last executing test programs: 8.896349883s ago: executing program 0 (id=3314): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0], 0x0, 0x0, 0xfffffffffffffd28, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) 6.786059158s ago: executing program 1 (id=3333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @sack_perm, @timestamp], 0x4) 5.756288147s ago: executing program 1 (id=3335): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 5.356372961s ago: executing program 0 (id=3339): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "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"}, 0xff8) 5.355979675s ago: executing program 3 (id=3340): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000030800"/20], 0x14}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x24, [0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x20000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x7ee6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x1521, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe, 0x0, 0x0, 0x0, 0x4, 0x6, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81f, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x10000000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0xf25, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0xfffff07f, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0x0, 0xe6c7, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{0x0}], 0x1) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_ro(r4, 0x0, 0x100002, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000082505a0a4400000000101090244000101000000090400001202060000052406000005240000000d240f0100000000000000000009058103"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="d23cc1a2129879588f623e750102036a73a9000000000000000000000000000000000000d449ae5b502ad9cefb"], 0x0) 5.274316164s ago: executing program 0 (id=3342): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) close(r0) 4.716418814s ago: executing program 4 (id=3344): r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000280)) 4.647969724s ago: executing program 0 (id=3345): add_key$user(0x0, 0x0, &(0x7f0000000140)="00c2", 0x2, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32\x00'}, &(0x7f0000000080)="68c07eee8dda39423c2bd4875bb35d6ce8feee8fe63c286b8952af0a41b4f09939711833a9e9a7b68697888028231931f7188b", 0x33}) 4.529492573s ago: executing program 4 (id=3346): r0 = open(&(0x7f0000000100)='./bus\x00', 0x14507e, 0x0) r1 = eventfd2(0x20, 0x0) dup2(r1, r0) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x442140, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x89e1, &(0x7f0000000280)={'batadv_slave_0\x00'}) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) chdir(&(0x7f00000001c0)='./bus\x00') 4.424254694s ago: executing program 0 (id=3347): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0xffffffff}) 4.393576121s ago: executing program 1 (id=3348): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x3e, 0x1, 0x7fff, 0x20, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x2, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x1, 0x0, 0x0}) 3.411909585s ago: executing program 1 (id=3349): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 3.350832652s ago: executing program 2 (id=3350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x7, 0x0, 0x0) 3.292333305s ago: executing program 4 (id=3351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x65c}, {}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop]}}}}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000380)="c6f8ec66b8cb52000066ba000000000f30a766b9321001c00f7f1766ba5ba63d42101030b800008ec866b9330900000f320fc79a92636736660f3a0e78f600baf80c66b882adb78d66efbafc0ced0f07", 0x50}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.474637062s ago: executing program 2 (id=3352): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x1ff}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r4, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={0xd8}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000480)={0x4, 0x0, [{0x0, 0x9, 0x1, 0x193, 0x6, 0x0, 0x1}, {0x80000008, 0x2, 0x5, 0x0, 0x4769, 0x0, 0x80000000}, {0x0, 0xfff, 0x0, 0x80000001, 0x8001, 0x0, 0x3}, {0x6, 0x1, 0x5, 0x2b40, 0x4, 0xd}]}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1, @remote, @private1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r1}) 2.249791559s ago: executing program 2 (id=3353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llx}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.06164985s ago: executing program 2 (id=3354): ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000840), 0x20042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) write$sequencer(r0, &(0x7f0000000240)=ANY=[], 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 1.812315235s ago: executing program 3 (id=3355): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000008c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000003c80)="e3", 0x1}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x6, 0x1, [0x0]}, 0xa) 1.680653176s ago: executing program 3 (id=3356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.628170189s ago: executing program 2 (id=3357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000110000006700000020010000000000000009000000000000001ab6069c9e103e6603b255dd3aa9c6d988dc9070a7f4f227fdb41db3f3", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) syz_emit_vhci(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x1000f0000) 872.2224ms ago: executing program 4 (id=3358): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4), 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010025bd7000ffdbdf25210000000800", @ANYRES32=r5], 0xd4}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800010000000000000000000a0000000000000014000880100009800b"], 0x2c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r8}, 0x10) bpf$LINK_DETACH(0xf, &(0x7f0000000080)=r9, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) socket(0x8000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfb) 414.962977ms ago: executing program 3 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4cd07ec3ee777de774"}}]}]}, 0x5c}}, 0x0) 406.751379ms ago: executing program 0 (id=3360): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000004b57"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) tkill(0x0, 0x8000) sched_setscheduler(r1, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) accept$unix(r2, &(0x7f0000000080), 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x10, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1023, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000000)={0x3, 0xfffffffd}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) 215.186457ms ago: executing program 3 (id=3361): iopl(0x3) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0xfffffdeb) 214.773607ms ago: executing program 1 (id=3362): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x1260, 0xffffffffffffffff) 141.639831ms ago: executing program 4 (id=3363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 139.284939ms ago: executing program 2 (id=3364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4c1d327147e1a2c66065501cbb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f000001fa40)=[{0xffffffffffffffff, 0x14}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x3000, 0x2000, &(0x7f0000285000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) 58.824128ms ago: executing program 1 (id=3365): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 245.599µs ago: executing program 3 (id=3366): bind$qrtr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000151000/0x4000)=nil, 0x4000) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x1, 0x7, 0x0, 0x0, 0x0, {0x8, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x20, 0x13, 0xa29}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x34, 0x26, 0x0, 0x70bd2c, 0x400, {0x0, 0x0, 0x0, 0x0, {0x1c, 0x9}, {0x0, 0x6}, {0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x0) 0s ago: executing program 4 (id=3367): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): .2406'. [ 585.956817][T12913] usb usb8: usbfs: process 12913 (syz.2.2410) did not claim interface 0 before use [ 585.994516][T12918] usb usb8: usbfs: process 12918 (syz.4.2357) did not claim interface 0 before use [ 586.032325][ T46] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 586.256721][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.277558][ T46] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 586.308187][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.332072][T12928] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.349741][ T46] usb 4-1: config 0 descriptor?? [ 586.357935][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 586.770634][ T46] pwc: recv_control_msg error -32 req 02 val 2b00 [ 586.807902][ T46] pwc: recv_control_msg error -32 req 02 val 2700 [ 586.830301][ T46] pwc: recv_control_msg error -32 req 02 val 2c00 [ 586.845781][ T46] pwc: recv_control_msg error -32 req 04 val 1000 [ 586.863072][ T46] pwc: recv_control_msg error -32 req 04 val 1300 [ 586.873300][ T46] pwc: recv_control_msg error -32 req 04 val 1400 [ 586.885792][ T46] pwc: recv_control_msg error -32 req 02 val 2000 [ 586.902974][ T46] pwc: recv_control_msg error -32 req 02 val 2100 [ 586.913592][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 587.110693][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 587.124256][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.124277][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 587.151514][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 587.180721][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 587.187282][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.189390][ T9] usb 5-1: config 0 descriptor?? [ 587.204720][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 587.413019][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 587.425779][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 587.435316][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 587.446823][ T46] pwc: Registered as video71. [ 587.447733][ T9] usb 5-1: string descriptor 0 read error: -71 [ 587.460868][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 587.556431][T12946] input: syz0 as /devices/virtual/input/input55 [ 587.850471][ T9] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 587.858661][ T9] usb 5-1: No valid video chain found. [ 587.868157][ T9] usb 5-1: USB disconnect, device number 45 [ 587.892539][ T46] usb 4-1: USB disconnect, device number 60 [ 588.033158][ T5000] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 588.112376][T12951] netlink: 'syz.3.2421': attribute type 26 has an invalid length. [ 588.145503][T12953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.222643][ T5000] usb 3-1: Using ep0 maxpacket: 8 [ 588.240069][ T5000] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.251762][ T5000] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.287935][ T5000] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.326795][ T5000] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 588.343880][ T5000] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 588.371092][ T5000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 588.385719][ T5000] usb 3-1: SerialNumber: syz [ 588.414090][ T5000] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 588.431826][ T5000] usbtest 3-1:1.0: Linux gadget zero [ 588.449077][ T5000] usbtest 3-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 588.622780][T12940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.631379][T12940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.823642][T12977] kernel read not supported for file /  (pid: 12977 comm: syz.4.2432) [ 588.839240][ T29] audit: type=1800 audit(2000000210.689:489): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2432" name=2001 dev="mqueue" ino=45646 res=0 errno=0 [ 594.381460][ T5344] usb 3-1: USB disconnect, device number 63 [ 595.394250][T13018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2446'. [ 595.523065][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069c78c00: rx timeout, send abort [ 596.031375][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069c78c00: abort rx timeout. Force session deactivation [ 597.119908][T13034] tipc: Enabling of bearer rejected, already enabled [ 597.270512][T13041] syzkaller1: entered promiscuous mode [ 597.292889][T13041] syzkaller1: entered allmulticast mode [ 597.582304][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 597.769309][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.780275][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.790527][ T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice=b8.63 [ 597.800576][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.810027][ T9] usb 4-1: config 0 descriptor?? [ 598.183389][T13065] IPv6: Can't replace route, no match found [ 599.415906][ T5216] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 599.570985][T13081] Bluetooth: hci3: invalid length 0, exp 2 for type 27 [ 599.922561][ T25] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 600.975234][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.018634][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 601.089328][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.112383][ T46] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 601.120128][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.179567][ T25] usb 1-1: config 0 descriptor?? [ 601.337567][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.391407][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.432488][ T46] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 601.495455][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.536445][ T46] usb 2-1: config 0 descriptor?? [ 601.839562][ T25] plantronics 0003:047F:FFFF.003B: No inputs registered, leaving [ 601.907417][ T25] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 602.032961][ T46] zeroplus 0003:0C12:0030.003C: unknown main item tag 0x0 [ 602.083735][ T46] zeroplus 0003:0C12:0030.003C: hidraw1: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 602.110066][ T46] zeroplus 0003:0C12:0030.003C: no inputs found [ 602.190156][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 602.362335][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 603.192723][ T9] usb 4-1: USB disconnect, device number 61 [ 603.367995][T12402] usb 2-1: USB disconnect, device number 57 [ 603.413839][ T25] usb 1-1: USB disconnect, device number 49 [ 603.672458][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 603.681381][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 604.924674][ T5000] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 604.945862][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 605.059543][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 605.417331][ T5000] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 605.782291][ T5000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.790349][ T5000] usb 2-1: Product: syz [ 605.802881][ T5000] usb 2-1: Manufacturer: syz [ 605.808441][ T5000] usb 2-1: SerialNumber: syz [ 605.808946][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.827040][ T5000] usb 2-1: config 0 descriptor?? [ 605.864965][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.897599][ T9] usb 5-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 605.917891][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.938270][ T9] usb 5-1: config 0 descriptor?? [ 606.279283][T13158] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2486'. [ 606.324466][T12402] usb 2-1: USB disconnect, device number 58 [ 606.410391][ T9] lenovo 0003:04B3:3100.003D: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.4-1/input0 [ 606.692716][T12402] usb 5-1: USB disconnect, device number 46 [ 607.815667][T13172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.835758][T13172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.968438][T13172] ip_vti0 speed is unknown, defaulting to 1000 [ 608.253198][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2492'. [ 608.453776][T13181] libceph: resolve '. [ 608.453776][T13181] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 608.453776][T13181] ' (ret=-3): failed [ 608.572594][ T5344] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 608.748211][T13181] Restarting kernel threads ... done. [ 608.772503][ T5344] usb 4-1: Using ep0 maxpacket: 32 [ 608.787148][ T5344] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 608.801896][ T5344] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=db.ca [ 608.818408][T13181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2493'. [ 608.829556][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.841443][ T5344] usb 4-1: config 0 descriptor?? [ 608.865503][ T5344] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56 [ 610.998311][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 611.287374][T12402] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 612.070174][T12402] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 612.126673][T12402] usb 3-1: config 1 interface 0 has no altsetting 1 [ 612.126900][ T4654] bcm5974 4-1:0.0: could not read from device [ 612.161610][T12402] usb 3-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 612.195215][T12402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.208375][ T4654] bcm5974 4-1:0.0: could not read from device [ 612.231969][ T5344] usb 4-1: USB disconnect, device number 62 [ 612.238404][T12402] usb 3-1: Product: syz [ 612.253368][T12402] usb 3-1: Manufacturer: syz [ 612.269007][T12402] usb 3-1: SerialNumber: syz [ 612.502268][ T5000] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 612.572744][ T5344] usb 3-1: USB disconnect, device number 64 [ 612.622581][T13242] xt_time: unknown flags 0x4 [ 612.638921][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2511'. [ 612.872907][ T5000] usb 2-1: device descriptor read/64, error -71 [ 613.162805][ T5000] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 613.454842][ T5000] usb 2-1: device descriptor read/64, error -71 [ 613.572759][ T5000] usb usb2-port1: attempt power cycle [ 614.022531][ T5000] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 614.073122][ T5000] usb 2-1: device descriptor read/8, error -71 [ 614.081261][ T29] audit: type=1326 audit(2000000235.929:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13272 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d417779f9 code=0x7ffc0000 [ 614.141803][ T29] audit: type=1326 audit(2000000235.929:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13272 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d417779f9 code=0x7ffc0000 [ 614.217806][ T29] audit: type=1326 audit(2000000235.929:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13272 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7d417779f9 code=0x7ffc0000 [ 614.303624][ T29] audit: type=1326 audit(2000000235.929:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13272 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d417779f9 code=0x7ffc0000 [ 614.362464][ T5000] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 614.397626][ T29] audit: type=1326 audit(2000000235.929:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13272 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d417779f9 code=0x7ffc0000 [ 614.454797][ T5000] usb 2-1: device descriptor read/8, error -71 [ 614.695810][ T5000] usb usb2-port1: unable to enumerate USB device [ 618.684506][T13343] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 619.790722][ T29] audit: type=1326 audit(2000000241.449:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.242370][ T29] audit: type=1326 audit(2000000241.449:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.315952][ T29] audit: type=1326 audit(2000000241.469:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.337883][ T29] audit: type=1326 audit(2000000241.469:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.359645][ T29] audit: type=1326 audit(2000000241.469:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.382281][ T29] audit: type=1326 audit(2000000241.469:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.448601][ T29] audit: type=1326 audit(2000000241.479:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.479561][ T29] audit: type=1326 audit(2000000241.479:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.492295][ T25] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 620.537451][ T29] audit: type=1326 audit(2000000241.479:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.603752][ T29] audit: type=1326 audit(2000000241.479:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13352 comm="syz.2.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 620.718837][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.730387][ T5269] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 620.747083][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.759337][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.777152][ T25] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 620.787109][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.800750][ T25] usb 1-1: config 0 descriptor?? [ 620.954788][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.970341][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.980373][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 620.996271][ T5269] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 621.005660][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.039903][ T5269] usb 5-1: config 0 descriptor?? [ 621.269877][ T25] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.003E/input/input57 [ 621.367881][ T25] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.003E/input/input58 [ 621.393508][ T25] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.003E/input/input59 [ 621.447128][ T25] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.003E/input/input60 [ 621.475819][ T5269] plantronics 0003:047F:FFFF.003F: ignoring exceeding usage max [ 621.484027][ T25] hid-udraw 0003:20D6:CB17.003E: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 621.513283][ T5269] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 621.530926][ T25] usb 1-1: USB disconnect, device number 50 [ 621.547122][ T5269] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 621.560053][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 622.171115][T13392] sctp: [Deprecated]: syz.0.2562 (pid 13392) Use of int in max_burst socket option deprecated. [ 622.171115][T13392] Use struct sctp_assoc_value instead [ 623.692332][ T5000] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 623.914365][ T5000] usb 1-1: Using ep0 maxpacket: 32 [ 623.954582][ T5000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.975499][ T5000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.986889][ T5000] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.996314][ T5000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.101765][ T5000] usb 1-1: config 0 descriptor?? [ 624.148534][ T5000] hub 1-1:0.0: USB hub found [ 624.332561][ T25] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 624.436617][ T5000] hub 1-1:0.0: 1 port detected [ 624.569660][ T25] usb 2-1: too many configurations: 12, using maximum allowed: 8 [ 624.654167][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.661038][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.727546][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 624.767137][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=49 [ 624.794528][ T25] usb 2-1: Product: syz [ 624.814110][ T25] usb 2-1: Manufacturer: syz [ 624.819088][ T25] usb 2-1: SerialNumber: syz [ 624.855301][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 624.861639][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 624.891056][ T5000] usb 1-1: USB disconnect, device number 51 [ 625.141797][ T5266] r8152-cfgselector 2-1: USB disconnect, device number 63 [ 625.194671][ T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 625.285730][T13430] xt_l2tp: invalid flags combination: 0 [ 625.512389][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 628.164141][ T5269] usb 5-1: USB disconnect, device number 47 [ 629.021679][ T25] usb 4-1: unable to read config index 0 descriptor/all [ 629.041780][ T25] usb 4-1: can't read configurations, error -71 [ 630.358481][T13440] overlayfs: missing 'lowerdir' [ 630.552509][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 630.582824][T13457] Bluetooth: MGMT ver 1.23 [ 630.800527][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 630.890112][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 631.025883][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 631.108931][ T9] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 631.139610][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.153897][ T9] usb 1-1: Product: syz [ 631.170340][ T9] usb 1-1: Manufacturer: syz [ 631.182251][ T9] usb 1-1: SerialNumber: syz [ 631.197802][ T9] usb 1-1: config 0 descriptor?? [ 631.218727][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 631.235599][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 631.266056][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 631.276718][T13466] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2584'. [ 631.296537][T13466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2584'. [ 631.321113][T13469] ip_vti0 speed is unknown, defaulting to 1000 [ 631.350119][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 631.766481][ T9] usb 1-1: USB disconnect, device number 52 [ 635.500821][T13504] binder: 13503:13504 ioctl c0306201 0 returned -14 [ 637.540180][ T5344] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 637.764587][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.792258][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.819041][ T5344] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 637.849474][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.865195][ T5344] usb 5-1: config 0 descriptor?? [ 638.090515][ T5344] usbhid 5-1:0.0: can't add hid device: -71 [ 638.128759][ T5344] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 638.158302][ T5344] usb 5-1: USB disconnect, device number 48 [ 638.518839][ T62] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 638.692284][ T5266] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 638.872583][ T5266] usb 1-1: Using ep0 maxpacket: 16 [ 638.897002][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.909062][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 638.922277][ T5266] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 638.931343][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.969124][ T5266] usb 1-1: config 0 descriptor?? [ 640.285005][T13567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.302551][T13567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.478132][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 640.493722][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 640.511075][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 640.529099][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 640.538118][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 640.555114][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 640.585259][ T5266] usbhid 1-1:0.0: can't add hid device: -71 [ 640.599817][T13594] ip_vti0 speed is unknown, defaulting to 1000 [ 640.608596][ T5266] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 640.640405][ T5266] usb 1-1: USB disconnect, device number 53 [ 640.722485][ T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 640.922491][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 640.934909][ T25] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 640.944005][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 640.959621][ T25] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 640.972765][ T25] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 640.986077][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.995483][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 641.005724][ T25] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 641.014361][ T25] usb 5-1: Product: syz [ 641.018541][ T25] usb 5-1: Manufacturer: syz [ 641.023263][ T25] usb 5-1: SerialNumber: syz [ 641.030297][ T25] usb 5-1: config 0 descriptor?? [ 641.039281][ T25] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 641.058783][ T25] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 641.095860][T13594] chnl_net:caif_netlink_parms(): no params data found [ 641.114637][T13619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.250285][T13594] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.261151][T13627] netlink: 'syz.2.2638': attribute type 32 has an invalid length. [ 641.280150][T13594] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.295575][ T5269] usb 5-1: USB disconnect, device number 49 [ 641.301175][T13594] bridge_slave_0: entered allmulticast mode [ 641.308688][ T5269] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 641.321993][T13594] bridge_slave_0: entered promiscuous mode [ 641.351981][T13594] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.382526][T13594] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.389828][T13594] bridge_slave_1: entered allmulticast mode [ 641.404533][T13594] bridge_slave_1: entered promiscuous mode [ 641.477635][T13594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.491775][T13594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.505784][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 641.505802][ T29] audit: type=1326 audit(2000000263.359:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13595 comm="syz.4.2626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x0 [ 641.591697][T13594] team0: Port device team_slave_0 added [ 641.617044][T13594] team0: Port device team_slave_1 added [ 641.665360][T13594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.679750][T13594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.715496][T13594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.739213][T13594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.749947][T13594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.788192][T13594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.856999][T13594] hsr_slave_0: entered promiscuous mode [ 641.870044][T13594] hsr_slave_1: entered promiscuous mode [ 641.880304][T13594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.898403][T13594] Cannot create hsr debugfs directory [ 642.332316][ T5269] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 642.338256][T13594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.365040][T13594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.472551][ T25] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 642.514226][T13594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.524866][T13594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.532432][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 642.549501][ T5269] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 642.558873][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.567487][ T5269] usb 1-1: Product: syz [ 642.571804][ T5269] usb 1-1: Manufacturer: syz [ 642.576577][ T5269] usb 1-1: SerialNumber: syz [ 642.584683][ T5269] usb 1-1: config 0 descriptor?? [ 642.595425][ T5269] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 642.633071][ T5216] Bluetooth: hci6: command tx timeout [ 642.634045][T13594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.651043][T13594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.664689][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.676128][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.686238][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 642.695343][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.708311][ T25] usb 2-1: config 0 descriptor?? [ 642.759560][T13594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.772095][T13594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.772373][ T5266] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 642.803952][ T5269] gspca_m5602: Failed to find a sensor [ 642.809501][ T5269] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 642.821150][ T5269] usb 1-1: USB disconnect, device number 54 [ 642.938391][T13594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 642.950558][T13594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 642.960533][T13594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 642.967860][ T5266] usb 3-1: Using ep0 maxpacket: 8 [ 642.977750][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.989738][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.996046][T13594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 643.000098][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.019448][ T5266] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 643.029861][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.043128][ T5266] usb 3-1: config 0 descriptor?? [ 643.135901][ T25] sony 0003:054C:0268.0040: unknown main item tag 0x0 [ 643.158487][ T25] sony 0003:054C:0268.0040: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 643.162892][T13594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.170667][ T25] sony 0003:054C:0268.0040: failed to claim input [ 643.208855][T13594] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.226292][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.233537][T12402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.249019][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.256320][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.338851][ T5344] usb 2-1: USB disconnect, device number 64 [ 643.484994][ T5266] hid-picolcd 0003:04D8:C002.0041: unknown main item tag 0x0 [ 643.516226][ T5266] hid-picolcd 0003:04D8:C002.0041: unknown main item tag 0x0 [ 643.603534][ T5266] hid-picolcd 0003:04D8:C002.0041: No report with id 0x11 found [ 643.708672][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'. [ 643.747402][T12402] usb 3-1: USB disconnect, device number 65 [ 643.774194][T13594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.605197][T13594] veth0_vlan: entered promiscuous mode [ 644.674753][T13594] veth1_vlan: entered promiscuous mode [ 644.716876][ T5216] Bluetooth: hci6: command tx timeout [ 644.781747][T13594] veth0_macvtap: entered promiscuous mode [ 645.238596][T13594] veth1_macvtap: entered promiscuous mode [ 645.567345][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.605718][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.616875][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.627439][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.632467][ T5344] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 645.645843][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.656511][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.671231][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.710233][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.731250][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.744175][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.756359][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.767045][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.779526][T13594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.793834][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.806185][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.820008][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.831571][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.842415][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.855795][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.892736][T13701] ubi0: attaching mtd0 [ 645.896990][T13701] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 645.964566][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.013518][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.071661][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.127842][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.182818][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.251763][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.352015][T13594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.467434][T13594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.476513][ T5344] usb 2-1: Using ep0 maxpacket: 16 [ 646.481830][T13594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.491513][T13594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.501149][T13594] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.510815][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.522976][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.538931][ T5344] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 646.555375][ T5344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.603435][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 646.623617][ T5344] usb 2-1: config 0 descriptor?? [ 646.737720][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.803362][ T5216] Bluetooth: hci6: command tx timeout [ 646.823531][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.837837][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.859834][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.887939][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 646.903132][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.923432][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.935370][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.987005][ T9] usb 3-1: config 0 descriptor?? [ 647.004795][T13712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2665'. [ 647.171818][T13713] gretap0: refused to change device tx_queue_len [ 647.180444][T13713] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 647.735659][ T5344] apple 0003:05AC:026C.0042: unknown main item tag 0x0 [ 647.746853][ T9] hid (null): bogus close delimiter [ 647.755823][ T5344] apple 0003:05AC:026C.0042: unknown main item tag 0x0 [ 647.769208][ T5344] apple 0003:05AC:026C.0042: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.1-1/input0 [ 647.784740][ T5344] usb 2-1: USB disconnect, device number 65 [ 647.827637][ T29] audit: type=1800 audit(2000000269.679:514): pid=13719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2667" name="file0" dev="overlay" ino=289 res=0 errno=0 [ 647.949354][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 648.018565][T13726] syz.0.2669: attempt to access beyond end of device [ 648.018565][T13726] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 648.056236][T13726] hfsplus: unable to find HFS+ superblock [ 648.360167][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0043/input/input62 [ 648.509192][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0043/input/input63 [ 648.572933][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0043/input/input64 [ 648.598877][T13722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 648.640400][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0043/input/input65 [ 648.692306][ T25] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 648.884698][ T5216] Bluetooth: hci6: command tx timeout [ 649.603494][ T9] uclogic 0003:256C:006D.0043: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 649.663568][ T9] usb 3-1: USB disconnect, device number 66 [ 649.744210][ T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 650.811142][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.846629][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.906016][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 650.986280][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 651.033341][ T25] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 651.079988][ T25] usb 2-1: Manufacturer: syz [ 651.095900][ T25] usb 2-1: config 0 descriptor?? [ 652.146527][ T25] appleir 0003:05AC:8243.0044: No inputs registered, leaving [ 652.175615][ T25] appleir 0003:05AC:8243.0044: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 652.544739][T13783] usb usb8: usbfs: process 13783 (syz.3.2687) did not claim interface 0 before use [ 652.787095][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 652.824796][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 652.840651][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 652.848560][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.575205][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.590802][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.600208][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.608201][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.633174][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.694620][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.739188][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.764897][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.783105][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 653.793216][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.811482][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.821621][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.850139][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.862844][T12402] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 653.871885][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.937524][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 653.977292][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.064683][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.140912][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.154197][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.164590][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.172620][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.180269][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.188251][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.196100][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.209495][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.223021][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.230938][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.243626][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.251504][ T25] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 654.364525][ T25] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz0] on syz0 [ 654.401199][ T9] usb 3-1: config 0 has no interfaces? [ 654.427440][T12402] usb 1-1: Using ep0 maxpacket: 32 [ 654.431626][ T46] usb 2-1: USB disconnect, device number 66 [ 654.591393][ T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 654.656655][T12402] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 654.705632][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.722341][T12402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.745375][T12402] usb 1-1: Product: syz [ 654.750595][ T9] usb 3-1: config 0 descriptor?? [ 654.762286][T12402] usb 1-1: Manufacturer: syz [ 654.776821][T12402] usb 1-1: SerialNumber: syz [ 654.797343][T12402] usb 1-1: config 0 descriptor?? [ 656.249518][T12402] rtl8150 1-1:0.0: couldn't reset the device [ 656.269884][T12402] rtl8150 1-1:0.0: probe with driver rtl8150 failed with error -5 [ 656.305844][T12402] usb 1-1: USB disconnect, device number 55 [ 656.394077][T13822] Unknown options in mask 2474 [ 656.406456][ T5270] usb 3-1: USB disconnect, device number 67 [ 658.537276][T13815] delete_channel: no stack [ 658.742455][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 658.974445][ T9] usb 1-1: config index 0 descriptor too short (expected 548, got 36) [ 659.066189][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.090461][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.868193][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 659.879504][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.913411][ T9] usb 1-1: config 0 descriptor?? [ 660.232365][ T9] usb 1-1: can't set config #0, error -71 [ 660.253878][ T9] usb 1-1: USB disconnect, device number 56 [ 661.913675][T13879] netlink: 'syz.0.2717': attribute type 10 has an invalid length. [ 661.923168][T13879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2717'. [ 661.952193][T13881] binder: 13880:13881 ioctl 400c620e 0 returned -14 [ 662.067506][T13879] team0: Port device geneve0 added [ 662.993138][T12402] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 663.212442][T12402] usb 5-1: Using ep0 maxpacket: 16 [ 663.242147][T12402] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=22.89 [ 663.272602][T12402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.295305][T12402] usb 5-1: Product: syz [ 663.309685][T12402] usb 5-1: Manufacturer: syz [ 663.328639][T12402] usb 5-1: SerialNumber: syz [ 663.345440][T12402] usb 5-1: config 0 descriptor?? [ 663.358126][T12402] legousbtower 5-1:0.0: interrupt endpoints not found [ 663.570566][ T5000] usb 5-1: USB disconnect, device number 50 [ 663.622342][ T5270] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 663.844524][ T5270] usb 4-1: unable to get BOS descriptor or descriptor too short [ 663.855043][ T5270] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.873057][ T5270] usb 4-1: config 1 interface 0 altsetting 9 has an endpoint descriptor with address 0x24, changing to 0x4 [ 663.893329][ T5270] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 663.908585][ T5270] usb 4-1: config 1 interface 0 has no altsetting 0 [ 663.953563][ T5270] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 663.972364][ T5270] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 663.980921][ T5270] usb 4-1: Product: ᠉ [ 663.985918][ T5270] usb 4-1: Manufacturer: syz [ 664.310745][ T5270] usb 4-1: bad CDC descriptors [ 664.334522][ T5270] usb 4-1: USB disconnect, device number 65 [ 664.461696][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'. [ 665.846237][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'. [ 666.522364][ T29] audit: type=1326 audit(2000000287.999:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 667.005792][ T29] audit: type=1326 audit(2000000287.999:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 667.118865][ T29] audit: type=1326 audit(2000000287.999:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72bd976390 code=0x7ffc0000 [ 667.244589][ T29] audit: type=1326 audit(2000000287.999:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 667.294694][ T29] audit: type=1326 audit(2000000287.999:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 667.340023][ T29] audit: type=1326 audit(2000000288.009:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 667.364816][T13985] netlink: 'syz.0.2758': attribute type 1 has an invalid length. [ 667.371648][ T29] audit: type=1326 audit(2000000288.009:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 667.399046][ T29] audit: type=1326 audit(2000000288.009:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 667.600364][ T29] audit: type=1326 audit(2000000288.009:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 667.714164][T13993] ip_vti0 speed is unknown, defaulting to 1000 [ 667.759877][ T29] audit: type=1326 audit(2000000288.009:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd9779f9 code=0x7ffc0000 [ 675.390280][T14041] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2777'. [ 675.414827][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2777'. [ 675.563471][T14048] [U]  [ 675.566947][T14048] [U] [ 675.569615][T14048] [U] \fN#kv42yl% [ 675.574370][T14048] [U]  [ 675.577307][T14048] [U] [ 675.579973][T14048] [U] [ 675.606376][T14048] [U] [ 675.609095][T14048] [U] [ 675.611773][T14048] [U] [ 675.614440][T14048] [U] [ 675.622754][T14048] [U] [ 675.625463][T14048] [U] [ 675.628139][T14048] [U] [ 675.825424][T14056] IPv6: Can't replace route, no match found [ 677.010259][T14044] [U] [ 677.134002][T14070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 678.065798][ T2493] hsr0: left allmulticast mode [ 678.594109][ T2493] hsr_slave_0: left allmulticast mode [ 678.599556][ T2493] hsr_slave_1: left allmulticast mode [ 678.605363][ T2493] hsr0: left promiscuous mode [ 678.610265][ T2493] bridge0: port 3(hsr0) entered disabled state [ 679.779787][ T2493] bridge_slave_1: left allmulticast mode [ 679.807241][ T2493] bridge_slave_1: left promiscuous mode [ 679.822843][ T2493] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.842617][ T2493] bridge_slave_0: left allmulticast mode [ 679.848895][ T2493] bridge_slave_0: left promiscuous mode [ 679.875458][ T2493] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.027939][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.045843][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.062509][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.080398][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.091793][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.105641][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.122684][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.135896][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.152311][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.167775][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.178488][ T5392] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 680.210635][ T5392] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz0] on syz0 [ 680.335165][ T5311] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 680.425335][T14113] random: crng reseeded on system resumption [ 680.483228][ T5216] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 680.492395][ T5216] Bluetooth: hci4: Injecting HCI hardware error event [ 680.504368][ T5225] Bluetooth: hci4: hardware error 0x00 [ 680.576407][ T5311] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 680.603140][ T5311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.611196][ T5311] usb 3-1: Product: syz [ 680.617392][ T5311] usb 3-1: Manufacturer: syz [ 680.622019][ T5311] usb 3-1: SerialNumber: syz [ 680.653292][ T5311] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 680.709105][ T2493] batman_adv: batadv0: Removing interface: gretap1 [ 680.765308][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 681.002574][ T5269] usb 3-1: USB disconnect, device number 68 [ 681.131274][ T2493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.148471][ T2493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.159922][ T2493] bond0 (unregistering): (slave team0): Releasing backup interface [ 681.173536][ T2493] bond0 (unregistering): Released all slaves [ 681.199671][T14119] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2803'. [ 681.229810][T14119] 0: renamed from hsr0 (while UP) [ 681.269419][T14119] 0: entered promiscuous mode [ 681.293280][T14119] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 681.843503][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 682.463394][ T8] ath9k_htc: Failed to initialize the device [ 682.492748][ T5269] usb 3-1: ath9k_htc: USB layer deinitialized [ 682.553072][ T5225] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 682.953103][T14120] Bluetooth: hci3: command 0x0406 tx timeout [ 682.981389][ T2493] hsr_slave_0: left promiscuous mode [ 682.987456][ T5344] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 683.004582][ T2493] hsr_slave_1: left promiscuous mode [ 683.015515][ T2493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.037084][ T2493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.046678][ T2493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.057075][ T2493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.137338][ T2493] veth1_macvtap: left promiscuous mode [ 683.149366][ T2493] veth0_macvtap: left promiscuous mode [ 683.160713][ T2493] veth1_vlan: left promiscuous mode [ 683.177477][ T2493] veth0_vlan: left promiscuous mode [ 683.194374][ T5344] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 683.216183][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.250457][ T5344] usb 1-1: config 0 descriptor?? [ 683.530784][ T5344] kaweth 1-1:0.0: Firmware present in device. [ 683.695339][ T5344] kaweth 1-1:0.0: Statistics collection: 0 [ 683.710979][ T5344] kaweth 1-1:0.0: Multicast filter limit: 0 [ 683.717312][ T5344] kaweth 1-1:0.0: MTU: 0 [ 683.721883][ T5344] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 684.662656][ T5225] Bluetooth: hci4: Opcode 0x206c failed: -110 [ 686.741880][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.821349][ T5225] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 686.843289][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.987143][ T5344] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 687.024668][ T5344] usb 1-1: USB disconnect, device number 57 [ 689.300909][ T2493] team0 (unregistering): Port device team_slave_1 removed [ 689.715587][ T2493] team0 (unregistering): Port device team_slave_0 removed [ 692.112304][ T5269] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 692.319688][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 692.333115][ T5269] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 692.359203][ T5269] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 692.391224][ T5269] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.438416][ T5269] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.460685][ T5269] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.470140][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.481006][ T5269] usb 3-1: Product: syz [ 692.497712][ T5269] usb 3-1: Manufacturer: syz [ 692.520556][ T5269] usb 3-1: SerialNumber: syz [ 693.570454][ T5269] usb 3-1: USB disconnect, device number 69 [ 693.953450][T14246] program syz.1.2841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.181468][T14293] netlink: 'syz.0.2853': attribute type 1 has an invalid length. [ 696.204692][T14293] netlink: 'syz.0.2853': attribute type 2 has an invalid length. [ 696.229308][T14293] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.2853'. [ 696.507499][T14305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2861'. [ 697.909646][ T5344] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 698.319623][ T5344] usb 4-1: Using ep0 maxpacket: 8 [ 698.437567][T14330] ip_vti0 speed is unknown, defaulting to 1000 [ 698.452677][ T5344] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 698.474928][ T5344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.500235][ T5344] usb 4-1: Product: syz [ 698.522186][ T5344] usb 4-1: Manufacturer: syz [ 698.532814][ T5344] usb 4-1: SerialNumber: syz [ 698.554201][ T5344] usb 4-1: config 0 descriptor?? [ 698.945977][ T5344] usb 4-1: USB disconnect, device number 66 [ 699.086772][T14346] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2878'. [ 699.187087][T14348] netlink: 'syz.0.2879': attribute type 10 has an invalid length. [ 699.197193][T14348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2879'. [ 699.209305][T14348] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 699.498438][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 699.624013][ T5216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.636761][ T5216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.649887][ T5216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.662958][ T5216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.673764][ T5216] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 699.682752][ T5216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.139296][T14357] ip_vti0 speed is unknown, defaulting to 1000 [ 700.752918][ T5344] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 700.882394][ T5270] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 700.972508][ T5344] usb 3-1: Using ep0 maxpacket: 32 [ 700.985987][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.013944][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.024678][ T5344] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 701.033897][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.045348][ T5344] usb 3-1: config 0 descriptor?? [ 701.072305][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 701.086699][ T5270] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 701.117449][ T5270] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 701.162242][ T5270] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 701.199505][ T5270] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.229323][T14357] chnl_net:caif_netlink_parms(): no params data found [ 701.252330][ T5270] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 701.261425][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.468488][T14357] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.502439][T14357] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.503477][ T5344] kye 0003:0458:5011.0047: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 701.509827][T14357] bridge_slave_0: entered allmulticast mode [ 701.524945][ T5344] kye 0003:0458:5011.0047: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 701.540639][ T5344] kye 0003:0458:5011.0047: tablet-enabling feature report not found [ 701.548893][ T5344] kye 0003:0458:5011.0047: tablet enabling failed [ 701.575621][ T5270] usb 1-1: GET_CAPABILITIES returned 0 [ 701.581161][ T5270] usbtmc 1-1:16.0: can't read capabilities [ 701.593369][ T5225] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 701.604607][ T5225] Bluetooth: hci6: Injecting HCI hardware error event [ 701.615160][ T5225] Bluetooth: hci6: hardware error 0x00 [ 701.632316][T14357] bridge_slave_0: entered promiscuous mode [ 701.663469][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.689862][T14357] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.711959][T14357] bridge_slave_1: entered allmulticast mode [ 701.733804][T14357] bridge_slave_1: entered promiscuous mode [ 701.791903][ T5344] usb 3-1: USB disconnect, device number 70 [ 701.807314][ T5000] usb 1-1: USB disconnect, device number 58 [ 701.832316][ T5216] Bluetooth: hci2: command tx timeout [ 701.878750][T14357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.921261][T14357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.037568][T14357] team0: Port device team_slave_0 added [ 702.057886][T14357] team0: Port device team_slave_1 added [ 702.121191][T14357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.139257][T14357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.189096][T14357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.235850][T14357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.250967][T14357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.282229][T14357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.345276][T14357] hsr_slave_0: entered promiscuous mode [ 702.363155][T14357] hsr_slave_1: entered promiscuous mode [ 702.382282][T14357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.389925][T14357] Cannot create hsr debugfs directory [ 702.492865][ T5344] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 702.572290][ T5000] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 702.592643][ T5216] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 702.609744][T14357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.682583][ T5344] usb 5-1: Using ep0 maxpacket: 32 [ 702.692010][ T5344] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 702.709219][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.724499][ T5344] usb 5-1: config 0 descriptor?? [ 702.736455][T14357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.742884][ T5344] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 702.783300][ T5000] usb 4-1: Using ep0 maxpacket: 16 [ 702.790389][ T5000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.801826][ T5000] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 702.826447][ T5000] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 702.837542][ T5000] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 702.846516][ T5000] usb 4-1: Product: syz [ 702.851835][ T5000] usb 4-1: Manufacturer: syz [ 702.859205][ T5000] usb 4-1: config 0 descriptor?? [ 702.888541][T14357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.942313][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 702.988153][T14357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.142316][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 703.173913][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 703.181967][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.232153][ T9] usb 1-1: config 0 has no interface number 0 [ 703.238451][ T9] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 703.250079][ T9] usb 1-1: config 0 interface 8 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 703.262423][ T9] usb 1-1: config 0 interface 8 altsetting 248 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 703.289800][ T9] usb 1-1: config 0 interface 8 has no altsetting 0 [ 703.312375][ T9] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 703.321595][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.340498][ T9] usb 1-1: Product: syz [ 703.347125][ T9] usb 1-1: Manufacturer: syz [ 703.351775][ T9] usb 1-1: SerialNumber: syz [ 703.377497][T14357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 703.384645][ T9] usb 1-1: config 0 descriptor?? [ 703.397243][T14357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 703.418911][T14357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 703.438007][T14357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 703.599672][T14357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.677655][T14357] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.688865][ T5225] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 703.712717][ T9] ath6kl: Failed to submit usb control message: -71 [ 703.715407][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.719418][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 703.726615][ T5000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.747585][ T9] ath6kl: Unable to send get target info: -71 [ 703.749279][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.761027][ T5000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.863811][ T9] ath6kl: Failed to init ath6kl core: -71 [ 703.927747][ T5225] Bluetooth: hci2: command tx timeout [ 703.947204][ T9] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 704.267972][ T9] usb 1-1: USB disconnect, device number 59 [ 704.677504][ T5344] gspca_vc032x: reg_r err -71 [ 704.689502][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 704.838098][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.014708][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.055172][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.098716][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.154670][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.160025][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.171768][T14357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.179521][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.189700][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.207950][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.223689][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.266084][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.287784][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.299907][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.318715][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.327536][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.346967][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.355528][T14357] veth0_vlan: entered promiscuous mode [ 705.371838][ T5344] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.376940][ T5270] usb 4-1: USB disconnect, device number 67 [ 705.390058][ T5344] gspca_vc032x: Unknown sensor... [ 705.407619][T14357] veth1_vlan: entered promiscuous mode [ 705.415345][ T5344] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 705.456780][ T5344] usb 5-1: USB disconnect, device number 51 [ 705.516445][T14357] veth0_macvtap: entered promiscuous mode [ 705.535968][T14357] veth1_macvtap: entered promiscuous mode [ 705.560329][T14432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2905'. [ 705.607823][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.628572][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.640079][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.651984][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.662978][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.675557][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.689680][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.702445][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.714612][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.736364][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.748479][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.760151][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.795759][T14357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.821284][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.839676][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.860801][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.878845][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.889969][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.907209][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.918046][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.937390][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.990356][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.001440][ T5225] Bluetooth: hci2: command tx timeout [ 706.015830][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.028305][T14357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.039828][T14357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.053383][T14357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.064361][T14357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.073770][T14357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.084224][T14357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.103469][T14357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.321666][ T2493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.355241][ T2493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.455881][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.488833][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.623449][T14455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2917'. [ 708.073356][ T5225] Bluetooth: hci2: command tx timeout [ 708.156461][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.231673][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.239682][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.250968][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.262319][ T5270] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 708.271970][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.289378][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.297032][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.308980][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.328561][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.338952][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.391940][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.407977][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.416512][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.424686][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.432794][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.440380][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.449364][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.462785][ T5270] usb 2-1: Using ep0 maxpacket: 16 [ 708.472689][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.482561][ T46] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 708.500137][ T5270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.511413][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.523632][ T5270] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 708.536644][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.548267][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.562995][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.592403][ T5270] usb 2-1: Product: syz [ 708.596665][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.604367][ T5270] usb 2-1: Manufacturer: syz [ 708.609008][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.616616][ T5270] usb 2-1: SerialNumber: syz [ 708.622712][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.630848][ T5270] usb 2-1: config 0 descriptor?? [ 708.638327][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.648795][ T5270] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 708.656788][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.667838][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.675780][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.684408][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.695693][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.705744][ T46] usb 4-1: config index 0 descriptor too short (expected 25970, got 36) [ 708.715177][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.722820][ T46] usb 4-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 708.731925][ T5000] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 708.739601][ T46] usb 4-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 708.751984][ T46] usb 4-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 708.761555][ T5000] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 708.776389][ T46] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 708.785998][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.069173][ T5000] usb 4-1: USB disconnect, device number 68 [ 709.191362][T14523] macvlan2: entered allmulticast mode [ 709.214595][T14523] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 709.229453][T14523] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 709.250706][T14523] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 709.953341][ T5270] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input66 [ 709.963423][T14533] IPVS: Error connecting to the multicast addr [ 711.167918][ T5270] usb 2-1: USB disconnect, device number 67 [ 711.543239][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 711.543280][ T29] audit: type=1326 audit(2000000333.389:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14546 comm="syz.1.2952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d95b779f9 code=0x0 [ 714.873858][T14581] gre0: entered promiscuous mode [ 714.879815][T14581] vlan2: entered promiscuous mode [ 714.899487][T14581] gre0: left promiscuous mode [ 716.533102][ T8] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 716.732794][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 716.758709][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.793930][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.811373][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 716.837160][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 716.847259][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.886689][ T8] usb 5-1: config 0 descriptor?? [ 716.946929][T12402] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 717.132438][T12402] usb 4-1: device descriptor read/64, error -71 [ 717.320176][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x3 [ 717.328260][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x3 [ 717.336299][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x3 [ 717.345793][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x3 [ 717.356380][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.369540][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.379682][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.410765][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.414080][T12402] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 717.429557][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.443388][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.450639][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.469973][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.477853][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.485171][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.494600][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.501925][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.511409][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.521658][ T8] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 717.531284][ T8] microsoft 0003:045E:07DA.0049: No inputs registered, leaving [ 717.555620][ T8] microsoft 0003:045E:07DA.0049: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 717.567997][ T8] microsoft 0003:045E:07DA.0049: no inputs found [ 717.574412][ T8] microsoft 0003:045E:07DA.0049: could not initialize ff, continuing anyway [ 717.586466][ T8] usb 5-1: USB disconnect, device number 52 [ 717.635999][T12402] usb 4-1: device descriptor read/64, error -71 [ 717.776869][T12402] usb usb4-port1: attempt power cycle [ 718.213746][T12402] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 718.425408][T12402] usb 4-1: device descriptor read/8, error -71 [ 719.007369][T14634] batman_adv: batadv0: Adding interface: wlan1 [ 719.014345][T14634] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.064688][T14634] batman_adv: batadv0: Interface activated: wlan1 [ 719.077094][T12402] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 719.100134][T14639] batman_adv: batadv0: Interface deactivated: wlan1 [ 719.152823][T12402] usb 4-1: device descriptor read/8, error -71 [ 719.269228][T14634] batman_adv: batadv0: Removing interface: wlan1 [ 719.291158][T12402] usb usb4-port1: unable to enumerate USB device [ 719.810355][T12402] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 719.961527][T14656] bond0: entered promiscuous mode [ 719.966896][T14656] bond_slave_0: entered promiscuous mode [ 719.974245][T14656] bond_slave_1: entered promiscuous mode [ 719.981300][T14656] bond0: entered allmulticast mode [ 719.986675][T14656] bond_slave_0: entered allmulticast mode [ 719.993122][T14656] bond_slave_1: entered allmulticast mode [ 720.003399][ T5344] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 720.043041][T12402] usb 5-1: Using ep0 maxpacket: 8 [ 720.062469][T12402] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 720.080980][T12402] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 720.091407][T12402] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 720.102602][T12402] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 720.115928][T12402] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.120388][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2988'. [ 720.130829][T12402] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 720.159600][T12402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.227296][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.278448][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.312190][ T5344] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 720.341821][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.357260][ T5344] usb 3-1: config 0 descriptor?? [ 720.404635][T12402] usb 5-1: usb_control_msg returned -32 [ 720.412964][T12402] usbtmc 5-1:16.0: can't read capabilities [ 720.823287][ T5344] lg-g15 0003:046D:C222.004A: unknown main item tag 0x0 [ 720.841153][ T5344] lg-g15 0003:046D:C222.004A: unbalanced collection at end of report description [ 720.851485][ T5344] lg-g15 0003:046D:C222.004A: probe with driver lg-g15 failed with error -22 [ 721.074044][ T5344] usb 3-1: USB disconnect, device number 71 [ 722.246689][ T5225] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 723.058840][ T5269] usb 5-1: USB disconnect, device number 53 [ 723.111558][ T5216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 723.125069][ T5216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 723.134975][ T5216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 723.144071][ T5216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 723.151767][ T5216] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 723.159500][ T5216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 723.278066][T14708] ip_vti0 speed is unknown, defaulting to 1000 [ 724.232495][ T5269] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 724.422254][ T5269] usb 5-1: Using ep0 maxpacket: 8 [ 724.433132][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 724.477785][ T5269] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e355, bcdDevice=89.67 [ 724.508282][ T5269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.547966][ T5269] usb 5-1: Product: syz [ 724.568347][ T5269] usb 5-1: Manufacturer: syz [ 724.589114][ T5269] usb 5-1: SerialNumber: syz [ 724.629326][ T5269] usb 5-1: config 0 descriptor?? [ 724.713542][ T5269] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:e355, interface 0, class 0) [ 724.734300][ T5269] em28xx 5-1:0.0: Video interface 0 found: [ 725.275878][ T5225] Bluetooth: hci5: command tx timeout [ 725.402903][ T5269] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 725.526802][T14751] program syz.2.3021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.573226][ T5269] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 725.615780][ T5269] em28xx 5-1:0.0: board has no eeprom [ 725.713028][ T5269] em28xx 5-1:0.0: Identified as Kworld 355 U DVB-T (card=42) [ 725.860199][ T5269] em28xx 5-1:0.0: [ 725.860199][ T5269] [ 725.860199][ T5269] The support for this board weren't valid yet. [ 725.860199][ T5269] Please send a report of having this working [ 725.860199][ T5269] not to V4L mailing list (and/or to other addresses) [ 725.860199][ T5269] [ 726.203710][ T5269] em28xx 5-1:0.0: Currently, V4L2 is not supported on this model [ 726.211848][ T5266] em28xx 5-1:0.0: Binding DVB extension [ 726.221859][ T5266] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 726.236705][ T5269] usb 5-1: USB disconnect, device number 54 [ 726.261763][ T5266] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 726.271474][ T5269] em28xx 5-1:0.0: Disconnecting em28xx [ 726.282454][ T5266] em28xx 5-1:0.0: Remote control support is not available for this card. [ 726.305121][ T5269] em28xx 5-1:0.0: Closing input extension [ 726.314304][ T5225] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 726.323472][ T5225] Bluetooth: hci3: Injecting HCI hardware error event [ 726.334123][ T5225] Bluetooth: hci3: hardware error 0x00 [ 726.348394][ T5269] em28xx 5-1:0.0: Freeing device [ 726.360218][T14708] chnl_net:caif_netlink_parms(): no params data found [ 726.511050][ T29] audit: type=1326 audit(2000000348.359:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.4.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 726.543490][ T29] audit: type=1326 audit(2000000348.389:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.4.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 726.565347][ T29] audit: type=1326 audit(2000000348.389:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.4.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 726.588128][ T29] audit: type=1326 audit(2000000348.389:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.4.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 726.652861][T14708] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.660740][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.669042][T14708] bridge_slave_0: entered allmulticast mode [ 726.677259][T14708] bridge_slave_0: entered promiscuous mode [ 726.682629][ T5270] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 726.693044][T14708] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.710224][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.719837][T14708] bridge_slave_1: entered allmulticast mode [ 726.729036][T14708] bridge_slave_1: entered promiscuous mode [ 727.087320][T14708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.166961][T14708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.352175][ T5216] Bluetooth: hci5: command tx timeout [ 727.431197][T14708] team0: Port device team_slave_0 added [ 727.450012][T14708] team0: Port device team_slave_1 added [ 727.804335][ T5270] usb 4-1: config 0 has no interfaces? [ 727.809866][ T5270] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 727.874078][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.914940][T14708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.921923][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.963647][ T5270] usb 4-1: config 0 descriptor?? [ 728.064276][T14708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.092632][T14708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.108895][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.149108][T14708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.283915][T12402] usb 4-1: USB disconnect, device number 73 [ 728.472303][ T5225] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 728.537269][T14797] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.546235][T14797] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.758786][T14708] hsr_slave_0: entered promiscuous mode [ 728.967901][T14708] hsr_slave_1: entered promiscuous mode [ 728.983830][T14708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.014297][T14708] Cannot create hsr debugfs directory [ 729.032945][T14802] syz.4.3037 (14802) used obsolete PPPIOCDETACH ioctl [ 729.475232][ T5225] Bluetooth: hci5: command tx timeout [ 729.576699][T14708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.671900][T14822] ERROR: device name not specified. [ 730.426753][T14708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.411384][T14708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.668311][ T5225] Bluetooth: hci5: command tx timeout [ 732.123905][T14847] ip_vti0 speed is unknown, defaulting to 1000 [ 732.241729][T14708] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.378552][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3059'. [ 732.926557][T14708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.940001][T14708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.972343][T14708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.986906][T14708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.002296][ T46] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 733.203269][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 733.233612][ T46] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 733.252183][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.269573][ T46] usb 4-1: Product: syz [ 733.313056][ T46] usb 4-1: Manufacturer: syz [ 733.317849][ T46] usb 4-1: SerialNumber: syz [ 733.325052][ T46] usb 4-1: config 0 descriptor?? [ 733.373399][T14708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.448064][T14708] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.493751][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.500922][ T5344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.561858][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.569060][ T5344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.744624][ T46] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 733.763416][ T46] airspy 4-1:0.0: Could not detect board [ 733.769196][ T46] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 733.809823][ T46] usb 4-1: USB disconnect, device number 74 [ 734.359548][T14708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.371442][T14708] veth0_vlan: entered promiscuous mode [ 736.444051][T14708] veth1_vlan: entered promiscuous mode [ 736.580109][T14708] veth0_macvtap: entered promiscuous mode [ 736.635468][T14708] veth1_macvtap: entered promiscuous mode [ 736.701199][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.758469][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.785022][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.795758][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.805862][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.816670][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.828707][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.842810][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.842867][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 736.871789][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.892721][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.911386][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.922039][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.932428][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.943802][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.978517][T14708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.998171][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.009341][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.019795][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.031875][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.043613][ T5344] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 737.045491][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.072196][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.072445][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 737.082022][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.082044][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.108000][T12402] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 737.126858][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.127797][ T9] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 737.148106][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.151182][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.163328][ T9] usb 4-1: config 0 descriptor?? [ 737.225765][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.244909][ T5344] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 737.245246][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.259637][ T5344] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 737.284514][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.291106][ T5344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 737.305551][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.305875][T12402] usb 3-1: Using ep0 maxpacket: 8 [ 737.322083][ T9] viperboard 4-1:0.0: version 0.00 found at bus 004 address 075 [ 737.326958][T14708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.339019][T12402] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 737.355396][ T9] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 737.365648][T12402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 737.379482][T14708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.390816][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 737.401367][ T5344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 737.413933][T12402] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 737.423859][T14708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.430079][ T5344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 737.444688][ T9] usb 4-1: USB disconnect, device number 75 [ 737.451469][T14708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.452117][T12402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 737.479166][T14708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.480952][ T5344] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 737.525740][T12402] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 737.548645][T12402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.564728][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 737.584304][T12402] usb 3-1: Product: syz [ 737.588553][T12402] usb 3-1: Manufacturer: syz [ 737.594582][ T5344] usb 5-1: Product: syz [ 737.602192][ T5344] usb 5-1: Manufacturer: syz [ 737.606936][T12402] usb 3-1: SerialNumber: syz [ 737.628276][ T5344] cdc_wdm 5-1:1.0: skipping garbage [ 737.644596][T12402] usb 3-1: config 0 descriptor?? [ 737.665713][ T5344] cdc_wdm 5-1:1.0: skipping garbage [ 737.674475][T12402] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 737.682413][ T5344] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 737.688350][ T5344] cdc_wdm 5-1:1.0: Unknown control protocol [ 737.712274][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.720501][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.784884][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.793420][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.949517][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3077'. [ 738.059497][ T5270] usb 5-1: USB disconnect, device number 55 [ 738.456785][ T62] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 738.564187][ T5344] usb 3-1: USB disconnect, device number 72 [ 738.695246][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 738.755440][T14937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.762807][T14937] IPv6: NLM_F_CREATE should be set when creating new route [ 738.926753][T14943] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 739.858636][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 740.072152][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.597414][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.642181][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 740.681797][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.713625][ T9] usb 1-1: config 0 descriptor?? [ 741.557721][ T9] uclogic 0003:28BD:0074.004B: interface is invalid, ignoring [ 741.797742][ T9] usb 1-1: USB disconnect, device number 60 [ 741.982598][T12402] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 742.165417][T12402] usb 4-1: Using ep0 maxpacket: 32 [ 742.174530][T12402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.199690][T12402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.213659][T12402] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 742.233636][T12402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.244814][T12402] usb 4-1: config 0 descriptor?? [ 742.252354][ T5270] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 742.480875][ T5270] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.491566][ T5270] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 742.512299][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.533160][ T5270] usb 3-1: config 0 descriptor?? [ 742.683630][T12402] ft260 0003:0403:6030.004C: unknown main item tag 0x0 [ 742.732685][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 742.746188][ T5269] usb 3-1: USB disconnect, device number 73 [ 742.866559][T12402] ft260 0003:0403:6030.004C: chip code: 5e81 abf2 [ 742.935364][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 742.946267][ T29] audit: type=1326 audit(2000000364.799:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15015 comm="syz.4.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 742.984451][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 743.002172][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.007606][ T29] audit: type=1326 audit(2000000364.799:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15015 comm="syz.4.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 743.018549][ T9] usb 2-1: config 0 descriptor?? [ 743.057552][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 743.059128][ T29] audit: type=1326 audit(2000000364.799:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15015 comm="syz.4.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 743.087674][T12402] ft260 0003:0403:6030.004C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 743.088237][ T29] audit: type=1326 audit(2000000364.799:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15015 comm="syz.4.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 743.121944][ T29] audit: type=1326 audit(2000000364.799:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15015 comm="syz.4.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 743.150600][ T29] audit: type=1326 audit(2000000364.799:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15015 comm="syz.4.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 743.179387][ T29] audit: type=1326 audit(2000000364.819:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15015 comm="syz.4.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eed779f9 code=0x7ffc0000 [ 743.288754][T12402] ft260 0003:0403:6030.004C: failed to retrieve status: -71, no wakeup [ 743.301132][T12402] ft260 0003:0403:6030.004C: failed to retrieve status: -71 [ 743.311540][T12402] ft260 0003:0403:6030.004C: failed to reset I2C controller: -71 [ 743.337451][T12402] usb 4-1: USB disconnect, device number 76 [ 743.780061][ T5266] kernel write not supported for file /sysvipc/msg (pid: 5266 comm: kworker/1:3) [ 744.277879][ T9] gspca_sonixj: reg_w1 err -71 [ 744.322366][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 744.360075][ T9] usb 2-1: USB disconnect, device number 68 [ 744.689455][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 744.903051][T15037] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 745.982535][T15077] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 747.272835][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3152'. [ 747.294997][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3152'. [ 747.505010][T15111] ip_vti0 speed is unknown, defaulting to 1000 [ 747.527834][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.534259][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.882411][T15115] xt_CONNSECMARK: invalid mode: 0 [ 749.779471][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 750.454270][T15159] ip_vti0 speed is unknown, defaulting to 1000 [ 750.536142][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802a558400: rx timeout, send abort [ 751.044509][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802a558400: abort rx timeout. Force session deactivation [ 751.129517][T15160] syz.3.3165: attempt to access beyond end of device [ 751.129517][T15160] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 751.143154][T15160] FAT-fs (loop7): unable to read boot sector [ 751.815882][T15169] veth0_vlan: entered allmulticast mode [ 752.413232][ T5270] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 752.628529][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.664342][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.722400][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 752.774491][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 752.895887][ T5270] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 752.905312][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.928706][ T5270] usb 1-1: config 0 descriptor?? [ 752.971318][T15165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.407154][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.430046][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.469682][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.493892][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.525176][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.548654][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.556811][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.564884][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.572559][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.580851][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.589765][ T5270] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 753.599362][ T5270] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 753.621092][ T5270] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 753.656474][ T5270] usb 1-1: USB disconnect, device number 61 [ 753.772621][ T8] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 753.822289][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 753.984416][ T8] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 754.002120][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.015695][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.029008][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 754.035983][ T8] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 754.046362][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 754.058184][ T8] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 754.064142][ T5269] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 754.066363][ T8] usb 4-1: Manufacturer: syz [ 754.081053][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 754.091963][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.101115][ T8] usb 4-1: config 0 descriptor?? [ 754.106547][ T9] usb 5-1: Product: syz [ 754.113870][ T8] igorplugusb 4-1:0.0: incorrect number of endpoints [ 754.121249][ T9] usb 5-1: Manufacturer: syz [ 754.132894][ T9] usb 5-1: SerialNumber: syz [ 754.143097][ T9] usb 5-1: config 0 descriptor?? [ 754.148949][T15199] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 754.159672][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 754.165784][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 754.176164][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input67 [ 754.280481][ T5269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.288523][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3185'. [ 754.309803][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 754.320655][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 754.362275][ T5269] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 754.380039][ T9] usb 5-1: USB disconnect, device number 56 [ 754.380098][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 754.394733][ T5269] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 754.418155][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.440769][ T5269] usb 2-1: Product: syz [ 754.445307][ T5269] usb 2-1: Manufacturer: syz [ 754.449925][ T5269] usb 2-1: SerialNumber: syz [ 754.461659][ T5269] usb 2-1: config 0 descriptor?? [ 754.478034][ T46] usb 4-1: USB disconnect, device number 77 [ 754.490035][ T5269] usb 2-1: ucan: probing device on interface #0 [ 754.508595][ T5269] usb 2-1: ucan: invalid endpoint configuration [ 754.519189][ T5269] usb 2-1: ucan: probe failed; try to update the device firmware [ 754.627347][T15218] vivid-000: disconnect [ 754.636511][T15217] vivid-000: reconnect [ 754.759370][ T46] usb 2-1: USB disconnect, device number 69 [ 754.982258][ T8] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 755.207071][ T8] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 755.229126][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.239264][ T8] usb 1-1: Product: syz [ 755.244242][ T8] usb 1-1: Manufacturer: syz [ 755.251417][ T8] usb 1-1: SerialNumber: syz [ 755.286970][ T8] usb 1-1: config 0 descriptor?? [ 755.318554][ T8] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 062 [ 755.735506][ T8] (null): failure reading functionality [ 755.762806][ T8] i2c i2c-1: failure reading functionality [ 755.784214][ T8] i2c i2c-1: connected i2c-tiny-usb device [ 755.810324][ T8] usb 1-1: USB disconnect, device number 62 [ 755.911949][T15246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3201'. [ 758.343903][ T5270] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 758.642479][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 758.853326][ T5270] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 758.865997][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 758.922313][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.959205][ T5270] usb 1-1: config 0 descriptor?? [ 758.996220][ T5270] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 759.037083][T15291] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3216'. [ 759.242662][ T5227] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 759.273019][ T8] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 759.623136][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 759.629839][ T5227] usb 2-1: config 0 has no interfaces? [ 759.636311][ T5227] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 759.645786][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.654858][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 760.360317][ T5227] usb 2-1: config 0 descriptor?? [ 760.365746][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.386847][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 760.396812][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 760.413329][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.426909][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 760.444102][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.625943][ T5269] usb 2-1: USB disconnect, device number 70 [ 760.664350][ T8] usb 4-1: GET_CAPABILITIES returned 0 [ 760.670301][ T8] usbtmc 4-1:16.0: can't read capabilities [ 760.834723][ T46] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 760.856571][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 761.024509][ T46] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 761.032680][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 761.042892][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 761.054123][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 761.065429][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 761.077064][ T46] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 761.084666][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 761.094832][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 761.104716][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 761.122235][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 761.136139][ T46] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 761.149952][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 761.160347][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 761.172808][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 761.185456][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 761.205153][ T46] usb 5-1: string descriptor 0 read error: -22 [ 761.212365][ T46] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 761.225621][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.246768][ T46] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 761.459108][ T46] usb 5-1: USB disconnect, device number 57 [ 766.496801][ T5270] gspca_vc032x: reg_w err -110 [ 766.501637][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.552447][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.557795][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.580972][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.591247][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.613843][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.666167][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.671524][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.677042][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.683036][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.683155][ T8] usb 4-1: USB disconnect, device number 78 [ 766.688703][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.699649][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.705695][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.711005][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.716411][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.721706][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.728895][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.734708][ T5270] gspca_vc032x: Unknown sensor... [ 766.739822][ T5270] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 766.751646][ T5270] usb 1-1: USB disconnect, device number 63 [ 767.472204][ T5270] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 771.133355][ T5270] usb 2-1: device descriptor read/all, error -71 [ 773.992264][ T5216] Bluetooth: hci5: command 0x0405 tx timeout [ 774.071553][T15436] tipc: Enabled bearer , priority 10 [ 776.829286][T15465] ip_vti0 speed is unknown, defaulting to 1000 [ 777.054521][T15471] Cannot find add_set index 0 as target [ 777.124587][ T5000] IPVS: starting estimator thread 0... [ 777.232683][T15477] IPVS: using max 19 ests per chain, 45600 per kthread [ 777.282303][ T29] audit: type=1326 audit(2000000655.134:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15476 comm="syz.1.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2d5779f9 code=0x7fc00000 [ 777.363664][ T29] audit: type=1326 audit(2000000655.174:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15476 comm="syz.1.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9a2d5779f9 code=0x7fc00000 [ 777.972281][ T29] audit: type=1326 audit(2000000655.824:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15476 comm="syz.1.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2d5779f9 code=0x7fc00000 [ 779.467779][T15511] binder: 15508:15511 ioctl c018620c 20000100 returned -1 [ 780.659151][ T5000] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 780.996651][T15554] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 781.006746][T15554] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 781.285529][ T5000] usb 4-1: Using ep0 maxpacket: 16 [ 781.666410][ T5000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 781.676504][ T5000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 781.695655][ T5000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 782.263927][ T5000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 782.365497][ T5000] usb 4-1: string descriptor 0 read error: -71 [ 782.371837][ T5000] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 782.475602][ T5000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.529426][ T5000] usb 4-1: config 0 descriptor?? [ 782.580437][ T5000] usb 4-1: can't set config #0, error -71 [ 782.613972][ T5000] usb 4-1: USB disconnect, device number 79 [ 783.128201][T15580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.371958][T15582] syz.0.3314[15582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.387410][T15582] syz.0.3314[15582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.743361][ T8] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 783.962163][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 783.979064][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.002948][ T8] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 784.021406][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.031207][ T8] usb 5-1: Product: syz [ 784.041132][ T8] usb 5-1: Manufacturer: syz [ 784.051260][ T8] usb 5-1: SerialNumber: syz [ 784.094005][ T8] usb 5-1: config 0 descriptor?? [ 784.114083][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 784.153582][T15592] syz.1.3322[15592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.724872][ T8] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 784.794575][ T8] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 784.824380][ T8] usb 5-1: USB disconnect, device number 58 [ 784.994536][T14886] tipc: Subscription rejected, illegal request [ 786.015691][T15633] 9pnet_virtio: no channels available for device [ 786.521041][T15644] input: syz0 as /devices/virtual/input/input68 [ 787.004735][ T5000] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 787.212263][ T5000] usb 4-1: Using ep0 maxpacket: 8 [ 787.273630][ T5000] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.285554][ T5000] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.296852][ T5000] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.306855][ T5000] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 788.057548][ T5269] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 788.069026][ T5000] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 788.096422][ T5000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 788.105975][ T5000] usb 4-1: SerialNumber: syz [ 788.116831][ T5000] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 788.126076][ T5000] usbtest 4-1:1.0: Linux gadget zero [ 788.131406][ T5000] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 788.325572][T15638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.335164][T15638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.344941][ T5269] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 788.370418][ T5269] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.379957][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.916180][ T5269] usb 1-1: config 0 descriptor?? [ 788.927008][ T5269] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 789.537080][T15680] nvme_fabrics: missing parameter 'transport=%s' [ 789.544795][T15680] nvme_fabrics: missing parameter 'nqn=%s' [ 789.742443][T15683] nvme_fabrics: missing parameter 'transport=%s' [ 789.766580][T15683] nvme_fabrics: missing parameter 'nqn=%s' [ 790.108119][T15694] ip_vti0 speed is unknown, defaulting to 1000 [ 790.272364][ T8] usb 4-1: USB disconnect, device number 80 [ 790.788774][T15693] xt_CONNSECMARK: invalid mode: 0 [ 791.068511][ T5269] usb 1-1: USB disconnect, device number 64 [ 791.202236][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d8c6800: rx timeout, send abort [ 791.488954][T15718] ================================================================== [ 791.497059][T15718] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 791.504523][T15718] Read of size 8 at addr ffff8880237db630 by task syz.1.3365/15718 [ 791.512406][T15718] [ 791.514731][T15718] CPU: 0 UID: 0 PID: 15718 Comm: syz.1.3365 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 791.525487][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 791.535545][T15718] Call Trace: [ 791.538813][T15718] [ 791.541736][T15718] dump_stack_lvl+0x241/0x360 [ 791.546422][T15718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.551615][T15718] ? __pfx__printk+0x10/0x10 [ 791.556204][T15718] ? _printk+0xd5/0x120 [ 791.560350][T15718] ? __virt_addr_valid+0x183/0x530 [ 791.565446][T15718] ? __virt_addr_valid+0x183/0x530 [ 791.570542][T15718] print_report+0x169/0x550 [ 791.575034][T15718] ? __virt_addr_valid+0x183/0x530 [ 791.580128][T15718] ? __virt_addr_valid+0x183/0x530 [ 791.585224][T15718] ? __virt_addr_valid+0x45f/0x530 [ 791.590317][T15718] ? __phys_addr+0xba/0x170 [ 791.594808][T15718] ? uprobe_mmap+0xb9a/0x11a0 [ 791.599477][T15718] kasan_report+0x143/0x180 [ 791.603978][T15718] ? uprobe_mmap+0xb9a/0x11a0 [ 791.608646][T15718] uprobe_mmap+0xb9a/0x11a0 [ 791.613143][T15718] ? __pfx_uprobe_mmap+0x10/0x10 [ 791.618072][T15718] mmap_region+0x1891/0x2090 [ 791.622650][T15718] ? mark_lock+0x9a/0x350 [ 791.627067][T15718] ? __pfx_mmap_region+0x10/0x10 [ 791.631991][T15718] ? mm_get_unmapped_area+0xa5/0xd0 [ 791.637187][T15718] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 791.642812][T15718] ? cap_mmap_addr+0x163/0x2c0 [ 791.647568][T15718] ? __get_unmapped_area+0x2f0/0x360 [ 791.652842][T15718] do_mmap+0x8f9/0x1010 [ 791.656990][T15718] ? __pfx_do_mmap+0x10/0x10 [ 791.661563][T15718] ? __pfx_down_write_killable+0x10/0x10 [ 791.667182][T15718] ? __pfx_ima_file_mmap+0x10/0x10 [ 791.672284][T15718] ? security_mmap_file+0x178/0x1a0 [ 791.677475][T15718] vm_mmap_pgoff+0x1dd/0x3d0 [ 791.682059][T15718] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 791.687164][T15718] ? __fget_files+0x29/0x470 [ 791.691741][T15718] ? __fget_files+0x3f6/0x470 [ 791.696407][T15718] ksys_mmap_pgoff+0x4f1/0x720 [ 791.701158][T15718] ? __x64_sys_mmap+0x7f/0x140 [ 791.705913][T15718] do_syscall_64+0xf3/0x230 [ 791.710408][T15718] ? clear_bhb_loop+0x35/0x90 [ 791.715073][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.720970][T15718] RIP: 0033:0x7f9a2d5779f9 [ 791.725375][T15718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.744977][T15718] RSP: 002b:00007f9a2e39e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 791.753379][T15718] RAX: ffffffffffffffda RBX: 00007f9a2d705f80 RCX: 00007f9a2d5779f9 [ 791.761336][T15718] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 791.769293][T15718] RBP: 00007f9a2d5e58ee R08: 000000000000000b R09: 0000000000000000 [ 791.777247][T15718] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 791.785204][T15718] R13: 000000000000000b R14: 00007f9a2d705f80 R15: 00007ffdf54dcc58 [ 791.793171][T15718] [ 791.796177][T15718] [ 791.798482][T15718] Allocated by task 15266: [ 791.802877][T15718] kasan_save_track+0x3f/0x80 [ 791.807541][T15718] __kasan_kmalloc+0x98/0xb0 [ 791.812117][T15718] __kmalloc_node_noprof+0x22a/0x440 [ 791.817389][T15718] __kvmalloc_node_noprof+0x72/0x190 [ 791.822660][T15718] bpf_uprobe_multi_link_attach+0x44b/0xb70 [ 791.828545][T15718] link_create+0x727/0x8b0 [ 791.832957][T15718] __sys_bpf+0x4bc/0x810 [ 791.837190][T15718] __x64_sys_bpf+0x7c/0x90 [ 791.841591][T15718] do_syscall_64+0xf3/0x230 [ 791.846085][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.851971][T15718] [ 791.854275][T15718] Freed by task 15266: [ 791.858321][T15718] kasan_save_track+0x3f/0x80 [ 791.862981][T15718] kasan_save_free_info+0x40/0x50 [ 791.867994][T15718] poison_slab_object+0xe0/0x150 [ 791.872914][T15718] __kasan_slab_free+0x37/0x60 [ 791.877662][T15718] kfree+0x149/0x360 [ 791.881545][T15718] bpf_uprobe_multi_link_attach+0x9fe/0xb70 [ 791.887426][T15718] link_create+0x727/0x8b0 [ 791.891828][T15718] __sys_bpf+0x4bc/0x810 [ 791.896056][T15718] __x64_sys_bpf+0x7c/0x90 [ 791.900454][T15718] do_syscall_64+0xf3/0x230 [ 791.904945][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.910831][T15718] [ 791.913141][T15718] The buggy address belongs to the object at ffff8880237db600 [ 791.913141][T15718] which belongs to the cache kmalloc-64 of size 64 [ 791.927003][T15718] The buggy address is located 48 bytes inside of [ 791.927003][T15718] freed 64-byte region [ffff8880237db600, ffff8880237db640) [ 791.940609][T15718] [ 791.942919][T15718] The buggy address belongs to the physical page: [ 791.949318][T15718] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880237db780 pfn:0x237db [ 791.959365][T15718] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 791.967417][T15718] page_type: 0xfdffffff(slab) [ 791.972082][T15718] raw: 00fff00000000200 ffff8880154418c0 ffffea00008966d0 ffffea0000a8ab90 [ 791.980648][T15718] raw: ffff8880237db780 000000000020001e 00000001fdffffff 0000000000000000 [ 791.989212][T15718] page dumped because: kasan: bad access detected [ 791.995610][T15718] page_owner tracks the page as allocated [ 792.001302][T15718] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 65, tgid 65 (kworker/u8:5), ts 7893743285, free_ts 7885466621 [ 792.020037][T15718] post_alloc_hook+0x1f3/0x230 [ 792.024790][T15718] get_page_from_freelist+0x2e4c/0x2f10 [ 792.030319][T15718] __alloc_pages_noprof+0x256/0x6c0 [ 792.035503][T15718] alloc_slab_page+0x5f/0x120 [ 792.040164][T15718] allocate_slab+0x5a/0x2f0 [ 792.044654][T15718] ___slab_alloc+0xcd1/0x14b0 [ 792.049324][T15718] __slab_alloc+0x58/0xa0 [ 792.053643][T15718] __kmalloc_node_noprof+0x286/0x440 [ 792.058919][T15718] __vmalloc_node_range_noprof+0x5dd/0x1460 [ 792.064800][T15718] dup_task_struct+0x444/0x8c0 [ 792.069551][T15718] copy_process+0x5d1/0x3dc0 [ 792.074127][T15718] kernel_clone+0x223/0x870 [ 792.078619][T15718] user_mode_thread+0x132/0x1a0 [ 792.083462][T15718] call_usermodehelper_exec_work+0x5c/0x230 [ 792.089344][T15718] process_scheduled_works+0xa2c/0x1830 [ 792.094878][T15718] worker_thread+0x86d/0xd40 [ 792.099456][T15718] page last free pid 46 tgid 46 stack trace: [ 792.105415][T15718] free_unref_page+0xd19/0xea0 [ 792.110164][T15718] vfree+0x186/0x2e0 [ 792.114044][T15718] delayed_vfree_work+0x56/0x80 [ 792.118880][T15718] process_scheduled_works+0xa2c/0x1830 [ 792.124500][T15718] worker_thread+0x86d/0xd40 [ 792.129180][T15718] kthread+0x2f0/0x390 [ 792.133255][T15718] ret_from_fork+0x4b/0x80 [ 792.137668][T15718] ret_from_fork_asm+0x1a/0x30 [ 792.142441][T15718] [ 792.144758][T15718] Memory state around the buggy address: [ 792.150370][T15718] ffff8880237db500: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 792.158415][T15718] ffff8880237db580: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 792.166458][T15718] >ffff8880237db600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 792.174499][T15718] ^ [ 792.180112][T15718] ffff8880237db680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 792.188153][T15718] ffff8880237db700: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 792.196280][T15718] ================================================================== [ 792.206414][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d8c6800: abort rx timeout. Force session deactivation [ 792.240884][T15718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 792.248119][T15718] CPU: 1 UID: 0 PID: 15718 Comm: syz.1.3365 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 792.258889][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 792.268934][T15718] Call Trace: [ 792.272203][T15718] [ 792.275125][T15718] dump_stack_lvl+0x241/0x360 [ 792.279814][T15718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.285004][T15718] ? __pfx__printk+0x10/0x10 [ 792.289601][T15718] ? preempt_schedule+0xe1/0xf0 [ 792.294445][T15718] ? vscnprintf+0x5d/0x90 [ 792.298764][T15718] panic+0x349/0x860 [ 792.302651][T15718] ? check_panic_on_warn+0x21/0xb0 [ 792.307750][T15718] ? __pfx_panic+0x10/0x10 [ 792.312160][T15718] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 792.318130][T15718] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 792.324443][T15718] ? print_report+0x502/0x550 [ 792.329110][T15718] check_panic_on_warn+0x86/0xb0 [ 792.334033][T15718] ? uprobe_mmap+0xb9a/0x11a0 [ 792.338697][T15718] end_report+0x77/0x160 [ 792.342928][T15718] kasan_report+0x154/0x180 [ 792.347427][T15718] ? uprobe_mmap+0xb9a/0x11a0 [ 792.352100][T15718] uprobe_mmap+0xb9a/0x11a0 [ 792.356605][T15718] ? __pfx_uprobe_mmap+0x10/0x10 [ 792.361535][T15718] mmap_region+0x1891/0x2090 [ 792.366112][T15718] ? mark_lock+0x9a/0x350 [ 792.370440][T15718] ? __pfx_mmap_region+0x10/0x10 [ 792.375362][T15718] ? mm_get_unmapped_area+0xa5/0xd0 [ 792.380548][T15718] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 792.386166][T15718] ? cap_mmap_addr+0x163/0x2c0 [ 792.390921][T15718] ? __get_unmapped_area+0x2f0/0x360 [ 792.396200][T15718] do_mmap+0x8f9/0x1010 [ 792.400355][T15718] ? __pfx_do_mmap+0x10/0x10 [ 792.404937][T15718] ? __pfx_down_write_killable+0x10/0x10 [ 792.410556][T15718] ? __pfx_ima_file_mmap+0x10/0x10 [ 792.415659][T15718] ? security_mmap_file+0x178/0x1a0 [ 792.420849][T15718] vm_mmap_pgoff+0x1dd/0x3d0 [ 792.425431][T15718] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 792.430532][T15718] ? __fget_files+0x29/0x470 [ 792.435109][T15718] ? __fget_files+0x3f6/0x470 [ 792.439771][T15718] ksys_mmap_pgoff+0x4f1/0x720 [ 792.444525][T15718] ? __x64_sys_mmap+0x7f/0x140 [ 792.449282][T15718] do_syscall_64+0xf3/0x230 [ 792.453783][T15718] ? clear_bhb_loop+0x35/0x90 [ 792.458449][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.464336][T15718] RIP: 0033:0x7f9a2d5779f9 [ 792.468739][T15718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.488331][T15718] RSP: 002b:00007f9a2e39e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 792.496735][T15718] RAX: ffffffffffffffda RBX: 00007f9a2d705f80 RCX: 00007f9a2d5779f9 [ 792.504694][T15718] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 792.512648][T15718] RBP: 00007f9a2d5e58ee R08: 000000000000000b R09: 0000000000000000 [ 792.520604][T15718] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 792.528559][T15718] R13: 000000000000000b R14: 00007f9a2d705f80 R15: 00007ffdf54dcc58 [ 792.536528][T15718] [ 792.539777][T15718] Kernel Offset: disabled [ 792.544083][T15718] Rebooting in 86400 seconds..