last executing test programs: 5m52.506128017s ago: executing program 2 (id=968): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 5m52.020044964s ago: executing program 2 (id=969): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 5m51.407578395s ago: executing program 2 (id=972): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="4b00030000", 0x5) 5m51.266771079s ago: executing program 2 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5m51.013270804s ago: executing program 2 (id=977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x2}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/5, 0x5}, {&(0x7f0000000680)=""/112, 0x70}], 0x2}, 0x10150) 5m50.1358436s ago: executing program 2 (id=979): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c815"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r6, r7}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x3}, 0x90) 5m49.793807574s ago: executing program 32 (id=979): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r6, r7}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x3}, 0x90) 3m17.193318559s ago: executing program 0 (id=1532): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$midi(0x0, 0x3, 0x189c02) read(r0, &(0x7f0000000100)=""/214, 0xd6) 3m12.763024936s ago: executing program 0 (id=1551): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189c02) read(r0, 0x0, 0x0) 3m8.45993106s ago: executing program 0 (id=1561): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f0000000480)=0xfff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) readlink(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008bc0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f0000000000), 0x0, 0xf0, 0x0) 3m7.311064963s ago: executing program 0 (id=1567): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x20, 0xe, 0x5, "a6bda628a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m5.048826156s ago: executing program 0 (id=1577): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004885}, 0x4004054) 3m2.856110073s ago: executing program 0 (id=1582): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/fscaps', 0x0, 0x1c9) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m47.408581346s ago: executing program 33 (id=1582): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/fscaps', 0x0, 0x1c9) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.145548325s ago: executing program 5 (id=2362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 4.710280085s ago: executing program 4 (id=2371): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r5, 0x0, 0x0, 0x1) 3.461095498s ago: executing program 5 (id=2374): set_mempolicy(0x3, &(0x7f0000000240)=0x1020ffb, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) migrate_pages(0x0, 0x6, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) 3.204069534s ago: executing program 1 (id=2375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) 3.180862186s ago: executing program 5 (id=2376): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 2.966174577s ago: executing program 5 (id=2377): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x3ff, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.870850927s ago: executing program 1 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001f00)={&(0x7f0000000d80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}, 0x40000000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000035c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) 2.798750533s ago: executing program 5 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000001800), &(0x7f0000000740)=""/4096}, 0x20) 2.717411462s ago: executing program 1 (id=2380): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x94) syz_open_dev$vim2m(0x0, 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.146570998s ago: executing program 1 (id=2381): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 2.143994698s ago: executing program 4 (id=2382): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 1.795776513s ago: executing program 1 (id=2383): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, 0x0, 0x0) 1.207788101s ago: executing program 4 (id=2384): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 1.032909798s ago: executing program 4 (id=2385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) 858.695585ms ago: executing program 4 (id=2387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd4c000000df256600000008000300", @ANYRES32=r5, @ANYBLOB="0800b700f60000000400b800080026008009"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) recvmsg(r0, &(0x7f0000001f00)={&(0x7f0000000d80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}, 0x40000000) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000035c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) 745.450967ms ago: executing program 5 (id=2388): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) msgrcv(0x0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(0x0, 0x0, 0x0, 0x8fa2496c381b7ad5) 686.192692ms ago: executing program 3 (id=2389): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) syz_open_dev$vim2m(0x0, 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 595.262541ms ago: executing program 4 (id=2390): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r5, 0x0, 0x0, 0x1) 290.512311ms ago: executing program 3 (id=2391): bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x82001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 180.213592ms ago: executing program 3 (id=2392): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003"], 0x0, 0x53}, 0x28) 172.615983ms ago: executing program 3 (id=2393): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 145.388806ms ago: executing program 1 (id=2394): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x4) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000480)=0xfff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) readlink(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008bc0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f0000000000), 0x0, 0xf0, 0x0) 105.641569ms ago: executing program 3 (id=2395): msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/194) 0s ago: executing program 3 (id=2396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000001800), &(0x7f0000000740)=""/4096}, 0x20) kernel console output (not intermixed with test programs): 5 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0cf8eec9 code=0x7ffc0000 [ 383.195639][ T28] audit: type=1326 audit(1760481302.213:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0cf8eec9 code=0x7ffc0000 [ 383.738568][ T5629] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 384.565034][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.651425][ T8145] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 384.681583][ T5629] usb 4-1: Using ep0 maxpacket: 8 [ 384.706665][ T5629] usb 4-1: config 7 has an invalid interface number: 165 but max is 0 [ 384.720480][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.731515][ T5629] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 384.742565][ T5629] usb 4-1: config 7 has no interface number 0 [ 384.748725][ T5629] usb 4-1: config 7 interface 165 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 384.759337][ T5629] usb 4-1: config 7 interface 165 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 10 [ 384.785984][ T5629] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea61, bcdDevice=e1.b9 [ 384.796770][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.806507][ T5629] usb 4-1: Product: syz [ 384.810846][ T5629] usb 4-1: Manufacturer: syz [ 384.815985][ T5629] usb 4-1: SerialNumber: syz [ 384.854951][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.867861][ T8145] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.899855][ T8145] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 384.917220][ T8145] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.938694][ T8145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.965198][ T8981] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 384.976739][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.993293][ T8145] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 385.034433][ T5629] cp210x 4-1:7.165: cp210x converter detected [ 385.052749][ T5629] cp210x 4-1:7.165: failed to get vendor val 0x370b size 1: -71 [ 385.086588][ T5629] cp210x 4-1:7.165: querying part number failed [ 385.158552][ T5629] usb 4-1: cp210x converter now attached to ttyUSB0 [ 385.232223][ T5629] usb 4-1: USB disconnect, device number 7 [ 385.245435][ T8] usb 1-1: USB disconnect, device number 9 [ 385.318132][ T5629] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 385.333324][ T5629] cp210x 4-1:7.165: device disconnected [ 385.957470][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.975073][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.002693][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.014746][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.027752][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.037080][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 386.046810][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.941515][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 388.036448][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 388.101925][ T5797] Bluetooth: hci3: command tx timeout [ 388.164174][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.182187][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.194093][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.208409][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.229720][ T9036] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.249656][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 388.399948][ T12] hsr_slave_0: left promiscuous mode [ 388.421533][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 388.442535][ T12] hsr_slave_1: left promiscuous mode [ 388.460155][ T8] usb 2-1: USB disconnect, device number 8 [ 388.485000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.524417][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.546797][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.560810][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.572607][ T12] bridge_slave_1: left allmulticast mode [ 388.580352][ T12] bridge_slave_1: left promiscuous mode [ 388.672480][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.706790][ T12] bridge_slave_0: left allmulticast mode [ 388.743988][ T12] bridge_slave_0: left promiscuous mode [ 388.759633][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.841049][ T12] veth1_macvtap: left promiscuous mode [ 388.847505][ T12] veth0_macvtap: left promiscuous mode [ 388.861194][ T12] veth1_vlan: left promiscuous mode [ 388.867019][ T12] veth0_vlan: left promiscuous mode [ 390.182058][ T5797] Bluetooth: hci3: command tx timeout [ 391.220282][ T9083] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 391.580674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 391.730163][ T12] team0 (unregistering): Port device team_slave_0 removed [ 391.867895][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.919300][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.271416][ T5797] Bluetooth: hci3: command tx timeout [ 392.802588][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 393.056566][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.068226][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 393.078778][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.090428][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.866252][ T9091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.900363][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 394.144648][ T8] usb 4-1: USB disconnect, device number 8 [ 394.274295][ T12] bond0 (unregistering): Released all slaves [ 394.356694][ T5797] Bluetooth: hci3: command tx timeout [ 394.459130][ T9070] netlink: 'syz.1.1001': attribute type 64 has an invalid length. [ 394.476201][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 394.618448][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.646503][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.664807][ T9002] bridge_slave_0: entered allmulticast mode [ 394.691607][ T9002] bridge_slave_0: entered promiscuous mode [ 394.733027][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.740731][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.771906][ T9002] bridge_slave_1: entered allmulticast mode [ 394.780585][ T9002] bridge_slave_1: entered promiscuous mode [ 394.847931][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.895335][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 394.913844][ T9110] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 394.935178][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.007962][ T9002] team0: Port device team_slave_0 added [ 395.082413][ T9002] team0: Port device team_slave_1 added [ 395.245353][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.271706][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.376556][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.428691][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.465679][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.582639][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.831657][ T9002] hsr_slave_0: entered promiscuous mode [ 395.854236][ T9002] hsr_slave_1: entered promiscuous mode [ 395.910829][ T9002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.929879][ T9002] Cannot create hsr debugfs directory [ 397.334574][ T964] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 397.409584][ T9144] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 397.579815][ T964] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.616921][ T964] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 397.627748][ T964] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.637675][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.656167][ T9140] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 397.712773][ T964] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 397.827605][ T9002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.895413][ T9002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.945996][ T23] usb 1-1: USB disconnect, device number 10 [ 397.956526][ T9002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 398.015658][ T9002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 398.314595][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.387393][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.448869][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.457107][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.550777][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.558048][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.448249][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.928228][ T9002] veth0_vlan: entered promiscuous mode [ 399.961329][ T9002] veth1_vlan: entered promiscuous mode [ 400.020428][ T9002] veth0_macvtap: entered promiscuous mode [ 400.111240][ T9002] veth1_macvtap: entered promiscuous mode [ 400.210344][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.221957][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.234368][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.245399][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.257276][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.268430][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.280345][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.299459][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.310384][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.320473][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.331942][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.342117][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.352905][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.366226][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.385361][ T9002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.394304][ T9002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.403185][ T9002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.411994][ T9002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.514834][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.523356][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.572747][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.589494][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.752552][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 400.984127][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 402.366693][ T9232] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 402.661759][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 402.893442][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.932839][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 402.961545][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.972894][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.005119][ T9245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 403.025895][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 403.341737][ T23] usb 2-1: USB disconnect, device number 9 [ 403.579500][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 403.665773][ T9272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1045'. [ 403.693787][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 405.636741][ T9282] [U] ^@ [ 405.819410][ T9298] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 406.339619][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 409.407898][ T9336] bond1: entered promiscuous mode [ 409.469760][ T9336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.663565][ T9342] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 410.149042][ T9352] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1066'. [ 410.731490][ T5878] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 410.947930][ T5878] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 410.971512][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.001446][ T5878] usb 4-1: Product: syz [ 411.010299][ T5878] usb 4-1: Manufacturer: syz [ 411.041492][ T5878] usb 4-1: SerialNumber: syz [ 411.072648][ T5878] usb 4-1: config 0 descriptor?? [ 411.129814][ T5878] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 411.253299][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.272675][ T5878] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 411.337276][ T5878] usb 4-1: media controller created [ 411.423989][ T9360] dvb-usb: bulk message failed: -22 (7/0) [ 412.943412][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.961387][ T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 413.138625][ T9380] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 413.273251][ T23] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 413.308300][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.340105][ T23] usb 5-1: Product: syz [ 413.352685][ T23] usb 5-1: Manufacturer: syz [ 413.380697][ T23] usb 5-1: SerialNumber: syz [ 413.407698][ T5878] DVB: Unable to find symbol mt352_attach() [ 413.422677][ T23] usb 5-1: config 0 descriptor?? [ 413.604257][ T5878] DVB: Unable to find symbol nxt6000_attach() [ 413.610441][ T5878] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 413.648752][ T23] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 413.693661][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 413.750448][ T5878] dvb-usb: schedule remote query interval to 1000 msecs. [ 413.791946][ T5878] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 413.812751][ T5878] dvb-usb: bulk message failed: -22 (7/0) [ 413.819959][ T5878] dvb-usb: bulk message failed: -22 (7/0) [ 413.871875][ T5878] usb 4-1: USB disconnect, device number 9 [ 414.114327][ T5878] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 414.216683][ T1074] Bluetooth: Error in BCSP hdr checksum [ 414.473143][ T1074] Bluetooth: Error in BCSP hdr checksum [ 414.757775][ T1074] Bluetooth: Error in BCSP hdr checksum [ 414.946589][ T9408] fuse: Bad value for 'fd' [ 415.777684][ T9414] sctp: [Deprecated]: syz.3.1081 (pid 9414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.777684][ T9414] Use struct sctp_sack_info instead [ 416.021684][ T5800] Bluetooth: hci4: command 0x1003 tx timeout [ 416.041392][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 416.663272][ T23] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 416.682932][ T23] usb 5-1: USB disconnect, device number 2 [ 417.501466][ T5879] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 417.661491][ T5879] usb 4-1: device descriptor read/64, error -71 [ 417.941757][ T5879] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 418.202187][ T5879] usb 4-1: device descriptor read/64, error -71 [ 418.338922][ T5879] usb usb4-port1: attempt power cycle [ 418.544831][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1099'. [ 418.793246][ T5879] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 418.842110][ T5879] usb 4-1: device descriptor read/8, error -71 [ 419.142131][ T5879] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 419.192116][ T5879] usb 4-1: device descriptor read/8, error -71 [ 419.322194][ T5879] usb usb4-port1: unable to enumerate USB device [ 420.819431][ T9492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1109'. [ 421.016137][ T9496] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1112'. [ 421.322681][ T9502] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 422.656372][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1121'. [ 422.678070][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 422.919875][ T9530] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1123'. [ 423.332636][ T9536] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 424.772021][ T9559] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1131'. [ 425.474856][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 425.653483][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 425.660950][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 425.750611][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.205043][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 426.215191][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.225666][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.246205][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.253852][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.262078][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.269530][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.289140][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.307734][ T9570] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 426.349299][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.423014][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.430487][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.451422][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.458917][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.509724][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.541109][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.561902][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.786302][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.795195][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.802724][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.812118][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.819576][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.827974][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.835503][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.843017][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.850466][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.858387][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.885231][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.942876][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.973573][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.026130][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.134449][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.295413][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.492391][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.527760][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.588689][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.639760][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.667356][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.732861][ T9597] sctp: [Deprecated]: syz.3.1140 (pid 9597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.732861][ T9597] Use struct sctp_sack_info instead [ 427.733107][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.885849][ T5879] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 428.394097][ T9605] fido_id[9605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 430.061448][ T5878] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 430.280888][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 430.304882][ T9657] omfs: Invalid superblock (0) [ 430.310774][ T5878] usb 5-1: not running at top speed; connect to a high speed hub [ 430.338913][ T5878] usb 5-1: config 2 has an invalid interface number: 254 but max is 0 [ 430.355583][ T5878] usb 5-1: config 2 has no interface number 0 [ 430.376353][ T5878] usb 5-1: config 2 interface 254 has no altsetting 0 [ 430.405201][ T5878] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=20.52 [ 430.431346][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.439471][ T5878] usb 5-1: Product: syz [ 430.465289][ T5878] usb 5-1: Manufacturer: syz [ 430.469996][ T5878] usb 5-1: SerialNumber: syz [ 433.627478][ T5878] ims_pcu: probe of 5-1:2.254 failed with error -22 [ 433.701757][ T5878] usb 5-1: USB disconnect, device number 3 [ 434.070698][ T9687] trusted_key: encrypted_key: insufficient parameters specified [ 434.721621][ T9687] tmpfs: Bad value for 'mpol' [ 440.266243][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.449121][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.854028][ T9796] sctp: [Deprecated]: syz.3.1186 (pid 9796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.854028][ T9796] Use struct sctp_sack_info instead [ 445.204232][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'. [ 446.755547][ T28] audit: type=1326 audit(1760481365.203:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3298eec9 code=0x7ffc0000 [ 446.902303][ T9818] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 446.912094][ T9818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 446.921819][ T9818] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 447.007805][ T28] audit: type=1326 audit(1760481365.203:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3298eec9 code=0x7ffc0000 [ 447.247213][ T28] audit: type=1326 audit(1760481365.203:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f7d3298eec9 code=0x7ffc0000 [ 447.291712][ T28] audit: type=1326 audit(1760481365.203:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3298eec9 code=0x7ffc0000 [ 449.403961][ T28] audit: type=1326 audit(1760481365.203:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3298eec9 code=0x7ffc0000 [ 449.423330][ T9835] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1196'. [ 449.522764][ T28] audit: type=1326 audit(1760481365.203:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7d32990d5c code=0x7ffc0000 [ 449.624930][ T28] audit: type=1326 audit(1760481365.203:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7d32990c94 code=0x7ffc0000 [ 449.688031][ T28] audit: type=1326 audit(1760481365.203:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7d32990c94 code=0x7ffc0000 [ 449.751597][ T28] audit: type=1326 audit(1760481365.203:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3298eec9 code=0x7ffc0000 [ 449.837410][ T9846] sctp: [Deprecated]: syz.3.1197 (pid 9846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.837410][ T9846] Use struct sctp_sack_info instead [ 449.885175][ T28] audit: type=1326 audit(1760481365.203:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3298eec9 code=0x7ffc0000 [ 451.789610][ T5841] kernel write not supported for file /cpuinfo (pid: 5841 comm: kworker/1:5) [ 453.857849][ T9883] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1206'. [ 456.561465][ T9928] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1218'. [ 458.420591][ T9958] fuse: Bad value for 'fd' [ 458.631636][ T5841] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 458.969451][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 458.985188][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0 [ 459.002056][ T5841] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 459.046033][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.082933][ T5841] usb 2-1: config 0 descriptor?? [ 459.401656][ T8145] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 459.550688][ T5841] hid (null): nested delimiters [ 459.573299][ T9970] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1231'. [ 459.629047][ T8145] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 459.651874][ T8145] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 459.681421][ T8145] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 459.711310][ T8145] usb 1-1: config 8 has no interface number 0 [ 459.727282][ T8145] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 459.740452][ T5841] usb 2-1: USB disconnect, device number 10 [ 459.792124][ T8145] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 459.838545][ T8145] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 459.876029][ T8145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.899652][ T8145] usb 1-1: Product: syz [ 459.911408][ T8145] usb 1-1: Manufacturer: syz [ 459.921653][ T8145] usb 1-1: SerialNumber: syz [ 460.246134][ T8145] usb 1-1: USB disconnect, device number 11 [ 462.273337][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 462.273352][ T28] audit: type=1326 audit(1760481382.243:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.306788][ T28] audit: type=1326 audit(1760481382.243:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.329751][ T28] audit: type=1326 audit(1760481382.243:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.352732][ T28] audit: type=1326 audit(1760481382.243:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.375508][ T28] audit: type=1326 audit(1760481382.243:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.418971][ T28] audit: type=1326 audit(1760481382.243:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.463330][ T28] audit: type=1326 audit(1760481382.243:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.561498][ T28] audit: type=1326 audit(1760481382.243:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.778414][ T28] audit: type=1326 audit(1760481382.243:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 462.800722][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.115359][ T28] audit: type=1326 audit(1760481382.243:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b8eec9 code=0x7ffc0000 [ 463.292667][ T8145] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 463.827123][ T8145] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 464.441565][ T8145] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 464.450513][ T8145] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 464.463265][ T8145] usb 1-1: config 220 has no interface number 2 [ 464.469635][ T8145] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 464.537988][ T8145] usb 1-1: config 220 interface 0 has no altsetting 0 [ 464.572508][ T8145] usb 1-1: config 220 interface 76 has no altsetting 0 [ 464.579456][ T8145] usb 1-1: config 220 interface 1 has no altsetting 0 [ 464.623498][ T8145] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 464.643749][ T8145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.715128][ T8145] usb 1-1: Product: syz [ 464.766782][ T8145] usb 1-1: Manufacturer: syz [ 464.793590][ T8145] usb 1-1: SerialNumber: syz [ 465.032309][ T8145] usb 1-1: selecting invalid altsetting 0 [ 465.067648][ T8145] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 465.083772][ T8145] usb 1-1: No valid video chain found. [ 465.125883][ T8145] usb 1-1: selecting invalid altsetting 0 [ 465.150328][ T8145] usbtest: probe of 1-1:220.1 failed with error -22 [ 465.180674][ T8145] usb 1-1: USB disconnect, device number 12 [ 467.949412][ T8145] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 468.222536][ T8145] usb 4-1: Using ep0 maxpacket: 16 [ 468.336781][ T8145] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 468.435793][ T8145] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.473728][ T8145] usb 4-1: config 0 has no interface number 0 [ 468.500093][ T8145] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 468.528464][ T8145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.559514][ T8145] usb 4-1: Product: syz [ 468.578445][ T8145] usb 4-1: Manufacturer: syz [ 468.611350][ T8145] usb 4-1: SerialNumber: syz [ 468.655809][ T8145] usb 4-1: config 0 descriptor?? [ 468.676030][ T8145] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 468.689660][ T8145] usb 4-1: No valid video chain found. [ 468.776805][T10088] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1263'. [ 469.107014][ T8145] usb 4-1: USB disconnect, device number 14 [ 469.598248][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 469.598263][ T28] audit: type=1326 audit(1760481389.573:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 469.661304][ T28] audit: type=1326 audit(1760481389.573:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 469.683700][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.731309][ T28] audit: type=1326 audit(1760481389.573:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 469.810054][ T28] audit: type=1326 audit(1760481389.573:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 469.832465][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.839431][ T28] audit: type=1326 audit(1760481389.573:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 469.862429][ T28] audit: type=1326 audit(1760481389.573:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 469.884807][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.931711][ T28] audit: type=1326 audit(1760481389.573:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 470.001758][ T28] audit: type=1326 audit(1760481389.583:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 470.071446][ T28] audit: type=1326 audit(1760481389.583:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 470.253225][ T28] audit: type=1326 audit(1760481389.593:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa290b8eec9 code=0x7ffc0000 [ 472.435680][T10126] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1275'. [ 475.876606][T10159] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1286'. [ 477.538417][ T5878] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 477.831549][T10182] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 477.841558][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 477.882848][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.906006][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.931462][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 477.940581][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.982504][ T5878] usb 4-1: config 0 descriptor?? [ 478.009472][ T5878] hub 4-1:0.0: USB hub found [ 478.199891][ T5878] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 478.404706][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 478.431637][ T5878] usbhid: probe of 4-1:0.0 failed with error -71 [ 478.496920][ T5878] usb 4-1: USB disconnect, device number 15 [ 479.274952][T10195] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1296'. [ 481.365102][T10223] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1307'. [ 481.411704][ T5841] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 481.673221][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 481.680161][ T5841] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 481.708423][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.738254][ T5841] usb 5-1: config 0 descriptor?? [ 481.898905][T10236] trusted_key: syz.3.1311 sent an empty control message without MSG_MORE. [ 482.267178][T10243] fuse: Bad value for 'fd' [ 482.898787][ T5841] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.0005/input/input10 [ 483.183644][ T5841] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.0005/input/input11 [ 483.280351][T10251] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1317'. [ 483.292169][ T5841] kye 0003:0458:5019.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 484.301075][ T5841] usb 5-1: USB disconnect, device number 4 [ 484.629722][T10257] fido_id[10257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 486.377890][T10284] fuse: Bad value for 'fd' [ 490.129430][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 490.337855][ T5879] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 490.356679][ T5879] usb 1-1: config 0 has no interface number 0 [ 490.387848][ T5879] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 490.433770][ T5879] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 490.683128][T10326] fuse: Bad value for 'fd' [ 491.676609][ T5879] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 491.782759][ T5879] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 491.841025][ T5879] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 491.870911][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.898257][ T5879] usb 1-1: Product: syz [ 491.923607][ T5879] usb 1-1: Manufacturer: syz [ 491.928394][ T5879] usb 1-1: SerialNumber: syz [ 491.966899][ T5879] usb 1-1: config 0 descriptor?? [ 492.063898][T10333] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 492.073065][T10333] netlink: 'syz.3.1344': attribute type 2 has an invalid length. [ 492.080842][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1344'. [ 492.097785][ T5879] usb 1-1: can't set config #0, error -71 [ 492.130925][ T5879] usb 1-1: USB disconnect, device number 13 [ 493.019644][T10349] fuse: Bad value for 'fd' [ 494.551000][T10371] sctp: [Deprecated]: syz.4.1356 (pid 10371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.551000][T10371] Use struct sctp_sack_info instead [ 494.631598][ T5879] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 494.833502][ T5879] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 494.833533][ T5879] usb 4-1: config 0 has no interface number 0 [ 494.833582][ T5879] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 494.833610][ T5879] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 494.833707][ T5879] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 494.833734][ T5879] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 494.847166][ T5879] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 494.968315][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.977549][ T5879] usb 4-1: Product: syz [ 494.989177][ T5879] usb 4-1: Manufacturer: syz [ 494.994307][ T5879] usb 4-1: SerialNumber: syz [ 495.062958][ T5879] usb 4-1: config 0 descriptor?? [ 495.107113][ T5879] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 495.144051][ T5879] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input12 [ 495.474068][T10389] fuse: Bad value for 'fd' [ 496.459728][ T5841] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 496.709516][ T5841] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.781943][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.944143][ T5841] usb 1-1: config 0 descriptor?? [ 497.113348][ T5841] cp210x 1-1:0.0: cp210x converter detected [ 498.679182][ T5841] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 498.683385][ T5878] usb 4-1: USB disconnect, device number 16 [ 498.755558][ T5878] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 498.870628][ T5841] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 498.873528][T10413] sctp: [Deprecated]: syz.4.1371 (pid 10413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.873528][T10413] Use struct sctp_sack_info instead [ 499.683707][ T5841] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 499.711728][ T5841] usb 1-1: cp210x converter now attached to ttyUSB0 [ 499.752392][ T5841] usb 1-1: USB disconnect, device number 14 [ 499.793248][ T5841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.825512][ T5841] cp210x 1-1:0.0: device disconnected [ 500.201390][ T5879] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 500.427488][ T5879] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 500.437959][ T5879] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 500.475836][ T5879] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.598334][ T5879] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 500.727719][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.204647][ T5879] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 501.213103][ T5879] usb 4-1: invalid MIDI out EP 0 [ 501.353117][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.384954][ T5879] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 501.430182][ T5879] usb 4-1: USB disconnect, device number 17 [ 501.453501][T10453] sctp: [Deprecated]: syz.4.1381 (pid 10453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.453501][T10453] Use struct sctp_sack_info instead [ 501.782457][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.789019][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.450220][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 504.433772][ T964] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 504.637968][ T964] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 504.661952][ T964] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 504.748848][ T964] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 504.766094][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.803034][ T964] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 504.823386][ T964] usb 1-1: invalid MIDI out EP 0 [ 505.037907][ T964] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 505.096519][ T964] usb 1-1: USB disconnect, device number 15 [ 506.791550][ T964] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 507.034055][ T964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.068824][ T964] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 507.101567][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.194905][ T964] usb 4-1: config 0 descriptor?? [ 507.203672][ T964] pwc: Askey VC010 type 2 USB webcam detected. [ 507.619864][ T964] pwc: recv_control_msg error -32 req 02 val 2b00 [ 507.645952][ T964] pwc: recv_control_msg error -32 req 02 val 2700 [ 507.708402][ T964] pwc: recv_control_msg error -32 req 02 val 2c00 [ 507.718234][ T964] pwc: recv_control_msg error -32 req 04 val 1000 [ 507.739905][ T964] pwc: recv_control_msg error -32 req 04 val 1300 [ 507.761066][ T964] pwc: recv_control_msg error -32 req 04 val 1400 [ 507.776905][ T964] pwc: recv_control_msg error -32 req 02 val 2000 [ 507.786042][ T964] pwc: recv_control_msg error -32 req 02 val 2100 [ 507.951609][ T5879] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 508.180017][ T5879] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 508.191406][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.199542][ T5879] usb 1-1: Product: syz [ 508.203689][ T964] pwc: recv_control_msg error -71 req 02 val 2500 [ 508.210294][ T5879] usb 1-1: Manufacturer: syz [ 508.248980][ T5879] usb 1-1: SerialNumber: syz [ 508.269333][ T964] pwc: recv_control_msg error -71 req 02 val 2400 [ 508.446936][ T964] pwc: recv_control_msg error -71 req 02 val 2600 [ 508.461602][ T964] pwc: recv_control_msg error -71 req 02 val 2900 [ 508.470290][ T964] pwc: recv_control_msg error -71 req 02 val 2800 [ 508.484269][ T964] pwc: recv_control_msg error -71 req 04 val 1100 [ 508.500738][ T964] pwc: recv_control_msg error -71 req 04 val 1200 [ 508.525886][ T964] pwc: Registered as video103. [ 508.539556][ T964] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 508.595865][ T964] usb 4-1: USB disconnect, device number 18 [ 508.902330][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 508.962645][ T5879] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 508.974717][ T5879] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 508.986825][ T5879] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 509.007279][ T5879] lan78xx: probe of 1-1:1.0 failed with error -32 [ 509.538306][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 509.538323][ T28] audit: type=1326 audit(1760481429.513:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a298eec9 code=0x7ffc0000 [ 509.573234][ T28] audit: type=1326 audit(1760481429.513:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a298eec9 code=0x7ffc0000 [ 509.672281][ T28] audit: type=1326 audit(1760481429.523:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69a2990de7 code=0x7ffc0000 [ 509.752580][ T28] audit: type=1326 audit(1760481429.553:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a298eec9 code=0x7ffc0000 [ 509.779073][ T28] audit: type=1326 audit(1760481429.553:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f69a298eec9 code=0x7ffc0000 [ 509.970482][ T28] audit: type=1326 audit(1760481429.553:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a298eec9 code=0x7ffc0000 [ 509.998131][ T28] audit: type=1326 audit(1760481429.553:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a298eec9 code=0x7ffc0000 [ 511.163681][ T8145] usb 1-1: USB disconnect, device number 16 [ 511.521386][ T964] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 511.726853][ T964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.769082][ T964] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 511.809594][ T964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.002825][ T964] usb 5-1: config 0 descriptor?? [ 512.155368][ T964] pwc: Askey VC010 type 2 USB webcam detected. [ 512.578519][ T964] pwc: recv_control_msg error -32 req 02 val 2b00 [ 512.621447][ T964] pwc: recv_control_msg error -32 req 02 val 2700 [ 512.651340][ T964] pwc: recv_control_msg error -32 req 02 val 2c00 [ 512.658739][ T964] pwc: recv_control_msg error -32 req 04 val 1000 [ 512.740913][ T964] pwc: recv_control_msg error -32 req 04 val 1300 [ 512.758724][ T964] pwc: recv_control_msg error -32 req 04 val 1400 [ 512.779600][ T964] pwc: recv_control_msg error -32 req 02 val 2000 [ 512.797196][ T964] pwc: recv_control_msg error -32 req 02 val 2100 [ 512.838821][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 513.033379][ T964] pwc: recv_control_msg error -71 req 02 val 2500 [ 513.051648][ T964] pwc: recv_control_msg error -71 req 02 val 2400 [ 513.191425][ T964] pwc: recv_control_msg error -71 req 02 val 2600 [ 513.205814][ T964] pwc: recv_control_msg error -71 req 02 val 2900 [ 513.255873][ T964] pwc: recv_control_msg error -71 req 02 val 2800 [ 513.273147][ T964] pwc: recv_control_msg error -71 req 04 val 1100 [ 515.197469][ T964] pwc: recv_control_msg error -71 req 04 val 1200 [ 515.216722][ T964] pwc: Registered as video103. [ 515.233427][ T964] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 515.293244][ T964] usb 5-1: USB disconnect, device number 5 [ 518.481429][ T5116] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 518.715455][ T5116] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.825705][ T5116] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 518.971399][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.110790][ T5116] usb 1-1: config 0 descriptor?? [ 519.154307][ T5116] pwc: Askey VC010 type 2 USB webcam detected. [ 519.570736][ T5116] pwc: recv_control_msg error -32 req 02 val 2b00 [ 519.620480][ T5116] pwc: recv_control_msg error -32 req 02 val 2700 [ 519.718191][ T5116] pwc: recv_control_msg error -32 req 02 val 2c00 [ 519.782819][ T5116] pwc: recv_control_msg error -32 req 04 val 1000 [ 519.833808][ T5116] pwc: recv_control_msg error -32 req 04 val 1300 [ 519.900466][ T5116] pwc: recv_control_msg error -32 req 04 val 1400 [ 520.028160][ T5116] pwc: recv_control_msg error -32 req 02 val 2000 [ 520.130883][ T5116] pwc: recv_control_msg error -32 req 02 val 2100 [ 520.376889][ T5116] pwc: recv_control_msg error -71 req 02 val 2500 [ 520.386917][ T5116] pwc: recv_control_msg error -71 req 02 val 2400 [ 520.396650][ T5116] pwc: recv_control_msg error -71 req 02 val 2600 [ 520.405009][ T5116] pwc: recv_control_msg error -71 req 02 val 2900 [ 520.413478][ T5116] pwc: recv_control_msg error -71 req 02 val 2800 [ 520.420679][ T5116] pwc: recv_control_msg error -71 req 04 val 1100 [ 520.429105][ T5116] pwc: recv_control_msg error -71 req 04 val 1200 [ 520.442619][ T5116] pwc: Registered as video103. [ 520.452813][ T5116] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 520.496714][ T5116] usb 1-1: USB disconnect, device number 17 [ 520.708999][T10679] 9pnet_fd: Insufficient options for proto=fd [ 520.823229][T10685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'. [ 520.840564][T10685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'. [ 521.081308][ T5116] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 521.288503][ T5116] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 521.352216][ T5116] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 521.553933][ T5116] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.857598][ T5116] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.892026][ T5116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.935951][ T5116] usb 5-1: config 0 descriptor?? [ 521.963254][T10683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.976243][ T5116] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 523.089895][T10749] block device autoloading is deprecated and will be removed. [ 525.405257][ T5841] usb 5-1: USB disconnect, device number 6 [ 526.488510][T10775] bridge0: entered promiscuous mode [ 526.494428][T10775] macsec1: entered promiscuous mode [ 526.501180][T10775] bridge0: port 3(macsec1) entered blocking state [ 526.508578][T10775] bridge0: port 3(macsec1) entered disabled state [ 526.516202][T10775] macsec1: entered allmulticast mode [ 526.521961][T10775] bridge0: entered allmulticast mode [ 526.535609][T10775] macsec1: left allmulticast mode [ 526.541107][T10775] bridge0: left allmulticast mode [ 526.559839][T10775] bridge0: left promiscuous mode [ 527.711578][ T964] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 527.871723][T10797] sctp: [Deprecated]: syz.4.1492 (pid 10797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.871723][T10797] Use struct sctp_sack_info instead [ 527.911625][ T964] usb 1-1: Using ep0 maxpacket: 16 [ 527.948033][ T964] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 529.132347][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.140926][ T964] usb 1-1: Product: syz [ 529.146575][ T964] usb 1-1: Manufacturer: syz [ 529.151318][ T964] usb 1-1: SerialNumber: syz [ 529.186074][ T964] r8152-cfgselector 1-1: config 0 descriptor?? [ 529.649451][ T964] r8152-cfgselector 1-1: Unknown version 0x0000 [ 529.817282][ T964] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 531.546004][T10839] sctp: [Deprecated]: syz.4.1505 (pid 10839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.546004][T10839] Use struct sctp_sack_info instead [ 534.441625][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 534.642280][T10871] sctp: [Deprecated]: syz.1.1517 (pid 10871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.642280][T10871] Use struct sctp_sack_info instead [ 534.659542][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 534.684549][ T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 534.693212][ T8] usb 1-1: config 0 has no interface number 0 [ 534.708360][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 534.720850][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.737005][ T8] usb 1-1: Product: syz [ 534.742596][ T8] usb 1-1: Manufacturer: syz [ 534.747320][ T8] usb 1-1: SerialNumber: syz [ 534.760557][ T8] usb 1-1: config 0 descriptor?? [ 534.778122][ T8] smsc95xx v2.0.0 [ 534.881435][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 535.912426][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 535.924886][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 535.936942][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 535.947835][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 535.957932][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.975377][T10869] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 535.996115][ T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 536.176057][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 536.228606][ T8] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 536.262391][ T8145] usb 4-1: USB disconnect, device number 19 [ 536.297497][ T8] usb 1-1: USB disconnect, device number 19 [ 537.203387][T10894] sctp: [Deprecated]: syz.0.1526 (pid 10894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.203387][T10894] Use struct sctp_sack_info instead [ 538.322983][T10920] fuse: Bad value for 'fd' [ 539.071338][ T5116] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 539.140671][T10927] sctp: [Deprecated]: syz.3.1537 (pid 10927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.140671][T10927] Use struct sctp_sack_info instead [ 540.151804][ T5116] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 540.366748][ T5116] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 540.377077][ T5116] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 540.461580][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.953001][T10943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 541.834979][ T5116] usb 1-1: can't set config #27, error -71 [ 541.842890][ T5116] usb 1-1: USB disconnect, device number 20 [ 541.997369][T10945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 542.067517][ T5800] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 543.931421][ T5116] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 544.042200][T10969] befs: (nullb0): invalid magic header [ 544.183785][ T5116] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 544.475271][ T5116] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 544.509405][ T5116] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 544.577338][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.634450][T10950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 544.696849][ T5116] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 544.917134][ T5116] usb 1-1: USB disconnect, device number 21 [ 546.097580][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'. [ 546.563981][T11010] fuse: Bad value for 'fd' [ 547.721113][ T5116] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 547.929399][ T5116] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 547.937960][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.957085][ T5116] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 547.966624][ T5116] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 547.975146][ T5116] usb 1-1: Manufacturer: syz [ 547.984035][ T5116] usb 1-1: config 0 descriptor?? [ 548.071416][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 548.105194][ T5116] rc_core: IR keymap rc-hauppauge not found [ 548.127078][ T5116] Registered IR keymap rc-empty [ 548.147728][ T5116] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 548.197256][ T5116] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 548.262661][T11033] program syz.4.1571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.291601][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.304264][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 548.344250][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.363811][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.412087][T11021] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 548.427641][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 548.440709][ C1] igorplugusb 1-1:0.0: receive overflow invalid: 166 [ 548.649266][ T5116] usb 1-1: USB disconnect, device number 22 [ 548.691983][ T5879] usb 4-1: USB disconnect, device number 20 [ 548.917425][T11044] fuse: Bad value for 'fd' [ 554.705104][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 554.737429][T11078] fuse: Bad value for 'fd' [ 555.962398][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.995939][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.026704][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.043645][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.057951][T11069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 556.091730][ T9] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 556.291335][ T5116] usb 5-1: USB disconnect, device number 7 [ 557.767773][T11101] befs: (nullb0): invalid magic header [ 558.946388][T11111] fuse: Bad value for 'fd' [ 562.741450][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 562.961907][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 563.147065][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.167986][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.724007][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 563.757067][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 563.799007][ T9] usb 4-1: string descriptor 0 read error: -22 [ 563.832640][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 563.875103][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.918184][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 563.940208][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 563.957855][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 563.965569][ T9] usb 4-1: media controller created [ 563.996601][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 564.368580][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 564.404089][T11147] fuse: Bad value for 'fd' [ 565.145366][ T9] usb 4-1: USB disconnect, device number 21 [ 568.853730][T11203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 568.867699][T11203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 568.877662][T11203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 568.923963][T11203] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 568.943097][T11203] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 568.953121][T11203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 571.122070][T11218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1628'. [ 571.183931][T11199] chnl_net:caif_netlink_parms(): no params data found [ 571.360871][T11203] Bluetooth: hci4: command tx timeout [ 571.511824][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.524902][T11199] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.539606][T11199] bridge_slave_0: entered allmulticast mode [ 571.986047][T11199] bridge_slave_0: entered promiscuous mode [ 572.039634][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.489001][T11199] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.496875][T11199] bridge_slave_1: entered allmulticast mode [ 572.552130][T11199] bridge_slave_1: entered promiscuous mode [ 572.675066][T11199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.705183][T11199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.873851][T11199] team0: Port device team_slave_0 added [ 572.892522][T11247] sctp: [Deprecated]: syz.1.1634 (pid 11247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.892522][T11247] Use struct sctp_sack_info instead [ 572.939354][T11199] team0: Port device team_slave_1 added [ 573.383275][T11203] Bluetooth: hci4: command tx timeout [ 573.920211][T11199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.958371][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.018569][T11199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.054836][T11199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.088276][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.150890][T11199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.443266][T11199] hsr_slave_0: entered promiscuous mode [ 575.461492][T11203] Bluetooth: hci4: command tx timeout [ 575.477855][T11199] hsr_slave_1: entered promiscuous mode [ 575.539993][T11199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.555145][T11199] Cannot create hsr debugfs directory [ 576.037979][T11199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 576.050583][T11199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 576.085156][T11199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 576.091395][ T8145] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 576.112343][T11199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 576.468309][ T8145] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 576.483868][ T8145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.973797][T11199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.228732][ T8145] usb 5-1: Product: syz [ 577.234012][ T8145] usb 5-1: Manufacturer: syz [ 577.238665][ T8145] usb 5-1: SerialNumber: syz [ 577.247826][T11199] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.262691][ T8145] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 577.292562][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.299779][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.353625][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 577.365074][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.372334][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.541432][T11203] Bluetooth: hci4: command tx timeout [ 577.866215][ T23] usb 5-1: USB disconnect, device number 8 [ 578.615914][T11199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.673646][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 578.691037][ T9] ath9k_htc: Failed to initialize the device [ 578.701562][ T23] usb 5-1: ath9k_htc: USB layer deinitialized [ 578.913170][T11311] sctp: [Deprecated]: syz.1.1656 (pid 11311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 578.913170][T11311] Use struct sctp_sack_info instead [ 579.729336][T11199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.335381][T11199] veth0_vlan: entered promiscuous mode [ 581.349713][T11199] veth1_vlan: entered promiscuous mode [ 581.425111][T11199] veth0_macvtap: entered promiscuous mode [ 581.439366][T11199] veth1_macvtap: entered promiscuous mode [ 581.501005][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.518036][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.541375][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.559755][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.570049][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.595311][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.609963][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.641290][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.653290][T11199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.778439][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.819237][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.772446][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.796251][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.019241][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.155620][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.235160][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.311928][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.496750][T11199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.445609][T11199] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.530025][T11199] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.542492][T11199] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.551799][T11199] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.958417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.973397][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.629938][T10736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.669171][T10736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.004548][T11369] sctp: [Deprecated]: syz.4.1673 (pid 11369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.004548][T11369] Use struct sctp_sack_info instead [ 587.413990][T11374] fuse: Bad value for 'fd' [ 588.135531][T11378] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1677'. [ 588.146333][ T27] IPVS: starting estimator thread 0... [ 588.160236][T11378] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 588.200271][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.210305][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.241797][T11379] IPVS: using max 21 ests per chain, 50400 per kthread [ 589.851730][ T5629] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 589.981604][ T5879] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 590.071481][ T5629] usb 6-1: Using ep0 maxpacket: 8 [ 590.120390][ T5629] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 590.194077][ T5879] usb 4-1: descriptor type invalid, skip [ 590.232525][ T5629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.274390][ T5879] usb 4-1: descriptor type invalid, skip [ 590.333814][ T5629] usb 6-1: Product: syz [ 590.352059][ T5879] usb 4-1: descriptor type invalid, skip [ 590.398057][ T5629] usb 6-1: Manufacturer: syz [ 590.721405][ T5879] usb 4-1: not running at top speed; connect to a high speed hub [ 590.730974][ T5629] usb 6-1: SerialNumber: syz [ 590.754281][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.772857][ T5629] usb 6-1: config 0 descriptor?? [ 590.785945][ T5879] usb 4-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.804852][ T5879] usb 4-1: config 1 interface 0 has no altsetting 0 [ 590.836773][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.852959][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.881467][ T5879] usb 4-1: Product: й [ 590.887549][ T5879] usb 4-1: Manufacturer: ᐊ [ 590.895668][ T5879] usb 4-1: SerialNumber: syz [ 591.004198][ T5629] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 591.230989][ T5629] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 591.255011][ T5629] usb 6-1: USB disconnect, device number 2 [ 592.367426][ T5879] usb 4-1: bad CDC descriptors [ 592.400520][ T5879] usb 4-1: USB disconnect, device number 22 [ 592.981589][T11429] sctp: [Deprecated]: syz.1.1690 (pid 11429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.981589][T11429] Use struct sctp_sack_info instead [ 597.541725][ T8145] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 597.733932][ T8145] usb 6-1: descriptor type invalid, skip [ 597.739662][ T8145] usb 6-1: descriptor type invalid, skip [ 597.820400][ T8145] usb 6-1: descriptor type invalid, skip [ 597.829671][ T8145] usb 6-1: not running at top speed; connect to a high speed hub [ 597.849542][ T8145] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.860409][ T8145] usb 6-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.898471][ T8145] usb 6-1: config 1 interface 0 has no altsetting 0 [ 597.963179][ T8145] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.997715][ T8145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.128448][ T8145] usb 6-1: Product: й [ 598.185511][ T8145] usb 6-1: Manufacturer: ᐊ [ 598.269372][ T8145] usb 6-1: SerialNumber: syz [ 598.864477][T11492] sctp: [Deprecated]: syz.3.1712 (pid 11492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.864477][T11492] Use struct sctp_sack_info instead [ 598.941511][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 599.131390][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 599.151604][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 599.174759][ T8] usb 5-1: config 14 has an invalid interface number: 115 but max is 0 [ 599.183358][ T8] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 599.193742][ T8] usb 5-1: config 14 has no interface number 0 [ 599.200182][ T8] usb 5-1: config 14 interface 115 has no altsetting 0 [ 599.213850][ T8] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 599.226246][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.234777][ T8] usb 5-1: Product: syz [ 599.239130][ T8] usb 5-1: Manufacturer: syz [ 599.243980][ T8] usb 5-1: SerialNumber: syz [ 599.505617][ T8] usb 5-1: USB disconnect, device number 9 [ 599.839844][ T8145] usb 6-1: bad CDC descriptors [ 599.867962][ T8145] usb 6-1: USB disconnect, device number 3 [ 601.190885][T11508] program syz.5.1718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.331573][ T8] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 602.673207][ T8] usb 5-1: descriptor type invalid, skip [ 602.679619][ T8] usb 5-1: descriptor type invalid, skip [ 602.740650][ T8] usb 5-1: descriptor type invalid, skip [ 602.805289][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 602.891205][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.985165][ T8] usb 5-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.027069][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 603.047224][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.076054][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.089359][T11529] sctp: [Deprecated]: syz.3.1724 (pid 11529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 603.089359][T11529] Use struct sctp_sack_info instead [ 603.142959][ T8] usb 5-1: Product: й [ 603.158433][ T8] usb 5-1: Manufacturer: ᐊ [ 603.181447][ T8] usb 5-1: SerialNumber: syz [ 605.531386][ T5879] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 605.540734][ T8] usb 5-1: bad CDC descriptors [ 605.562556][ T8] usb 5-1: USB disconnect, device number 10 [ 605.607253][T11547] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1732'. [ 605.720226][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1732'. [ 605.741263][T11550] veth1_macvtap: left promiscuous mode [ 605.758686][ T5879] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 605.779569][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.808358][ T5879] usb 4-1: Product: syz [ 605.817160][ T5879] usb 4-1: Manufacturer: syz [ 605.829166][ T5879] usb 4-1: SerialNumber: syz [ 605.860366][ T5879] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 605.907853][ T27] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 605.945678][T11553] fuse: Bad value for 'fd' [ 607.187787][T11561] sctp: [Deprecated]: syz.4.1736 (pid 11561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.187787][T11561] Use struct sctp_sack_info instead [ 607.369964][ T27] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 607.380725][ T27] ath9k_htc: Failed to initialize the device [ 607.426338][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 607.628752][T11568] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 607.763681][T11568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.801869][T11570] bond1: (slave gretap1): making interface the new active one [ 607.820485][T11570] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 608.898392][ T8] usb 4-1: USB disconnect, device number 23 [ 610.064949][T11590] fuse: Bad value for 'fd' [ 610.121605][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 610.324100][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 610.336561][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 610.358175][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.422938][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 610.456961][ T8] pvrusb2: ********** [ 610.480827][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 610.519210][T11595] syzkaller0: entered promiscuous mode [ 610.521114][ T8] pvrusb2: Important functionality might not be entirely working. [ 610.525079][T11595] syzkaller0: entered allmulticast mode [ 610.539780][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 610.553704][ T8] pvrusb2: ********** [ 610.701924][ T2316] pvrusb2: Invalid write control endpoint [ 610.940888][T11584] pvrusb2: Invalid write control endpoint [ 610.950867][ T8] usb 4-1: USB disconnect, device number 24 [ 610.965325][ T2316] pvrusb2: Invalid write control endpoint [ 610.985771][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 611.002635][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 611.012002][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 611.031770][ T2316] pvrusb2: Device being rendered inoperable [ 611.040689][T11605] sctp: [Deprecated]: syz.5.1749 (pid 11605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.040689][T11605] Use struct sctp_sack_info instead [ 611.115003][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 611.132425][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 611.194076][ T2316] pvrusb2: Attached sub-driver cx25840 [ 611.217640][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 611.249755][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 613.306943][T11624] fuse: Bad value for 'fd' [ 613.382119][T11626] netlink: 'syz.1.1757': attribute type 10 has an invalid length. [ 613.431949][T11626] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 613.590171][T11635] ksmbd: Unknown IPC event: 6, ignore. [ 614.326088][T11651] fuse: Bad value for 'fd' [ 615.057780][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 615.242266][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 615.250278][T11664] sctp: [Deprecated]: syz.5.1772 (pid 11664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 615.250278][T11664] Use struct sctp_sack_info instead [ 615.254577][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 615.357900][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.679660][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 615.887198][ T8] pvrusb2: ********** [ 615.902545][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 615.946197][ T8] pvrusb2: Important functionality might not be entirely working. [ 615.992534][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 616.062322][ T8] pvrusb2: ********** [ 616.105549][ T2316] pvrusb2: Invalid write control endpoint [ 616.246749][ T2316] pvrusb2: Invalid write control endpoint [ 616.300749][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 616.334474][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 616.361737][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 616.374266][ T2316] pvrusb2: Device being rendered inoperable [ 616.383120][T11673] pvrusb2: Attempted to execute control transfer when device not ok [ 616.391622][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 616.395072][ T5878] usb 5-1: USB disconnect, device number 11 [ 616.398717][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 616.433483][ T2316] pvrusb2: Attached sub-driver cx25840 [ 616.439005][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 616.449529][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 617.974943][T11693] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 618.059659][T11693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.212710][T11699] bond1: (slave gretap1): making interface the new active one [ 618.229611][T11699] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 618.540148][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1793'. [ 618.661361][T11719] sctp: [Deprecated]: syz.4.1792 (pid 11719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 618.661361][T11719] Use struct sctp_sack_info instead [ 620.501557][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 620.713570][ T8] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 620.762399][T11203] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 620.763605][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.855523][ T8] usb 4-1: Product: syz [ 620.859775][ T8] usb 4-1: Manufacturer: syz [ 620.889020][ T8] usb 4-1: SerialNumber: syz [ 621.143113][ T8] usb 4-1: config 0 descriptor?? [ 621.764697][T11744] program syz.4.1803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.369420][ T8] usb 4-1: f81604_read: reg: 100f failed: -EPROTO [ 623.155846][ T8] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 623.203611][ T8] usb 4-1: USB disconnect, device number 25 [ 623.288921][ T8] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 623.335340][ T5452] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 623.360782][ T5452] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 623.385491][ T8] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 624.635778][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.642621][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.667594][ T28] audit: type=1326 audit(1760481544.643:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37d38eec9 code=0x7ffc0000 [ 625.527005][ T28] audit: type=1326 audit(1760481544.643:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37d38eec9 code=0x7ffc0000 [ 625.571313][ T28] audit: type=1326 audit(1760481544.883:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb37d38eec9 code=0x7ffc0000 [ 625.636055][ T28] audit: type=1326 audit(1760481544.883:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37d38eec9 code=0x7ffc0000 [ 625.692406][ T28] audit: type=1326 audit(1760481544.893:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37d38eec9 code=0x7ffc0000 [ 625.730311][ T28] audit: type=1326 audit(1760481545.103:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb37d38eec9 code=0x7ffc0000 [ 625.754347][ T28] audit: type=1326 audit(1760481545.103:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37d38eec9 code=0x7ffc0000 [ 625.833027][ T28] audit: type=1326 audit(1760481545.103:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37d38eec9 code=0x7ffc0000 [ 626.036857][T11812] sctp: [Deprecated]: syz.3.1824 (pid 11812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.036857][T11812] Use struct sctp_sack_info instead [ 630.534122][T11871] sctp: [Deprecated]: syz.3.1846 (pid 11871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.534122][T11871] Use struct sctp_sack_info instead [ 630.716797][T11873] fuse: Bad value for 'fd' [ 632.101792][ T28] audit: type=1326 audit(1760481552.073:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.4.1854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa290b8eec9 code=0x0 [ 633.311205][ C1] hrtimer: interrupt took 47601 ns [ 634.393326][T11926] sctp: [Deprecated]: syz.4.1867 (pid 11926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.393326][T11926] Use struct sctp_sack_info instead [ 635.465482][T11931] fuse: Bad value for 'fd' [ 637.271300][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 637.496590][T11968] sctp: [Deprecated]: syz.3.1885 (pid 11968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.496590][T11968] Use struct sctp_sack_info instead [ 637.613483][ T27] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 637.625433][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 637.640087][ T27] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 637.650012][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.658221][ T27] usb 6-1: Product: syz [ 637.662722][ T27] usb 6-1: Manufacturer: syz [ 637.667478][ T27] usb 6-1: SerialNumber: syz [ 637.679399][ T27] usb 6-1: config 0 descriptor?? [ 637.914877][ T5878] usb 6-1: USB disconnect, device number 4 [ 638.361303][T11611] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 638.721578][T11611] usb 5-1: Using ep0 maxpacket: 32 [ 638.742158][T11611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.145008][T11984] binder: 11977:11984 ioctl 4018620d 0 returned -22 [ 639.163060][T11611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.243368][T11611] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 639.266522][T11611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.434165][T11611] usb 5-1: config 0 descriptor?? [ 639.463269][T11611] hub 5-1:0.0: USB hub found [ 639.653996][T11611] hub 5-1:0.0: 1 port detected [ 640.077751][T11611] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 640.085365][T11611] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 640.106155][T11611] usbhid 5-1:0.0: can't add hid device: -71 [ 640.113232][T11611] usbhid: probe of 5-1:0.0 failed with error -71 [ 640.198307][T11611] usb 5-1: USB disconnect, device number 12 [ 640.594662][T12004] fuse: Bad value for 'fd' [ 641.121752][T12010] sctp: [Deprecated]: syz.3.1897 (pid 12010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.121752][T12010] Use struct sctp_sack_info instead [ 642.612855][T12032] fuse: Bad value for 'fd' [ 643.527443][T12059] sctp: [Deprecated]: syz.4.1917 (pid 12059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.527443][T12059] Use struct sctp_sack_info instead [ 643.591412][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 644.581486][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 644.589166][ T8] usb 4-1: config 0 has no interfaces? [ 644.595181][ T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 644.606818][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.664812][ T8] usb 4-1: config 0 descriptor?? [ 644.907248][ T8] usb 4-1: USB disconnect, device number 26 [ 645.543199][T12073] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 645.550172][T12073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 645.565804][T12073] vhci_hcd vhci_hcd.0: Device attached [ 645.570601][T12073] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 645.570667][T12073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 645.570754][T12073] vhci_hcd vhci_hcd.0: Device attached [ 645.585138][T12073] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 645.585167][T12073] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 645.585215][T12073] vhci_hcd vhci_hcd.0: Device attached [ 645.586407][T12073] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 645.600113][T12073] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 645.600142][T12073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 645.600189][T12073] vhci_hcd vhci_hcd.0: Device attached [ 645.617233][T12073] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 645.617269][T12073] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 645.617346][T12073] vhci_hcd vhci_hcd.0: Device attached [ 645.618778][T12073] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 645.626355][T12073] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 645.738457][T12073] vhci_hcd vhci_hcd.0: port 0 already used [ 645.775633][T12084] vhci_hcd: connection closed [ 645.779131][T12086] vhci_hcd: connection closed [ 645.786493][T12080] vhci_hcd: connection closed [ 645.791338][T12074] vhci_hcd: connection closed [ 645.791561][T12082] vhci_hcd: connection closed [ 645.812765][T10742] vhci_hcd: stop threads [ 645.832369][ T5878] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 645.850121][T12076] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 645.856773][T10742] vhci_hcd: release socket [ 645.880675][T10742] vhci_hcd: disconnect device [ 645.890605][T10742] vhci_hcd: stop threads [ 645.900847][T10742] vhci_hcd: release socket [ 645.918861][T10742] vhci_hcd: disconnect device [ 645.937900][T10742] vhci_hcd: stop threads [ 645.948127][T10742] vhci_hcd: release socket [ 645.958245][T10742] vhci_hcd: disconnect device [ 645.969289][T10742] vhci_hcd: stop threads [ 645.985515][T10742] vhci_hcd: release socket [ 645.995002][T10742] vhci_hcd: disconnect device [ 646.004593][T10742] vhci_hcd: stop threads [ 646.009653][T10742] vhci_hcd: release socket [ 646.015553][T10742] vhci_hcd: disconnect device [ 646.125194][T12095] fuse: Bad value for 'fd' [ 646.782874][T12105] sctp: [Deprecated]: syz.3.1928 (pid 12105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.782874][T12105] Use struct sctp_sack_info instead [ 647.873927][T12126] Illegal XDP return value 4294967294 on prog (id 256) dev N/A, expect packet loss! [ 648.701317][T12133] sctp: [Deprecated]: syz.1.1939 (pid 12133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.701317][T12133] Use struct sctp_sack_info instead [ 649.430049][T12146] fuse: Bad value for 'fd' [ 650.513154][T12163] sctp: [Deprecated]: syz.4.1951 (pid 12163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.513154][T12163] Use struct sctp_sack_info instead [ 651.930082][ T5878] vhci_hcd: vhci_device speed not set [ 653.083593][T12198] sctp: [Deprecated]: syz.1.1961 (pid 12198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.083593][T12198] Use struct sctp_sack_info instead [ 653.413664][ T27] usb usb42-port1: attempt power cycle [ 653.544977][T12205] fuse: Bad value for 'fd' [ 654.755297][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1967'. [ 654.775635][ T27] usb usb42-port1: unable to enumerate USB device [ 654.798691][T12216] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1967'. [ 656.329886][T12242] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 658.835436][T12240] fuse: Bad value for 'fd' [ 660.512978][T12291] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 661.364852][ T5878] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 661.851489][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 661.866378][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.877525][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.888612][ T5878] usb 5-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 661.898014][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.990669][ T5878] usb 5-1: config 0 descriptor?? [ 662.691451][ T5878] usbhid 5-1:0.0: can't add hid device: -71 [ 662.697569][ T5878] usbhid: probe of 5-1:0.0 failed with error -71 [ 662.737812][ T5878] usb 5-1: USB disconnect, device number 13 [ 663.819422][T12327] syz_tun: entered allmulticast mode [ 663.835144][T12327] pimreg: entered allmulticast mode [ 663.885288][T12326] syz_tun: left allmulticast mode [ 663.890524][T12326] pimreg: left allmulticast mode [ 664.049960][T12335] lo: entered promiscuous mode [ 664.056127][T12334] lo: left promiscuous mode [ 664.650859][T12351] 9pnet_fd: Insufficient options for proto=fd [ 664.899916][T12360] netlink: 548 bytes leftover after parsing attributes in process `syz.3.2023'. [ 665.061314][ T5878] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 665.167601][T12370] 9pnet_fd: Insufficient options for proto=fd [ 665.444039][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.460025][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.486649][ T5878] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 665.522329][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.533111][ T5878] usb 6-1: config 0 descriptor?? [ 665.571070][ T5878] usbhid 6-1:0.0: can't add hid device: -22 [ 665.587336][ T5878] usbhid: probe of 6-1:0.0 failed with error -22 [ 666.869735][T12400] 9pnet_fd: Insufficient options for proto=fd [ 666.934566][T12402] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2038'. [ 667.950416][T11611] usb 6-1: USB disconnect, device number 5 [ 668.461071][T12422] 9pnet_fd: Insufficient options for proto=fd [ 669.450236][T12433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2049'. [ 669.845087][T12441] loop9: detected capacity change from 0 to 524288000 [ 671.096543][T12454] 9pnet_fd: Insufficient options for proto=fd [ 672.477566][T12469] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 673.180204][T12486] 9pnet_fd: Insufficient options for proto=fd [ 673.835499][T12495] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 673.870088][ T5878] IPVS: starting estimator thread 0... [ 673.971912][T12497] IPVS: using max 16 ests per chain, 38400 per kthread [ 674.556706][T12502] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2081'. [ 675.090608][T12508] loop9: detected capacity change from 0 to 524288000 [ 675.608166][T12508] loop9: unable to read partition table [ 675.614449][T12508] loop_reread_partitions: partition scan of loop9 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 678.465149][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 681.456048][T11203] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 681.470238][T11203] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 681.480962][T11203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.492511][T11203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 681.501530][T11203] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 681.510019][T11203] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.661288][T11611] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 681.867619][T12616] chnl_net:caif_netlink_parms(): no params data found [ 681.874656][T11611] usb 4-1: Using ep0 maxpacket: 32 [ 681.887085][T11611] usb 4-1: config 0 has no interfaces? [ 681.892899][T11611] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 681.921311][T11611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.939718][T11611] usb 4-1: config 0 descriptor?? [ 682.193230][ T5878] usb 4-1: USB disconnect, device number 27 [ 682.315936][T12616] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.351308][T12616] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.388548][T12616] bridge_slave_0: entered allmulticast mode [ 682.396622][T12616] bridge_slave_0: entered promiscuous mode [ 682.406134][T12616] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.413721][T12616] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.421004][T12616] bridge_slave_1: entered allmulticast mode [ 682.428641][T12616] bridge_slave_1: entered promiscuous mode [ 683.160165][T12616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.298173][T12616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.541392][ T5800] Bluetooth: hci5: command tx timeout [ 683.546620][T12616] team0: Port device team_slave_0 added [ 683.599666][T12616] team0: Port device team_slave_1 added [ 683.776408][T12616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.791206][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.824558][T12616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.856540][T12655] 9pnet_fd: Insufficient options for proto=fd [ 683.867841][T12616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.884192][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.011256][T12616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.621392][ T5800] Bluetooth: hci5: command tx timeout [ 686.027982][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.036062][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.381124][T12616] hsr_slave_0: entered promiscuous mode [ 686.408401][T12616] hsr_slave_1: entered promiscuous mode [ 686.411962][T12678] 9pnet_fd: Insufficient options for proto=fd [ 686.424223][T12616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.443925][T12616] Cannot create hsr debugfs directory [ 686.627918][T10737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.830393][T10737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.770277][ T5800] Bluetooth: hci5: command tx timeout [ 687.841985][T10737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.978920][T12700] 9pnet_fd: Insufficient options for proto=fd [ 688.059100][T10737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.781275][ T5800] Bluetooth: hci5: command tx timeout [ 690.046711][T12731] 9pnet_fd: Insufficient options for proto=fd [ 690.977263][T10737] bond1: (slave gretap1): Releasing active interface [ 691.032193][T12616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 691.072092][T12616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 691.230329][T12616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 691.318060][T12616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 691.522083][T10737] bond0: (slave wlan1): Releasing backup interface [ 691.544229][T12767] 9pnet_fd: Insufficient options for proto=fd [ 692.255014][T10737] hsr_slave_0: left promiscuous mode [ 692.369270][T10737] hsr_slave_1: left promiscuous mode [ 692.397349][T10737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.419465][T10737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.439699][T10737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.455894][T10737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.479924][T10737] bridge_slave_1: left allmulticast mode [ 692.489653][T10737] bridge_slave_1: left promiscuous mode [ 692.510560][T10737] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.539003][T10737] bridge_slave_0: left allmulticast mode [ 692.545146][T10737] bridge_slave_0: left promiscuous mode [ 692.552295][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.641888][T10737] veth1_macvtap: left promiscuous mode [ 692.648851][T10737] veth0_macvtap: left promiscuous mode [ 692.659306][T10737] veth1_vlan: left promiscuous mode [ 692.668227][T10737] veth0_vlan: left promiscuous mode [ 693.389079][T10737] bond1 (unregistering): Released all slaves [ 694.517914][T10737] team0 (unregistering): Port device team_slave_1 removed [ 694.614496][T10737] team0 (unregistering): Port device team_slave_0 removed [ 694.726314][T10737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.810971][T10737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.842977][T10737] bond0 (unregistering): Released all slaves [ 696.017947][T12616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.109023][T12616] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.159735][T10730] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.166984][T10730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.211081][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.218359][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.318516][T12829] Process accounting resumed [ 697.494994][T12616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.678775][T12616] veth0_vlan: entered promiscuous mode [ 697.724775][T12616] veth1_vlan: entered promiscuous mode [ 697.767984][T12616] veth0_macvtap: entered promiscuous mode [ 697.790903][T12616] veth1_macvtap: entered promiscuous mode [ 697.833311][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.855730][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.876204][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.898958][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.909714][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.922392][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.935964][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.947563][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.979920][T12616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.007732][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.049062][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.065625][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.084454][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.094880][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.105974][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.116981][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.128616][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.162312][T12616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.189889][T12616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.213765][T12616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.227612][T12616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.301675][T12616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.608512][T10737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.626810][T10737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.741828][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.771535][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.537223][T13022] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 705.561669][T13022] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 705.591218][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 705.781300][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 705.793861][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.807609][ T27] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 705.828175][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.840606][ T27] usb 6-1: Product: syz [ 705.849499][ T27] usb 6-1: Manufacturer: syz [ 705.858585][ T27] usb 6-1: SerialNumber: syz [ 705.883143][ T27] usb 6-1: config 0 descriptor?? [ 705.904719][ T27] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 706.022760][ T964] kernel write not supported for file /amidi2 (pid: 964 comm: kworker/0:2) [ 706.114195][ T27] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 706.131437][ T27] quatech2: probe of 6-1:0.0 failed with error -8 [ 706.344828][ T964] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 706.407601][ T8] usb 6-1: USB disconnect, device number 6 [ 706.565251][ T964] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.612343][ T964] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.652787][ T964] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 706.681834][ T964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.705065][ T964] usb 5-1: Product: syz [ 706.709313][ T964] usb 5-1: Manufacturer: syz [ 706.748875][ T964] usb 5-1: SerialNumber: syz [ 708.191482][ T5116] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 708.386055][ T964] usb 5-1: 0:2 : does not exist [ 708.414232][ T964] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 708.441362][ T5116] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 708.450483][ T5116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.469483][ T964] usb 5-1: USB disconnect, device number 14 [ 708.509108][ T5116] usb 2-1: config 0 descriptor?? [ 708.530047][T12826] udevd[12826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.127665][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 710.351423][ T8] usb 5-1: device descriptor read/64, error -71 [ 710.631334][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 710.781316][ T8] usb 5-1: device descriptor read/64, error -71 [ 710.902725][ T8] usb usb5-port1: attempt power cycle [ 711.127150][ T5116] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 711.143373][ T5116] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 711.155367][ T5116] asix: probe of 2-1:0.0 failed with error -71 [ 711.171560][ T5116] usb 2-1: USB disconnect, device number 11 [ 711.331301][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 711.363147][ T8] usb 5-1: device descriptor read/8, error -71 [ 711.496028][T13105] tipc: Started in network mode [ 711.502319][T13105] tipc: Node identity 6, cluster identity 4711 [ 711.508493][T13105] tipc: Node number set to 6 [ 711.631499][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 711.685031][ T8] usb 5-1: device descriptor read/8, error -71 [ 711.821977][ T8] usb usb5-port1: unable to enumerate USB device [ 714.041883][T11393] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 714.251249][T11393] usb 4-1: device descriptor read/64, error -71 [ 714.521382][T11393] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 714.600513][T13163] netlink: 'syz.1.2302': attribute type 1 has an invalid length. [ 714.711242][T11393] usb 4-1: device descriptor read/64, error -71 [ 714.832213][T11393] usb usb4-port1: attempt power cycle [ 715.271509][T11393] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 715.302834][T11393] usb 4-1: device descriptor read/8, error -71 [ 715.581238][T11393] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 715.611963][T11393] usb 4-1: device descriptor read/8, error -71 [ 715.732704][T11393] usb usb4-port1: unable to enumerate USB device [ 716.854679][T13201] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2319'. [ 721.214855][T11393] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 721.426506][T11393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.449950][T11393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.477794][T11393] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 721.506697][T11393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.532849][T11393] usb 6-1: config 0 descriptor?? [ 721.720554][T11203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 721.735866][T11203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 721.748106][T11203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 721.765102][T11203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 721.778260][T11203] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 721.786444][T11203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 721.979740][T11393] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 721.997800][T11393] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 722.024162][T11393] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 722.175952][T11393] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 722.305258][T13254] chnl_net:caif_netlink_parms(): no params data found [ 722.466541][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.480370][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.499832][T13254] bridge_slave_0: entered allmulticast mode [ 722.520780][T13254] bridge_slave_0: entered promiscuous mode [ 722.530847][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.545901][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.556311][T13254] bridge_slave_1: entered allmulticast mode [ 722.570697][T13254] bridge_slave_1: entered promiscuous mode [ 722.666895][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.688812][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.781629][T11393] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 722.812783][T11393] usb 6-1: USB disconnect, device number 7 [ 722.900566][T13254] team0: Port device team_slave_0 added [ 722.914572][T13254] team0: Port device team_slave_1 added [ 722.950614][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.957655][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.983749][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.006442][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.014118][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.040029][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.048773][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.137510][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.299552][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.326294][T13254] hsr_slave_0: entered promiscuous mode [ 723.349093][T13254] hsr_slave_1: entered promiscuous mode [ 723.368881][T13254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.387281][T13254] Cannot create hsr debugfs directory [ 723.498342][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.795985][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.861908][ T5800] Bluetooth: hci1: command tx timeout [ 725.186419][ T48] tipc: Left network mode [ 725.948329][ T5800] Bluetooth: hci1: command tx timeout [ 726.598211][T13254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 726.696574][T13254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 726.808888][T13254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 726.834141][T13254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 727.379616][ T48] hsr_slave_0: left promiscuous mode [ 727.400996][ T48] hsr_slave_1: left promiscuous mode [ 727.414871][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.434115][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.465800][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.474153][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.483102][ T48] bridge_slave_1: left allmulticast mode [ 727.488815][ T48] bridge_slave_1: left promiscuous mode [ 727.494871][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.506510][ T48] bridge_slave_0: left allmulticast mode [ 727.512906][ T48] bridge_slave_0: left promiscuous mode [ 727.518793][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.598504][ T48] veth1_macvtap: left promiscuous mode [ 727.604411][ T48] veth0_macvtap: left promiscuous mode [ 727.610122][ T48] veth1_vlan: left promiscuous mode [ 727.630173][ T48] veth0_vlan: left promiscuous mode [ 728.021925][ T5800] Bluetooth: hci1: command tx timeout [ 728.496292][ T48] bond1 (unregistering): Released all slaves [ 728.919406][ T5800] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 729.635043][ T48] team0 (unregistering): Port device team_slave_1 removed [ 729.757625][ T48] team0 (unregistering): Port device team_slave_0 removed [ 729.850249][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.953582][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.116268][ T5800] Bluetooth: hci1: command tx timeout [ 730.618979][ T48] bond0 (unregistering): Released all slaves [ 730.714606][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2362'. [ 730.724253][T13350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.732862][T13350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.742619][T13350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.750139][T13350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.869556][T13254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.920840][T13254] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.006031][T10742] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.013274][T10742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.085070][T10736] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.092330][T10736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.277131][T13254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.288818][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 731.740700][T13254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.827828][T13254] veth0_vlan: entered promiscuous mode [ 731.863911][T13254] veth1_vlan: entered promiscuous mode [ 731.941021][T13254] veth0_macvtap: entered promiscuous mode [ 731.958586][T13254] veth1_macvtap: entered promiscuous mode [ 731.988442][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.001192][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.011054][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.036561][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.049820][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.159742][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.174552][T13254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.212637][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.229309][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.242780][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.287427][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.317112][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.328052][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.348309][T13254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.478742][T13254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.514966][T13254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.524894][T13254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.534305][T13254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.703122][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.711000][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.845255][T10737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.864288][T10737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.984523][ T5800] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 732.994462][ T5800] Bluetooth: hci3: Injecting HCI hardware error event [ 733.006511][ T5800] Bluetooth: hci3: hardware error 0x00 [ 733.151599][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 733.351692][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 733.365408][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 733.391276][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 733.417141][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 733.446874][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.467060][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 733.486938][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.711010][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 733.724537][ T27] usbtmc 2-1:16.0: can't read capabilities [ 733.938735][ T27] usb 2-1: USB disconnect, device number 12 [ 734.690636][ C1] ------------[ cut here ]------------ [ 734.696631][ C1] WARNING: CPU: 1 PID: 13455 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 734.706884][ C1] Modules linked in: [ 734.710827][ C1] CPU: 1 PID: 13455 Comm: syz.3.2396 Not tainted syzkaller #0 [ 734.718432][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.728573][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 734.735007][ C1] Code: 24 4c 89 e7 e8 9e 22 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 fd 96 f7 0f 0b e9 f6 f7 ff ff e8 8d fd 96 f7 <0f> 0b e9 48 fb ff ff e8 81 fd 96 f7 48 c7 c7 60 fd 23 8e 4c 89 e6 [ 734.754734][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 734.761840][ C1] RAX: ffffffff89ee8d43 RBX: ffffffff89ee7b46 RCX: ffff888024a58000 [ 734.769905][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 734.770726][T10742] ------------[ cut here ]------------ [ 734.777934][ C1] RBP: 0000000000000000 R08: ffff888024a58000 R09: 0000000000000003 [ 734.777972][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807ebca3c0 [ 734.777987][ C1] R13: dffffc0000000000 R14: ffff88807ebca8b0 R15: ffff88814bffe024 [ 734.778004][ C1] FS: 00007fd3ba9fb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 734.778023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 734.778037][ C1] CR2: 000000110c24180d CR3: 000000007cd8a000 CR4: 00000000003506e0 [ 734.778055][ C1] Call Trace: [ 734.778064][ C1] [ 734.778089][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 734.778127][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 734.778157][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 734.778187][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 734.784024][T10742] WARNING: CPU: 0 PID: 10742 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 734.791949][ C1] __iterate_interfaces+0x243/0x500 [ 734.791980][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 734.792007][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 734.792037][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 734.792064][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 734.792097][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 734.792125][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 734.792155][ C1] ? hw_scan_work+0xf40/0xf40 [ 734.792189][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 734.792212][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 734.792249][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 734.792278][ C1] handle_softirqs+0x280/0x820 [ 734.792305][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 734.792332][ C1] ? do_softirq+0x180/0x180 [ 734.792358][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 734.792397][ C1] __irq_exit_rcu+0xc7/0x190 [ 734.792418][ C1] ? irq_exit_rcu+0x20/0x20 [ 734.792449][ C1] irq_exit_rcu+0x9/0x20 [ 734.792467][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 734.792502][ C1] [ 734.792511][ C1] [ 734.792521][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 734.792544][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 734.792568][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 2a 63 ef f6 48 89 df e8 42 35 f0 f6 e8 8d db 13 f7 fb bf 01 00 00 00 52 5a e3 f6 65 8b 05 33 a5 8b 75 85 c0 74 02 5b c3 e8 50 89 88 [ 734.792587][ C1] RSP: 0018:ffffc900032b74f0 EFLAGS: 00000286 [ 734.792610][ C1] RAX: b9aecfc35dde1800 RBX: ffff88804df24708 RCX: b9aecfc35dde1800 [ 734.792627][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: 0000000000000001 [ 734.792643][ C1] RBP: ffffc900032b7670 R08: ffffffff90da7537 R09: 1ffffffff21b4ea6 [ 734.792660][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ea7 R12: ffffea0001b7b048 [ 734.792676][ C1] R13: 00000003fffffffc R14: 0000000000000cc0 R15: dffffc0000000000 [ 734.792711][ C1] shmem_add_to_page_cache+0xa65/0x1b40 [ 734.792754][ C1] ? shmem_alloc_folio+0x230/0x230 [ 734.792796][ C1] shmem_get_folio_gfp+0xf05/0x2ac0 [ 734.792849][ C1] shmem_fault+0x1b6/0x7f0 [ 734.792886][ C1] ? zero_pipe_buf_get+0x10/0x10 [ 734.800856][T10742] Modules linked in: [ 734.800874][T10742] CPU: 0 PID: 10742 Comm: kworker/u4:30 Not tainted syzkaller #0 [ 734.800896][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.808904][ C1] ? handle_mm_fault+0xd1/0x4920 [ 734.808940][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 734.808970][ C1] __do_fault+0x13b/0x4e0 [ 734.808990][ C1] ? handle_mm_fault+0x386a/0x4920 [ 734.809023][ C1] ? handle_mm_fault+0xd1/0x4920 [ 734.809054][ C1] handle_mm_fault+0x3886/0x4920 [ 734.809090][ C1] ? handle_mm_fault+0xd1/0x4920 [ 734.818064][T10742] Workqueue: phy11 ieee80211_csa_finalize_work [ 734.824670][ C1] ? numa_migrate_prep+0x350/0x350 [ 734.824701][ C1] ? follow_page_pte+0x6fb/0x1a70 [ 734.824737][ C1] ? pmd_lock+0x60/0x60 [ 734.832764][T10742] [ 734.836070][ C1] __get_user_pages+0x5ea/0x1470 [ 734.838925][T10742] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 734.844510][ C1] ? mtree_destroy+0x30/0x30 [ 734.849962][T10742] Code: 48 89 df e8 0a b0 e9 f7 e9 dc fc ff ff e8 70 58 92 f7 eb 24 e8 69 58 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 58 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 58 92 f7 48 8b 7c 24 08 4c 8b 7c [ 734.849985][T10742] RSP: 0018:ffffc9000cb3f9c0 EFLAGS: 00010293 [ 734.856771][ C1] ? populate_vma_page_range+0x370/0x370 [ 734.862591][T10742] RAX: ffffffff89f32e7e RBX: 0000000000000001 RCX: ffff888029d60000 [ 734.873413][ C1] populate_vma_page_range+0x2b6/0x370 [ 734.873451][ C1] ? fixup_user_fault+0x710/0x710 [ 734.873477][ C1] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 734.873516][ C1] ? down_read+0x1ac/0x2e0 [ 734.873550][ C1] __mm_populate+0x24c/0x380 [ 734.878762][T10742] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 734.885069][ C1] ? faultin_page_range+0x8f0/0x8f0 [ 734.892401][T10742] RBP: dffffc0000000000 R08: ffff88807ebc95af R09: 1ffff1100fd792b5 [ 734.898542][ C1] ? up_write+0x1c3/0x410 [ 734.898572][ C1] vm_mmap_pgoff+0x2e7/0x400 [ 734.898652][ C1] ? account_locked_vm+0x210/0x210 [ 734.898686][ C1] ? ksys_mmap_pgoff+0xea/0x700 [ 734.898712][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 734.898750][ C1] do_syscall_64+0x55/0xb0 [ 734.898777][ C1] ? clear_bhb_loop+0x40/0x90 [ 734.898799][ C1] ? clear_bhb_loop+0x40/0x90 [ 734.898824][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.898847][ C1] RIP: 0033:0x7fd3b9b8eec9 [ 734.898879][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.898899][ C1] RSP: 002b:00007fd3ba9fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 734.898925][ C1] RAX: ffffffffffffffda RBX: 00007fd3b9de5fa0 RCX: 00007fd3b9b8eec9 [ 734.898942][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 734.898958][ C1] RBP: 00007fd3b9c11f91 R08: ffffffffffffffff R09: 0000000000000000 [ 734.898973][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 734.898987][ C1] R13: 00007fd3b9de6038 R14: 00007fd3b9de5fa0 R15: 00007ffdca902db8 [ 734.899021][ C1] [ 734.899033][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 734.899044][ C1] CPU: 1 PID: 13455 Comm: syz.3.2396 Not tainted syzkaller #0 [ 734.899062][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.899075][ C1] Call Trace: [ 734.899082][ C1] [ 734.899089][ C1] dump_stack_lvl+0x16c/0x230 [ 734.899119][ C1] ? show_regs_print_info+0x20/0x20 [ 734.899145][ C1] ? load_image+0x3b0/0x3b0 [ 734.899181][ C1] panic+0x2c0/0x710 [ 734.899205][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 734.899241][ C1] __warn+0x2e0/0x470 [ 734.899258][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 734.899282][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 734.899302][ C1] report_bug+0x2be/0x4f0 [ 734.899329][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 734.899350][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 734.899370][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 734.899402][ C1] handle_bug+0xcf/0x120 [ 734.899429][ C1] exc_invalid_op+0x1a/0x50 [ 734.899457][ C1] asm_exc_invalid_op+0x1a/0x20 [ 734.899474][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 734.899495][ C1] Code: 24 4c 89 e7 e8 9e 22 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 fd 96 f7 0f 0b e9 f6 f7 ff ff e8 8d fd 96 f7 <0f> 0b e9 48 fb ff ff e8 81 fd 96 f7 48 c7 c7 60 fd 23 8e 4c 89 e6 [ 734.899514][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 734.899533][ C1] RAX: ffffffff89ee8d43 RBX: ffffffff89ee7b46 RCX: ffff888024a58000 [ 734.899551][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 734.899566][ C1] RBP: 0000000000000000 R08: ffff888024a58000 R09: 0000000000000003 [ 734.899581][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807ebca3c0 [ 734.899597][ C1] R13: dffffc0000000000 R14: ffff88807ebca8b0 R15: ffff88814bffe024 [ 734.899618][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 734.899644][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 734.899675][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 734.899700][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 734.899734][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 734.899762][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 734.899800][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 734.899838][ C1] __iterate_interfaces+0x243/0x500 [ 734.899866][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 734.899897][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 734.899928][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 734.899957][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 734.899992][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 734.900023][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 734.900055][ C1] ? hw_scan_work+0xf40/0xf40 [ 734.900091][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 734.900115][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 734.900152][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 734.900181][ C1] handle_softirqs+0x280/0x820 [ 734.900207][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 734.900235][ C1] ? do_softirq+0x180/0x180 [ 734.900263][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 734.900297][ C1] __irq_exit_rcu+0xc7/0x190 [ 734.900318][ C1] ? irq_exit_rcu+0x20/0x20 [ 734.900350][ C1] irq_exit_rcu+0x9/0x20 [ 734.900369][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 734.900427][ C1] [ 734.900433][ C1] [ 734.900441][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 734.900465][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 734.900487][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 2a 63 ef f6 48 89 df e8 42 35 f0 f6 e8 8d db 13 f7 fb bf 01 00 00 00 52 5a e3 f6 65 8b 05 33 a5 8b 75 85 c0 74 02 5b c3 e8 50 89 88 [ 734.900505][ C1] RSP: 0018:ffffc900032b74f0 EFLAGS: 00000286 [ 734.900522][ C1] RAX: b9aecfc35dde1800 RBX: ffff88804df24708 RCX: b9aecfc35dde1800 [ 734.900539][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: 0000000000000001 [ 734.900555][ C1] RBP: ffffc900032b7670 R08: ffffffff90da7537 R09: 1ffffffff21b4ea6 [ 734.900571][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ea7 R12: ffffea0001b7b048 [ 734.900604][ C1] R13: 00000003fffffffc R14: 0000000000000cc0 R15: dffffc0000000000 [ 734.900640][ C1] shmem_add_to_page_cache+0xa65/0x1b40 [ 734.900684][ C1] ? shmem_alloc_folio+0x230/0x230 [ 734.900728][ C1] shmem_get_folio_gfp+0xf05/0x2ac0 [ 734.900784][ C1] shmem_fault+0x1b6/0x7f0 [ 734.900823][ C1] ? zero_pipe_buf_get+0x10/0x10 [ 734.900852][ C1] ? handle_mm_fault+0xd1/0x4920 [ 734.900888][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 734.900922][ C1] __do_fault+0x13b/0x4e0 [ 734.900942][ C1] ? handle_mm_fault+0x386a/0x4920 [ 734.900980][ C1] ? handle_mm_fault+0xd1/0x4920 [ 734.901015][ C1] handle_mm_fault+0x3886/0x4920 [ 734.901052][ C1] ? handle_mm_fault+0xd1/0x4920 [ 734.901104][ C1] ? numa_migrate_prep+0x350/0x350 [ 734.901138][ C1] ? follow_page_pte+0x6fb/0x1a70 [ 734.901178][ C1] ? pmd_lock+0x60/0x60 [ 734.901218][ C1] __get_user_pages+0x5ea/0x1470 [ 734.901269][ C1] ? mtree_destroy+0x30/0x30 [ 734.901296][ C1] ? populate_vma_page_range+0x370/0x370 [ 734.901336][ C1] populate_vma_page_range+0x2b6/0x370 [ 734.901370][ C1] ? fixup_user_fault+0x710/0x710 [ 734.901402][ C1] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 734.901444][ C1] ? down_read+0x1ac/0x2e0 [ 734.901479][ C1] __mm_populate+0x24c/0x380 [ 734.901511][ C1] ? faultin_page_range+0x8f0/0x8f0 [ 734.901542][ C1] ? up_write+0x1c3/0x410 [ 734.901568][ C1] vm_mmap_pgoff+0x2e7/0x400 [ 734.901605][ C1] ? account_locked_vm+0x210/0x210 [ 734.901639][ C1] ? ksys_mmap_pgoff+0xea/0x700 [ 734.901667][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 734.901706][ C1] do_syscall_64+0x55/0xb0 [ 734.901732][ C1] ? clear_bhb_loop+0x40/0x90 [ 734.901755][ C1] ? clear_bhb_loop+0x40/0x90 [ 734.901781][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.901803][ C1] RIP: 0033:0x7fd3b9b8eec9 [ 734.901821][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.901839][ C1] RSP: 002b:00007fd3ba9fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 734.901860][ C1] RAX: ffffffffffffffda RBX: 00007fd3b9de5fa0 RCX: 00007fd3b9b8eec9 [ 734.901877][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 734.901893][ C1] RBP: 00007fd3b9c11f91 R08: ffffffffffffffff R09: 0000000000000000 [ 734.901909][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 734.901922][ C1] R13: 00007fd3b9de6038 R14: 00007fd3b9de5fa0 R15: 00007ffdca902db8 [ 734.901957][ C1] [ 734.906798][ C1] Kernel Offset: disabled