last executing test programs: 8m16.944980273s ago: executing program 3 (id=171): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) 8m16.593625928s ago: executing program 3 (id=173): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) 8m15.41080976s ago: executing program 3 (id=174): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000300)=0x2, 0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0xa, 0x1, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f00000005c0)=""/104, 0x68}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000b00)=""/214, 0xd6}], &(0x7f0000000d00)=[0x6, 0x9, 0x7fff, 0xb239, 0x4a, 0xfffffffffffffffd, 0x5]}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000d80)={r7, 0x2}, 0x8) 8m14.303493643s ago: executing program 3 (id=178): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0xc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 8m13.971911985s ago: executing program 3 (id=179): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x200340) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0xb) 8m13.244935819s ago: executing program 3 (id=180): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 7m58.179127493s ago: executing program 32 (id=180): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 5m3.066073308s ago: executing program 0 (id=582): openat$ppp(0xffffffffffffff9c, 0x0, 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\r', 0x1, 0x800, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000400)={0x2, "5660359c3245d1c42b17afad7d48ed5100000000000000010000000000000008"}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000340)=ANY=[], 0x45) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000080)={0x3ff, 0x7, 0x100000, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m1.879824261s ago: executing program 0 (id=586): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4m59.043463575s ago: executing program 0 (id=597): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) 4m58.907116982s ago: executing program 0 (id=598): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0xfe, 0x6, @multicast}, 0x14) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$midi(r3, 0x0, 0x20) 4m57.67659193s ago: executing program 0 (id=602): r0 = syz_open_dev$loop(&(0x7f0000000180), 0xfff, 0x420040) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000380)={0x4cba7c19, 0x3, 0x1}) mknod(&(0x7f0000000040)='./file1/file4\x00', 0x8000, 0x3f) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000e8ffffffffff0b00000048000580080001"], 0x5c}}, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4/file7/file5\x00', 0x1400) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000580)) 4m56.357872639s ago: executing program 0 (id=605): msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000548d4f9971d0ba98283922169c23190d1f89219d566b80a94b70658c14b0f9f46154498b9013d7939c9163401245add763698fed03015bc79d4d6e7cc0f8"], 0xe0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x18, 0x38, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x800, 0xb}, @fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 4m40.623124569s ago: executing program 33 (id=605): msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000548d4f9971d0ba98283922169c23190d1f89219d566b80a94b70658c14b0f9f46154498b9013d7939c9163401245add763698fed03015bc79d4d6e7cc0f8"], 0xe0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x18, 0x38, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x800, 0xb}, @fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 12.376682951s ago: executing program 4 (id=1132): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bf, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x80800}) listen(r1, 0x5) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 11.151965928s ago: executing program 4 (id=1133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={r1, 0x2}, 0x8) 10.90062056s ago: executing program 4 (id=1134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 9.623513114s ago: executing program 4 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sysfs$2(0x2, 0x817fff, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$can_raw(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, '\a\x00'}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x4010) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x128, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf7, 0xa9, @random="653c463a5584487ba5f20b3e2847bd5edc1921f850bf38f1db298be62e2fc02b2ff80fbc6158206c2c99badb9b9b83f092dea31feb1de305731ab828a380563c39ebc1ba0a0ca677dfbe4a97599a6fe8469285c7bb0a00919bc2d1a35d30ea17761df3520393c0708b6002b6c58e19bf1f01d8b18e460389664db53a79c80b4fd31ef424825afd0d544466bd148a5182dee1717f1a5988e8a0dbec2092d44a35ce3a92ba34fa61a133108e7f826799c3355fc5924e4d2080615df7627392450984bfa3d53f40121e2673f2de7b9b3833ddaad1e9095c11f64e0090729573e9b120dbf0bba276cfb73a828f2de2c73394befbc0"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x105}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 9.064034327s ago: executing program 5 (id=1136): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0xd809, 0x0, 0x0}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 9.016419673s ago: executing program 1 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x2002, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x4, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xfd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r7, @ANYRES16=r0], 0x74}}, 0x0) 7.549202361s ago: executing program 1 (id=1138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 5.824020822s ago: executing program 1 (id=1139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$user(&(0x7f00000001c0), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000400)="5d8784daf4f7594b195da5cd159e6506e6b1d62dbc4ff9a3e793a5189a9e76e6f6a8fe1b4cf20084ebc7576b2ac7d858888b6349a5757dac89e67c9ae4c90d2733d0b0f29dcf32ef449d62e0ecc151cbd928982fd8dd14e12476b0fa3289a82e47504bec859642dc80089529d9f0e042cd6b9b47521ccca5243dc6a493d61f50a3f1b1140925f0e14811909e", 0x8c, 0xfffffffffffffff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000000080041007278650014003300767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 5.815284193s ago: executing program 5 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socket$inet6(0xa, 0x80002, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) 4.626747216s ago: executing program 5 (id=1142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000080)={0xdddd0000, 0x1000}) 3.872020303s ago: executing program 5 (id=1144): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 3.702977144s ago: executing program 2 (id=1145): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.666034099s ago: executing program 5 (id=1146): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000240)={0x0, 0x0}) 3.615912775s ago: executing program 4 (id=1147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.816152487s ago: executing program 5 (id=1148): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0xd809, 0x0, 0x0}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 1.796336289s ago: executing program 4 (id=1149): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) 1.795578609s ago: executing program 2 (id=1150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000b00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) 1.592095135s ago: executing program 2 (id=1151): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) splice(r6, 0x0, r4, 0x0, 0x7ffff000, 0x1) 552.333929ms ago: executing program 2 (id=1152): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 500.980476ms ago: executing program 1 (id=1153): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "6bbe4d", 0xc, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}}}}}}}}, 0x0) 284.088143ms ago: executing program 2 (id=1154): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15842313560608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) 226.713721ms ago: executing program 1 (id=1155): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x6}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x6, 0x0, 0x26, 0x400, 0x8, 0x6000007}) 135.770982ms ago: executing program 2 (id=1156): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x180, 0x380, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x9000) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000700)) 0s ago: executing program 1 (id=1157): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kernel console output (not intermixed with test programs): net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 142.208650][ T1188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 142.222275][ T1188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 142.236028][ T1188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 142.247624][ T1188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 142.261257][ T1188] lan78xx: probe of 2-1:1.0 failed with error -71 [ 142.281826][ T1188] usb 2-1: USB disconnect, device number 2 [ 142.588267][ T6239] netlink: 60 bytes leftover after parsing attributes in process `syz.3.102'. [ 142.602927][ T5774] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 143.247113][ T5862] gspca_sunplus: reg_w_1 err -71 [ 143.252218][ T5862] sunplus: probe of 3-1:0.0 failed with error -71 [ 143.264881][ T5862] usb 3-1: USB disconnect, device number 3 [ 143.461904][ T6248] netlink: 'syz.2.106': attribute type 10 has an invalid length. [ 143.653848][ T6252] kvm: kvm [6251]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x2000006 [ 144.027200][ T6269] hfs: can't find a HFS filesystem on dev nullb0 [ 144.182374][ T6252] vxcan1 speed is unknown, defaulting to 1000 [ 144.462984][ T6274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.113'. [ 145.154915][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.396023][ T27] usb 4-1: config 128 has no interfaces? [ 145.428867][ T27] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 145.464723][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.472803][ T27] usb 4-1: Product: syz [ 145.487999][ T27] usb 4-1: Manufacturer: syz [ 145.492783][ T27] usb 4-1: SerialNumber: syz [ 145.624917][ T28] audit: type=1800 audit(1768444663.809:3): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.117" name="file1" dev="overlay" ino=188 res=0 errno=0 [ 146.054863][ T1188] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.455616][ T1188] usb 3-1: Using ep0 maxpacket: 32 [ 146.475895][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.510428][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.550669][ T1188] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 146.582639][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.626781][ T1188] usb 3-1: config 0 descriptor?? [ 146.680289][ T6301] hfs: can't find a HFS filesystem on dev nullb0 [ 147.062076][ T9] usb 4-1: USB disconnect, device number 4 [ 147.469994][ T1188] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 147.591015][ T1188] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 147.620853][ T6309] loop2: detected capacity change from 0 to 7 [ 147.636533][ T6309] Dev loop2: unable to read RDB block 7 [ 147.643914][ T6309] loop2: unable to read partition table [ 147.657646][ T1188] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 147.694219][ T6309] loop2: partition table beyond EOD, truncated [ 147.750481][ T6309] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.864512][ T1188] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 147.940634][ T1188] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 148.483756][ T9] usb 3-1: USB disconnect, device number 4 [ 148.581727][ T1188] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 148.910949][ T1188] usb 4-1: config 0 interface 0 altsetting 186 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.950615][ T1188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.972495][ T1188] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 149.002332][ T1188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.053499][ T1188] usb 4-1: config 0 descriptor?? [ 149.595987][ T6328] hfs: can't find a HFS filesystem on dev nullb0 [ 150.715182][ T1188] koneplus 0003:1E7D:2E22.0002: collection stack underflow [ 150.753237][ T1188] koneplus 0003:1E7D:2E22.0002: item 0 4 0 12 parsing failed [ 150.802152][ T1188] koneplus 0003:1E7D:2E22.0002: parse failed [ 150.824768][ T1188] koneplus: probe of 0003:1E7D:2E22.0002 failed with error -22 [ 150.905287][ T1188] usb 4-1: USB disconnect, device number 5 [ 152.717261][ T28] audit: type=1326 audit(1768444670.909:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 152.749530][ T28] audit: type=1326 audit(1768444670.929:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 152.798264][ T28] audit: type=1326 audit(1768444670.929:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 152.832420][ T28] audit: type=1326 audit(1768444670.929:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 152.872455][ T5839] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.954707][ T5862] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.974893][ T28] audit: type=1326 audit(1768444670.939:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 153.049172][ T28] audit: type=1326 audit(1768444670.939:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 153.074709][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 153.082032][ T5839] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 153.091472][ T5839] usb 4-1: config 1 has no interface number 0 [ 153.110633][ T28] audit: type=1326 audit(1768444670.959:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 153.122601][ T5839] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 153.170636][ T28] audit: type=1326 audit(1768444670.979:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 153.194361][ T5839] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 153.211002][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 153.217668][ T5839] usb 4-1: config 1 interface 105 has no altsetting 0 [ 153.226070][ T5862] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 153.238906][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.251149][ T5839] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 153.271449][ T5862] usb 1-1: config 0 descriptor?? [ 153.300663][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.316362][ T5839] usb 4-1: Product: syz [ 153.320582][ T5839] usb 4-1: Manufacturer: syz [ 153.326993][ T5839] usb 4-1: SerialNumber: syz [ 153.355720][ T6350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.452382][ T28] audit: type=1326 audit(1768444670.979:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 153.995796][ T6362] hfs: can't find a HFS filesystem on dev nullb0 [ 155.134265][ T6350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.207367][ T5862] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 155.236791][ T28] audit: type=1326 audit(1768444670.979:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 155.278439][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.354968][ T5862] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 155.362898][ T5839] aqc111: probe of 4-1:1.105 failed with error -71 [ 155.374914][ T5862] usb 1-1: media controller created [ 155.459063][ T5839] usb 4-1: USB disconnect, device number 6 [ 155.573787][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.929752][ T5862] DVB: Unable to find symbol dib7000p_attach() [ 155.970137][ T5862] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 156.260673][ T5862] rc_core: IR keymap rc-dib0700-rc5 not found [ 156.294408][ T5862] Registered IR keymap rc-empty [ 158.016066][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 158.310316][ T6386] mmap: syz.1.152 (6386) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 160.295758][ T6399] hfs: can't find a HFS filesystem on dev nullb0 [ 161.124958][ T5862] dvb-usb: could not initialize remote control. [ 161.744705][ T5862] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 161.794804][ T5838] usb 1-1: USB disconnect, device number 4 [ 161.917229][ T5838] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 168.775744][ T6437] hfs: can't find a HFS filesystem on dev nullb0 [ 171.252327][ T6454] (null): rxe_set_mtu: Set mtu to 256 [ 171.262665][ T6454] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 173.372830][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 173.854699][ T1188] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.064634][ T1188] usb 3-1: Using ep0 maxpacket: 32 [ 174.087654][ T1188] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 174.108894][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.147346][ T1188] usb 3-1: config 0 descriptor?? [ 174.364815][ T1188] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 174.395918][ T1188] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.427360][ T1188] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 174.447381][ T1188] usb 3-1: media controller created [ 174.508199][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.666563][ T1188] DVB: Unable to find symbol dib7000p_attach() [ 174.684726][ T1188] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 174.864957][ T1188] rc_core: IR keymap rc-dib0700-rc5 not found [ 174.883615][ T1188] Registered IR keymap rc-empty [ 176.791657][ T6494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.183'. [ 176.954315][ T6494] erspan0: entered promiscuous mode [ 177.011235][ T6494] erspan0: left promiscuous mode [ 179.889895][ T1188] dvb-usb: could not initialize remote control. [ 179.941500][ T1188] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 179.962287][ T6510] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 179.984233][ T1188] usb 3-1: USB disconnect, device number 5 [ 180.006340][ T6510] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 180.059632][ T6510] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 180.107519][ T1188] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 180.394663][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.729052][ T6510] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.081872][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 183.119865][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 183.128518][ T27] usb 1-1: can't read configurations, error -71 [ 183.655630][ T6528] hfs: can't find a HFS filesystem on dev nullb0 [ 184.429693][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 184.429711][ T28] audit: type=1326 audit(1768444702.609:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.490518][ T28] audit: type=1326 audit(1768444702.609:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.528333][ T28] audit: type=1326 audit(1768444702.609:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.555919][ T28] audit: type=1326 audit(1768444702.609:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.604385][ T28] audit: type=1326 audit(1768444702.609:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.636619][ T28] audit: type=1326 audit(1768444702.609:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.671006][ T27] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 184.702510][ T28] audit: type=1326 audit(1768444702.609:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.727655][ T28] audit: type=1326 audit(1768444702.609:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.754796][ T28] audit: type=1326 audit(1768444702.609:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.786024][ T28] audit: type=1326 audit(1768444702.609:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c98f749 code=0x7ffc0000 [ 184.876340][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 184.894753][ T27] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 184.920090][ T27] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 184.961192][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.984848][ T27] usb 1-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 185.014903][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.056787][ T27] usb 1-1: config 0 descriptor?? [ 185.083413][ T6526] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.506424][ T27] ntrig 0003:1B96:0011.0003: unknown main item tag 0x0 [ 185.534791][ T27] ntrig 0003:1B96:0011.0003: unknown main item tag 0x0 [ 185.552087][ T27] ntrig 0003:1B96:0011.0003: unknown main item tag 0x0 [ 185.572451][ T27] ntrig 0003:1B96:0011.0003: unknown main item tag 0x0 [ 185.584606][ T27] ntrig 0003:1B96:0011.0003: unknown main item tag 0x0 [ 185.645859][ T27] ntrig 0003:1B96:0011.0003: hidraw0: USB HID v0.04 Device [HID 1b96:0011] on usb-dummy_hcd.0-1/input0 [ 185.710813][ T27] usb 1-1: USB disconnect, device number 6 [ 185.953441][ T6540] fido_id[6540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 187.714720][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.924656][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 187.933932][ T27] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 187.953876][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.997249][ T27] usb 3-1: config 0 descriptor?? [ 188.208738][ T27] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 188.233491][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.266647][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 188.285205][ T27] usb 3-1: media controller created [ 188.342796][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.573557][ T27] DVB: Unable to find symbol dib7000p_attach() [ 188.586269][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 188.805640][ T27] rc_core: IR keymap rc-dib0700-rc5 not found [ 188.833639][ T27] Registered IR keymap rc-empty [ 188.850160][ T27] dvb-usb: could not initialize remote control. [ 188.867542][ T27] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 188.918679][ T27] usb 3-1: USB disconnect, device number 6 [ 189.098361][ T27] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 190.206591][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.216816][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.234838][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.245797][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.741252][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.750827][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.607020][ T6584] vxcan1 speed is unknown, defaulting to 1000 [ 192.534664][ T5856] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.217741][ T6607] hfs: can't find a HFS filesystem on dev nullb0 [ 194.137470][ T5774] Bluetooth: hci4: command tx timeout [ 194.194782][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 194.207068][ T5856] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 194.216701][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.237650][ T5856] usb 1-1: config 0 descriptor?? [ 194.447351][ T5856] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 194.492164][ T5856] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 194.503319][ T5856] dib0700: firmware download failed at 7 with -22 [ 194.518827][ T5856] usb 1-1: USB disconnect, device number 7 [ 194.598318][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606526][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.815300][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.004518][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.030364][ T6584] chnl_net:caif_netlink_parms(): no params data found [ 195.109863][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.347424][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.427223][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.434458][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.460461][ T6584] bridge_slave_0: entered allmulticast mode [ 195.474175][ T6584] bridge_slave_0: entered promiscuous mode [ 195.511007][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.531330][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.549561][ T6584] bridge_slave_1: entered allmulticast mode [ 195.571266][ T6584] bridge_slave_1: entered promiscuous mode [ 195.707620][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.802805][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.916825][ T6633] (null): rxe_set_mtu: Set mtu to 256 [ 195.926605][ T6633] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 196.205130][ T5774] Bluetooth: hci4: command tx timeout [ 196.749303][ T6584] team0: Port device team_slave_0 added [ 196.802885][ T6584] team0: Port device team_slave_1 added [ 197.545419][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.572635][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.610582][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.791935][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.804318][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.841223][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.284635][ T5774] Bluetooth: hci4: command tx timeout [ 198.492690][ T6584] hsr_slave_0: entered promiscuous mode [ 198.530228][ T6584] hsr_slave_1: entered promiscuous mode [ 198.540857][ T6584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.553336][ T6584] Cannot create hsr debugfs directory [ 198.559491][ T6643] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 198.666849][ T6648] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 198.692710][ T6648] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 199.474418][ T6584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.562609][ T6584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.575534][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 199.596979][ T6584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.787175][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.804978][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.825690][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.838787][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.848033][ T8] usb 2-1: Product: syz [ 199.852256][ T8] usb 2-1: Manufacturer: syz [ 199.857016][ T8] usb 2-1: SerialNumber: syz [ 200.036408][ T6584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.354800][ T5774] Bluetooth: hci4: command tx timeout [ 200.880802][ T8] usb 2-1: invalid UAC_HEADER (v1) [ 201.052306][ T8] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 201.087066][ T8] usb 2-1: USB disconnect, device number 3 [ 201.162541][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.472346][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.540184][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.575200][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.582386][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.639647][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.646930][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.698452][ T6584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.750360][ T6584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.848470][ T6720] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 202.136342][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 202.779614][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.932569][ T11] hsr_slave_0: left promiscuous mode [ 204.974886][ T11] hsr_slave_1: left promiscuous mode [ 205.000834][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.030487][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.057859][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.090709][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.111079][ T11] bridge_slave_1: left allmulticast mode [ 205.124772][ T11] bridge_slave_1: left promiscuous mode [ 205.132332][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.151677][ T11] bridge_slave_0: left allmulticast mode [ 205.163282][ T11] bridge_slave_0: left promiscuous mode [ 205.169807][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.291831][ T11] veth1_macvtap: left promiscuous mode [ 205.301437][ T11] veth0_macvtap: left promiscuous mode [ 205.322348][ T11] veth1_vlan: left promiscuous mode [ 205.338737][ T11] veth0_vlan: left promiscuous mode [ 207.559657][ T11] team0 (unregistering): Port device team_slave_1 removed [ 207.716216][ T11] team0 (unregistering): Port device team_slave_0 removed [ 207.788984][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.208237][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.781358][ T11] bond0 (unregistering): Released all slaves [ 208.898879][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.249'. [ 209.317561][ T6584] veth0_vlan: entered promiscuous mode [ 209.358886][ T6584] veth1_vlan: entered promiscuous mode [ 209.582499][ T6780] hfs: can't find a HFS filesystem on dev nullb0 [ 212.518304][ T6584] veth0_macvtap: entered promiscuous mode [ 212.541639][ T11] IPVS: stop unused estimator thread 0... [ 212.557629][ T6584] veth1_macvtap: entered promiscuous mode [ 212.637438][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.650339][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.684642][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.723804][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.745718][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.778002][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.814019][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.898411][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.931620][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.974596][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.999377][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.022528][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.061797][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.100670][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.131805][ T6584] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.184695][ T6584] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.203680][ T6584] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.222974][ T6584] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.718947][ T5768] Bluetooth: hci0: command 0x0406 tx timeout [ 213.732458][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 213.744803][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 213.844259][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.880737][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.035102][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.043395][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.165502][ T5839] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 214.368832][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.404619][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.434125][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.470212][ T5839] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.489736][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.518102][ T5839] usb 2-1: config 0 descriptor?? [ 214.958067][ T5839] plantronics 0003:047F:FFFF.0004: invalid report_count 561384583 [ 214.985354][ T5839] plantronics 0003:047F:FFFF.0004: item 0 4 1 9 parsing failed [ 215.008609][ T5839] plantronics 0003:047F:FFFF.0004: parse failed [ 215.028302][ T5839] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 215.159859][ T5757] usb 2-1: USB disconnect, device number 4 [ 215.968347][ T6844] (null): rxe_set_mtu: Set mtu to 256 [ 215.978883][ T6844] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 216.795082][ T6836] could not allocate digest TFM handle hmac(streebog512) [ 221.198227][ T6902] fuse: Unknown parameter '0x0000000000000005' [ 221.206955][ T6902] usb usb8: usbfs: process 6902 (syz.4.271) did not claim interface 0 before use [ 222.093152][ T6917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 225.007921][ T6939] fuse: Bad value for 'fd' [ 228.425614][ T6995] fuse: Bad value for 'fd' [ 229.987164][ T7003] hfs: can't find a HFS filesystem on dev nullb0 [ 233.465250][ T7026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.299'. [ 233.905524][ T7035] fuse: Unknown parameter '00000000000000000003' [ 235.848215][ T7055] loop3: detected capacity change from 0 to 1 [ 236.331067][ T7055] Dev loop3: unable to read RDB block 1 [ 236.572062][ T7055] loop3: unable to read partition table [ 236.655024][ T7055] loop3: partition table beyond EOD, truncated [ 236.755093][ T7055] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.642044][ T7080] fuse: Unknown parameter '00000000000000000003' [ 240.649631][ T7100] hfs: can't find a HFS filesystem on dev nullb0 [ 242.620874][ T7127] fuse: Unknown parameter '00000000000000000003' [ 243.076331][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 245.415500][ T7160] hfs: can't find a HFS filesystem on dev nullb0 [ 246.092521][ T7171] fuse: Unknown parameter '00000000000000000003' [ 247.770882][ T7191] syz2: rxe_newlink: already configured on vxcan1 [ 248.759636][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 248.934828][ T7198] tmpfs: Bad value for 'huge' [ 249.164936][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 249.274816][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.314650][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.323781][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.417115][ T8] usb 3-1: config 0 descriptor?? [ 249.455947][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 250.141836][ T7220] fuse: Unknown parameter '00000000000000000003' [ 252.587072][ T7239] (null): rxe_set_mtu: Set mtu to 256 [ 252.596343][ T7239] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 253.543631][ T5839] usb 3-1: USB disconnect, device number 7 [ 256.033791][ T7266] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 256.050020][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.057724][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.124602][ T7298] netlink: 224 bytes leftover after parsing attributes in process `syz.0.358'. [ 258.133763][ T7302] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 258.208901][ T7303] syz2: rxe_newlink: already configured on vxcan1 [ 259.101992][ T7312] IPVS: stopping backup sync thread 7302 ... [ 260.225415][ T5082] Bluetooth: hci4: link tx timeout [ 260.231170][ T5082] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 260.279313][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 261.828424][ T7333] binder: BINDER_SET_CONTEXT_MGR already set [ 261.864708][ T7333] binder: 7332:7333 ioctl 4018620d 2000000002c0 returned -16 [ 262.114606][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 262.274855][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 262.294821][ T8] usb 2-1: device descriptor read/64, error -71 [ 262.574787][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 262.744714][ T8] usb 2-1: device descriptor read/64, error -71 [ 262.864882][ T8] usb usb2-port1: attempt power cycle [ 263.120554][ T7363] (null): rxe_set_mtu: Set mtu to 256 [ 263.129891][ T7363] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 263.877974][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 263.941274][ T8] usb 2-1: device descriptor read/8, error -71 [ 264.234731][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 264.341100][ T8] usb 2-1: device descriptor read/8, error -71 [ 264.616063][ T8] usb usb2-port1: unable to enumerate USB device [ 265.134567][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 265.134582][ T28] audit: type=1326 audit(1768444783.309:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x0 [ 265.908703][ T7381] vxcan1 speed is unknown, defaulting to 1000 [ 266.849047][ T7402] binder: BINDER_SET_CONTEXT_MGR already set [ 266.855484][ T7402] binder: 7401:7402 ioctl 4018620d 2000000002c0 returned -16 [ 267.664594][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 267.875280][ T8] usb 5-1: device descriptor read/64, error -71 [ 268.172604][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 268.223780][ T7421] netlink: 'syz.1.383': attribute type 10 has an invalid length. [ 268.359763][ T8] usb 5-1: device descriptor read/64, error -71 [ 268.496114][ T8] usb usb5-port1: attempt power cycle [ 270.784469][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 270.910606][ T8] usb 5-1: device descriptor read/8, error -71 [ 271.126169][ T7452] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 271.143473][ T7452] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 271.156805][ T7452] netlink: 'syz.4.392': attribute type 10 has an invalid length. [ 271.191628][ T7451] binder: BINDER_SET_CONTEXT_MGR already set [ 271.261147][ T7451] binder: 7449:7451 ioctl 4018620d 2000000002c0 returned -16 [ 271.301240][ T7452] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 275.690725][ T7489] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 275.775170][ T5777] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 275.944861][ T5777] usb 5-1: device descriptor read/64, error -71 [ 276.953858][ T7491] hfs: can't find a HFS filesystem on dev nullb0 [ 277.699699][ T5777] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 277.882548][ T5777] usb 5-1: device descriptor read/64, error -71 [ 278.046569][ T5777] usb usb5-port1: attempt power cycle [ 278.520025][ T5777] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 278.634790][ T5777] usb 5-1: device descriptor read/8, error -71 [ 279.103093][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.4.408'. [ 284.129769][ T7530] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 284.513707][ T7536] IPVS: stopping backup sync thread 7530 ... [ 285.736690][ T7532] hfs: can't find a HFS filesystem on dev nullb0 [ 286.027422][ T5856] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 286.176926][ T7542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.417'. [ 286.214856][ T5856] usb 1-1: device descriptor read/64, error -71 [ 286.555078][ T5856] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 286.774878][ T5856] usb 1-1: device descriptor read/64, error -71 [ 286.923644][ T5856] usb usb1-port1: attempt power cycle [ 287.375016][ T5856] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 287.892203][ T5856] usb 1-1: device descriptor read/8, error -71 [ 289.115352][ T7559] netlink: 'syz.1.422': attribute type 10 has an invalid length. [ 291.947185][ T7577] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 292.395393][ T7583] IPVS: stopping backup sync thread 7577 ... [ 292.686420][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 292.695653][ T7585] netlink: 108 bytes leftover after parsing attributes in process `syz.4.427'. [ 292.718923][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 292.733048][ T7585] netlink: 108 bytes leftover after parsing attributes in process `syz.4.427'. [ 292.752238][ T7585] netlink: 84 bytes leftover after parsing attributes in process `syz.4.427'. [ 295.330831][ T7594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'. [ 296.145703][ T7596] netlink: 'syz.4.432': attribute type 10 has an invalid length. [ 297.539317][ T5777] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 297.590633][ T5777] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.726580][ T7631] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 299.202019][ T7637] IPVS: stopping backup sync thread 7631 ... [ 299.498757][ T7639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 302.364230][ T7672] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 303.049259][ T7681] IPVS: stopping backup sync thread 7672 ... [ 303.066560][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.451'. [ 304.105460][ T7686] hfs: can't find a HFS filesystem on dev nullb0 [ 307.619720][ T7716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.463'. [ 308.595032][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 308.604217][ T7726] netlink: 108 bytes leftover after parsing attributes in process `syz.2.464'. [ 308.616611][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 308.628652][ T7726] netlink: 108 bytes leftover after parsing attributes in process `syz.2.464'. [ 308.638252][ T7726] netlink: 84 bytes leftover after parsing attributes in process `syz.2.464'. [ 311.591363][ T7723] hfs: can't find a HFS filesystem on dev nullb0 [ 311.924820][ T7750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.472'. [ 314.865962][ T7770] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 314.872871][ T7770] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 314.887807][ T7770] vhci_hcd vhci_hcd.0: Device attached [ 314.896680][ T7774] vhci_hcd: connection closed [ 314.899176][ T34] vhci_hcd: stop threads [ 314.919738][ T34] vhci_hcd: release socket [ 314.924443][ T34] vhci_hcd: disconnect device [ 318.770822][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.789737][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.692647][ T7817] hfs: can't find a HFS filesystem on dev nullb0 [ 321.326327][ T7823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.491'. [ 327.225169][ T7861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.501'. [ 328.042180][ T7865] (null): rxe_set_mtu: Set mtu to 256 [ 328.048084][ T7865] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 331.181724][ T7874] vxcan1 speed is unknown, defaulting to 1000 [ 332.651200][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.512'. [ 333.304099][ T7908] (null): rxe_set_mtu: Set mtu to 256 [ 333.310465][ T7908] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 333.699417][ T7902] hfs: can't find a HFS filesystem on dev nullb0 [ 341.034043][ T7946] vxcan1 speed is unknown, defaulting to 1000 [ 342.705941][ T7961] syz2: rxe_newlink: already configured on vxcan1 [ 343.220121][ T7965] netlink: 60 bytes leftover after parsing attributes in process `syz.4.531'. [ 344.948094][ T7971] hfs: can't find a HFS filesystem on dev nullb0 [ 346.142964][ T7980] input: syz0 as /devices/virtual/input/input17 [ 346.890302][ T5818] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 346.959974][ T5818] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.426656][ T7993] capability: warning: `syz.4.540' uses deprecated v2 capabilities in a way that may be insecure [ 347.556309][ T7993] ======================================================= [ 347.556309][ T7993] WARNING: The mand mount option has been deprecated and [ 347.556309][ T7993] and is ignored by this kernel. Remove the mand [ 347.556309][ T7993] option from the mount to silence this warning. [ 347.556309][ T7993] ======================================================= [ 347.884274][ T7997] (null): rxe_set_mtu: Set mtu to 256 [ 347.890169][ T7997] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 348.075994][ T7993] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 349.430398][ T8015] netlink: 60 bytes leftover after parsing attributes in process `syz.1.543'. [ 350.346264][ T8027] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 350.640296][ T8032] IPVS: stopping backup sync thread 8027 ... [ 352.455323][ T8046] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 352.536332][ T8047] (null): rxe_set_mtu: Set mtu to 256 [ 352.542302][ T8047] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 352.601854][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.550'. [ 353.659651][ T8071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.554'. [ 355.065313][ T8085] sp0: Synchronizing with TNC [ 355.700617][ T8092] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 355.993638][ T8097] IPVS: stopping backup sync thread 8092 ... [ 357.286913][ T8117] hfs: can't find a HFS filesystem on dev nullb0 [ 358.941510][ T8116] (null): rxe_set_mtu: Set mtu to 256 [ 358.947717][ T8116] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 359.459129][ T8126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.566'. [ 360.464077][ T8155] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 360.847111][ T8160] IPVS: stopping backup sync thread 8155 ... [ 361.947368][ T8171] (null): rxe_set_mtu: Set mtu to 256 [ 361.953179][ T8171] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 362.326047][ T8167] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 362.607935][ T8184] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 362.797753][ T8185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'. [ 362.917514][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.577'. [ 362.990262][ T8188] infiniband syz1: set active [ 363.008954][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.016378][ T8188] bridge0: port 2(bridge_slave_1) entered listening state [ 363.023881][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.031158][ T8188] bridge0: port 1(bridge_slave_0) entered listening state [ 363.098220][ T8188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.718221][ T8217] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 365.893512][ T8215] IPVS: stopping backup sync thread 8217 ... [ 365.944641][ T965] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 366.225638][ T965] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.233810][ T965] usb 1-1: config 0 has no interface number 0 [ 366.309325][ T965] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 366.348330][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.368746][ T5818] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 366.382157][ T965] usb 1-1: Product: syz [ 366.388892][ T965] usb 1-1: Manufacturer: syz [ 366.397577][ T8228] syz2: rxe_newlink: already configured on vxcan1 [ 366.405149][ T5818] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.421440][ T965] usb 1-1: SerialNumber: syz [ 366.437536][ T965] usb 1-1: config 0 descriptor?? [ 366.790524][ T8229] fido_id[8229]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.929612][ T965] dvb_usb_ec168: probe of 1-1:0.1 failed with error -32 [ 366.985991][ T8233] netlink: 60 bytes leftover after parsing attributes in process `syz.4.590'. [ 367.027664][ T965] usb 1-1: USB disconnect, device number 12 [ 368.253834][ T8255] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 368.362569][ T8260] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 368.383034][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.594'. [ 368.634218][ T8259] IPVS: stopping backup sync thread 8260 ... [ 369.202367][ T8278] (null): rxe_set_mtu: Set mtu to 256 [ 369.209883][ T8278] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 370.362878][ T8289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.602'. [ 371.919233][ T8308] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 372.086058][ T8306] IPVS: stopping backup sync thread 8308 ... [ 372.704516][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.610'. [ 372.713724][ T8317] netlink: 108 bytes leftover after parsing attributes in process `syz.4.610'. [ 372.727569][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.610'. [ 372.738083][ T8317] netlink: 108 bytes leftover after parsing attributes in process `syz.4.610'. [ 372.747301][ T8317] netlink: 84 bytes leftover after parsing attributes in process `syz.4.610'. [ 373.356907][ T8321] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 373.639426][ T8322] syz2: rxe_newlink: already configured on vxcan1 [ 373.754818][ T8326] netlink: 60 bytes leftover after parsing attributes in process `syz.4.613'. [ 377.736900][ T8352] (null): rxe_set_mtu: Set mtu to 256 [ 377.742684][ T8352] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 378.014367][ T8355] sp0: Synchronizing with TNC [ 378.925103][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.931607][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.270171][ T8363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.624'. [ 380.769704][ T8371] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 381.050663][ T8374] IPVS: stopping backup sync thread 8371 ... [ 381.744571][ T28] audit: type=1326 audit(1768444899.929:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 381.767026][ T28] audit: type=1326 audit(1768444899.929:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 381.942630][ T28] audit: type=1326 audit(1768444899.929:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 382.412289][ T28] audit: type=1326 audit(1768444899.929:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 382.604622][ T28] audit: type=1326 audit(1768444899.929:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 382.695195][ T28] audit: type=1326 audit(1768444899.929:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 382.718080][ T28] audit: type=1326 audit(1768444899.929:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 382.781418][ T28] audit: type=1326 audit(1768444899.929:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 382.824931][ T28] audit: type=1326 audit(1768444899.929:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 382.939903][ T28] audit: type=1326 audit(1768444899.929:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7fc00000 [ 383.090673][ T8392] syz2: rxe_newlink: already configured on vxcan1 [ 384.094306][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.634'. [ 385.663733][ T8410] hfs: can't find a HFS filesystem on dev nullb0 [ 386.916037][ T8417] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 387.202663][ T8418] IPVS: stopping backup sync thread 8417 ... [ 387.972819][ T5774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.985862][ T5774] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.001578][ T5774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.012672][ T5774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.021978][ T5774] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 388.029599][ T5774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.056788][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.069951][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.077464][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.091245][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.099620][ T5082] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 388.107736][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.188371][ T8426] (null): rxe_set_mtu: Set mtu to 256 [ 388.194123][ T8426] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 388.890494][ T8295] infiniband syz1: set down [ 389.017215][ T5757] syz1: rxe_query_port: returned err = -19 [ 389.084523][ T5757] infiniband syz1: ib_query_port failed (-19) [ 389.117617][ T965] syz1: rxe_query_port: returned err = -19 [ 389.176292][ T6609] syz1: rxe_query_port: returned err = -19 [ 390.444666][ T5774] Bluetooth: hci5: command tx timeout [ 390.469022][ T8420] vxcan1 speed is unknown, defaulting to 1000 [ 391.425907][ T8454] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 391.723711][ T8456] IPVS: stopping backup sync thread 8454 ... [ 391.749287][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.4.645'. [ 392.027047][ T2928] smc: removing ib device syz1 [ 392.524987][ T5774] Bluetooth: hci5: command tx timeout [ 393.646524][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 393.655181][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 393.843951][ T8420] chnl_net:caif_netlink_parms(): no params data found [ 394.921705][ T5774] Bluetooth: hci5: command tx timeout [ 395.739100][ T8495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.658'. [ 396.029648][ T8498] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 396.051855][ T8493] IPVS: stopping backup sync thread 8498 ... [ 396.181768][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.208782][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.216422][ T8420] bridge_slave_0: entered allmulticast mode [ 396.223926][ T8420] bridge_slave_0: entered promiscuous mode [ 396.233179][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.240580][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.248075][ T8420] bridge_slave_1: entered allmulticast mode [ 396.255737][ T8420] bridge_slave_1: entered promiscuous mode [ 396.397245][ T5992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.462409][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.540614][ T5992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.561717][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.579772][ T8500] kvm: pic: level sensitive irq not supported [ 396.580115][ T8500] kvm: pic: non byte read [ 396.741251][ T8420] team0: Port device team_slave_0 added [ 396.843106][ T5992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.872577][ T8420] team0: Port device team_slave_1 added [ 397.665137][ T5774] Bluetooth: hci5: command tx timeout [ 398.273658][ T5992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.343609][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.356976][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.407824][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.455999][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.487965][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.520278][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.607392][ T8420] hsr_slave_0: entered promiscuous mode [ 398.615232][ T8420] hsr_slave_1: entered promiscuous mode [ 398.622180][ T8420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.633238][ T8420] Cannot create hsr debugfs directory [ 399.282612][ T8420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.310927][ T8420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.366655][ T8420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.418165][ T8420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 400.444832][ T5862] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 400.654929][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 400.676249][ T5862] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.711269][ T5862] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 400.895274][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.973310][ T5862] usb 2-1: config 0 descriptor?? [ 401.799651][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.059688][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 402.059706][ T28] audit: type=1800 audit(1768444920.239:91): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.670" name="file0" dev="overlay" ino=554 res=0 errno=0 [ 402.174806][ T8550] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 402.193458][ T8545] IPVS: stopping backup sync thread 8550 ... [ 402.393340][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.465392][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.473657][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.543659][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.550979][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.742705][ T8558] binder: 8557:8558 ioctl c0306201 0 returned -14 [ 402.777712][ T5992] bond0: (slave wlan1): Releasing backup interface [ 402.807772][ T6609] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 402.836145][ T6609] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 403.382629][ T965] usb 2-1: USB disconnect, device number 9 [ 403.480752][ T5992] hsr_slave_0: left promiscuous mode [ 403.512320][ T5992] hsr_slave_1: left promiscuous mode [ 403.530889][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.544842][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.787716][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.795884][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.810449][ T8573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.675'. [ 403.820374][ T5992] bridge_slave_1: left allmulticast mode [ 403.832407][ T5992] bridge_slave_1: left promiscuous mode [ 403.838318][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.866870][ T5992] bridge_slave_0: left allmulticast mode [ 403.875253][ T5992] bridge_slave_0: left promiscuous mode [ 403.882148][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.970177][ T5992] veth1_macvtap: left promiscuous mode [ 403.990126][ T5992] veth0_macvtap: left promiscuous mode [ 404.008869][ T5992] veth1_vlan: left promiscuous mode [ 404.023844][ T5992] veth0_vlan: left promiscuous mode [ 404.989157][ T8589] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 405.052700][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'. [ 405.657072][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 405.716869][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 405.772847][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.830604][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.014204][ T5992] bond0 (unregistering): Released all slaves [ 407.361231][ T8597] vxcan1 speed is unknown, defaulting to 1000 [ 407.424985][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.587010][ T8606] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 407.803251][ T8604] IPVS: stopping backup sync thread 8606 ... [ 408.194895][ T8614] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 408.208254][ T5992] IPVS: stop unused estimator thread 0... [ 408.286002][ T5856] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 408.451428][ T8] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 408.480884][ T8] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.491045][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 408.511828][ T5856] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 408.522163][ T5856] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 408.542717][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.572456][ T5856] usb 5-1: config 0 descriptor?? [ 408.683883][ T8420] veth0_vlan: entered promiscuous mode [ 408.753431][ T8420] veth1_vlan: entered promiscuous mode [ 408.853233][ T8420] veth0_macvtap: entered promiscuous mode [ 408.885551][ T8420] veth1_macvtap: entered promiscuous mode [ 408.931438][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.959578][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.974306][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.006914][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.029580][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.062890][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.119501][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.142281][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.178441][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.188763][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.199426][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.219702][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.284655][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.302380][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.372480][ T8420] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.386764][ T8420] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.398629][ T8420] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.407616][ T8420] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.607216][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.636007][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.692856][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.717595][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.754642][ T8651] binder: BINDER_SET_CONTEXT_MGR already set [ 410.760841][ T8651] binder: 8648:8651 ioctl 4018620d 2000000000c0 returned -16 [ 411.004782][ T8655] netlink: 60 bytes leftover after parsing attributes in process `syz.5.687'. [ 411.281607][ T8660] binder: BINDER_SET_CONTEXT_MGR already set [ 411.310110][ T8660] binder: 8648:8660 ioctl 4018620d 200000000040 returned -16 [ 411.476620][ T5856] usb 5-1: USB disconnect, device number 10 [ 412.140713][ T8670] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 412.176174][ T8667] IPVS: stopping backup sync thread 8670 ... [ 412.324241][ T8669] netlink: 'syz.4.691': attribute type 10 has an invalid length. [ 412.409266][ T8651] ntfs3: nullb0: Primary boot signature is not NTFS. [ 412.432282][ T8651] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 412.617610][ T5818] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 412.700057][ T5818] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 412.772407][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.693'. [ 414.551007][ T8699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.697'. [ 416.459873][ T8718] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 417.669615][ T5818] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 417.874773][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 417.900479][ T5818] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 417.935701][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.978445][ T8725] netlink: 'syz.4.702': attribute type 10 has an invalid length. [ 417.995412][ T5818] usb 3-1: config 0 descriptor?? [ 418.241546][ T5818] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 418.256102][ T8728] binder: 8727:8728 ioctl c0306201 0 returned -14 [ 418.276658][ T5818] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 418.305738][ T5818] dib0700: firmware download failed at 7 with -22 [ 418.348403][ T8731] netlink: 228 bytes leftover after parsing attributes in process `syz.1.704'. [ 419.018498][ T8748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.706'. [ 419.477206][ T6609] usb 3-1: USB disconnect, device number 8 [ 420.275580][ T8762] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 420.294242][ T8763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 420.300835][ T8763] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 420.308806][ T8763] vhci_hcd vhci_hcd.0: Device attached [ 420.501477][ T8764] vhci_hcd: connection closed [ 420.540024][ T5992] vhci_hcd: stop threads [ 420.645670][ T5992] vhci_hcd: release socket [ 420.666361][ T5992] vhci_hcd: disconnect device [ 420.701823][ T8769] netlink: 'syz.2.711': attribute type 10 has an invalid length. [ 421.231946][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 421.245199][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 421.308319][ T8788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.717'. [ 421.820972][ T8781] ceph: No mds server is up or the cluster is laggy [ 421.857020][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 421.893489][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 423.282324][ T5862] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 423.409020][ T8812] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 423.568630][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 423.601462][ T5862] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 423.663935][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.699113][ T5862] usb 6-1: config 0 descriptor?? [ 423.735381][ T8813] IPVS: stopping backup sync thread 8812 ... [ 423.780591][ T8817] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 423.921384][ T5862] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 423.953182][ T5862] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 423.979619][ T5862] dib0700: firmware download failed at 7 with -22 [ 425.652135][ T5856] usb 6-1: USB disconnect, device number 2 [ 426.840743][ T8844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.726'. [ 428.128909][ T8859] netlink: 'syz.4.731': attribute type 10 has an invalid length. [ 429.382225][ T8874] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 429.661519][ T8876] IPVS: stopping backup sync thread 8874 ... [ 430.074991][ T5862] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 430.285127][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 430.310695][ T5862] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 430.344534][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.375700][ T5862] usb 5-1: config 0 descriptor?? [ 430.825853][ T5862] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 430.871742][ T5862] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 430.912757][ T5862] dib0700: firmware download failed at 7 with -22 [ 431.471977][ T8901] tipc: Started in network mode [ 431.479969][ T8901] tipc: Node identity 1, cluster identity 4711 [ 431.487544][ T8901] tipc: Node number set to 1 [ 431.700438][ T8907] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 432.856775][ T8923] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 432.870616][ T6609] usb 5-1: USB disconnect, device number 11 [ 433.250816][ T8929] IPVS: stopping backup sync thread 8923 ... [ 433.298437][ T8931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.744'. [ 433.367127][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 433.425807][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 435.121618][ T8944] vxcan1 speed is unknown, defaulting to 1000 [ 436.277067][ T28] audit: type=1326 audit(1768444954.469:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 436.648508][ T28] audit: type=1326 audit(1768444954.469:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 436.717346][ T28] audit: type=1326 audit(1768444954.489:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 436.745610][ T28] audit: type=1326 audit(1768444954.489:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 436.788365][ T28] audit: type=1326 audit(1768444954.489:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 436.841396][ T28] audit: type=1326 audit(1768444954.499:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 436.943964][ T28] audit: type=1326 audit(1768444954.499:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 436.996242][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 437.040053][ T28] audit: type=1326 audit(1768444954.499:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 437.083497][ T28] audit: type=1326 audit(1768444954.499:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 437.112752][ T28] audit: type=1326 audit(1768444954.499:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 437.265313][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 437.273225][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.298806][ T8] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 437.328474][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.351420][ T8] usb 2-1: config 0 descriptor?? [ 437.379281][ T8981] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 437.504676][ T5839] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 437.684826][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 437.699589][ T5839] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 437.729764][ T8988] IPVS: stopping backup sync thread 8981 ... [ 437.745376][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.787696][ T5839] usb 5-1: config 0 descriptor?? [ 438.032571][ T5839] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 438.051466][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 438.071126][ T5839] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 438.089029][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 438.120702][ T8] usb 2-1: USB disconnect, device number 10 [ 438.316592][ T5839] dib0700: firmware download failed at 7 with -22 [ 439.400551][ T9012] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 439.520588][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 439.529739][ T9015] netlink: 108 bytes leftover after parsing attributes in process `syz.1.757'. [ 439.542367][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 439.553117][ T9015] netlink: 108 bytes leftover after parsing attributes in process `syz.1.757'. [ 439.562301][ T9015] netlink: 84 bytes leftover after parsing attributes in process `syz.1.757'. [ 440.330325][ T5839] usb 5-1: USB disconnect, device number 12 [ 440.361663][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.368354][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.822389][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.5.759'. [ 442.364030][ T9046] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 444.327419][ T9054] hfs: can't find a HFS filesystem on dev nullb0 [ 444.620775][ T9068] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 444.917688][ T9071] IPVS: stopping backup sync thread 9068 ... [ 445.194267][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 445.203472][ T9075] netlink: 108 bytes leftover after parsing attributes in process `syz.2.769'. [ 445.215886][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 445.226223][ T9075] netlink: 108 bytes leftover after parsing attributes in process `syz.2.769'. [ 445.235758][ T9075] netlink: 84 bytes leftover after parsing attributes in process `syz.2.769'. [ 445.954635][ T5839] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 446.344624][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 446.352435][ T5839] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 446.364559][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.395827][ T5839] usb 5-1: config 0 descriptor?? [ 447.754332][ T5839] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 447.777090][ T5839] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 447.785979][ T5839] dib0700: firmware download failed at 7 with -22 [ 448.621517][ T5839] usb 5-1: USB disconnect, device number 13 [ 449.078864][ T9105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.776'. [ 451.776643][ T9137] IPVS: stopping backup sync thread 9046 ... [ 453.067164][ T5839] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 453.254917][ T5818] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 453.271659][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 453.300789][ T5839] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 453.322912][ T9160] (null): rxe_set_mtu: Set mtu to 256 [ 453.325221][ T5839] usb 6-1: config 0 has no interface number 0 [ 453.329274][ T9160] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 453.365043][ T5839] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.432401][ T5839] usb 6-1: config 0 interface 85 has no altsetting 0 [ 453.492620][ T5839] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 453.502156][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 453.534967][ T5818] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 453.552917][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.573212][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.582868][ T5839] usb 6-1: Product: syz [ 453.603849][ T5839] usb 6-1: Manufacturer: syz [ 453.613559][ T5818] usb 2-1: config 0 descriptor?? [ 453.619315][ T5839] usb 6-1: SerialNumber: syz [ 453.641282][ T5839] usb 6-1: config 0 descriptor?? [ 453.845437][ T5818] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 453.866410][ T5818] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 453.888542][ T5818] dib0700: firmware download failed at 7 with -22 [ 454.362465][ T5839] appletouch 6-1:0.85: Geyser mode initialized. [ 454.462477][ T5839] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input18 [ 454.805784][ T5839] usb 6-1: USB disconnect, device number 3 [ 454.811737][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 455.057314][ T5839] appletouch 6-1:0.85: input: appletouch disconnected [ 455.399187][ T9174] No buffer was provided with the request [ 455.725297][ T5818] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 455.985365][ T5818] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 456.041642][ T5818] usb 3-1: config 0 has no interface number 0 [ 456.083016][ T5757] usb 2-1: USB disconnect, device number 11 [ 456.089577][ T5818] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 456.154496][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.215953][ T5818] usb 3-1: config 0 descriptor?? [ 456.252858][ T5818] usb 3-1: selecting invalid altsetting 1 [ 456.336764][ T5818] dvb_ttusb_budget: ttusb_init_controller: error [ 456.343179][ T5818] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 458.579280][ T5818] DVB: Unable to find symbol ves1820_attach() [ 459.471882][ T5818] DVB: Unable to find symbol stv0297_attach() [ 459.524646][ T5818] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 459.560936][ T9207] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 459.608407][ T5818] usb 3-1: USB disconnect, device number 9 [ 460.629660][ T9216] netlink: 60 bytes leftover after parsing attributes in process `syz.5.794'. [ 460.793972][ T9205] IPVS: stopping backup sync thread 9207 ... [ 461.612236][ T5856] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 462.264511][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 462.273318][ T5856] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.282112][ T5856] usb 5-1: config 0 has no interface number 0 [ 462.299827][ T5856] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 462.309983][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.344523][ T5856] usb 5-1: Product: syz [ 462.348770][ T5856] usb 5-1: Manufacturer: syz [ 462.394501][ T5856] usb 5-1: SerialNumber: syz [ 462.415859][ T5856] usb 5-1: config 0 descriptor?? [ 462.440015][ T5856] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 462.501221][ T5856] usb 5-1: selecting invalid altsetting 1 [ 462.531719][ T5856] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 462.567693][ T5856] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 462.615055][ T5856] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 463.504608][ T5856] usb 5-1: media controller created [ 464.170275][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.480968][ T5856] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 464.488667][ T5856] zl10353_read_register: readreg error (reg=127, ret==-71) [ 464.511171][ T5856] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 465.774741][ T5856] usb 5-1: USB disconnect, device number 14 [ 471.685259][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.806'. [ 472.533849][ T9289] binder: 9288:9289 ioctl 4018620d 0 returned -22 [ 475.286853][ T9303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.809'. [ 485.975332][ T9364] hfs: can't find a HFS filesystem on dev nullb0 [ 488.370897][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.5.827'. [ 490.503175][ T9385] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 490.855307][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 492.681635][ T9396] IPVS: stopping backup sync thread 9385 ... [ 494.095053][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 494.095088][ T28] audit: type=1326 audit(1768445012.259:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b80d8f749 code=0x7fc00000 [ 494.634527][ T28] audit: type=1326 audit(1768445012.259:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b80d8f749 code=0x7fc00000 [ 494.727351][ T28] audit: type=1326 audit(1768445012.259:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b80d8f749 code=0x7fc00000 [ 494.793343][ T28] audit: type=1326 audit(1768445012.259:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b80d8f749 code=0x7fc00000 [ 494.816259][ T28] audit: type=1326 audit(1768445012.279:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b80d8f749 code=0x7fc00000 [ 498.325818][ T9433] binder: 9432:9433 ioctl c0306201 200000000040 returned -14 [ 498.364186][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 498.465013][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 498.859876][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 498.949660][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.034554][ T9] usb 3-1: Product: syz [ 499.042313][ T9] usb 3-1: Manufacturer: syz [ 499.069140][ T9] usb 3-1: SerialNumber: syz [ 499.100600][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 499.197925][ T5856] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 500.119125][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 500.128186][ T9445] netlink: 108 bytes leftover after parsing attributes in process `syz.1.847'. [ 500.137558][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 500.146682][ T9445] netlink: 108 bytes leftover after parsing attributes in process `syz.1.847'. [ 500.155737][ T9445] netlink: 84 bytes leftover after parsing attributes in process `syz.1.847'. [ 500.285645][ T5856] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 500.293244][ T5856] ath9k_htc: Failed to initialize the device [ 500.306087][ T9] usb 3-1: USB disconnect, device number 10 [ 500.449269][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 501.804906][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.811399][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.554539][ T5856] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 504.009186][ T5856] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.023814][ T5856] usb 3-1: config 0 has no interface number 0 [ 504.845560][ T5856] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 504.868328][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.889743][ T5856] usb 3-1: Product: syz [ 504.893984][ T5856] usb 3-1: Manufacturer: syz [ 504.914891][ T5856] usb 3-1: SerialNumber: syz [ 504.922282][ T5856] usb 3-1: config 0 descriptor?? [ 505.208948][ T5856] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 505.328791][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.856'. [ 505.338030][ T9493] netlink: 108 bytes leftover after parsing attributes in process `syz.1.856'. [ 505.352954][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.856'. [ 505.364465][ T9493] netlink: 108 bytes leftover after parsing attributes in process `syz.1.856'. [ 505.373704][ T9493] netlink: 84 bytes leftover after parsing attributes in process `syz.1.856'. [ 505.964791][ T9491] (null): rxe_set_mtu: Set mtu to 256 [ 505.970548][ T9491] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 505.978856][ T5856] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 506.013138][ T5856] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 506.040245][ T5856] usb 3-1: media controller created [ 506.144031][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.420935][ T5856] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 507.705983][ T5856] usb 3-1: USB disconnect, device number 11 [ 510.424321][ T9524] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 510.542236][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.865'. [ 511.136368][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.866'. [ 511.145541][ T9533] netlink: 108 bytes leftover after parsing attributes in process `syz.1.866'. [ 511.157907][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.866'. [ 511.168507][ T9533] netlink: 108 bytes leftover after parsing attributes in process `syz.1.866'. [ 511.177935][ T9533] netlink: 84 bytes leftover after parsing attributes in process `syz.1.866'. [ 512.233412][ T5818] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 512.434474][ T5818] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 512.444265][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.451964][ T9539] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 512.463139][ T9539] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 512.528832][ T5818] usb 2-1: config 0 descriptor?? [ 512.601666][ T5818] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 514.205488][ T5818] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 514.234749][ T5818] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 514.666440][ T8] usb 2-1: USB disconnect, device number 12 [ 517.322042][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.5.876'. [ 517.331762][ T9575] netlink: 108 bytes leftover after parsing attributes in process `syz.5.876'. [ 517.352547][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.5.876'. [ 517.377383][ T9575] netlink: 108 bytes leftover after parsing attributes in process `syz.5.876'. [ 517.387185][ T9575] netlink: 84 bytes leftover after parsing attributes in process `syz.5.876'. [ 517.746888][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.875'. [ 521.169320][ T965] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 521.203560][ T965] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 521.835609][ T9592] hfs: can't find a HFS filesystem on dev nullb0 [ 524.509197][ T9609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.885'. [ 525.524233][ T9617] (null): rxe_set_mtu: Set mtu to 256 [ 525.531432][ T9617] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 526.610634][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'. [ 526.619832][ T9624] netlink: 108 bytes leftover after parsing attributes in process `syz.1.886'. [ 526.632434][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'. [ 526.643203][ T9624] netlink: 108 bytes leftover after parsing attributes in process `syz.1.886'. [ 526.652482][ T9624] netlink: 84 bytes leftover after parsing attributes in process `syz.1.886'. [ 527.324926][ T9623] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 527.352695][ T9623] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 527.364381][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 528.071441][ T5856] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 528.131338][ T5856] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 532.267806][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.899'. [ 532.277106][ T9662] netlink: 108 bytes leftover after parsing attributes in process `syz.1.899'. [ 532.286612][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.899'. [ 532.295766][ T9662] netlink: 108 bytes leftover after parsing attributes in process `syz.1.899'. [ 532.304771][ T9662] netlink: 84 bytes leftover after parsing attributes in process `syz.1.899'. [ 533.165421][ T9669] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 534.983938][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.901'. [ 535.005746][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 535.782864][ T965] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 535.828452][ T965] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 537.289916][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.908'. [ 537.298991][ T9695] netlink: 108 bytes leftover after parsing attributes in process `syz.4.908'. [ 537.308373][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.908'. [ 537.317452][ T9695] netlink: 108 bytes leftover after parsing attributes in process `syz.4.908'. [ 537.326615][ T9695] netlink: 84 bytes leftover after parsing attributes in process `syz.4.908'. [ 538.708543][ T9702] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 538.724683][ T9702] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 539.145397][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.914'. [ 540.582979][ T965] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 540.621224][ T965] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 540.964583][ T5856] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 541.164824][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 541.201528][ T5856] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.224651][ T5856] usb 2-1: config 0 has no interface number 0 [ 541.286528][ T5856] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 541.319131][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.348792][ T5856] usb 2-1: Product: syz [ 541.353033][ T5856] usb 2-1: Manufacturer: syz [ 541.392059][ T5856] usb 2-1: SerialNumber: syz [ 541.420154][ T5856] usb 2-1: config 0 descriptor?? [ 541.477073][ T5856] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 541.520691][ T5856] usb 2-1: selecting invalid altsetting 1 [ 541.534487][ T5856] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 541.555614][ T5856] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 541.584316][ T5856] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 541.607684][ T5856] usb 2-1: media controller created [ 541.669920][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.404650][ T9740] vivid-003: disconnect [ 543.350287][ T9738] vivid-003: reconnect [ 544.965879][ T5856] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 545.024572][ T5856] zl10353_read_register: readreg error (reg=127, ret==-71) [ 545.050507][ T5856] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 546.118402][ T5856] usb 2-1: USB disconnect, device number 13 [ 548.808755][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 550.251150][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.934'. [ 550.260614][ T9778] netlink: 108 bytes leftover after parsing attributes in process `syz.5.934'. [ 550.270080][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.934'. [ 550.279466][ T9778] netlink: 108 bytes leftover after parsing attributes in process `syz.5.934'. [ 550.288792][ T9778] netlink: 84 bytes leftover after parsing attributes in process `syz.5.934'. [ 550.604481][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 550.854494][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 550.881964][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 550.894584][ T9] usb 5-1: config 0 has no interface number 0 [ 550.902760][ T9792] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 551.153605][ T9791] IPVS: stopping backup sync thread 9792 ... [ 551.170332][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 551.224524][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.233299][ T9] usb 5-1: Product: syz [ 551.243432][ T9] usb 5-1: Manufacturer: syz [ 551.253563][ T9] usb 5-1: SerialNumber: syz [ 551.271476][ T9] usb 5-1: config 0 descriptor?? [ 551.299793][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 551.314458][ T9] usb 5-1: selecting invalid altsetting 1 [ 551.330779][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 551.351344][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 551.353628][ T9798] binder: 9797:9798 ioctl c0306201 0 returned -14 [ 551.373153][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 551.392668][ T9] usb 5-1: media controller created [ 551.441652][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 553.665857][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 553.844904][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 553.930758][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 554.335474][ T9] usb 5-1: USB disconnect, device number 15 [ 555.707399][ T9822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.950'. [ 555.716560][ T9822] netlink: 108 bytes leftover after parsing attributes in process `syz.2.950'. [ 555.727695][ T9822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.950'. [ 555.736949][ T9822] netlink: 108 bytes leftover after parsing attributes in process `syz.2.950'. [ 555.746064][ T9822] netlink: 84 bytes leftover after parsing attributes in process `syz.2.950'. [ 556.010340][ T9826] binder: 9825:9826 ioctl c0306201 0 returned -14 [ 558.190780][ T9843] netlink: 56 bytes leftover after parsing attributes in process `syz.1.958'. [ 558.405089][ T5839] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 558.509074][ T5862] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 558.765735][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 558.983548][ T5839] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.991889][ T5839] usb 5-1: config 0 has no interface number 0 [ 559.001419][ T5839] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 559.011101][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 559.024500][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.049716][ T5862] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 559.061329][ T5839] usb 5-1: Product: syz [ 559.077227][ T5839] usb 5-1: Manufacturer: syz [ 559.091860][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.104852][ T5839] usb 5-1: SerialNumber: syz [ 559.146475][ T5862] usb 6-1: Product: syz [ 559.172841][ T5839] usb 5-1: config 0 descriptor?? [ 559.180814][ T5862] usb 6-1: Manufacturer: syz [ 559.192423][ T5839] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 559.204574][ T5862] usb 6-1: SerialNumber: syz [ 559.231091][ T5862] usb 6-1: config 0 descriptor?? [ 559.249626][ T5839] usb 5-1: selecting invalid altsetting 1 [ 559.264820][ T5839] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 559.296473][ T5839] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 559.314905][ T5839] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 559.323532][ T5839] usb 5-1: media controller created [ 559.360465][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.519680][ T5862] dvb_usb_dtv5100: probe of 6-1:0.0 failed with error -110 [ 561.292175][ T5839] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 561.316924][ T5839] zl10353_read_register: readreg error (reg=127, ret==-71) [ 561.332343][ T5839] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 561.358239][ T9857] binder: 9855:9857 ioctl c0306201 0 returned -14 [ 561.440940][ T5839] usb 5-1: USB disconnect, device number 16 [ 561.728710][ T5862] usb 6-1: USB disconnect, device number 4 [ 561.738105][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.961'. [ 561.747233][ T9860] netlink: 108 bytes leftover after parsing attributes in process `syz.1.961'. [ 561.756641][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.961'. [ 561.766007][ T9860] netlink: 108 bytes leftover after parsing attributes in process `syz.1.961'. [ 561.775116][ T9860] netlink: 84 bytes leftover after parsing attributes in process `syz.1.961'. [ 563.264986][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.271387][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.842066][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.964'. [ 564.279028][ T5777] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 564.452989][ T9892] (null): rxe_set_mtu: Set mtu to 256 [ 564.461770][ T9892] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 565.104669][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 565.119700][ T5777] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 565.142786][ T5777] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 565.170283][ T5777] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 565.194445][ T5777] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 565.230096][ T5777] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.277606][ T5777] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 565.322855][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.990842][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.030970][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.209289][ T5777] usb 3-1: usb_control_msg returned -32 [ 566.217801][ T5777] usbtmc 3-1:16.0: can't read capabilities [ 566.727756][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.973'. [ 566.736827][ T9906] netlink: 108 bytes leftover after parsing attributes in process `syz.5.973'. [ 566.749070][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.973'. [ 566.759747][ T9906] netlink: 108 bytes leftover after parsing attributes in process `syz.5.973'. [ 566.768955][ T9906] netlink: 84 bytes leftover after parsing attributes in process `syz.5.973'. [ 567.636354][ T5862] usb 3-1: USB disconnect, device number 12 [ 568.169912][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 568.461339][ T9928] syz2: rxe_newlink: already configured on vxcan1 [ 568.525044][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 569.135257][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.144330][ T9] usb 6-1: config 0 has no interface number 0 [ 569.185665][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 569.202201][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.216586][ T9] usb 6-1: Product: syz [ 569.234670][ T9] usb 6-1: Manufacturer: syz [ 569.239591][ T9] usb 6-1: SerialNumber: syz [ 569.255693][ T9] usb 6-1: config 0 descriptor?? [ 569.471801][ T9] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 569.481314][ T9] usb 6-1: selecting invalid altsetting 1 [ 569.488236][ T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 569.930691][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 570.949056][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 571.138866][ T9] usb 6-1: media controller created [ 571.162517][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.848134][ T9] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 571.856790][ T9933] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.983'. [ 571.883476][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 571.911737][ T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 571.973686][ T9] usb 6-1: USB disconnect, device number 5 [ 572.154188][ T9948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 572.167835][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'. [ 572.177948][ T9947] netlink: 108 bytes leftover after parsing attributes in process `syz.2.984'. [ 572.187418][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'. [ 572.197766][ T9947] netlink: 108 bytes leftover after parsing attributes in process `syz.2.984'. [ 572.206889][ T9947] netlink: 84 bytes leftover after parsing attributes in process `syz.2.984'. [ 572.284978][ T5839] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 572.624892][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 573.275456][ T5839] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 573.283177][ T5839] usb 5-1: can't read configurations, error -71 [ 573.914539][ T5839] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 574.114714][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 574.130886][ T5839] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 574.152024][ T5839] usb 5-1: config 1 has no interface number 1 [ 574.173837][ T5839] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 574.200381][ T5839] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 574.232985][ T5839] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.261459][ T5839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.273890][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.300681][ T5839] usb 5-1: Product: syz [ 574.324592][ T5839] usb 5-1: Manufacturer: syz [ 574.334063][ T5839] usb 5-1: SerialNumber: syz [ 574.807590][ T5839] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 575.907663][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'. [ 575.917150][ T9980] netlink: 108 bytes leftover after parsing attributes in process `syz.1.994'. [ 575.933233][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'. [ 575.945321][ T9980] netlink: 108 bytes leftover after parsing attributes in process `syz.1.994'. [ 576.661292][ T5839] usb 5-1: USB disconnect, device number 18 [ 576.712692][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 576.732793][ T9373] udevd[9373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.069916][ T9997] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 577.150499][ T9997] __nla_validate_parse: 1 callbacks suppressed [ 577.150538][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 577.175549][ T28] audit: type=1326 audit(1768445095.239:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.710280][ T28] audit: type=1326 audit(1768445095.239:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.755800][ T28] audit: type=1326 audit(1768445095.239:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.813647][ T28] audit: type=1326 audit(1768445095.239:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.858898][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 577.870224][ T8] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.874058][ T28] audit: type=1326 audit(1768445095.239:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.887115][ T8] usb 6-1: config 0 has no interface number 0 [ 577.913985][ T28] audit: type=1326 audit(1768445095.239:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.914120][ T28] audit: type=1326 audit(1768445095.239:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.914170][ T28] audit: type=1326 audit(1768445095.239:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.914247][ T28] audit: type=1326 audit(1768445095.239:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 577.914292][ T28] audit: type=1326 audit(1768445095.239:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9993 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98f749 code=0x7ffc0000 [ 578.201802][ T8] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 578.201837][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.201860][ T8] usb 6-1: Product: syz [ 578.201875][ T8] usb 6-1: Manufacturer: syz [ 578.201891][ T8] usb 6-1: SerialNumber: syz [ 578.216970][ T8] usb 6-1: config 0 descriptor?? [ 579.147743][ T8] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 579.188907][ T8] usb 6-1: selecting invalid altsetting 1 [ 579.207383][ T8] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 580.175479][ T8] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 580.192092][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 580.215137][ T8] usb 6-1: media controller created [ 580.266058][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.375715][ T8] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 580.425002][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 580.449033][ T8] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 580.766641][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1006'. [ 580.776165][T10028] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1006'. [ 580.785665][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1006'. [ 580.794826][T10028] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1006'. [ 580.803984][T10028] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1006'. [ 581.020202][ T8] usb 6-1: USB disconnect, device number 6 [ 584.852935][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 585.034594][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 585.086326][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.111349][ T8] usb 3-1: config 0 has no interface number 0 [ 585.141907][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 585.183582][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.204462][ T8] usb 3-1: Product: syz [ 585.208790][ T8] usb 3-1: Manufacturer: syz [ 585.213800][ T8] usb 3-1: SerialNumber: syz [ 585.257284][ T8] usb 3-1: config 0 descriptor?? [ 585.291117][ T8] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 585.324545][ T8] usb 3-1: selecting invalid altsetting 1 [ 585.334449][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 585.364513][ T5862] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 585.367777][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 585.424282][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 585.459213][ T8] usb 3-1: media controller created [ 586.274570][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 586.311489][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 1024 [ 586.381115][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.384758][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 586.421624][ T5862] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 586.481634][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 586.533840][ T5862] usb 5-1: Product: syz [ 586.551901][ T5862] usb 5-1: Manufacturer: syz [ 586.581985][ T5862] usb 5-1: SerialNumber: syz [ 586.671654][ T5862] usb 5-1: config 0 descriptor?? [ 586.713957][T10060] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 587.035732][ T8] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 587.043285][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 587.068912][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 587.126728][ T8] usb 3-1: USB disconnect, device number 13 [ 587.386972][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1019'. [ 587.396563][T10071] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1019'. [ 587.406336][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1019'. [ 587.415542][T10071] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1019'. [ 587.424656][T10071] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1019'. [ 589.099568][ T8] usb 5-1: USB disconnect, device number 19 [ 591.595816][T10087] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1025'. [ 591.684278][T10095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1028'. [ 592.615652][ T965] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 592.824196][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1029'. [ 592.833460][T10101] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1029'. [ 592.843029][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1029'. [ 592.852244][T10101] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1029'. [ 592.861583][T10101] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1029'. [ 592.915969][ T965] usb 2-1: Using ep0 maxpacket: 32 [ 593.230209][ T965] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 593.249655][ T965] usb 2-1: config 0 has no interface number 0 [ 593.258726][ T965] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 593.280946][ T965] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 593.306809][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.438824][ T965] usb 2-1: Product: syz [ 593.443081][ T965] usb 2-1: Manufacturer: syz [ 593.448369][ T965] usb 2-1: SerialNumber: syz [ 593.475579][ T965] usb 2-1: config 0 descriptor?? [ 593.496318][T10087] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 593.505767][ T965] asix: probe of 2-1:0.191 failed with error -22 [ 593.666329][ T9] usb 2-1: USB disconnect, device number 14 [ 595.032718][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 595.384583][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 596.013491][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 596.043352][ T9] usb 5-1: config 0 has no interface number 0 [ 596.069580][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 597.692083][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.700746][ T9] usb 5-1: Product: syz [ 597.705305][ T9] usb 5-1: Manufacturer: syz [ 597.710191][ T9] usb 5-1: SerialNumber: syz [ 597.738632][ T9] usb 5-1: config 0 descriptor?? [ 597.764327][ T9] usb 5-1: can't set config #0, error -71 [ 597.808343][ T9] usb 5-1: USB disconnect, device number 20 [ 600.466736][T10155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 601.703023][T10166] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1037'. [ 602.434878][ T8] IPVS: starting estimator thread 0... [ 602.544679][T10170] IPVS: using max 25 ests per chain, 60000 per kthread [ 602.694480][ T5856] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 602.914295][ T5856] usb 6-1: Using ep0 maxpacket: 32 [ 602.922411][ T5856] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 602.947437][ T5856] usb 6-1: config 0 has no interface number 0 [ 602.979172][ T5856] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 602.999249][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.017612][ T5856] usb 6-1: Product: syz [ 603.032104][ T5856] usb 6-1: Manufacturer: syz [ 603.037322][ T5856] usb 6-1: SerialNumber: syz [ 603.200287][ T5856] usb 6-1: config 0 descriptor?? [ 603.218009][ T5856] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 603.296131][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 603.553792][ T5856] usb 6-1: selecting invalid altsetting 1 [ 603.787302][ T5856] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 603.821975][ T5856] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 603.832563][ T5856] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 603.840948][ T5856] usb 6-1: media controller created [ 603.866678][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 605.234563][ T5856] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 605.241718][ T5856] zl10353_read_register: readreg error (reg=127, ret==-110) [ 605.945173][ T5856] usb 6-1: USB disconnect, device number 7 [ 606.005299][T10185] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 606.117988][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'. [ 608.202350][T10200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1054'. [ 609.378386][T10206] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 610.752659][T10213] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1058'. [ 616.023595][T10236] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 616.158243][T10238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1063'. [ 617.908244][T10247] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1067'. [ 620.678402][T10273] autofs4:pid:10273:autofs_fill_super: called with bogus options [ 623.043399][T10291] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 624.081778][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1076'. [ 624.681448][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.687899][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.344812][T10297] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1077'. [ 627.951802][T10324] (null): rxe_set_mtu: Set mtu to 256 [ 627.960928][T10324] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 628.837862][T10334] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 628.918310][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1087'. [ 631.028184][T10348] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 631.455276][T10352] IPVS: stopping backup sync thread 10348 ... [ 632.157038][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'. [ 634.134287][T10378] (null): rxe_set_mtu: Set mtu to 256 [ 634.143444][T10378] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 635.444497][ T5777] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 635.664581][ T5777] usb 5-1: Using ep0 maxpacket: 32 [ 635.686981][ T5777] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 635.702964][ T5777] usb 5-1: config 0 has no interface number 0 [ 635.712777][ T5777] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 635.732576][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.742982][ T5777] usb 5-1: Product: syz [ 635.753038][ T5777] usb 5-1: Manufacturer: syz [ 635.759374][ T5777] usb 5-1: SerialNumber: syz [ 635.807668][ T5777] usb 5-1: config 0 descriptor?? [ 635.879304][ T5777] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 635.939482][ T5777] usb 5-1: selecting invalid altsetting 1 [ 635.965294][ T5777] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 635.973113][T10389] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 636.006625][ T5777] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 636.993768][T10392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1100'. [ 637.013620][ T5777] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 637.178160][ T5777] usb 5-1: media controller created [ 637.424042][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.624640][ T5777] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 637.688644][ T5777] zl10353_read_register: readreg error (reg=127, ret==-71) [ 637.727419][ T5777] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 637.953997][ T5777] usb 5-1: USB disconnect, device number 21 [ 640.066782][T10415] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1106'. [ 641.947035][ T5757] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 642.046164][T10430] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 642.131195][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1110'. [ 642.154839][ T5757] usb 3-1: Using ep0 maxpacket: 32 [ 642.178058][ T5757] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 642.190821][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.210702][ T5757] usb 3-1: config 0 descriptor?? [ 642.464864][ T5757] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 642.478458][ T5757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 642.496787][ T5757] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 642.504268][ T5757] usb 3-1: media controller created [ 643.262896][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.346142][ T5757] DVB: Unable to find symbol dib7000p_attach() [ 643.355993][ T5757] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 643.454456][ T5757] rc_core: IR keymap rc-dib0700-rc5 not found [ 643.460963][ T5757] Registered IR keymap rc-empty [ 643.466508][ T5757] dvb-usb: could not initialize remote control. [ 643.480880][ T5757] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 643.503299][ T5757] usb 3-1: USB disconnect, device number 14 [ 643.601713][ T5757] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 643.648488][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 644.541451][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 644.569932][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.601146][ T9] usb 5-1: config 0 has no interface number 0 [ 644.757184][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 645.994478][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.002562][ T9] usb 5-1: Product: syz [ 646.012785][ T9] usb 5-1: Manufacturer: syz [ 646.022983][ T9] usb 5-1: SerialNumber: syz [ 646.042655][ T9] usb 5-1: config 0 descriptor?? [ 646.095975][ T9] usb 5-1: can't set config #0, error -71 [ 646.154508][ T9] usb 5-1: USB disconnect, device number 22 [ 649.021626][T10474] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 649.156394][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1121'. [ 649.444688][T10440] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 649.666295][T10440] usb 5-1: Using ep0 maxpacket: 32 [ 649.718643][T10440] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 649.810777][T10440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.941226][T10440] usb 5-1: config 0 descriptor?? [ 650.230236][T10440] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 650.262987][T10440] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 650.306076][T10440] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 650.366028][T10440] usb 5-1: media controller created [ 650.564674][T10440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 652.154081][T10440] DVB: Unable to find symbol dib7000p_attach() [ 652.160512][T10440] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 654.478362][T10440] rc_core: IR keymap rc-dib0700-rc5 not found [ 654.585844][T10440] Registered IR keymap rc-empty [ 654.591033][T10440] dvb-usb: could not initialize remote control. [ 654.600256][T10440] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 654.622629][T10440] usb 5-1: USB disconnect, device number 23 [ 654.744091][T10440] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 658.794604][ T5862] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 658.991041][T10540] overlayfs: unescaped trailing colons in lowerdir mount option. [ 659.139491][T10541] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 659.198457][T10541] netlink: 'syz.1.1137': attribute type 20 has an invalid length. [ 659.954459][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 659.967027][ T5862] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 659.985094][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.006665][ T5862] usb 6-1: config 0 descriptor?? [ 661.564200][ T5862] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 661.592667][ T5862] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 661.616721][ T5862] dib0700: firmware download failed at 7 with -22 [ 661.649095][ T5862] usb 6-1: USB disconnect, device number 8 [ 664.251228][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.424361][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.179506][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 666.595107][T10595] syz2: rxe_newlink: already configured on vxcan1 [ 666.934442][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 666.945384][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 666.974452][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.996713][ T9] usb 6-1: config 0 descriptor?? [ 667.215146][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 667.245764][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 667.286207][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 667.293485][ T9] usb 6-1: media controller created [ 667.371626][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.417287][T10585] ------------[ cut here ]------------ [ 667.423373][T10585] usb 6-1: BOGUS control dir, pipe 80000980 doesn't match bRequestType c0 [ 667.460753][T10610] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 668.576197][T10585] WARNING: CPU: 0 PID: 10585 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10a1/0x17d0 [ 668.586221][T10585] Modules linked in: [ 668.590179][T10585] CPU: 0 PID: 10585 Comm: syz.5.1148 Not tainted syzkaller #0 [ 668.597809][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.608072][T10585] RIP: 0010:usb_submit_urb+0x10a1/0x17d0 [ 668.613780][T10585] Code: df 0f b6 44 05 00 84 c0 0f 85 2d 06 00 00 45 0f b6 45 00 48 c7 c7 40 e3 4a 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 1f d2 ff fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 668.633972][T10585] RSP: 0018:ffffc9000447f870 EFLAGS: 00010246 [ 668.640662][T10585] RAX: c2bafcbb32ca7200 RBX: ffff88802e0d7b00 RCX: 0000000000080000 [ 668.649170][T10585] RDX: ffffc9000e9db000 RSI: 0000000000005d26 RDI: 0000000000005d27 [ 668.657619][T10585] RBP: 1ffff11004c0507d R08: ffffc9000447f467 R09: 1ffff9200088fe8c [ 668.666309][T10585] R10: dffffc0000000000 R11: fffff5200088fe8d R12: dffffc0000000000 [ 668.675219][T10585] R13: ffff8880260283e8 R14: 0000000080000980 R15: ffff888021251e10 [ 668.683283][T10585] FS: 00007f3c992c96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 668.692773][T10585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.700081][T10585] CR2: 0000000000000000 CR3: 00000000307db000 CR4: 00000000003526f0 [ 668.708606][T10585] Call Trace: [ 668.711958][T10585] [ 668.715388][T10585] usb_start_wait_urb+0x115/0x4b0 [ 668.720496][T10585] ? usb_api_blocking_completion+0xb0/0xb0 [ 668.726841][T10585] usb_control_msg+0x233/0x3e0 [ 668.731685][T10585] dib0700_i2c_xfer+0xb92/0xf60 [ 668.737048][T10585] ? rt_mutex_slowlock+0x31f/0x5e0 [ 668.742226][T10585] ? dib0700_set_gpio+0x1f0/0x1f0 [ 668.747579][T10585] __i2c_transfer+0x868/0x2080 [ 668.752440][T10585] ? i2c_cmd+0x110/0x110 [ 668.756833][T10585] ? i2c_transfer+0x11b/0x390 [ 668.761597][T10585] i2c_transfer+0x250/0x390 [ 668.766287][T10585] ? __i2c_transfer+0x2080/0x2080 [ 668.771629][T10585] ? __might_fault+0xc6/0x120 [ 668.776537][T10585] ? __might_fault+0xaa/0x120 [ 668.781281][T10585] ? _copy_from_user+0xa5/0xe0 [ 668.786175][T10585] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 668.791195][T10585] i2cdev_ioctl+0x646/0x7e0 [ 668.795870][T10585] ? i2cdev_write+0x120/0x120 [ 668.800634][T10585] ? bpf_lsm_file_ioctl+0x9/0x10 [ 668.805709][T10585] ? security_file_ioctl+0x80/0xa0 [ 668.810886][T10585] ? i2cdev_write+0x120/0x120 [ 668.815694][T10585] __se_sys_ioctl+0xfd/0x170 [ 668.820355][T10585] do_syscall_64+0x55/0xb0 [ 668.824917][T10585] ? clear_bhb_loop+0x40/0x90 [ 668.829668][T10585] ? clear_bhb_loop+0x40/0x90 [ 668.835039][T10585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.841007][T10585] RIP: 0033:0x7f3c9838f749 [ 668.845740][T10585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.865504][T10585] RSP: 002b:00007f3c992c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.874223][T10585] RAX: ffffffffffffffda RBX: 00007f3c985e5fa0 RCX: 00007f3c9838f749 [ 668.882392][T10585] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 668.890503][T10585] RBP: 00007f3c98413f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.898581][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.906722][T10585] R13: 00007f3c985e6038 R14: 00007f3c985e5fa0 R15: 00007fff27a735f8 [ 668.914880][T10585] [ 668.917948][T10585] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 668.925264][T10585] CPU: 0 PID: 10585 Comm: syz.5.1148 Not tainted syzkaller #0 [ 668.932762][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.942881][T10585] Call Trace: [ 668.946196][T10585] [ 668.949165][T10585] dump_stack_lvl+0x16c/0x230 [ 668.953894][T10585] ? show_regs_print_info+0x20/0x20 [ 668.959139][T10585] ? load_image+0x3b0/0x3b0 [ 668.963711][T10585] panic+0x2c0/0x710 [ 668.967662][T10585] ? bpf_jit_dump+0xd0/0xd0 [ 668.972232][T10585] __warn+0x2e0/0x470 [ 668.976266][T10585] ? usb_submit_urb+0x10a1/0x17d0 [ 668.981439][T10585] ? usb_submit_urb+0x10a1/0x17d0 [ 668.986518][T10585] report_bug+0x2be/0x4f0 [ 668.990896][T10585] ? usb_submit_urb+0x10a1/0x17d0 [ 668.995975][T10585] ? usb_submit_urb+0x10a1/0x17d0 [ 669.001064][T10585] ? usb_submit_urb+0x10a3/0x17d0 [ 669.006146][T10585] handle_bug+0xcf/0x120 [ 669.010442][T10585] exc_invalid_op+0x1a/0x50 [ 669.015003][T10585] asm_exc_invalid_op+0x1a/0x20 [ 669.019912][T10585] RIP: 0010:usb_submit_urb+0x10a1/0x17d0 [ 669.025606][T10585] Code: df 0f b6 44 05 00 84 c0 0f 85 2d 06 00 00 45 0f b6 45 00 48 c7 c7 40 e3 4a 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 1f d2 ff fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 669.045264][T10585] RSP: 0018:ffffc9000447f870 EFLAGS: 00010246 [ 669.051433][T10585] RAX: c2bafcbb32ca7200 RBX: ffff88802e0d7b00 RCX: 0000000000080000 [ 669.059463][T10585] RDX: ffffc9000e9db000 RSI: 0000000000005d26 RDI: 0000000000005d27 [ 669.067744][T10585] RBP: 1ffff11004c0507d R08: ffffc9000447f467 R09: 1ffff9200088fe8c [ 669.075824][T10585] R10: dffffc0000000000 R11: fffff5200088fe8d R12: dffffc0000000000 [ 669.083825][T10585] R13: ffff8880260283e8 R14: 0000000080000980 R15: ffff888021251e10 [ 669.091836][T10585] usb_start_wait_urb+0x115/0x4b0 [ 669.096890][T10585] ? usb_api_blocking_completion+0xb0/0xb0 [ 669.102729][T10585] usb_control_msg+0x233/0x3e0 [ 669.107513][T10585] dib0700_i2c_xfer+0xb92/0xf60 [ 669.112395][T10585] ? rt_mutex_slowlock+0x31f/0x5e0 [ 669.117522][T10585] ? dib0700_set_gpio+0x1f0/0x1f0 [ 669.122556][T10585] __i2c_transfer+0x868/0x2080 [ 669.127365][T10585] ? i2c_cmd+0x110/0x110 [ 669.131827][T10585] ? i2c_transfer+0x11b/0x390 [ 669.136532][T10585] i2c_transfer+0x250/0x390 [ 669.141078][T10585] ? __i2c_transfer+0x2080/0x2080 [ 669.146118][T10585] ? __might_fault+0xc6/0x120 [ 669.150798][T10585] ? __might_fault+0xaa/0x120 [ 669.155489][T10585] ? _copy_from_user+0xa5/0xe0 [ 669.160270][T10585] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 669.165227][T10585] i2cdev_ioctl+0x646/0x7e0 [ 669.169755][T10585] ? i2cdev_write+0x120/0x120 [ 669.174554][T10585] ? bpf_lsm_file_ioctl+0x9/0x10 [ 669.179520][T10585] ? security_file_ioctl+0x80/0xa0 [ 669.184654][T10585] ? i2cdev_write+0x120/0x120 [ 669.189358][T10585] __se_sys_ioctl+0xfd/0x170 [ 669.193985][T10585] do_syscall_64+0x55/0xb0 [ 669.198408][T10585] ? clear_bhb_loop+0x40/0x90 [ 669.203097][T10585] ? clear_bhb_loop+0x40/0x90 [ 669.207787][T10585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.213687][T10585] RIP: 0033:0x7f3c9838f749 [ 669.218111][T10585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.237817][T10585] RSP: 002b:00007f3c992c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.246247][T10585] RAX: ffffffffffffffda RBX: 00007f3c985e5fa0 RCX: 00007f3c9838f749 [ 669.254249][T10585] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 669.262236][T10585] RBP: 00007f3c98413f91 R08: 0000000000000000 R09: 0000000000000000 [ 669.270216][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.278195][T10585] R13: 00007f3c985e6038 R14: 00007f3c985e5fa0 R15: 00007fff27a735f8 [ 669.286192][T10585] [ 669.289838][T10585] Kernel Offset: disabled [ 669.294275][T10585] Rebooting in 86400 seconds..