ T9154] vivid-000: Generate PTS: true [ 303.698609][ T9154] vivid-000: Generate SCR: true [ 303.713766][ T9154] tpg source WxH: 640x360 (Y'CbCr) [ 303.725133][ T9154] tpg field: 1 [ 303.759714][ T9154] tpg crop: 640x360@0x0 [ 303.783739][ T9154] tpg compose: 640x360@0x0 [ 303.810065][ T9154] tpg colorspace: 8 [ 303.823883][ T9154] tpg transfer function: 0/2 [ 303.838878][ T9154] tpg Y'CbCr encoding: 0/1 [ 303.882269][ T9154] tpg quantization: 0/2 [ 303.892314][ T9154] tpg RGB range: 0/2 [ 303.963996][ T9154] vivid-000: ================== END STATUS ================== [ 304.130477][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 304.140891][ T9155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1221'. [ 304.413349][ T9171] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1228'. [ 304.663782][ T5142] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 304.847528][ T9178] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1224'. [ 304.857628][ T9178] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1224'. [ 305.036728][ T5142] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 305.065013][ T5142] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 305.078030][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.157588][ T5142] usb 5-1: Product: syz [ 305.163014][ T5142] usb 5-1: Manufacturer: syz [ 305.168666][ T5142] usb 5-1: SerialNumber: syz [ 305.187657][ T5142] usb 5-1: config 0 descriptor?? [ 305.420041][ T5142] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 305.443656][ T5142] asix 5-1:0.0: probe with driver asix failed with error -71 [ 305.467467][ T5142] usb 5-1: USB disconnect, device number 13 [ 305.700478][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'. [ 305.904532][ T9195] IPVS: Error joining to the multicast group [ 306.237990][ T9199] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.247505][ T9199] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.257018][ T9199] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.265894][ T9199] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.651778][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.664662][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.676370][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.685787][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.693509][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 306.701105][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.862771][ T1070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.986747][ T1070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.123335][ T1070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.212999][ T9212] chnl_net:caif_netlink_parms(): no params data found [ 307.265379][ T1070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.087306][ T9212] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.116636][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.125639][ T9212] bridge_slave_0: entered allmulticast mode [ 308.133913][ T9212] bridge_slave_0: entered promiscuous mode [ 308.142872][ T9212] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.150455][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.158479][ T9212] bridge_slave_1: entered allmulticast mode [ 308.166198][ T9212] bridge_slave_1: entered promiscuous mode [ 308.399774][ T9212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.804772][ T5105] Bluetooth: hci0: command tx timeout [ 308.848924][ T9212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.032820][ T9212] team0: Port device team_slave_0 added [ 309.100823][ T1070] bridge_slave_1: left allmulticast mode [ 309.106963][ T1070] bridge_slave_1: left promiscuous mode [ 309.112817][ T1070] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.158053][ T1070] bridge_slave_0: left allmulticast mode [ 309.165778][ T1070] bridge_slave_0: left promiscuous mode [ 309.171557][ T1070] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.424038][ T5098] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 309.467799][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 309.620293][ T5098] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 309.631897][ T5098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.640482][ T1070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.653480][ T5098] usb 1-1: config 0 descriptor?? [ 309.658841][ T1070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.663888][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 309.677408][ T1070] bond0 (unregistering): Released all slaves [ 309.685720][ T8] usb 3-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=e5.a5 [ 309.698816][ T9212] team0: Port device team_slave_1 added [ 309.704764][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.712800][ T8] usb 3-1: Product: syz [ 309.732279][ T8] usb 3-1: Manufacturer: syz [ 309.738619][ T8] usb 3-1: SerialNumber: syz [ 309.754693][ T8] usb 3-1: config 0 descriptor?? [ 309.856231][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.884114][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.910073][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.926914][ T9212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.939754][ T9256] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1256'. [ 309.984009][ T8] mos7840 3-1:0.0: required endpoints missing [ 310.084979][ T5098] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 310.137310][ T8] usb 3-1: USB disconnect, device number 17 [ 310.156098][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.255307][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.347683][ T9212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.552322][ T5098] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 310.623432][ T5098] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 310.889090][ T5105] Bluetooth: hci0: command tx timeout [ 310.965505][ T9212] hsr_slave_0: entered promiscuous mode [ 310.974220][ T9212] hsr_slave_1: entered promiscuous mode [ 310.988219][ T9212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.002978][ T9212] Cannot create hsr debugfs directory [ 311.259768][ T1070] hsr_slave_0: left promiscuous mode [ 311.280820][ T1070] hsr_slave_1: left promiscuous mode [ 311.300916][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.322105][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.343222][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.359002][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.431655][ T1070] veth0: left promiscuous mode [ 311.449515][ T1070] veth1_macvtap: left promiscuous mode [ 311.461392][ T1070] veth0_macvtap: left promiscuous mode [ 311.476062][ T1070] veth1_vlan: left promiscuous mode [ 311.481430][ T1070] veth0_vlan: left promiscuous mode [ 311.887656][ T5147] usb 1-1: USB disconnect, device number 23 [ 311.914269][ T9296] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1268'. [ 312.963940][ T5105] Bluetooth: hci0: command tx timeout [ 313.325703][ T1070] team0 (unregistering): Port device team_slave_1 removed [ 313.428757][ T1070] team0 (unregistering): Port device team_slave_0 removed [ 314.037290][ T9291] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 314.048395][ T9291] netlink: 'syz.2.1266': attribute type 4 has an invalid length. [ 314.056422][ T9291] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1266'. [ 314.489166][ T9332] overlay: Unknown parameter 'euid' [ 315.051219][ T5105] Bluetooth: hci0: command tx timeout [ 315.536208][ T9356] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1286'. [ 315.556247][ T9212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.585879][ T9212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 315.612443][ T9212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.120448][ T9212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.626497][ T9212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.742803][ T9212] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.772361][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.780082][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.947729][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.955027][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.538692][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.621407][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.278032][ T9212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.479480][ T9212] veth0_vlan: entered promiscuous mode [ 318.518078][ T9212] veth1_vlan: entered promiscuous mode [ 318.717470][ T9422] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1292'. [ 318.730284][ T9422] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1292'. [ 318.903602][ T9212] veth0_macvtap: entered promiscuous mode [ 318.974761][ T9212] veth1_macvtap: entered promiscuous mode [ 319.054628][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.089997][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.102674][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.117484][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.130292][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.145409][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.188012][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.230277][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.257118][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.288459][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.310924][ T9439] fuse: Bad value for 'fd' [ 319.313714][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.331844][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.346542][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.362714][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.375469][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.385817][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.396577][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.413038][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.451388][ T9212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.553770][ T9212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.562528][ T9212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.800632][ T9212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.939003][ T9446] vivid-000: ================= START STATUS ================= [ 319.949869][ T9446] vivid-000: Generate PTS: true [ 319.963755][ T9446] vivid-000: Generate SCR: true [ 319.984676][ T9446] tpg source WxH: 640x360 (Y'CbCr) [ 319.998957][ T9446] tpg field: 1 [ 320.013715][ T9446] tpg crop: 640x360@0x0 [ 320.021883][ T9446] tpg compose: 640x360@0x0 [ 320.035860][ T9446] tpg colorspace: 8 [ 320.043726][ T9446] tpg transfer function: 0/2 [ 320.048857][ T9446] tpg Y'CbCr encoding: 0/1 [ 320.056484][ T9446] tpg quantization: 0/2 [ 320.062860][ T9446] tpg RGB range: 0/2 [ 320.071854][ T9446] vivid-000: ================== END STATUS ================== [ 320.288740][ T9455] overlay: Unknown parameter 'euid' [ 320.301805][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.311975][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.395230][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.446903][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.314313][ T9487] fuse: Bad value for 'fd' [ 323.353141][ T9] libceph: connect (1)[c::]:6789 error -101 [ 323.364235][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 323.414464][ T5147] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 323.438524][ T9532] ceph: No mds server is up or the cluster is laggy [ 323.687017][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.753540][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.791423][ T5147] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 323.808948][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.885209][ T5147] usb 2-1: config 0 descriptor?? [ 324.025006][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 324.128380][ T5147] usbhid 2-1:0.0: can't add hid device: -71 [ 324.146497][ T5147] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 324.182351][ T5147] usb 2-1: USB disconnect, device number 13 [ 324.233908][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 324.263111][ T25] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 324.286681][ T25] usb 1-1: config 0 has no interface number 0 [ 324.292849][ T25] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 324.367765][ T25] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 324.386993][ T25] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 324.400793][ T25] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 324.438071][ T25] usb 1-1: Product: syz [ 324.442287][ T25] usb 1-1: SerialNumber: syz [ 324.463930][ T9559] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1328'. [ 324.477713][ T25] usb 1-1: config 0 descriptor?? [ 324.504057][ T25] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 324.522991][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input16 [ 324.533284][ T9562] netlink: 'syz.2.1332': attribute type 32 has an invalid length. [ 324.745063][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 324.880207][ T9572] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 324.894318][ T9565] netlink: 'syz.3.1333': attribute type 4 has an invalid length. [ 324.939354][ T9572] CIFS mount error: No usable UNC path provided in device string! [ 324.939354][ T9572] [ 324.965861][ T9572] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 325.042511][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 325.286967][ T9580] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 325.286990][ T9580] netlink: 'syz.2.1339': attribute type 4 has an invalid length. [ 325.287003][ T9580] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1339'. [ 325.431142][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.431476][ T5142] usb 1-1: USB disconnect, device number 24 [ 325.438120][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 325.492582][ T5142] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 325.801339][ T9590] devtmpfs: Too few inodes for current use [ 325.814884][ T8809] udevd[8809]: setting mode of /dev/vcsa4 to 020660 failed: Read-only file system [ 326.252780][ T9604] CIFS mount error: No usable UNC path provided in device string! [ 326.252780][ T9604] [ 326.296612][ T9604] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 326.321130][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 326.321148][ T29] audit: type=1326 audit(1721766888.889:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ca175f19 code=0x7fc00000 [ 329.728940][ T9650] netlink: 200836 bytes leftover after parsing attributes in process `syz.1.1368'. [ 329.753854][ T9650] net_ratelimit: 35 callbacks suppressed [ 329.753873][ T9650] openvswitch: netlink: Duplicate key (type 0). [ 329.856673][ T9653] tipc: Started in network mode [ 329.876817][ T9653] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 329.901566][ T9653] tipc: Enabling of bearer rejected, failed to enable media [ 329.903958][ T9655] kernel read not supported for file /eth0 (pid: 9655 comm: syz.0.1370) [ 329.951721][ T29] audit: type=1800 audit(1721766892.519:130): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1370" name="eth0" dev="mqueue" ino=27159 res=0 errno=0 [ 329.975770][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.205983][ T9664] overlay: Unknown parameter 'euid' [ 330.862187][ T9681] vivid-000: ================= START STATUS ================= [ 330.870082][ T9681] vivid-000: Generate PTS: true [ 330.875189][ T9681] vivid-000: Generate SCR: true [ 330.881262][ T9681] tpg source WxH: 640x360 (Y'CbCr) [ 330.886974][ T9681] tpg field: 1 [ 330.890481][ T9681] tpg crop: 640x360@0x0 [ 330.894826][ T9681] tpg compose: 640x360@0x0 [ 330.899363][ T9681] tpg colorspace: 8 [ 330.903261][ T9681] tpg transfer function: 0/2 [ 330.908072][ T9681] tpg Y'CbCr encoding: 0/1 [ 330.917271][ T9681] tpg quantization: 0/2 [ 330.921579][ T9681] tpg RGB range: 0/2 [ 330.925738][ T9681] vivid-000: ================== END STATUS ================== [ 331.044100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.083975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.379012][ T9695] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1385'. [ 333.049008][ T9708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.107229][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1389'. [ 333.233888][ T5142] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 333.290395][ T9716] netlink: 'syz.0.1391': attribute type 9 has an invalid length. [ 333.298912][ T9716] netlink: 'syz.0.1391': attribute type 7 has an invalid length. [ 333.307301][ T9716] netlink: 'syz.0.1391': attribute type 8 has an invalid length. [ 333.354098][ T9] IPVS: starting estimator thread 0... [ 333.377464][ T9720] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 333.459104][ T5142] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 333.483858][ T9721] IPVS: using max 21 ests per chain, 50400 per kthread [ 333.501489][ T5142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.543231][ T5142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.570623][ T5142] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 333.609901][ T5142] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 333.626365][ T5142] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 333.639406][ T5142] usb 2-1: Manufacturer: syz [ 333.657718][ T5142] usb 2-1: config 0 descriptor?? [ 334.089440][ T5142] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 334.115583][ T5142] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 334.149243][ T5142] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 334.623905][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 334.648640][ T5098] usb 2-1: USB disconnect, device number 14 [ 334.818882][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.833854][ T5147] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 334.833886][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.853921][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.867397][ T25] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 334.877906][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.889817][ T25] usb 3-1: config 0 descriptor?? [ 335.095881][ T5147] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.119912][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 335.174289][ T5147] usb 5-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 335.235500][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.279174][ T5147] usb 5-1: Product: syz [ 335.283822][ T5147] usb 5-1: Manufacturer: syz [ 335.298802][ T5147] usb 5-1: SerialNumber: syz [ 335.327946][ T5147] usb 5-1: config 0 descriptor?? [ 335.365436][ T5147] usbtest 5-1:0.0: usb test device [ 335.370608][ T5147] usbtest 5-1:0.0: high-speed {control in/out iso-in} tests (+alt) [ 335.423343][ T25] betop 0003:11C0:5506.0007: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.2-1/input0 [ 335.465598][ T25] betop 0003:11C0:5506.0007: no inputs found [ 335.555870][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 335.644281][ T25] usb 3-1: USB disconnect, device number 18 [ 335.672070][ T5098] usb 5-1: USB disconnect, device number 14 [ 336.158910][ T9756] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1401'. [ 336.169412][ T9756] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1401'. [ 337.450012][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 337.460106][ T9767] kernel read not supported for file /eth0 (pid: 9767 comm: syz.4.1406) [ 337.493778][ T29] audit: type=1800 audit(1721766900.059:131): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1406" name="eth0" dev="mqueue" ino=28032 res=0 errno=0 [ 337.519064][ T9765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1405'. [ 337.519614][ T9765] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 337.640888][ T9774] Error parsing options; rc = [-22] [ 337.844770][ T9777] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872384 (1073744768 ns) > initial count (6 ns). Using initial count to start timer. [ 337.885523][ T9777] kvm: pic: non byte write [ 338.783910][ T47] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 339.015670][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.037947][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.103517][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.136093][ T47] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 339.169818][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.249750][ T47] usb 3-1: config 0 descriptor?? [ 339.922116][ T47] betop 0003:11C0:5506.0008: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.2-1/input0 [ 339.951552][ T47] betop 0003:11C0:5506.0008: no inputs found [ 340.118202][ T5147] usb 3-1: USB disconnect, device number 19 [ 340.164772][ T9825] tipc: Started in network mode [ 340.185020][ T9825] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 340.227214][ T9825] tipc: Enabling of bearer rejected, failed to enable media [ 340.283946][ T47] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 340.469703][ T5098] IPVS: starting estimator thread 0... [ 340.475348][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 340.513466][ T47] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 340.548875][ T47] usb 2-1: config 0 has no interface number 0 [ 340.568082][ T47] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.593851][ T9835] IPVS: using max 33 ests per chain, 79200 per kthread [ 340.619042][ T5146] libceph: connect (1)[c::]:6789 error -101 [ 340.625314][ T47] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 340.638582][ T47] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 340.648269][ T47] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 340.656413][ T47] usb 2-1: Product: syz [ 340.660580][ T47] usb 2-1: SerialNumber: syz [ 340.676134][ T47] usb 2-1: config 0 descriptor?? [ 340.681711][ T5146] libceph: mon0 (1)[c::]:6789 connect error [ 340.684219][ T47] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 340.695651][ T47] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input17 [ 340.759368][ T9837] ceph: No mds server is up or the cluster is laggy [ 341.052950][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 341.293877][ T9855] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 341.356836][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'. [ 341.632604][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.640048][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.647217][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.654429][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.661638][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.668932][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.676135][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.683324][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.690667][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.697867][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.758520][ T47] usb 2-1: USB disconnect, device number 15 [ 341.764486][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 341.878003][ T47] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 343.822630][ T9879] bond0: entered promiscuous mode [ 343.827859][ T9879] bond_slave_0: entered promiscuous mode [ 343.833657][ T9879] bond_slave_1: entered promiscuous mode [ 343.841043][ T9879] dummy0: entered promiscuous mode [ 345.186689][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 346.008051][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.040220][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 346.064963][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 346.084122][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.101949][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.243016][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.271886][ T25] usb 4-1: config 0 descriptor?? [ 346.279808][ T9898] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.066788][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x2 [ 347.082777][ T25] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 347.166710][ T25] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 347.266681][ T9937] bond0: entered promiscuous mode [ 347.279944][ T9937] bond_slave_0: entered promiscuous mode [ 347.293121][ T9937] bond_slave_1: entered promiscuous mode [ 347.352968][ T9937] dummy0: entered promiscuous mode [ 347.390856][ T9937] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 347.403908][ T9937] Cannot create hsr debugfs directory [ 347.581705][ T9950] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 347.724552][ T9950] input: syz0 as /devices/virtual/input/input18 [ 348.826309][ T9962] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 348.834861][ T9962] netlink: 'syz.0.1464': attribute type 4 has an invalid length. [ 348.844139][ T9962] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1464'. [ 349.273873][ T47] usb 4-1: USB disconnect, device number 15 [ 349.793614][ T29] audit: type=1326 audit(1721766912.359:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9971 comm="syz.3.1469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x0 [ 351.973953][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 352.171759][ T9990] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.180941][ T9990] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.190109][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 352.196223][ T9990] bridge0: entered allmulticast mode [ 352.203568][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 352.219416][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.227795][ T9] usb 3-1: Product: syz [ 352.232494][ T9] usb 3-1: Manufacturer: syz [ 352.248394][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.251291][ T9] usb 3-1: SerialNumber: syz [ 352.255611][ T9990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.256037][ T9990] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.274962][ T9990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.290632][ T9990] bridge0: entered promiscuous mode [ 352.293304][ T9] usb 3-1: config 0 descriptor?? [ 352.325145][ T9] appledisplay 3-1:0.0: Could not find int-in endpoint [ 352.353427][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 352.383960][ T47] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 352.558117][ T9] usb 3-1: USB disconnect, device number 20 [ 352.574720][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 352.586132][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 352.608072][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 352.620073][ T47] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 352.631016][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.652291][ T47] usb 4-1: config 0 descriptor?? [ 353.239913][ T9988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.255952][ T9988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.295606][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 353.313189][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 353.337860][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 353.364688][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 353.372802][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x2 [ 353.381085][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 353.434966][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 353.459651][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 353.469728][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 353.490194][ T47] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 353.501878][ T5144] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 353.512019][ T47] hid-generic 0003:0158:0100.000A: unexpected long global item [ 353.526393][ T47] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 353.547780][ T47] usb 4-1: USB disconnect, device number 16 [ 353.696359][ T5144] usb 3-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 353.723209][ T5144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.739794][T10018] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 353.747798][ T5144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.780574][ T5144] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.840502][ T5144] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.877113][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.897888][ T5144] usb 3-1: Product: syz [ 353.914866][ T5144] usb 3-1: Manufacturer: syz [ 353.929616][ T5144] usb 3-1: SerialNumber: syz [ 354.011685][ T29] audit: type=1326 audit(1721766916.579:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.1.1485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ca175f19 code=0x0 [ 355.604002][ T5105] Bluetooth: hci5: command 0x0419 tx timeout [ 355.706072][ T5144] cdc_ncm 3-1:1.0: bind() failure [ 355.715273][ T5144] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 355.736426][T10041] program syz.0.1490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.746572][ T5144] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 355.786880][ T5144] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 355.841783][ T5144] usb 3-1: USB disconnect, device number 21 [ 356.345825][T10057] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 356.374782][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 356.586515][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.615947][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.774751][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.801451][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 357.690359][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.729332][ T9] usb 2-1: config 0 descriptor?? [ 357.738610][T10053] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.912269][T10083] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 357.934420][T10083] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 357.960230][ T29] audit: type=1326 audit(1721766920.529:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10080 comm="syz.2.1503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f952a175f19 code=0x0 [ 357.960287][ T9] ath6kl: Failed to submit usb control message: -71 [ 357.997785][T10083] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1502'. [ 358.007922][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 358.017008][ T9] ath6kl: Unable to send get target info: -71 [ 358.095236][ T9] ath6kl: Failed to init ath6kl core: -71 [ 358.106399][ T9] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 358.208003][ T9] usb 2-1: USB disconnect, device number 16 [ 358.769366][T10097] program syz.1.1506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.172206][T10104] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1508'. [ 359.334859][ T5142] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 360.285870][ T5142] usb 3-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 360.352304][ T5142] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.388040][ T5142] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.446446][ T5142] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.476355][ T5142] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.485715][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.498995][ T5142] usb 3-1: Product: syz [ 360.503196][ T5142] usb 3-1: Manufacturer: syz [ 360.507987][ T5142] usb 3-1: SerialNumber: syz [ 360.733882][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 361.655004][ T9] usb 4-1: too many configurations: 30, using maximum allowed: 8 [ 361.694657][ T9] usb 4-1: New USB device found, idVendor=0c98, idProduct=b0b7, bcdDevice=77.fd [ 361.724409][ T9] usb 4-1: New USB device strings: Mfr=62, Product=162, SerialNumber=227 [ 361.750802][ T9] usb 4-1: Product: syz [ 361.780993][ T9] usb 4-1: Manufacturer: syz [ 361.788685][ T9] usb 4-1: SerialNumber: syz [ 361.833931][ T9] usb 4-1: config 0 descriptor?? [ 361.973098][T10146] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1522'. [ 362.078598][ T25] usb 4-1: USB disconnect, device number 17 [ 362.320520][ T5142] cdc_ncm 3-1:1.0: bind() failure [ 362.364494][ T5142] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 362.381210][ T5142] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 362.402486][ T5142] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 362.419354][ T5142] usb 3-1: USB disconnect, device number 22 [ 362.716527][T10151] capability: warning: `syz.3.1524' uses 32-bit capabilities (legacy support in use) [ 364.347115][T10178] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1533'. [ 365.465397][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 365.605175][T10195] overlay: Unknown parameter 'euid' [ 365.699436][ T9] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 365.736454][ T9] usb 2-1: New USB device found, idVendor=0c98, idProduct=b0b7, bcdDevice=77.fd [ 365.755750][ T9] usb 2-1: New USB device strings: Mfr=62, Product=162, SerialNumber=227 [ 365.765151][ T9] usb 2-1: Product: syz [ 365.773336][ T9] usb 2-1: Manufacturer: syz [ 365.782302][ T9] usb 2-1: SerialNumber: syz [ 365.802154][ T9] usb 2-1: config 0 descriptor?? [ 366.076643][ T5147] usb 2-1: USB disconnect, device number 17 [ 366.180532][T10218] netlink: 'syz.0.1549': attribute type 4 has an invalid length. [ 366.564437][T10224] binder: 10215:10224 ioctl c0306201 20000680 returned -11 [ 367.164647][T10234] program syz.3.1554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.231125][T10234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.484002][T10243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1556'. [ 368.243814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.185434][T10262] netlink: 201412 bytes leftover after parsing attributes in process `syz.3.1564'. [ 369.197651][T10262] netlink: zone id is out of range [ 369.203010][T10262] netlink: zone id is out of range [ 369.208362][T10262] netlink: zone id is out of range [ 369.213565][T10262] netlink: zone id is out of range [ 369.218817][T10262] netlink: zone id is out of range [ 369.224088][T10262] netlink: zone id is out of range [ 369.229277][T10262] netlink: zone id is out of range [ 369.248726][T10262] netlink: zone id is out of range [ 371.650139][T10310] program syz.0.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.083101][T10333] ipvlan0: entered promiscuous mode [ 373.171114][T10333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.258937][T10344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.295504][T10332] ipvlan0: left promiscuous mode [ 373.335381][ T29] audit: type=1326 audit(1721766935.909:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 373.395893][ T29] audit: type=1326 audit(1721766935.929:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 373.461079][ T29] audit: type=1326 audit(1721766935.929:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 373.494501][ T29] audit: type=1326 audit(1721766935.939:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 373.540851][ T29] audit: type=1326 audit(1721766935.939:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 373.586900][ T29] audit: type=1326 audit(1721766935.939:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 373.624301][ T29] audit: type=1326 audit(1721766935.939:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 373.675323][ T29] audit: type=1326 audit(1721766935.939:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4abc96cf67 code=0x7ffc0000 [ 373.709063][ T29] audit: type=1326 audit(1721766935.939:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4abc911909 code=0x7ffc0000 [ 373.763594][ T29] audit: type=1326 audit(1721766935.939:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4abc96cf67 code=0x7ffc0000 [ 374.066307][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1603'. [ 375.260868][T10393] ipvlan0: entered promiscuous mode [ 375.311986][T10393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.371177][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1615'. [ 375.409478][T10393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.429881][T10400] program syz.2.1614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.432945][T10392] ipvlan0: left promiscuous mode [ 375.536141][T10406] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 375.536869][ T5146] kernel write not supported for file [eventfd] (pid: 5146 comm: kworker/0:5) [ 375.562833][T10406] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 375.983950][ T5144] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 376.205899][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.220397][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.231171][ T5144] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 376.242379][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.269574][T10430] net_ratelimit: 72 callbacks suppressed [ 376.269588][T10430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.291364][ T5144] usb 1-1: config 0 descriptor?? [ 376.570467][T10439] syz.1.1629[10439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.570669][T10439] syz.1.1629[10439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.665219][T10442] syz.1.1629[10442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.665504][T10442] syz.1.1629[10442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.736831][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.755437][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.775251][ T5144] elecom 0003:056E:011C.000B: item fetching failed at offset 0/3 [ 376.780160][T10439] bridge0: left promiscuous mode [ 376.800981][T10443] program syz.3.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.801381][T10439] bridge0: left allmulticast mode [ 376.820976][ T5144] elecom 0003:056E:011C.000B: probe with driver elecom failed with error -22 [ 376.846586][T10443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.948583][ T5146] usb 1-1: USB disconnect, device number 25 [ 377.394442][T10450] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 377.437436][T10450] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 377.658941][T10456] ipvlan0: entered promiscuous mode [ 377.768190][T10456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.854910][T10452] netlink: 201412 bytes leftover after parsing attributes in process `syz.2.1634'. [ 377.864642][T10452] netlink: zone id is out of range [ 377.869793][T10452] netlink: zone id is out of range [ 377.875125][T10452] netlink: zone id is out of range [ 377.880255][T10452] netlink: zone id is out of range [ 377.885428][T10452] netlink: zone id is out of range [ 377.890793][T10452] netlink: zone id is out of range [ 377.895964][T10452] netlink: zone id is out of range [ 377.901058][T10452] netlink: zone id is out of range [ 377.908121][T10457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.017868][T10455] ipvlan0: left promiscuous mode [ 378.624041][ T5146] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 378.936223][ T5146] usb 3-1: Using ep0 maxpacket: 16 [ 378.969948][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.984606][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.991072][ T5146] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.599921][ T5146] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 380.624065][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 380.642940][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 380.669253][ T5146] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.700275][ T5146] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 380.709902][ T5146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.719548][ T5146] usb 3-1: Product: syz [ 380.728092][ T5146] usb 3-1: Manufacturer: syz [ 380.753883][ T5146] usb 3-1: SerialNumber: syz [ 380.764621][ T5146] usb 3-1: config 0 descriptor?? [ 380.775865][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 380.775886][ T29] audit: type=1326 audit(1721766943.329:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10484 comm="syz.3.1645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x0 [ 381.034423][ T5146] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 381.081980][ T5146] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 381.113321][ T5146] usb 3-1: USB disconnect, device number 23 [ 381.137100][T10418] udevd[10418]: setting owner of /dev/bus/usb/003/023 to uid=0, gid=0 failed: No such file or directory [ 381.339271][T10515] tipc: Cannot configure node identity twice [ 382.076238][T10523] ipvlan0: entered promiscuous mode [ 382.107581][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.140748][T10526] tmpfs: Bad value for 'mpol' [ 382.173431][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.192952][T10522] ipvlan0: left promiscuous mode [ 382.469745][ T5146] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 384.495697][ T5146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.535172][ T5146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.709858][ T5146] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 384.731267][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.600557][ T5146] usb 4-1: config 0 descriptor?? [ 385.710591][ T5146] usb 4-1: can't set config #0, error -71 [ 385.727265][ T5146] usb 4-1: USB disconnect, device number 18 [ 385.864054][T10564] tmpfs: Bad value for 'mpol' [ 385.875766][T10565] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 385.883545][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 386.137759][T10573] netlink: 'syz.3.1670': attribute type 3 has an invalid length. [ 386.182048][T10573] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1670'. [ 386.216793][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 389.034279][T10605] tmpfs: Bad value for 'mpol' [ 389.093904][ T5147] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 389.364229][ T5147] usb 4-1: Using ep0 maxpacket: 8 [ 389.386772][ T5147] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 390.083853][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.131581][ T5147] usb 4-1: config 0 descriptor?? [ 390.849420][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 390.875215][T10625] netlink: 'syz.2.1688': attribute type 3 has an invalid length. [ 390.883116][T10625] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1688'. [ 390.897939][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 390.916869][ T5147] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 391.071885][ T5147] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 391.083908][ T5147] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 391.094575][ T5147] asix 4-1:0.0: probe with driver asix failed with error -71 [ 391.115195][ T5147] usb 4-1: USB disconnect, device number 19 [ 391.266162][ T9] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 391.291863][ T9] usb 1-1: config 0 has no interface number 0 [ 392.112827][ T9] usb 1-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 392.172248][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.244417][ T5105] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 392.307165][ T9] usb 1-1: config 0 descriptor?? [ 392.331259][ T9] usb 1-1: can't set config #0, error -71 [ 392.352608][ T5105] Bluetooth: hci5: unexpected event for opcode 0x0411 [ 392.404077][ T9] usb 1-1: USB disconnect, device number 26 [ 392.428532][T10647] overlayfs: failed to resolve './file0': -2 [ 392.688860][ T5096] Bluetooth: hci2: sending frame failed (-49) [ 392.696484][ T5105] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 392.853895][ T47] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 393.046240][ T47] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 393.229530][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.240121][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.254080][ T47] usb 2-1: Product: syz [ 393.953938][ T47] usb 2-1: Manufacturer: syz [ 393.958584][ T47] usb 2-1: SerialNumber: syz [ 393.980126][ T47] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 394.993144][ T5147] usb 2-1: USB disconnect, device number 18 [ 396.404055][ T5105] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 396.413094][ T5105] Bluetooth: hci5: Injecting HCI hardware error event [ 396.423309][ T5105] Bluetooth: hci5: hardware error 0x00 [ 396.454856][T10711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.484821][ T5105] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 400.498288][ T5096] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 400.576442][T10768] netlink: 'syz.0.1730': attribute type 12 has an invalid length. [ 400.584446][T10768] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1730'. [ 401.464551][T10750] xt_CONNSECMARK: invalid mode: 0 [ 401.487442][T10750] binder: 10746:10750 ioctl c0306201 20000580 returned -14 [ 402.178498][ T47] kernel read not supported for file /dsp (pid: 47 comm: kworker/1:1) [ 402.341982][ T5096] Bluetooth: hci2: command 0x1003 tx timeout [ 402.376695][ T5105] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 402.991347][T10793] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.024114][T10793] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1735'. [ 403.330220][T10812] netem: incorrect ge model size [ 403.354600][T10812] netem: change failed [ 404.194123][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 404.408644][ T9] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 404.430967][ T9] usb 2-1: config 0 has no interface number 0 [ 404.461155][ T9] usb 2-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 404.503810][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.558912][ T9] usb 2-1: config 0 descriptor?? [ 404.580512][ T9] usb 2-1: can't set first interface for hiFace device. [ 404.607231][ T9] snd-usb-hiface 2-1:0.153: probe with driver snd-usb-hiface failed with error -5 [ 405.375302][ T5105] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 405.387541][ T5105] Bluetooth: hci0: Injecting HCI hardware error event [ 405.400179][ T5096] Bluetooth: hci0: hardware error 0x00 [ 407.100689][ T47] usb 2-1: USB disconnect, device number 19 [ 407.474001][T10870] netlink: 'syz.3.1758': attribute type 12 has an invalid length. [ 407.482917][T10870] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1758'. [ 407.745916][ T5096] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 412.372404][ T5105] Bluetooth: hci2: sending frame failed (-49) [ 412.381379][ T5096] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 413.820688][T10957] netlink: 'syz.3.1788': attribute type 12 has an invalid length. [ 413.829027][T10957] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1788'. [ 414.800989][T10976] net_ratelimit: 73 callbacks suppressed [ 414.801009][T10976] dccp_invalid_packet: P.CsCov 2 exceeds packet length 400 [ 414.871440][ T5105] Bluetooth: hci2: sending frame failed (-49) [ 414.880273][ T5096] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 415.003829][ T5147] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 415.231184][ T5147] usb 1-1: Using ep0 maxpacket: 8 [ 415.334229][ T5147] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 415.540312][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.659405][ T5147] usb 1-1: config 0 descriptor?? [ 415.780827][T10991] Bluetooth: MGMT ver 1.23 [ 416.845582][ T5147] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 416.883816][ T5147] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 416.954028][ T5147] asix 1-1:0.0: probe with driver asix failed with error -71 [ 416.989399][ T5147] usb 1-1: USB disconnect, device number 27 [ 417.541073][T11014] overlay: ./file0 is not a directory [ 419.056479][T11041] overlayfs: workdir and upperdir must reside under the same mount [ 419.343926][ T47] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 420.058682][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 420.087081][ T47] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 420.105510][ T29] audit: type=1326 audit(1721766982.679:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.113799][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.203296][ T29] audit: type=1326 audit(1721766982.699:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.204016][ T47] usb 2-1: config 0 descriptor?? [ 420.262473][ T29] audit: type=1326 audit(1721766982.709:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.294876][ T29] audit: type=1326 audit(1721766982.709:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.335858][ T29] audit: type=1326 audit(1721766982.709:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.358391][ T29] audit: type=1326 audit(1721766982.709:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.414915][ T29] audit: type=1326 audit(1721766982.709:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.441920][ T29] audit: type=1326 audit(1721766982.709:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.489297][ T29] audit: type=1326 audit(1721766982.709:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.522667][ T29] audit: type=1326 audit(1721766982.709:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x7ffc0000 [ 420.628890][T11049] vlan2: entered promiscuous mode [ 420.672537][T11049] veth0: entered promiscuous mode [ 420.694501][T11049] veth0: left promiscuous mode [ 421.087247][ T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.104523][ T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 421.154705][ T47] asix 2-1:0.0: probe with driver asix failed with error -71 [ 421.186114][T11072] netlink: 'syz.0.1826': attribute type 12 has an invalid length. [ 421.194214][T11072] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1826'. [ 421.367771][ T47] usb 2-1: USB disconnect, device number 20 [ 421.827241][T11075] overlay: ./file0 is not a directory [ 424.043862][T10640] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 424.276274][T10640] usb 4-1: Using ep0 maxpacket: 8 [ 424.306813][T10640] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 424.333823][T10640] usb 4-1: config 0 has no interface number 0 [ 424.358363][T10640] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 424.383798][T10640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.425676][T10640] usb 4-1: Product: syz [ 424.430164][T10640] usb 4-1: Manufacturer: syz [ 424.457280][T10640] usb 4-1: SerialNumber: syz [ 424.637042][T10640] usb 4-1: config 0 descriptor?? [ 426.215700][ T25] usb 4-1: USB disconnect, device number 20 [ 427.324276][T11167] 9pnet_fd: Insufficient options for proto=fd [ 428.841385][ T59] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 429.173802][ T59] usb 1-1: Using ep0 maxpacket: 8 [ 429.191323][ T59] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 429.213828][ T59] usb 1-1: config 0 has no interface number 0 [ 429.228222][ T59] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 429.244018][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.262401][ T59] usb 1-1: Product: syz [ 429.277273][ T59] usb 1-1: Manufacturer: syz [ 429.281927][ T59] usb 1-1: SerialNumber: syz [ 429.307301][ T59] usb 1-1: config 0 descriptor?? [ 430.304268][ T47] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 430.702860][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.714439][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.729020][ T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.738316][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.750156][ T47] usb 4-1: config 0 descriptor?? [ 431.309449][T10640] usb 1-1: USB disconnect, device number 28 [ 431.664823][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 431.664841][ T29] audit: type=1326 audit(1721766994.209:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 431.702926][ T29] audit: type=1326 audit(1721766994.239:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 431.912919][ T29] audit: type=1326 audit(1721766994.239:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 431.934791][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.976005][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 432.210014][ T29] audit: type=1326 audit(1721766994.239:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 432.220955][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.231674][ T29] audit: type=1326 audit(1721766994.239:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 432.231718][ T29] audit: type=1326 audit(1721766994.239:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 432.249564][ T47] usb 4-1: USB disconnect, device number 21 [ 432.283098][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.329440][ T29] audit: type=1326 audit(1721766994.239:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 432.350947][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.376474][ T29] audit: type=1326 audit(1721766994.239:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 432.398063][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.461364][ T29] audit: type=1326 audit(1721766994.239:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 432.520166][ T29] audit: type=1326 audit(1721766994.239:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11221 comm="syz.0.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8076775f19 code=0x7ffc0000 [ 432.793861][ T59] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 433.278710][T11249] use of bytesused == 0 is deprecated and will be removed in the future, [ 433.288297][T11249] use the actual size instead. [ 433.794050][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 433.855099][ T59] usb 2-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00 [ 433.873756][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.904648][ T59] usb 2-1: Product: syz [ 433.909343][ T59] usb 2-1: Manufacturer: syz [ 433.932275][ T59] usb 2-1: SerialNumber: syz [ 433.949670][ T59] usb 2-1: config 0 descriptor?? [ 433.959500][ T59] usb-storage 2-1:0.0: USB Mass Storage device detected [ 434.584060][ T47] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 434.777937][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.853995][T11263] input: syz0 as /devices/virtual/input/input21 [ 434.924187][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 434.938154][ T47] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 434.971331][ T47] usb 1-1: config 0 has no interface number 0 [ 434.999192][ T47] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 435.024293][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.042820][ T47] usb 1-1: Product: syz [ 435.050893][ T47] usb 1-1: Manufacturer: syz [ 435.056271][ T47] usb 1-1: SerialNumber: syz [ 435.078400][ T47] usb 1-1: config 0 descriptor?? [ 435.843803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.275932][ T59] usb 2-1: USB disconnect, device number 21 [ 436.859464][T11299] pimreg: entered allmulticast mode [ 436.883839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.479776][ T47] usb 1-1: USB disconnect, device number 29 [ 437.554732][ T59] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 438.146880][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.242524][ T59] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 438.360269][ T59] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.370160][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.390919][ T59] usb 4-1: config 0 descriptor?? [ 438.504457][T11289] xt_CONNSECMARK: invalid mode: 0 [ 438.573785][T11289] binder: 11284:11289 ioctl c0306201 20000580 returned -14 [ 438.665912][T11316] input: syz0 as /devices/virtual/input/input22 [ 439.021380][ T5144] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 439.397832][ T5144] usb 3-1: Using ep0 maxpacket: 32 [ 439.478096][ T59] usbhid 4-1:0.0: can't add hid device: -71 [ 439.494129][ T59] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 439.497688][ T5144] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 439.532445][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.533807][ T59] usb 4-1: USB disconnect, device number 22 [ 439.571275][ T5144] usb 3-1: config 0 descriptor?? [ 439.602696][ T5144] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 439.629802][ T5144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 439.667678][ T5144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 439.698243][ T5144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 439.731592][ T5144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 439.771208][ T5144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 439.788821][ T5144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 439.827627][ T5144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 439.870531][ T5144] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 439.902966][ T5144] usb 3-1: USB disconnect, device number 24 [ 439.927685][ T5144] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 439.950916][ T5144] keyspan 3-1:0.0: device disconnected [ 440.113959][ T47] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 440.314099][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 440.325828][ T47] usb 5-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00 [ 440.337468][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.349434][ T47] usb 5-1: Product: syz [ 440.356762][ T47] usb 5-1: Manufacturer: syz [ 440.361633][ T47] usb 5-1: SerialNumber: syz [ 440.377986][ T47] usb 5-1: config 0 descriptor?? [ 440.389196][ T47] usb-storage 5-1:0.0: USB Mass Storage device detected [ 440.422682][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.430054][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.596055][ T5144] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 440.724626][T11340] block nbd2: server does not support multiple connections per device. [ 440.783241][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 440.783260][ T29] audit: type=1326 audit(1721767003.349:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.2.1915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f952a175f19 code=0x0 [ 440.795680][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.871759][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.912433][ T5144] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.953291][ T5144] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.976524][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.003601][ T5144] usb 2-1: config 0 descriptor?? [ 441.013272][ T29] audit: type=1326 audit(1721767003.589:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11345 comm="syz.3.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x0 [ 441.425285][T11339] block nbd2: shutting down sockets [ 442.618216][T11353] netlink: 'syz.3.1919': attribute type 11 has an invalid length. [ 442.644421][T11353] netlink: 'syz.3.1919': attribute type 11 has an invalid length. [ 442.657025][T11353] debugfs: Directory 'netdev:' with parent 'phy15' already present! [ 442.846121][ T5147] usb 5-1: USB disconnect, device number 15 [ 442.874408][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 443.337171][T11375] pimreg: entered allmulticast mode [ 443.374589][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 443.568733][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 443.973937][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.012628][ T9] usb 3-1: config 0 descriptor?? [ 444.075640][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 444.081167][ T5144] usbhid 2-1:0.0: can't add hid device: -71 [ 444.095732][ T5144] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 444.111762][ T5144] usb 2-1: USB disconnect, device number 22 [ 444.127257][ T29] audit: type=1326 audit(1721767006.649:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11377 comm="syz.4.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67cef75f19 code=0x0 [ 444.296048][T11384] block nbd0: server does not support multiple connections per device. [ 444.333389][ T29] audit: type=1326 audit(1721767006.899:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.0.1931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x0 [ 444.999608][T11392] netlink: 'syz.4.1933': attribute type 11 has an invalid length. [ 445.002481][T11383] block nbd0: shutting down sockets [ 445.051358][T11393] netlink: 'syz.4.1933': attribute type 11 has an invalid length. [ 445.087450][ C0] eth0: bad gso: type: 1, size: 1408 [ 445.138517][T11392] debugfs: Directory 'netdev:' with parent 'phy17' already present! [ 445.371009][T11398] netlink: 'syz.0.1934': attribute type 10 has an invalid length. [ 445.448320][T11398] team0: Device ipvlan1 failed to register rx_handler [ 445.680089][ T9] gspca_sunplus: reg_w_riv err -71 [ 445.688146][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 445.725435][ T9] usb 3-1: USB disconnect, device number 25 [ 445.844257][ T59] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 446.072665][T11408] bridge1: entered promiscuous mode [ 446.081415][T11408] bridge1: entered allmulticast mode [ 446.098551][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 446.861607][ T59] usb 5-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00 [ 446.873750][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.882499][ T59] usb 5-1: Product: syz [ 446.893530][ T59] usb 5-1: Manufacturer: syz [ 446.925506][ T59] usb 5-1: SerialNumber: syz [ 446.973423][ T59] usb 5-1: config 0 descriptor?? [ 446.991166][ T59] usb-storage 5-1:0.0: USB Mass Storage device detected [ 448.064012][ T5147] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 448.146672][ T59] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 448.334025][ T5147] usb 1-1: Using ep0 maxpacket: 32 [ 448.345955][ T59] usb 3-1: Using ep0 maxpacket: 32 [ 448.361521][ T5147] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 448.397915][ T59] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 448.407923][ T5147] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 448.420756][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.445486][ T5147] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.466500][ T59] usb 3-1: config 0 descriptor?? [ 448.483382][ T5147] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 448.496167][ T59] gspca_main: sunplus-2.14.0 probing 041e:400b [ 448.517344][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 448.564502][ T5147] usb 1-1: Product: syz [ 448.576368][ T5147] usb 1-1: Manufacturer: syz [ 448.581208][ T5147] usb 1-1: SerialNumber: syz [ 448.611172][T11438] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 448.645126][ T47] usb 5-1: USB disconnect, device number 16 [ 448.654950][ T5147] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input23 [ 448.768156][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 449.011676][T11438] input: syz0 as /devices/virtual/input/input24 [ 449.245953][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 449.246554][ T5147] usb 1-1: USB disconnect, device number 30 [ 449.384688][ T5147] appletouch 1-1:1.0: input: appletouch disconnected [ 449.438651][ C0] eth0: bad gso: type: 1, size: 1408 [ 449.795357][T11470] netlink: 'syz.1.1961': attribute type 11 has an invalid length. [ 449.815797][T11470] netlink: 'syz.1.1961': attribute type 11 has an invalid length. [ 449.832354][T11470] debugfs: Directory 'netdev:' with parent 'phy25' already present! [ 450.085995][T11478] netlink: 'syz.3.1965': attribute type 2 has an invalid length. [ 450.130197][ T59] gspca_sunplus: reg_w_riv err -71 [ 450.142152][ T59] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 450.172166][ T59] usb 3-1: USB disconnect, device number 26 [ 450.348320][T11485] syz.3.1966: attempt to access beyond end of device [ 450.348320][T11485] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 450.362297][T11485] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 450.848541][T11494] x_tables: ip_tables: ah match: only valid for protocol 51 [ 451.411371][T11512] netlink: 'syz.0.1977': attribute type 2 has an invalid length. [ 451.785679][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 452.755358][T11543] block nbd0: server does not support multiple connections per device. [ 452.800292][ T29] audit: type=1326 audit(1721767015.369:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11542 comm="syz.0.1986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x0 [ 453.479313][T11542] block nbd0: shutting down sockets [ 453.533987][ T5147] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 453.743994][ T5147] usb 5-1: Using ep0 maxpacket: 16 [ 453.779290][ T5147] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.821994][ T5147] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 453.843979][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.882885][ T5147] usb 5-1: Product: syz [ 453.896075][ T5147] usb 5-1: Manufacturer: syz [ 453.909117][ T5147] usb 5-1: SerialNumber: syz [ 453.948226][ T5147] usb 5-1: config 0 descriptor?? [ 453.962129][ T5147] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 454.000982][ T5147] dvb-usb: bulk message failed: -22 (3/0) [ 454.039382][ T29] audit: type=1326 audit(1721767016.599:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.0.1992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x0 [ 454.060525][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.146441][ T5147] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-22) [ 454.163382][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 454.194833][ T5147] dvb_usb_umt_010 5-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 454.231997][ T5147] usb 5-1: USB disconnect, device number 17 [ 454.620117][T11574] bridge1: entered promiscuous mode [ 454.628360][T11574] bridge1: entered allmulticast mode [ 455.482688][T11580] overlayfs: workdir and upperdir must reside under the same mount [ 457.786542][ T59] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 458.008704][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.028597][ T59] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.044472][ T59] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.060845][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.081481][ T59] usb 2-1: config 0 descriptor?? [ 458.691528][T11624] 9p: Unknown access argument 18446744073709551615: -34 [ 459.715611][ T59] usbhid 2-1:0.0: can't add hid device: -71 [ 459.729582][ T59] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 459.756781][ T59] usb 2-1: USB disconnect, device number 23 [ 461.077224][T11643] block nbd1: NBD_DISCONNECT [ 461.128800][T11643] block nbd1: Disconnected due to user request. [ 461.181782][T11643] block nbd1: shutting down sockets [ 461.663635][T11660] hub 9-0:1.0: USB hub found [ 461.672583][T11660] hub 9-0:1.0: 8 ports detected [ 462.253194][T11666] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 462.378393][T11665] IPVS: stopping master sync thread 11666 ... [ 463.546075][T11677] bridge2: entered promiscuous mode [ 463.551426][T11677] bridge2: entered allmulticast mode [ 463.810364][T11676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2036'. [ 463.837293][T11676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2036'. [ 464.278958][T11687] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 464.301311][T11687] team0: Device ipvlan1 failed to register rx_handler [ 465.800762][T11710] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 465.819372][T11710] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2044'. [ 466.088568][T11720] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2050'. [ 466.211139][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2050'. [ 466.445829][T11724] hub 9-0:1.0: USB hub found [ 466.454080][T11724] hub 9-0:1.0: 8 ports detected [ 467.684265][T11731] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2052'. [ 467.701208][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2052'. [ 467.935884][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 468.198083][T11754] block nbd0: NBD_DISCONNECT [ 468.207226][T11754] block nbd0: Disconnected due to user request. [ 468.225313][T11754] block nbd0: shutting down sockets [ 469.183378][T11759] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 469.368719][T11759] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2059'. [ 469.565436][T11767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2062'. [ 469.625760][T11767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2062'. [ 469.654461][T11769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2063'. [ 473.143897][ T5147] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 473.686835][ T5147] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 473.711106][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.771790][ T5147] usb 4-1: config 0 descriptor?? [ 473.789758][ T5147] cp210x 4-1:0.0: cp210x converter detected [ 474.260577][ T5147] usb 4-1: cp210x converter now attached to ttyUSB0 [ 474.281475][ T5147] usb 4-1: USB disconnect, device number 23 [ 474.307930][ T5147] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 474.332554][ T5147] cp210x 4-1:0.0: device disconnected [ 474.434763][T11862] netlink: 'syz.0.2097': attribute type 10 has an invalid length. [ 474.593235][T11862] team0: Device ipvlan1 failed to register rx_handler [ 474.840759][T11873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 476.725325][T11890] xt_TCPMSS: Only works on TCP SYN packets [ 476.908892][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'. [ 477.011405][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 477.225865][ T5098] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 477.234677][ T29] audit: type=1326 audit(1721767039.799:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11881 comm="syz.4.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cef75f19 code=0x7fc00000 [ 478.036180][ T5098] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 478.057149][ T5098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.096587][ T5098] usb 2-1: config 0 descriptor?? [ 478.177876][ T5098] cp210x 2-1:0.0: cp210x converter detected [ 478.485297][T11919] netlink: 'syz.2.2116': attribute type 10 has an invalid length. [ 478.575017][T11919] team0: Device ipvlan1 failed to register rx_handler [ 478.600418][ T5098] usb 2-1: cp210x converter now attached to ttyUSB0 [ 478.632153][ T5098] usb 2-1: USB disconnect, device number 24 [ 478.686991][ T5098] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 478.805261][T11924] overlayfs: workdir and upperdir must reside under the same mount [ 481.526787][ T5098] cp210x 2-1:0.0: device disconnected [ 482.678103][T11944] 9p: Unknown access argument 18446744073709551615: -34 [ 483.096421][T11959] netlink: 'syz.3.2125': attribute type 4 has an invalid length. [ 483.105133][T11959] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2125'. [ 483.469487][T11970] dvmrp5: entered allmulticast mode [ 484.330793][T11974] libceph: resolve 'c' (ret=-3): failed [ 486.262989][T11988] netlink: 'syz.2.2131': attribute type 10 has an invalid length. [ 486.279458][T11988] team0: Device ipvlan1 failed to register rx_handler [ 487.057034][T12006] netlink: 'syz.3.2138': attribute type 7 has an invalid length. [ 487.098210][T12006] netlink: 'syz.3.2138': attribute type 39 has an invalid length. [ 487.195075][T12012] bridge1: port 1(gretap2) entered blocking state [ 487.214470][T12012] bridge1: port 1(gretap2) entered disabled state [ 487.234011][ T29] audit: type=1326 audit(1721767049.799:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11994 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ca175f19 code=0x7fc00000 [ 487.255606][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.255922][T12012] gretap2: entered allmulticast mode [ 487.257307][T12012] gretap2: entered promiscuous mode [ 487.322597][T12017] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 487.404278][T12006] netlink: 'syz.3.2138': attribute type 7 has an invalid length. [ 487.449464][T12006] netlink: 'syz.3.2138': attribute type 39 has an invalid length. [ 487.513597][T12025] libceph: resolve 'c' (ret=-3): failed [ 489.287504][T12051] dvmrp5: entered allmulticast mode [ 489.891033][T12047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.013277][T12054] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 490.069614][T12060] netlink: 'syz.3.2153': attribute type 10 has an invalid length. [ 490.165021][T12060] team0: Device ipvlan1 failed to register rx_handler [ 490.859421][T12086] netlink: 'syz.3.2163': attribute type 4 has an invalid length. [ 490.869409][T12086] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2163'. [ 490.964124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.004008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.322674][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 494.454069][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2173'. [ 494.546969][T12115] netlink: 'syz.1.2174': attribute type 10 has an invalid length. [ 494.575343][T12115] team0: Device ipvlan1 failed to register rx_handler [ 494.686283][T12124] syz.4.2179[12124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.686430][T12124] syz.4.2179[12124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.076747][T12142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.133871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.163804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.418923][ T29] audit: type=1326 audit(1721767060.989:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12172 comm="syz.3.2192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x0 [ 501.817537][ T59] kernel write not supported for file /dsp (pid: 59 comm: kworker/0:2) [ 501.860117][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.860240][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.084650][ T29] audit: type=1326 audit(1721767064.649:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12211 comm="syz.0.2208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8076775f19 code=0x0 [ 506.685436][T12260] devtmpfs: Bad value for 'mpol' [ 507.836037][T12300] devtmpfs: Bad value for 'mpol' [ 508.028399][ T29] audit: type=1326 audit(1721767070.599:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12310 comm="syz.3.2241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4abc975f19 code=0x0 [ 509.523489][ T29] audit: type=1326 audit(1721767072.089:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12285 comm="syz.1.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ca175f19 code=0x7fc00000 [ 511.874762][T12363] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2255'. [ 514.385517][ T59] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 515.451652][T12383] ipt_REJECT: TCP_RESET invalid for non-tcp [ 515.480293][T12383] syz.1.2263 (12383): attempted to duplicate a private mapping with mremap. This is not supported. [ 515.544379][ T59] usb 3-1: device not accepting address 27, error -71 [ 516.693307][T12404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.189544][T12413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2271'. [ 517.273475][T12400] syz.1.2263 (12400): drop_caches: 2 [ 517.673910][ T59] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 517.809180][T12441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2278'. [ 517.850511][T10640] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 517.957436][ T59] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=79.b0 [ 518.059105][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.067898][T10640] usb 1-1: Using ep0 maxpacket: 8 [ 518.192403][T12445] Cannot find add_set index 0 as target [ 518.199690][T10640] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 518.674947][T10640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.687253][ T59] usb 3-1: config 0 descriptor?? [ 518.916705][ T59] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 518.948368][T10640] usb 1-1: config 0 descriptor?? [ 518.964194][T12440] usb usb8: usbfs: process 12440 (syz.4.2284) did not claim interface 0 before use [ 518.974730][ T59] dvb-usb: bulk message failed: -22 (2/0) [ 519.012738][ T29] audit: type=1326 audit(1721767081.569:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.4.2284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67cef75f19 code=0x0 [ 519.051887][ T59] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-22) [ 519.081658][ T59] dvb_usb_cxusb 3-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 519.138729][ T59] usb 3-1: USB disconnect, device number 29 [ 519.181361][ T5147] usb 1-1: USB disconnect, device number 31 [ 519.434368][T12462] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262161 (only 8 groups) [ 520.775383][T12485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2295'. [ 521.019221][T12495] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2303'. [ 521.029033][T12494] fuse: Bad value for 'fd' [ 521.394845][ T5098] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 521.545153][T12526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2310'. [ 521.583771][ T5098] usb 5-1: Using ep0 maxpacket: 8 [ 521.591125][ T5098] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d7.4d [ 521.609934][ T5098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.629351][ T5098] usb 5-1: config 0 descriptor?? [ 521.646760][ T5098] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 521.669623][T12525] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 521.685575][T10640] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 521.728912][T12525] kvm: pic: non byte read [ 521.735831][T12525] kvm: pic: non byte read [ 521.742821][T12525] kvm: pic: level sensitive irq not supported [ 521.743167][T12525] kvm: pic: non byte read [ 521.755059][T12525] kvm: pic: non byte read [ 521.760767][T12525] kvm: pic: level sensitive irq not supported [ 521.760883][T12525] kvm: pic: non byte read [ 521.850405][ T5098] gspca_vc032x: reg_w err -71 [ 521.859260][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.865547][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.872127][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.882177][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.894683][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.896748][T10640] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=79.b0 [ 521.905218][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.914723][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.921310][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.930342][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.937905][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.944098][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.948135][T10640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.953850][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.962837][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.981172][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 521.995125][T10640] usb 4-1: config 0 descriptor?? [ 522.001315][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 522.012430][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 522.018147][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 522.024304][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 522.036193][ T5098] gspca_vc032x: I2c Bus Busy Wait 00 [ 522.042038][T10640] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 522.054707][ T5098] gspca_vc032x: Unknown sensor... [ 522.064075][ T5098] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 522.081853][T10640] dvb-usb: bulk message failed: -22 (2/0) [ 522.109926][T10640] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-22) [ 522.130061][T10640] dvb_usb_cxusb 4-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 522.133534][ T5098] usb 5-1: USB disconnect, device number 18 [ 522.249460][T10640] usb 4-1: USB disconnect, device number 24 [ 522.694546][ T5098] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 522.895524][ T5098] usb 1-1: Using ep0 maxpacket: 32 [ 522.914842][ T5098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 522.938812][ T5098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 522.942538][T12569] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2327'. [ 522.967175][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2325'. [ 522.989101][ T5098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 523.012416][ T5098] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=88.ea [ 523.024005][ T5098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.032121][ T5098] usb 1-1: Product: syz [ 523.037285][ T5098] usb 1-1: Manufacturer: syz [ 523.041962][ T5098] usb 1-1: SerialNumber: syz [ 523.053032][ T5098] usb 1-1: config 0 descriptor?? [ 523.072639][ T5098] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 523.333940][T10640] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 523.524722][T10640] usb 2-1: Using ep0 maxpacket: 8 [ 523.546886][T10640] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d7.4d [ 523.578191][ T5098] usb 1-1: USB disconnect, device number 32 [ 523.580268][T10640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.603453][T10640] usb 2-1: config 0 descriptor?? [ 523.659541][T10640] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 523.827927][T10640] gspca_vc032x: reg_w err -71 [ 523.832669][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.864411][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.869768][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.898054][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.904019][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.910050][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.923866][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.929200][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.945557][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.963264][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.974869][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.980219][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.991750][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.998946][T12599] netlink: 199356 bytes leftover after parsing attributes in process `syz.4.2335'. [ 524.013109][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.020954][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.030865][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'. [ 524.042969][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.053298][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.069454][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.078862][T10640] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.084312][T10640] gspca_vc032x: Unknown sensor... [ 524.091822][T10640] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 524.105125][ T29] audit: type=1326 audit(1721767086.679:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12600 comm="syz.2.2336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f952a175f19 code=0x0 [ 524.129216][T10640] usb 2-1: USB disconnect, device number 25 [ 524.194403][T12599] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 524.494136][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 524.544766][ T5098] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 524.594849][ T59] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 524.700752][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 524.714662][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 524.733853][ T5098] usb 4-1: Using ep0 maxpacket: 8 [ 524.739082][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 524.748733][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.759548][ T5098] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 524.770486][ T5098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.780075][ T25] usb 5-1: config 0 descriptor?? [ 524.791512][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 524.809550][ T5098] usb 4-1: config 0 descriptor?? [ 524.955636][ T59] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=79.b0 [ 524.973761][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.992995][ T59] usb 1-1: config 0 descriptor?? [ 525.000969][ T59] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 525.013810][ T59] dvb-usb: bulk message failed: -22 (2/0) [ 525.387766][T12599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.754417][T12599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.765150][ T59] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-22) [ 525.766515][ T25] usb 4-1: USB disconnect, device number 25 [ 525.777854][ T59] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 526.343746][ T59] usb 1-1: USB disconnect, device number 33 [ 527.104641][T12664] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262161 (only 8 groups) [ 527.897403][ T59] usb 5-1: USB disconnect, device number 19 [ 528.224040][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 528.386157][T12682] [ 528.388537][T12682] ====================================================== [ 528.395563][T12682] WARNING: possible circular locking dependency detected [ 528.402595][T12682] 6.10.0-syzkaller-12084-g28bbe4ea686a #0 Not tainted [ 528.409356][T12682] ------------------------------------------------------ [ 528.416367][T12682] syz.4.2361/12682 is trying to acquire lock: [ 528.422419][T12682] ffff888015b27488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 528.431756][T12682] [ 528.431756][T12682] but task is already holding lock: [ 528.439112][T12682] ffff88802a31c468 (&pipe->mutex){+.+.}-{3:3}, at: iter_file_splice_write+0x335/0x14e0 [ 528.448770][T12682] [ 528.448770][T12682] which lock already depends on the new lock. [ 528.448770][T12682] [ 528.459274][T12682] [ 528.459274][T12682] the existing dependency chain (in reverse order) is: [ 528.468275][T12682] [ 528.468275][T12682] -> #2 (&pipe->mutex){+.+.}-{3:3}: [ 528.475656][T12682] lock_acquire+0x1ed/0x550 [ 528.480683][T12682] __mutex_lock+0x136/0xd70 [ 528.485698][T12682] pipe_write+0x1c9/0x1a40 [ 528.490626][T12682] __kernel_write_iter+0x47e/0x900 [ 528.496330][T12682] __kernel_write+0x120/0x180 [ 528.501513][T12682] autofs_notify_daemon+0x732/0xf80 [ 528.507219][T12682] autofs_wait+0x10b8/0x1b30 [ 528.512327][T12682] autofs_mount_wait+0x170/0x330 [ 528.517784][T12682] autofs_d_automount+0x555/0x710 [ 528.523338][T12682] __traverse_mounts+0x2ba/0x580 [ 528.528797][T12682] step_into+0x5e5/0x1080 [ 528.533649][T12682] path_openat+0x184b/0x3470 [ 528.538753][T12682] do_filp_open+0x235/0x490 [ 528.543767][T12682] do_sys_openat2+0x13e/0x1d0 [ 528.548955][T12682] __x64_sys_openat+0x247/0x2a0 [ 528.554316][T12682] do_syscall_64+0xf3/0x230 [ 528.559330][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.565737][T12682] [ 528.565737][T12682] -> #1 (&sbi->pipe_mutex){+.+.}-{3:3}: [ 528.573465][T12682] lock_acquire+0x1ed/0x550 [ 528.578482][T12682] __mutex_lock+0x136/0xd70 [ 528.583505][T12682] autofs_notify_daemon+0x71f/0xf80 [ 528.589243][T12682] autofs_wait+0x10b8/0x1b30 [ 528.594355][T12682] autofs_mount_wait+0x170/0x330 [ 528.599803][T12682] autofs_d_automount+0x555/0x710 [ 528.605339][T12682] __traverse_mounts+0x2ba/0x580 [ 528.610791][T12682] step_into+0x5e5/0x1080 [ 528.615629][T12682] path_lookupat+0x16f/0x450 [ 528.620734][T12682] filename_lookup+0x256/0x610 [ 528.626016][T12682] kern_path+0x35/0x50 [ 528.630595][T12682] lookup_bdev+0xc5/0x290 [ 528.635431][T12682] resume_store+0x1a0/0x710 [ 528.640441][T12682] kernfs_fop_write_iter+0x3a1/0x500 [ 528.646235][T12682] iter_file_splice_write+0xbd7/0x14e0 [ 528.652211][T12682] direct_splice_actor+0x11e/0x220 [ 528.657921][T12682] splice_direct_to_actor+0x58e/0xc90 [ 528.663810][T12682] do_splice_direct+0x28c/0x3e0 [ 528.669171][T12682] do_sendfile+0x56d/0xe20 [ 528.674099][T12682] __se_sys_sendfile64+0x17c/0x1e0 [ 528.679733][T12682] do_syscall_64+0xf3/0x230 [ 528.684758][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.691162][T12682] [ 528.691162][T12682] -> #0 (&of->mutex){+.+.}-{3:3}: [ 528.698364][T12682] validate_chain+0x18e0/0x5900 [ 528.703728][T12682] __lock_acquire+0x137a/0x2040 [ 528.709095][T12682] lock_acquire+0x1ed/0x550 [ 528.714132][T12682] __mutex_lock+0x136/0xd70 [ 528.719439][T12682] kernfs_fop_write_iter+0x1eb/0x500 [ 528.725246][T12682] iter_file_splice_write+0xbd7/0x14e0 [ 528.731248][T12682] do_splice+0xd77/0x1900 [ 528.736104][T12682] __se_sys_splice+0x331/0x4a0 [ 528.741378][T12682] do_syscall_64+0xf3/0x230 [ 528.746399][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.752811][T12682] [ 528.752811][T12682] other info that might help us debug this: [ 528.752811][T12682] [ 528.763033][T12682] Chain exists of: [ 528.763033][T12682] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 528.763033][T12682] [ 528.775469][T12682] Possible unsafe locking scenario: [ 528.775469][T12682] [ 528.782917][T12682] CPU0 CPU1 [ 528.788360][T12682] ---- ---- [ 528.793711][T12682] lock(&pipe->mutex); [ 528.797860][T12682] lock(&sbi->pipe_mutex); [ 528.804964][T12682] lock(&pipe->mutex); [ 528.811639][T12682] lock(&of->mutex); [ 528.815612][T12682] [ 528.815612][T12682] *** DEADLOCK *** [ 528.815612][T12682] [ 528.823744][T12682] 2 locks held by syz.4.2361/12682: [ 528.828933][T12682] #0: ffff88802f3a8420 (sb_writers#8){.+.+}-{0:0}, at: do_splice+0xcf0/0x1900 [ 528.837913][T12682] #1: ffff88802a31c468 (&pipe->mutex){+.+.}-{3:3}, at: iter_file_splice_write+0x335/0x14e0 [ 528.848114][T12682] [ 528.848114][T12682] stack backtrace: [ 528.854002][T12682] CPU: 0 UID: 0 PID: 12682 Comm: syz.4.2361 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 528.864415][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 528.874463][T12682] Call Trace: [ 528.877734][T12682] [ 528.880653][T12682] dump_stack_lvl+0x241/0x360 [ 528.885331][T12682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.890530][T12682] ? print_circular_bug+0x130/0x1a0 [ 528.895733][T12682] check_noncircular+0x36a/0x4a0 [ 528.900664][T12682] ? check_path+0x21/0x40 [ 528.905096][T12682] ? __pfx_check_noncircular+0x10/0x10 [ 528.910577][T12682] ? lockdep_lock+0x123/0x2b0 [ 528.915250][T12682] validate_chain+0x18e0/0x5900 [ 528.920098][T12682] ? __pfx_validate_chain+0x10/0x10 [ 528.925289][T12682] ? look_up_lock_class+0x77/0x160 [ 528.930421][T12682] ? register_lock_class+0x102/0x980 [ 528.935701][T12682] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 528.941671][T12682] ? __pfx_register_lock_class+0x10/0x10 [ 528.947297][T12682] ? mark_lock+0x9a/0x350 [ 528.951620][T12682] ? lockdep_hardirqs_on+0x99/0x150 [ 528.956812][T12682] __lock_acquire+0x137a/0x2040 [ 528.961663][T12682] lock_acquire+0x1ed/0x550 [ 528.966159][T12682] ? kernfs_fop_write_iter+0x1eb/0x500 [ 528.971874][T12682] ? __pfx_lock_acquire+0x10/0x10 [ 528.976992][T12682] ? __pfx___might_resched+0x10/0x10 [ 528.982268][T12682] ? __virt_addr_valid+0x183/0x530 [ 528.987375][T12682] ? _copy_from_iter+0x7ed/0x1960 [ 528.992392][T12682] __mutex_lock+0x136/0xd70 [ 528.996974][T12682] ? kernfs_fop_write_iter+0x1eb/0x500 [ 529.002424][T12682] ? kernfs_fop_write_iter+0x1eb/0x500 [ 529.007874][T12682] ? __pfx___mutex_lock+0x10/0x10 [ 529.012889][T12682] ? __virt_addr_valid+0x183/0x530 [ 529.017989][T12682] ? __virt_addr_valid+0x183/0x530 [ 529.023089][T12682] ? __virt_addr_valid+0x45f/0x530 [ 529.028188][T12682] ? __check_object_size+0x49c/0x900 [ 529.033466][T12682] kernfs_fop_write_iter+0x1eb/0x500 [ 529.038764][T12682] iter_file_splice_write+0xbd7/0x14e0 [ 529.044229][T12682] ? __pfx_iter_file_splice_write+0x10/0x10 [ 529.050293][T12682] ? rcu_read_lock_any_held+0xb7/0x160 [ 529.055754][T12682] ? __pfx_iter_file_splice_write+0x10/0x10 [ 529.061731][T12682] do_splice+0xd77/0x1900 [ 529.066059][T12682] ? __pfx_lock_release+0x10/0x10 [ 529.071167][T12682] ? __pfx_reacquire_held_locks+0x10/0x10 [ 529.076877][T12682] ? pipe_clear_nowait+0x196/0x220 [ 529.081976][T12682] ? __pfx_do_splice+0x10/0x10 [ 529.086736][T12682] __se_sys_splice+0x331/0x4a0 [ 529.091493][T12682] ? __pfx___se_sys_splice+0x10/0x10 [ 529.096852][T12682] ? exc_page_fault+0x590/0x8c0 [ 529.101693][T12682] ? __x64_sys_splice+0x21/0xf0 [ 529.106535][T12682] do_syscall_64+0xf3/0x230 [ 529.111033][T12682] ? clear_bhb_loop+0x35/0x90 [ 529.115700][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.121599][T12682] RIP: 0033:0x7f67cef75f19 [ 529.126021][T12682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.145621][T12682] RSP: 002b:00007f67cfc88048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 529.154026][T12682] RAX: ffffffffffffffda RBX: 00007f67cf106038 RCX: 00007f67cef75f19 [ 529.161985][T12682] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 529.170029][T12682] RBP: 00007f67cefe4e68 R08: 000000000004ffe2 R09: 0000000000000000 [ 529.177998][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.185961][T12682] R13: 000000000000006e R14: 00007f67cf106038 R15: 00007ffc4654d168 [ 529.193944][T12682] [ 529.197065][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.224228][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 529.235354][ T25] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 529.249058][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.266663][ T25] usb 2-1: config 0 descriptor?? [ 529.497833][ T59] usb 2-1: USB disconnect, device number 26