last executing test programs: 1m14.126065415s ago: executing program 4 (id=675): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto(r0, &(0x7f0000000200), 0x0, 0x8015, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1m10.841751666s ago: executing program 4 (id=698): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.709204746s ago: executing program 4 (id=700): syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}}, {{0x0, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x40, 0x2, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x5, 0xf989, "b1"}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) 1m10.429834639s ago: executing program 4 (id=704): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000540)={0x0, 0x6}, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1m9.765831631s ago: executing program 4 (id=706): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x4, 0x10, 0x0, 0x1}, &(0x7f00000002c0)=0x18) 1m9.522152s ago: executing program 4 (id=708): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 54.170645229s ago: executing program 32 (id=708): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 7.336789055s ago: executing program 2 (id=1163): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x1c, r2, 0xc35, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x24008814) 7.21421513s ago: executing program 2 (id=1165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.16977106s ago: executing program 2 (id=1171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x7c, r1, 0x1, 0x70b52b, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x651}, @broadcast, @device_a, @initial, {0x8, 0x6}}, 0x3, @default, 0x84, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x4, 0x34, 0x2, 0x9}}, @void, @void, @val={0x25, 0x3, {0x1, 0x38, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x3, 0x2, 0x0, {0x3, 0x445, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x6, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) 6.146538843s ago: executing program 1 (id=1172): prctl$PR_SET_THP_DISABLE(0x44, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000300)=0x7fe7f, 0x4) dup3(r2, r0, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 5.956744693s ago: executing program 2 (id=1175): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f60002030109021200010000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="200e1100000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.334478811s ago: executing program 1 (id=1181): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) 5.08603826s ago: executing program 1 (id=1182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.469837122s ago: executing program 0 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x7c, r1, 0x1, 0x70b52b, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x651}, @broadcast, @device_a, @initial, {0x8, 0x6}}, 0x3, @default, 0x84, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x4, 0x34, 0x2, 0x9}}, @void, @void, @val={0x25, 0x3, {0x1, 0x38, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x3, 0x2, 0x0, {0x3, 0x445, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x6, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) 4.298761248s ago: executing program 0 (id=1188): prlimit64(0x0, 0xe, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000004700000000000000000123de22ef774f92000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x6, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80008004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x8, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x4, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800041, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x0, 0x3, 0x0, 0x5, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x8, 0x80000005, 0x0, 0x203, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x5, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0xfffffffb]}) 4.101338859s ago: executing program 1 (id=1190): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbb0000080190780a010102ac141471040090780000100045a707800064d5e5c101000000000000ac1e01012a000001000000000000000000000000000000000000009333aa0a25ac56cbfee9849fbacc46d0743edab50bdb7b98d91a096b1151986687589860aadd2d2c1ffbf1968295599003c20b0d8e228304e4"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r4, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffd, 0x6, 0x5d3186ca, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(0x0, 0x41) stat(&(0x7f00000005c0)='./file0/file0\x00', 0x0) 4.049950168s ago: executing program 0 (id=1191): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_notify(0xffffffffffffffff, 0x0) 3.237192264s ago: executing program 0 (id=1196): fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x601, 0x0, &(0x7f0000000180), &(0x7f0000000480), &(0x7f0000000440), &(0x7f0000000040), 0x0, 0x8}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@multicast2, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3, 0x4000, 0x3}, 0x3c) keyctl$get_persistent(0x16, 0xee00, 0xfffffffffffffff8) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.038071224s ago: executing program 1 (id=1198): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) shmget$private(0x0, 0x8000, 0x80, &(0x7f0000ff5000/0x8000)=nil) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) setregid(0xffffffffffffffff, 0x0) 2.867061658s ago: executing program 5 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x7c, r1, 0x1, 0x70b52b, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x651}, @broadcast, @device_a, @initial, {0x8, 0x6}}, 0x3, @default, 0x84, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x4, 0x34, 0x2, 0x9}}, @void, @void, @val={0x25, 0x3, {0x1, 0x38, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x3, 0x2, 0x0, {0x3, 0x445, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x6, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) 2.837586221s ago: executing program 2 (id=1200): syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) 2.602481858s ago: executing program 5 (id=1201): prlimit64(0x0, 0xe, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000004700000000000000000123de22ef774f92000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x6, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80008004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x8, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x4, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800041, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x0, 0x3, 0x0, 0x5, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x8, 0x80000005, 0x0, 0x203, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x5, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0xfffffffb]}) 2.2221566s ago: executing program 5 (id=1203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000010701020000000000000000f278aef8aa637e906101000001"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f000036d000/0x2000)=nil, 0x2000, 0x100000a, 0x12, 0xffffffffffffffff, 0xb3d2d000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x38) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 1.953493154s ago: executing program 3 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.716475522s ago: executing program 1 (id=1206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a60fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.715639738s ago: executing program 3 (id=1207): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x20, r2, 0xc35, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x24008814) 1.667749371s ago: executing program 0 (id=1208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.4519312s ago: executing program 3 (id=1209): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000070900010073797a3100000000080002400000000320000000000a03000000000000000000020000000900010073797a310000000014"], 0x70}}, 0x0) 1.253547739s ago: executing program 0 (id=1210): r0 = gettid() r1 = getpid() r2 = syz_usb_connect(0x0, 0xab, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x8d, 0x36, 0xc6, 0x8, 0x424, 0xc001, 0xe1c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x1, 0xc7, 0xfe, 0x20, 0x3, [{{0x9, 0x4, 0x2, 0x5, 0x3, 0xd1, 0x13, 0x5c, 0x7, [], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x3, 0xc, 0x0, [@generic={0x63, 0x10, "6aadb2f61621d7789ba95668cfe5a592baf680c4a0867856a6edb8fb885c9f6c025cc1fe144a6fdb1a7cf8c0e5137579c7f2384e07b896cfe6c9ab0b12f0a834144efd28b8226fd7771227338ea5a308b589ad8c27ced274270fa636500386c421"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x5, 0x9a}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x2, 0x2, 0x7, [@generic={0x2, 0x35}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xbe, 0x80, 0x0, 0x0, 0x3}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001400)={0x14, 0x0, 0x0}, &(0x7f0000001540)={0x1c, &(0x7f0000001440)={0x20, 0xe, 0x6f, "0e38b1b7c9b47e70bd825f7d66660d3c5195a814f203e84f8c51ad55302d13d4c3b29ef33ef058dab1f4d671ef22c57805c279d4960f201a733a3dcf0f67cfa19a1c1ad70352c6e3a839c7801358f8a2e936c2a2228a2f5d2e0eef6e5874f1dbbf084d10bb038d1ee7871dbfd73ed7"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xee}, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpgid(r0) 1.252961405s ago: executing program 3 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioperm(0x5c5, 0x0, 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) munmap(&(0x7f0000456000/0x2000)=nil, 0x2000) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) pipe(&(0x7f0000000040)) openat$binderfs_ctrl(0xffffff9c, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.210431119s ago: executing program 2 (id=1212): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 883.574672ms ago: executing program 3 (id=1213): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000540)={0x0, 0x6}, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 721.852596ms ago: executing program 5 (id=1214): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) 285.128548ms ago: executing program 5 (id=1215): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/175, 0xaf}, 0x8}], 0x1, 0x10000, 0x0) 57.394658ms ago: executing program 5 (id=1216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt\x00', 0x1c0) waitid(0x2, 0x0, &(0x7f00000006c0), 0x8, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x20040800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) kernel console output (not intermixed with test programs): blocking state [ 79.136345][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.171732][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.178870][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.222728][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.247146][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.254286][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.286257][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.293420][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.312977][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.328650][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.357173][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.419572][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.463134][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.470338][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.488147][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.512777][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.519889][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.542723][ T5846] veth0_vlan: entered promiscuous mode [ 79.577300][ T5846] veth1_vlan: entered promiscuous mode [ 79.603761][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.664314][ T5848] veth0_vlan: entered promiscuous mode [ 79.694516][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.731526][ T5848] veth1_vlan: entered promiscuous mode [ 79.758822][ T5846] veth0_macvtap: entered promiscuous mode [ 79.788493][ T5846] veth1_macvtap: entered promiscuous mode [ 79.811665][ T5847] veth0_vlan: entered promiscuous mode [ 79.850161][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.867669][ T5851] veth0_vlan: entered promiscuous mode [ 79.881456][ T5847] veth1_vlan: entered promiscuous mode [ 79.894520][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.907351][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.927437][ T5851] veth1_vlan: entered promiscuous mode [ 79.957100][ T5848] veth0_macvtap: entered promiscuous mode [ 79.966640][ T1107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.977017][ T3491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.009351][ T3491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.018663][ T3491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.051352][ T5848] veth1_macvtap: entered promiscuous mode [ 80.076871][ T5850] veth0_vlan: entered promiscuous mode [ 80.097060][ T5847] veth0_macvtap: entered promiscuous mode [ 80.120453][ T5850] veth1_vlan: entered promiscuous mode [ 80.134488][ T5851] veth0_macvtap: entered promiscuous mode [ 80.147403][ T5847] veth1_macvtap: entered promiscuous mode [ 80.182263][ T5851] veth1_macvtap: entered promiscuous mode [ 80.189018][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.210584][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.224916][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.241634][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.282432][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.296589][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.307221][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.309219][ T3491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.323901][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.331011][ T3491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.354834][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.368090][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.381837][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.400176][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.409911][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.419194][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.438288][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.473367][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.482326][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.493029][ T5850] veth0_macvtap: entered promiscuous mode [ 80.509227][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.519468][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.563826][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.582207][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.610301][ T5850] veth1_macvtap: entered promiscuous mode [ 80.742730][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.804664][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.840600][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.849482][ T3491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.859301][ T5841] Bluetooth: hci2: command tx timeout [ 80.864856][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.873356][ T5841] Bluetooth: hci3: command tx timeout [ 80.873376][ T5840] Bluetooth: hci1: command tx timeout [ 80.873412][ T5840] Bluetooth: hci0: command tx timeout [ 80.936126][ T5840] Bluetooth: hci4: command tx timeout [ 80.943792][ T3491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.971500][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.987671][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.993707][ T3491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.005080][ T1107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.056716][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.076402][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.152108][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.161348][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.243034][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.258451][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.388418][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.410902][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.499010][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.510816][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.653689][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.706010][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.840388][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.039880][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 82.063951][ T10] usb 1-1: config index 0 descriptor too short (expected 44, got 36) [ 82.094803][ T10] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 82.113473][ T10] usb 1-1: config 0 has no interface number 0 [ 82.126917][ T10] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 82.183152][ T10] usb 1-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.211197][ T10] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.246938][ T10] usb 1-1: config 0 interface 126 has no altsetting 0 [ 82.274573][ T10] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 82.291233][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.309263][ T10] usb 1-1: Product: syz [ 82.318123][ T10] usb 1-1: Manufacturer: syz [ 82.328344][ T10] usb 1-1: SerialNumber: syz [ 82.354379][ T10] usb 1-1: config 0 descriptor?? [ 82.367241][ T5945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.615693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.625182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 82.633830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.643530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.679786][ T10] ir_usb 1-1:0.126: IR Dongle converter detected [ 82.697872][ T10] usb 1-1: IRDA class descriptor not found, device not bound [ 82.882898][ T10] usb 1-1: USB disconnect, device number 2 [ 82.935795][ T5840] Bluetooth: hci0: command tx timeout [ 82.941318][ T52] Bluetooth: hci3: command tx timeout [ 82.944571][ T5841] Bluetooth: hci1: command tx timeout [ 82.946843][ T52] Bluetooth: hci2: command tx timeout [ 83.015758][ T52] Bluetooth: hci4: command tx timeout [ 83.067303][ T52] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 83.283119][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 83.659613][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.795595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.804247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.812868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.821614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.831914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.926664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.644239][ T5987] mmap: syz.1.21 (5987) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.896231][ T5990] ALSA: mixer_oss: invalid OSS volume 'Y' [ 85.363005][ T6001] syzkaller0: entered promiscuous mode [ 85.378408][ T6001] syzkaller0: entered allmulticast mode [ 85.859083][ T6005] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 86.514445][ T6016] block device autoloading is deprecated and will be removed. [ 86.786372][ T1218] cfg80211: failed to load regulatory.db [ 87.795299][ T5925] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.115216][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 88.131815][ T5925] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.215185][ T5925] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 88.245218][ T5925] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.285218][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.291895][ T5925] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 88.525340][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.569949][ T5925] usb 5-1: config 0 descriptor?? [ 88.576498][ T6038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 88.629339][ T5925] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 89.036028][ T5187] bcm5974 5-1:0.0: could not write to device [ 89.117638][ T5925] usb 5-1: USB disconnect, device number 2 [ 89.125823][ T5934] bcm5974 5-1:0.0: could not read from device [ 89.202481][ T5187] bcm5974 5-1:0.0: could not read from device [ 89.293156][ T5934] udevd[5934]: Error opening device "/dev/input/event4": No such device [ 89.330650][ T5934] udevd[5934]: Unable to EVIOCGABS device "/dev/input/event4" [ 89.395332][ T5934] udevd[5934]: Unable to EVIOCGABS device "/dev/input/event4" [ 89.481741][ T5934] udevd[5934]: Unable to EVIOCGABS device "/dev/input/event4" [ 89.525380][ T5934] udevd[5934]: Unable to EVIOCGABS device "/dev/input/event4" [ 90.055337][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.136505][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 90.165244][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.182049][ T6067] Zero length message leads to an empty skb [ 90.245221][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 90.289711][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.302250][ T9] usb 2-1: too many configurations: 48, using maximum allowed: 8 [ 90.313753][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 90.323818][ T9] usb 2-1: can't read configurations, error -71 [ 90.337901][ T5894] usb 3-1: descriptor type invalid, skip [ 90.345916][ T5894] usb 3-1: descriptor type invalid, skip [ 90.357436][ T5894] usb 3-1: descriptor type invalid, skip [ 90.363297][ T5894] usb 3-1: descriptor type invalid, skip [ 90.373251][ T5894] usb 3-1: descriptor type invalid, skip [ 90.382197][ T5894] usb 3-1: descriptor type invalid, skip [ 90.389794][ T5894] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 90.402486][ T5894] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 90.419570][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.429457][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.437987][ T5894] usb 3-1: Product: syz [ 90.442363][ T5894] usb 3-1: Manufacturer: syz [ 90.447620][ T5894] usb 3-1: SerialNumber: syz [ 90.675527][ T5894] cdc_ncm 3-1:1.0: bind() failure [ 90.690699][ T5894] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 90.698602][ T5894] cdc_ncm 3-1:1.1: bind() failure [ 90.712116][ T5894] usb 3-1: USB disconnect, device number 2 [ 91.276894][ T52] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 91.405999][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.607005][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 91.676160][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 91.695274][ T5925] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 91.698795][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.743819][ T9] usb 2-1: config 0 descriptor?? [ 91.850067][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.859241][ T5925] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 91.868074][ T5925] usb 3-1: config 9 has no interface number 0 [ 91.884640][ T5925] usb 3-1: config 9 interface 198 has no altsetting 0 [ 91.904098][ T5925] usb 3-1: string descriptor 0 read error: -22 [ 91.932365][ T5925] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 91.953729][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.991296][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 91.999798][ T5925] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 92.019286][ T9] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 92.051868][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 92.055374][ T9] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 92.150056][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.376117][ T5925] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 92.405950][ T5925] usb 3-1: media controller created [ 92.493257][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.721490][ T5925] DVB: Unable to find symbol mt352_attach() [ 92.740446][ T5925] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 92.766179][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 92.796590][ T5925] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 92.837756][ T5925] usb 3-1: USB disconnect, device number 3 [ 92.971888][ T6103] team0: Port device team_slave_0 removed [ 92.974343][ T5925] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 93.670420][ T6120] input: syz0 as /devices/virtual/input/input6 [ 93.752691][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.765267][ T30] audit: type=1326 audit(1760339420.959:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 93.767653][ T30] audit: type=1326 audit(1760339420.979:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 93.976124][ T5929] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.000098][ T30] audit: type=1326 audit(1760339421.029:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 94.024141][ T30] audit: type=1326 audit(1760339421.029:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 94.056854][ T30] audit: type=1326 audit(1760339421.029:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 94.084965][ T30] audit: type=1326 audit(1760339421.029:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 94.110178][ T30] audit: type=1326 audit(1760339421.029:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 94.134777][ T30] audit: type=1326 audit(1760339421.029:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 94.175203][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 94.188526][ T5929] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.205004][ T5929] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 94.217131][ T5929] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.231978][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.265699][ T5929] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 94.297207][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.317905][ T5929] usb 1-1: config 0 descriptor?? [ 94.352903][ T6121] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 94.378267][ T5929] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 94.765612][ T5187] bcm5974 1-1:0.0: could not write to device [ 94.822964][ T5929] usb 1-1: USB disconnect, device number 3 [ 94.837485][ T5187] bcm5974 1-1:0.0: could not read from device [ 94.950900][ T5934] udevd[5934]: Error opening device "/dev/input/event4": No such file or directory [ 94.983702][ T5934] udevd[5934]: Unable to EVIOCGABS device "/dev/input/event4" [ 94.996029][ T6141] tipc: Started in network mode [ 95.001102][ T6141] tipc: Node identity ca8f8e8c8e04, cluster identity 4711 [ 95.024356][ T6141] tipc: Enabled bearer , priority 0 [ 95.035757][ T5934] udevd[5934]: Unable to EVIOCGABS device "/dev/input/event4" [ 95.081555][ T5934] udevd[5934]: Unable to EVIOCGABS device "/dev/input/event4" [ 95.112389][ T6142] syzkaller0: entered promiscuous mode [ 95.124484][ T5934] udevd[5934]: Unable to EVIOCGABS device "/dev/input/event4" [ 95.151893][ T5934] udevd[5934]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 95.167049][ T6142] syzkaller0: entered allmulticast mode [ 95.238153][ T6141] tipc: Resetting bearer [ 95.245486][ T5202] udevd[5202]: worker [5934] terminated by signal 6 (Aborted) [ 95.253283][ T6138] tipc: Resetting bearer [ 95.267701][ T5202] udevd[5202]: worker [5934] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7/event4' [ 95.319511][ T6138] tipc: Disabling bearer [ 96.045444][ T6166] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.052138][ T6166] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.205269][ T5929] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.378398][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 96.402412][ T5929] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 96.422972][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.532176][ T5929] usb 3-1: config 0 descriptor?? [ 96.761454][ T5929] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 96.787282][ T30] audit: type=1326 audit(1760339423.989:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 96.808917][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.888041][ T30] audit: type=1326 audit(1760339423.989:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.93" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 96.909834][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.551836][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 98.695266][ T5887] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.825918][ T5894] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.871362][ T5887] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 98.887004][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.897853][ T5887] usb 5-1: Product: syz [ 98.903394][ T5887] usb 5-1: Manufacturer: syz [ 98.910769][ T6215] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 98.917269][ T6215] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 98.945422][ T5887] usb 5-1: SerialNumber: syz [ 99.035055][ T5887] usb 5-1: config 0 descriptor?? [ 99.046090][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 99.057713][ T5894] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.072732][ T5894] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 99.091734][ T5894] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.105322][ T5894] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.112029][ T5894] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 99.121356][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.163827][ T5894] usb 1-1: config 0 descriptor?? [ 99.263112][ T5887] hso 5-1:0.0: Failed to find INT IN ep [ 99.286855][ T5887] usb-storage 5-1:0.0: USB Mass Storage device detected [ 99.290831][ T6207] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 99.341784][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 99.477040][ T5887] usb 5-1: USB disconnect, device number 3 [ 99.740796][ T5187] bcm5974 1-1:0.0: could not write to device [ 99.828945][ T5187] bcm5974 1-1:0.0: could not read from device [ 99.845474][ T5894] usb 1-1: USB disconnect, device number 4 [ 99.979647][ T6216] udevd[6216]: Error opening device "/dev/input/event4": No such file or directory [ 100.009731][ T6216] udevd[6216]: Unable to EVIOCGABS device "/dev/input/event4" [ 100.030117][ T6216] udevd[6216]: Unable to EVIOCGABS device "/dev/input/event4" [ 100.046787][ T6216] udevd[6216]: Unable to EVIOCGABS device "/dev/input/event4" [ 100.068365][ T6216] udevd[6216]: Unable to EVIOCGABS device "/dev/input/event4" [ 100.624401][ T6247] tipc: Enabled bearer , priority 0 [ 100.649700][ T6247] syzkaller0: entered promiscuous mode [ 100.668286][ T6247] syzkaller0: entered allmulticast mode [ 100.704548][ T6247] tipc: Resetting bearer [ 100.714180][ T6246] tipc: Resetting bearer [ 100.730566][ T6246] tipc: Disabling bearer [ 100.935629][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.031368][ T6255] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 101.037894][ T6255] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 101.107789][ T5887] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.196633][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.207699][ T5887] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 101.222720][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.240781][ T5887] usb 4-1: config 0 descriptor?? [ 101.275804][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 101.796354][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.819459][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.837074][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 102.759000][ T52] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 102.835425][ T5970] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.037487][ T5970] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 103.127919][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.173953][ T5970] usb 1-1: Product: syz [ 103.190712][ T5970] usb 1-1: Manufacturer: syz [ 103.203229][ T5970] usb 1-1: SerialNumber: syz [ 103.223009][ T5970] usb 1-1: config 0 descriptor?? [ 103.286158][ T5970] hub 1-1:0.0: bad descriptor, ignoring hub [ 103.393650][ T5970] hub 1-1:0.0: probe with driver hub failed with error -5 [ 103.402151][ T6280] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 103.408816][ T6280] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.497481][ T5970] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 103.530809][ T6280] vhci_hcd vhci_hcd.0: Device attached [ 103.539170][ T5970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.568001][ T5970] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 103.591698][ T5970] usb 1-1: media controller created [ 103.651492][ T6282] vhci_hcd: connection closed [ 103.653715][ T1151] vhci_hcd: stop threads [ 103.660193][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.670808][ T1151] vhci_hcd: release socket [ 103.683629][ T1151] vhci_hcd: disconnect device [ 103.859308][ T5970] DVB: Unable to find symbol dib7000p_attach() [ 103.875690][ T5970] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 104.125323][ T5970] rc_core: IR keymap rc-dib0700-rc5 not found [ 104.141764][ T5970] Registered IR keymap rc-empty [ 104.147184][ T5970] dvb-usb: could not initialize remote control. [ 104.163925][ T5970] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 104.198411][ T5970] usb 1-1: USB disconnect, device number 5 [ 104.347779][ T5970] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 104.539248][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 104.555315][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.596862][ T5887] usb 4-1: USB disconnect, device number 2 [ 105.516039][ T5887] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.697272][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 105.709014][ T5887] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.726192][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.757499][ T5887] usb 4-1: config 0 descriptor?? [ 106.008734][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 106.975407][ T5925] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.045675][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'. [ 107.176158][ T5925] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 107.184566][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.192271][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 107.204950][ T5925] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 107.285572][ T5925] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 107.293702][ T5925] usb 1-1: Manufacturer: syz [ 107.301733][ T5925] usb 1-1: config 0 descriptor?? [ 107.745435][ T5925] rc_core: IR keymap rc-hauppauge not found [ 107.751563][ T5925] Registered IR keymap rc-empty [ 107.762023][ T5925] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 107.793245][ T5925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 107.877250][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 107.885069][ T5925] usb 1-1: USB disconnect, device number 6 [ 108.343471][ T6370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.166'. [ 108.574201][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 108.590127][ T6378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.973458][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.175'. [ 109.577218][ T6402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.178'. [ 109.862017][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 109.862033][ T30] audit: type=1326 audit(1760339437.069:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.4.180" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 110.023943][ T6410] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 110.030575][ T6410] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.109065][ T6410] vhci_hcd vhci_hcd.0: Device attached [ 110.345758][ T5970] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 110.602126][ T6411] vhci_hcd: connection reset by peer [ 110.610336][ T1107] vhci_hcd: stop threads [ 110.614679][ T1107] vhci_hcd: release socket [ 110.619868][ T1107] vhci_hcd: disconnect device [ 111.445232][ T5908] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.537157][ T6432] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 111.564200][ T6432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.588194][ T6432] bond1: (slave gretap1): making interface the new active one [ 111.598663][ T6432] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 111.607429][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 111.615050][ T5908] usb 5-1: config index 0 descriptor too short (expected 49410, got 36) [ 111.625315][ T5908] usb 5-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 111.634160][ T5908] usb 5-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 111.643619][ T5908] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 111.654865][ T5908] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 111.665951][ T5908] usb 5-1: config index 1 descriptor too short (expected 49410, got 36) [ 111.674322][ T5908] usb 5-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 111.684761][ T5908] usb 5-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 111.693966][ T5908] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 111.704585][ T5908] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 111.716008][ T5908] usb 5-1: config index 2 descriptor too short (expected 49410, got 36) [ 111.724376][ T5908] usb 5-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 111.733917][ T5908] usb 5-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 111.750541][ T5908] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 111.761127][ T5908] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 111.774514][ T5908] usb 5-1: config index 3 descriptor too short (expected 49410, got 36) [ 111.795201][ T5908] usb 5-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 111.804026][ T5908] usb 5-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 111.812931][ T5908] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 111.840280][ T5908] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 111.852177][ T5908] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice= 0.00 [ 111.865206][ T5908] usb 5-1: New USB device strings: Mfr=16, Product=32, SerialNumber=9 [ 111.874032][ T5908] usb 5-1: Product: syz [ 111.884727][ T5908] usb 5-1: Manufacturer: syz [ 111.890280][ T5908] usb 5-1: SerialNumber: syz [ 111.908843][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.190'. [ 112.152578][ T5894] usb 5-1: USB disconnect, device number 4 [ 114.783795][ T6511] netlink: 'syz.0.217': attribute type 72 has an invalid length. [ 114.834243][ T6511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.217'. [ 115.486144][ T5970] vhci_hcd: vhci_device speed not set [ 115.765317][ T6534] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 115.771959][ T6534] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.096456][ T6534] vhci_hcd vhci_hcd.0: Device attached [ 116.220466][ T6540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.338842][ T1218] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 116.361756][ T6537] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 116.375494][ T6536] vhci_hcd: connection closed [ 116.390183][ T1151] vhci_hcd: stop threads [ 116.412649][ T1151] vhci_hcd: release socket [ 116.419067][ T1151] vhci_hcd: disconnect device [ 116.665238][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.825255][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 116.859431][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.886565][ T5894] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 116.911931][ T5894] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 116.925236][ T5894] usb 1-1: can't read configurations, error -71 [ 119.320200][ T6578] syzkaller0: entered promiscuous mode [ 119.367210][ T6578] syzkaller0: entered allmulticast mode [ 119.940428][ T30] audit: type=1326 audit(1760339447.149:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 119.990387][ T6592] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.004214][ T30] audit: type=1326 audit(1760339447.149:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.045256][ T30] audit: type=1326 audit(1760339447.149:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.067004][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.076306][ T30] audit: type=1326 audit(1760339447.149:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.098163][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.127006][ T30] audit: type=1326 audit(1760339447.149:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.148785][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.270415][ T30] audit: type=1326 audit(1760339447.149:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.323487][ T30] audit: type=1326 audit(1760339447.149:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.352354][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 120.372494][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 120.392741][ T30] audit: type=1326 audit(1760339447.149:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.414526][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.461421][ T30] audit: type=1326 audit(1760339447.149:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.475269][ T6603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.483351][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.551219][ T30] audit: type=1326 audit(1760339447.149:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 120.902629][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.252'. [ 120.932078][ T6612] capability: warning: `syz.1.253' uses deprecated v2 capabilities in a way that may be insecure [ 121.507131][ T1218] vhci_hcd: vhci_device speed not set [ 121.565452][ T6621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.257'. [ 121.659590][ T6625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.396460][ T6644] netlink: 72 bytes leftover after parsing attributes in process `syz.1.267'. [ 124.104822][ T6671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.639673][ T6700] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 125.701314][ T6700] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 125.748345][ T6700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.045252][ T5952] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 126.329411][ T5952] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.475228][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.495684][ T5952] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.504780][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.535283][ T5952] usb 5-1: Product: syz [ 126.539488][ T5952] usb 5-1: Manufacturer: syz [ 126.544093][ T5952] usb 5-1: SerialNumber: syz [ 126.568209][ T5952] usb 5-1: config 0 descriptor?? [ 126.592173][ T5952] usb 5-1: selecting invalid altsetting 0 [ 128.199184][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 128.445027][ T6736] bond2: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 128.457380][ T6736] bond2 (unregistering): Released all slaves [ 128.600760][ T5952] usb 5-1: USB disconnect, device number 5 [ 129.091059][ T52] Bluetooth: hci4: unexpected event 0x14 length: 20 > 6 [ 129.142073][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 129.174597][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 130.133483][ T6769] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 130.149920][ T6769] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 130.202431][ T6769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.225270][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.305377][ T5970] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.379443][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 130.397471][ T5894] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.408934][ T5894] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 130.422161][ T5894] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.436023][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.445636][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 130.465239][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 130.470516][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.476830][ T5970] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 130.488615][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.495987][ T5894] usb 5-1: config 0 descriptor?? [ 130.501359][ T5970] usb 1-1: config 0 descriptor?? [ 130.510371][ T5970] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 130.516476][ T6765] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 130.531397][ T5970] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 130.539365][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 130.941226][ T5187] bcm5974 5-1:0.0: could not write to device [ 131.115262][ T5187] bcm5974 5-1:0.0: could not read from device [ 131.126191][ T5187] bcm5974 5-1:0.0: could not read from device [ 131.149169][ T5894] usb 5-1: USB disconnect, device number 6 [ 131.157431][ T5187] bcm5974 5-1:0.0: could not read from device [ 131.174993][ T5187] bcm5974 5-1:0.0: could not read from device [ 131.195616][ T5970] usb 1-1: USB disconnect, device number 9 [ 131.232545][ T6216] udevd[6216]: Error opening device "/dev/input/event4": No such file or directory [ 131.264415][ T6216] udevd[6216]: Unable to EVIOCGABS device "/dev/input/event4" [ 131.284582][ T6216] udevd[6216]: Unable to EVIOCGABS device "/dev/input/event4" [ 131.294328][ T6216] udevd[6216]: Unable to EVIOCGABS device "/dev/input/event4" [ 131.303791][ T6216] udevd[6216]: Unable to EVIOCGABS device "/dev/input/event4" [ 131.341253][ T6216] udevd[6216]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 131.370496][ T5202] udevd[5202]: worker [6216] terminated by signal 6 (Aborted) [ 131.385312][ T5202] udevd[5202]: worker [6216] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12/event4' [ 132.865767][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872360][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.696936][ T6814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.325'. [ 135.817350][ T6836] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 135.831123][ T6836] netlink: 'syz.4.332': attribute type 1 has an invalid length. [ 135.856731][ T6836] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.116822][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 136.142489][ T5908] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 136.224830][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 136.224845][ T30] audit: type=1326 audit(1760339463.429:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 136.239471][ T6848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.336'. [ 136.275529][ T30] audit: type=1326 audit(1760339463.479:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 136.297374][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.314647][ T30] audit: type=1326 audit(1760339463.479:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 136.364864][ T5908] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 136.378046][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.417405][ T5908] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 136.434220][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.443304][ T30] audit: type=1326 audit(1760339463.479:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 136.465080][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.473691][ T5908] usb 5-1: Product: syz [ 136.478040][ T5908] usb 5-1: Manufacturer: syz [ 136.482679][ T5908] usb 5-1: SerialNumber: syz [ 136.490698][ T5908] usb 5-1: config 0 descriptor?? [ 136.497015][ T30] audit: type=1326 audit(1760339463.479:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 136.518746][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.529897][ T30] audit: type=1326 audit(1760339463.499:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 136.551628][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.568206][ T5908] usb 5-1: selecting invalid altsetting 0 [ 136.919958][ T5952] usb 5-1: USB disconnect, device number 7 [ 136.983045][ T30] audit: type=1326 audit(1760339463.499:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 137.018781][ T30] audit: type=1326 audit(1760339463.769:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 137.082905][ T30] audit: type=1326 audit(1760339463.769:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 137.135535][ T30] audit: type=1326 audit(1760339463.769:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 138.267736][ T5925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.436792][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 138.453535][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.353'. [ 138.458855][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.474729][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.485875][ T5925] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 138.494940][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.518030][ T5925] usb 1-1: config 0 descriptor?? [ 139.162156][ T5925] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 139.249397][ T5925] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 139.449008][ T5925] ft260 0003:0403:6030.0001: failed to retrieve system status [ 139.458451][ T5925] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -5 [ 139.696847][ T5908] usb 1-1: USB disconnect, device number 10 [ 140.028722][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 140.135372][ T5925] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 140.295363][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 140.498759][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.530805][ T5925] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 140.565045][ T5925] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 140.574232][ T5925] usb 5-1: can't read configurations, error -71 [ 142.528989][ T6961] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 142.635208][ T6961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.727394][ T6966] bond1: (slave veth3): Enslaving as an active interface with an up link [ 142.761444][ T6967] bond1: (slave wlan1): Enslaving as an active interface with an up link [ 144.348940][ T6987] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 144.355497][ T6987] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 144.438098][ T6987] vhci_hcd vhci_hcd.0: Device attached [ 144.456252][ T6988] vhci_hcd: connection closed [ 144.586736][ T1107] vhci_hcd: stop threads [ 144.615381][ T1107] vhci_hcd: release socket [ 144.626212][ T1107] vhci_hcd: disconnect device [ 144.767087][ T7000] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 144.808304][ T7000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.843975][ T7000] bond1: (slave veth3): Enslaving as an active interface with an up link [ 144.882228][ T7000] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 144.899076][ T7000] bond1: (slave wlan1): Enslaving as an active interface with an up link [ 145.022942][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 145.032368][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 145.595235][ T5952] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.755211][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 145.762847][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.846129][ T5952] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.875240][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.891533][ T5952] usb 1-1: config 0 descriptor?? [ 146.168998][ T5952] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.657320][ T5925] usb 1-1: USB disconnect, device number 11 [ 147.705242][ T5925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.875226][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 147.902981][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.910795][ T5925] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 147.919444][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 147.945599][ T5925] usb 1-1: can't read configurations, error -71 [ 148.564522][ T52] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 149.310093][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'. [ 149.334060][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 149.805223][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.935248][ T43] usb 5-1: device descriptor read/64, error -71 [ 150.209539][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 150.226596][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 150.256325][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.415280][ T43] usb 5-1: device descriptor read/64, error -71 [ 150.535598][ T43] usb usb5-port1: attempt power cycle [ 150.885329][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.926205][ T43] usb 5-1: device descriptor read/8, error -71 [ 151.385510][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.408657][ T43] usb 5-1: device descriptor read/8, error -71 [ 151.537388][ T43] usb usb5-port1: unable to enumerate USB device [ 153.338354][ T5929] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 153.355769][ T5887] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 153.372011][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 153.408118][ T5929] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 153.429064][ T5887] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 153.436720][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 153.438386][ T9] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 153.464292][ T5929] usb 3-1: USB disconnect, device number 4 [ 153.521604][ T5887] usb 4-1: USB disconnect, device number 3 [ 153.548214][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 153.562623][ T9] usb 2-1: USB disconnect, device number 3 [ 153.947278][ T7174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.075323][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.215647][ T9] usb 2-1: device descriptor read/64, error -71 [ 154.520381][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.665736][ T9] usb 2-1: device descriptor read/64, error -71 [ 154.715445][ T1218] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.817149][ T9] usb usb2-port1: attempt power cycle [ 154.916858][ T1218] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.930211][ T1218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.940877][ T1218] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 154.956382][ T5887] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.998504][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.023338][ T1218] usb 3-1: config 0 descriptor?? [ 155.128615][ T5887] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 155.150179][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 155.165561][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.178002][ T5887] usb 1-1: Product: syz [ 155.189015][ T5887] usb 1-1: SerialNumber: syz [ 155.196649][ T9] usb 2-1: device descriptor read/8, error -71 [ 155.210354][ T5887] usb 1-1: config 0 descriptor?? [ 155.439923][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.463586][ T5887] hso 1-1:0.0: Failed to find BULK IN ep [ 155.476047][ T9] usb 2-1: device descriptor read/8, error -71 [ 155.563024][ T7205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.573093][ T7205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.595395][ T9] usb usb2-port1: unable to enumerate USB device [ 155.784093][ T5887] usb 1-1: USB disconnect, device number 14 [ 156.673220][ T7218] tipc: Started in network mode [ 156.685280][ T7218] tipc: Node identity ac1414aa, cluster identity 4711 [ 156.722775][ T7218] tipc: Enabled bearer , priority 10 [ 156.733324][ T7216] tipc: Enabled bearer , priority 0 [ 157.726348][ T43] tipc: Node number set to 2886997162 [ 157.877656][ T7234] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 157.933108][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 158.052017][ T1218] usbhid 3-1:0.0: can't add hid device: -71 [ 158.061633][ T1218] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 158.122626][ T1218] usb 3-1: USB disconnect, device number 5 [ 158.315913][ T30] audit: type=1326 audit(1760339485.529:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.1.495" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94539 code=0x0 [ 158.333940][ T7250] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.337049][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.615502][ T7261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 158.622045][ T7261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.657122][ T7261] vhci_hcd vhci_hcd.0: Device attached [ 158.781647][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 158.809947][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 158.905229][ T43] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 159.049311][ T7262] vhci_hcd: connection reset by peer [ 159.060353][ T1151] vhci_hcd: stop threads [ 159.074873][ T1151] vhci_hcd: release socket [ 159.084978][ T1151] vhci_hcd: disconnect device [ 159.373780][ T7282] bond1: (slave wlan1): Releasing backup interface [ 159.769500][ T7293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.820473][ T7296] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 159.834598][ T7296] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 160.103190][ T7296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.215742][ T5894] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 160.396477][ T7303] syzkaller0: entered promiscuous mode [ 160.402878][ T7303] syzkaller0: entered allmulticast mode [ 160.409834][ T5894] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 160.421029][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.470786][ T5894] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 160.505904][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.515941][ T5894] usb 4-1: Product: syz [ 160.520249][ T5894] usb 4-1: Manufacturer: syz [ 160.526917][ T5894] usb 4-1: SerialNumber: syz [ 160.603609][ T5894] usb 4-1: config 0 descriptor?? [ 160.782179][ T5894] usb 4-1: selecting invalid altsetting 0 [ 161.415559][ T5887] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 161.585233][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 161.597018][ T5887] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 161.608957][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.630372][ T5887] usb 1-1: config 0 descriptor?? [ 161.843155][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 161.874820][ T5887] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 161.885518][ T5887] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 161.932594][ T7327] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.203091][ T7335] tipc: Enabled bearer , priority 0 [ 162.217216][ T7335] tipc: Resetting bearer [ 162.233753][ T7334] tipc: Disabling bearer [ 162.735468][ T5925] usb 4-1: USB disconnect, device number 4 [ 162.995229][ T5929] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.022644][ T7352] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.134373][ T7357] misc userio: Invalid payload size [ 163.147009][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 163.239797][ T7361] loop6: detected capacity change from 0 to 524287999 [ 163.332331][ T5929] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 163.365446][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.373527][ T5929] usb 3-1: Product: syz [ 163.385237][ T5929] usb 3-1: Manufacturer: syz [ 163.390411][ T5929] usb 3-1: SerialNumber: syz [ 163.420781][ T5929] usb 3-1: config 0 descriptor?? [ 163.645982][ T5925] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 163.830749][ T5925] usb 4-1: config 1 interface 0 altsetting 102 endpoint 0x1 is Bulk; changing to Interrupt [ 163.854368][ T7367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.536'. [ 163.886865][ T5925] usb 4-1: config 1 interface 0 altsetting 102 endpoint 0x82 is Bulk; changing to Interrupt [ 163.924653][ T5925] usb 4-1: config 1 interface 0 has no altsetting 0 [ 163.957077][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 163.978687][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.001272][ T5925] usb 4-1: Product: 绌㿙ࡎ舘襜﹚ᗃ졙큵긣턍詚ꂏﳴ龿㜶㟩㭓ᬀ鬣惟咖킧⌳ꏞ쁑殌䩁ᰀ嗇튿񂒙牊舵皦᳗ꁱ蘧మ걔ƚ꾠哠㈆寂湉ꇣ攳措꜒霆욥罯臿髽昴ṉᔨ筭㡡쯱좌熚ᇶཱུ髡ḓ냤뱎湦렪蠄맢횝뱰㥛隸ퟣ乘Გ෹ᮡ驝뜝ⱔ曝ݠ蕸ꙅ縠뾌쿾橌ᜅ襱킯✜ཧ⥅呙俨쏰飍 [ 164.050725][ T43] vhci_hcd: vhci_device speed not set [ 164.127269][ T7363] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.149971][ T7363] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.388027][ T7361] program syz.3.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.448643][ T5925] usb 4-1: USB disconnect, device number 5 [ 164.496145][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 164.666356][ T7380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.708146][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 164.738887][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 164.786105][ T5929] asix 3-1:0.0: probe with driver asix failed with error -71 [ 164.811408][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 164.836737][ T5929] usb 3-1: USB disconnect, device number 6 [ 166.037757][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'. [ 166.115256][ T5929] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.265242][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 166.305790][ T5929] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 166.314870][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.356492][ T5929] usb 4-1: config 0 descriptor?? [ 166.578874][ T5929] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 166.655264][ T7412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.102492][ T7427] tipc: Started in network mode [ 167.113021][ T7427] tipc: Node identity fe0bce51f9b8, cluster identity 4711 [ 167.131170][ T7427] tipc: Enabled bearer , priority 0 [ 167.148562][ T7427] syzkaller0: entered promiscuous mode [ 167.158486][ T7427] syzkaller0: entered allmulticast mode [ 167.192553][ T7426] tipc: Resetting bearer [ 167.231988][ T7426] tipc: Disabling bearer [ 167.390419][ T7433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.561'. [ 167.559122][ T7437] bond1: (slave wlan1): Releasing backup interface [ 167.942060][ T7444] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.427915][ T5908] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.587054][ T5908] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.615235][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.627235][ T5908] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 168.645189][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.666219][ T5908] usb 2-1: config 0 descriptor?? [ 169.199903][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.211134][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.565559][ T7464] tipc: Enabled bearer , priority 0 [ 169.684374][ T7467] syzkaller0: entered promiscuous mode [ 169.703586][ T7467] syzkaller0: entered allmulticast mode [ 169.841739][ T7463] tipc: Resetting bearer [ 169.975487][ T7463] tipc: Disabling bearer [ 170.015241][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 170.175254][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 170.221421][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.254050][ T43] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 170.288320][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 170.314706][ T43] usb 5-1: can't read configurations, error -71 [ 171.187888][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 171.193925][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.230964][ T5908] usb 2-1: USB disconnect, device number 8 [ 171.421477][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'. [ 171.471560][ T7492] tipc: Enabled bearer , priority 0 [ 171.480872][ T7492] syzkaller0: entered promiscuous mode [ 171.490088][ T7492] syzkaller0: entered allmulticast mode [ 171.512011][ T7490] tipc: Resetting bearer [ 171.545102][ T7490] tipc: Disabling bearer [ 171.935265][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 172.095214][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 172.106996][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.135395][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.155239][ T5908] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 172.165802][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.265033][ T5908] usb 5-1: config 0 descriptor?? [ 172.684281][ T5908] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 172.916055][ T5908] ft260 0003:0403:6030.0002: chip code: 2088 3eb2 [ 172.971523][ T7512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.592'. [ 173.062820][ T7516] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 173.069372][ T7516] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.081378][ T7516] vhci_hcd vhci_hcd.0: Device attached [ 173.090952][ T7517] vhci_hcd: cannot find the pending unlink 9 [ 173.097771][ T7517] vhci_hcd: connection closed [ 173.098019][ T1151] vhci_hcd: stop threads [ 173.121298][ T5908] ft260 0003:0403:6030.0002: failed to retrieve system status [ 173.122401][ T1151] vhci_hcd: release socket [ 173.132065][ T5908] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 173.135660][ T1151] vhci_hcd: disconnect device [ 173.152758][ T5908] usb 5-1: USB disconnect, device number 16 [ 173.353947][ T52] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 174.472958][ T7570] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 176.861648][ T7618] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 177.005007][ T7618] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 177.046140][ T7618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.367864][ T5908] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 177.546824][ T5908] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.561207][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.572409][ T5908] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.581940][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.590762][ T5908] usb 3-1: Product: syz [ 177.595407][ T5908] usb 3-1: Manufacturer: syz [ 177.600201][ T5908] usb 3-1: SerialNumber: syz [ 177.619872][ T5908] usb 3-1: config 0 descriptor?? [ 177.640452][ T5908] usb 3-1: selecting invalid altsetting 0 [ 177.843737][ T5908] usb 3-1: USB disconnect, device number 7 [ 178.456755][ T5908] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.617428][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 178.638641][ T5908] usb 2-1: config index 0 descriptor too short (expected 49410, got 36) [ 178.650231][ T5908] usb 2-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 178.659754][ T5908] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 178.670258][ T5908] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 178.681454][ T5908] usb 2-1: config index 1 descriptor too short (expected 49410, got 36) [ 178.689952][ T5908] usb 2-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 178.699555][ T5908] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 178.710425][ T5908] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 178.731616][ T5908] usb 2-1: config index 2 descriptor too short (expected 49410, got 36) [ 178.745245][ T5908] usb 2-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 178.801614][ T5908] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 178.812098][ T5908] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 178.823415][ T5908] usb 2-1: config index 3 descriptor too short (expected 49410, got 36) [ 178.832752][ T5908] usb 2-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 178.841723][ T5908] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 178.853801][ T5908] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 178.875335][ T5908] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice= 0.00 [ 178.884959][ T5908] usb 2-1: New USB device strings: Mfr=16, Product=32, SerialNumber=9 [ 178.893529][ T5908] usb 2-1: Product: syz [ 178.899252][ T5908] usb 2-1: Manufacturer: syz [ 178.903917][ T5908] usb 2-1: SerialNumber: syz [ 179.316109][ T5908] usb 2-1: USB disconnect, device number 9 [ 179.906003][ T7662] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 179.912562][ T7662] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.967299][ T7662] vhci_hcd vhci_hcd.0: Device attached [ 179.990530][ T7663] vhci_hcd: connection closed [ 179.991453][ T3491] vhci_hcd: stop threads [ 180.009906][ T3491] vhci_hcd: release socket [ 180.033896][ T3491] vhci_hcd: disconnect device [ 180.151745][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 180.259943][ T7674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.718042][ T7688] tipc: Enabled bearer , priority 0 [ 180.734859][ T7688] syzkaller0: entered promiscuous mode [ 180.743731][ T7688] syzkaller0: entered allmulticast mode [ 180.882926][ T7688] tipc: Resetting bearer [ 180.903339][ T7686] tipc: Resetting bearer [ 180.920600][ T7686] tipc: Disabling bearer [ 181.108356][ T7698] dummy0: entered promiscuous mode [ 181.133228][ T7698] syz.0.664 uses obsolete (PF_INET,SOCK_PACKET) [ 182.147131][ T7711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.266639][ T7719] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 182.273193][ T7719] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.309769][ T7719] vhci_hcd vhci_hcd.0: Device attached [ 182.330532][ T7720] vhci_hcd: connection closed [ 182.330846][ T1151] vhci_hcd: stop threads [ 182.346646][ T1151] vhci_hcd: release socket [ 182.355689][ T1151] vhci_hcd: disconnect device [ 182.405935][ T30] audit: type=1326 audit(1760339509.619:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.2.672" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64539 code=0x0 [ 182.589587][ T7729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 182.596235][ T7729] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.654611][ T7729] vhci_hcd vhci_hcd.0: Device attached [ 182.885241][ T43] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 182.973057][ T7742] misc userio: Invalid payload size [ 183.189601][ T7730] vhci_hcd: connection reset by peer [ 183.285237][ T12] vhci_hcd: stop threads [ 183.289550][ T12] vhci_hcd: release socket [ 183.436748][ T12] vhci_hcd: disconnect device [ 186.415319][ T5894] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.421422][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 186.607295][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.654977][ T5894] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.773281][ T5894] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 186.855281][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.870240][ T5894] usb 3-1: Product: syz [ 186.879974][ T5894] usb 3-1: Manufacturer: syz [ 186.890442][ T5894] usb 3-1: SerialNumber: syz [ 186.904566][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 186.942938][ T5894] usb 3-1: config 0 descriptor?? [ 187.548516][ T52] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 188.048710][ T43] vhci_hcd: vhci_device speed not set [ 188.491865][ T52] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 189.174307][ T43] usb 3-1: USB disconnect, device number 8 [ 189.952951][ T30] audit: type=1326 audit(1760339517.159:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.732" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94539 code=0x0 [ 190.208158][ T7884] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 190.214796][ T7884] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 190.223381][ T7884] vhci_hcd vhci_hcd.0: Device attached [ 190.675383][ T43] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 190.748026][ T7886] vhci_hcd: connection reset by peer [ 190.753823][ T1107] vhci_hcd: stop threads [ 190.765312][ T1107] vhci_hcd: release socket [ 190.784125][ T1107] vhci_hcd: disconnect device [ 191.604938][ T7911] netlink: 52 bytes leftover after parsing attributes in process `syz.2.741'. [ 192.257243][ T30] audit: type=1326 audit(1760339519.469:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.748" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 192.556655][ T7929] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 192.563281][ T7929] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.582639][ T7929] vhci_hcd vhci_hcd.0: Device attached [ 192.816421][ T5901] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 193.068896][ T7930] vhci_hcd: connection reset by peer [ 193.075388][ T3491] vhci_hcd: stop threads [ 193.079745][ T3491] vhci_hcd: release socket [ 193.084569][ T3491] vhci_hcd: disconnect device [ 194.016038][ T7943] netlink: 52 bytes leftover after parsing attributes in process `syz.3.753'. [ 194.300383][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307154][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.798652][ T7960] gtp0: entered promiscuous mode [ 195.522913][ T7987] gtp0: entered promiscuous mode [ 195.806713][ T43] vhci_hcd: vhci_device speed not set [ 197.155495][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.305897][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 197.313940][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.336760][ T43] usb 2-1: config 6 has an invalid interface number: 7 but max is 0 [ 197.344840][ T43] usb 2-1: config 6 has no interface number 0 [ 197.355221][ T43] usb 2-1: config 6 interface 7 has no altsetting 0 [ 197.367074][ T43] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=61.c6 [ 197.379121][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.388981][ T43] usb 2-1: Product: syz [ 197.393731][ T43] usb 2-1: Manufacturer: syz [ 197.398548][ T43] usb 2-1: SerialNumber: syz [ 197.625977][ T43] usb 2-1: selecting invalid altsetting 0 [ 197.654399][ T43] usb 2-1: USB disconnect, device number 10 [ 197.688009][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.7/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.985636][ T5901] vhci_hcd: vhci_device speed not set [ 198.915319][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 199.124228][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 199.133374][ T43] usb 2-1: config index 0 descriptor too short (expected 49410, got 36) [ 199.141948][ T43] usb 2-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 199.151332][ T43] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 199.161882][ T43] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 199.217832][ T43] usb 2-1: config index 1 descriptor too short (expected 49410, got 36) [ 199.226405][ T43] usb 2-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 199.268706][ T43] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 199.284162][ T43] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 199.295717][ T43] usb 2-1: config index 2 descriptor too short (expected 49410, got 36) [ 199.311107][ T43] usb 2-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 199.335307][ T43] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 199.351901][ T43] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 199.435824][ T43] usb 2-1: config index 3 descriptor too short (expected 49410, got 36) [ 199.444200][ T43] usb 2-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 199.468467][ T43] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 199.510716][ T43] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 199.540170][ T43] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice= 0.00 [ 199.549789][ T43] usb 2-1: New USB device strings: Mfr=16, Product=32, SerialNumber=9 [ 199.591742][ T43] usb 2-1: Product: syz [ 199.616836][ T43] usb 2-1: Manufacturer: syz [ 199.633981][ T43] usb 2-1: SerialNumber: syz [ 199.888545][ T5952] usb 2-1: USB disconnect, device number 11 [ 200.845215][ T5952] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.015212][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 201.042466][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.056341][ T5952] usb 2-1: too many configurations: 48, using maximum allowed: 8 [ 201.073190][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 201.105201][ T5952] usb 2-1: can't read configurations, error -71 [ 201.495365][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 201.501474][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 201.507628][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 201.513697][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 201.517743][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 201.768473][ T9] IPVS: starting estimator thread 0... [ 201.875458][ T8105] IPVS: using max 32 ests per chain, 76800 per kthread [ 201.909054][ T30] audit: type=1326 audit(1760339529.109:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.1.820" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94539 code=0x0 [ 202.048144][ T8112] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 202.054776][ T8112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.095693][ T8112] vhci_hcd vhci_hcd.0: Device attached [ 202.325345][ T43] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 202.665956][ T8113] vhci_hcd: connection reset by peer [ 202.671793][ T3562] vhci_hcd: stop threads [ 202.685428][ T3562] vhci_hcd: release socket [ 202.690079][ T3562] vhci_hcd: disconnect device [ 203.171774][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.183257][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.203008][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.225404][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.233118][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.590481][ T5925] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 203.757470][ T5925] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 203.774263][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.799737][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.847232][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 203.849813][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.896822][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.926423][ T5925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.935943][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.949737][ T5925] usb 2-1: config 0 descriptor?? [ 203.957779][ T8131] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.042986][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.051053][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.058930][ T8129] bridge_slave_0: entered allmulticast mode [ 204.071127][ T8129] bridge_slave_0: entered promiscuous mode [ 204.081087][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.098974][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.117562][ T8129] bridge_slave_1: entered allmulticast mode [ 204.128708][ T8129] bridge_slave_1: entered promiscuous mode [ 204.295481][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.297455][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.321064][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.337669][ T30] audit: type=1326 audit(1760339531.549:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.3.838" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 204.380203][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.405946][ T8160] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 204.412483][ T8160] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.412688][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.429612][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.438993][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.451836][ T8129] team0: Port device team_slave_0 added [ 204.455329][ T9] usb 3-1: device descriptor read/64, error -71 [ 204.463587][ T8129] team0: Port device team_slave_1 added [ 204.470089][ T8160] vhci_hcd vhci_hcd.0: Device attached [ 204.486636][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.502223][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.513224][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.529824][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.579284][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.592312][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.594589][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.618316][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.623842][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.647072][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.654146][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.795485][ T5925] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.825415][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.842317][ T5925] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 204.845230][ T5908] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 204.862871][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.905763][ T5925] usb 2-1: USB disconnect, device number 14 [ 205.018874][ T9] usb 3-1: device descriptor read/64, error -71 [ 205.052022][ T8129] hsr_slave_0: entered promiscuous mode [ 205.068106][ T8166] fido_id[8166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 205.069763][ T8129] hsr_slave_1: entered promiscuous mode [ 205.088617][ T8161] vhci_hcd: connection reset by peer [ 205.094905][ T1107] vhci_hcd: stop threads [ 205.104913][ T1107] vhci_hcd: release socket [ 205.119368][ T1107] vhci_hcd: disconnect device [ 205.135958][ T8129] debugfs: 'hsr0' already exists in 'hsr' [ 205.141739][ T8129] Cannot create hsr debugfs directory [ 205.154720][ T9] usb usb3-port1: attempt power cycle [ 205.260929][ T5841] Bluetooth: hci5: command tx timeout [ 205.495251][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 205.535967][ T9] usb 3-1: device descriptor read/8, error -71 [ 205.638162][ T8129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.683445][ T8129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.701160][ T8129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.720438][ T8129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.788760][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.826087][ T9] usb 3-1: device descriptor read/8, error -71 [ 205.919547][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.945625][ T9] usb usb3-port1: unable to enumerate USB device [ 205.983335][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.004791][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.012004][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.046762][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.053959][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.247870][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.377501][ T8196] binder: 8192:8196 ioctl 40182103 80000300 returned -22 [ 206.390221][ T8129] veth0_vlan: entered promiscuous mode [ 206.421429][ T8129] veth1_vlan: entered promiscuous mode [ 206.454266][ T8129] veth0_macvtap: entered promiscuous mode [ 206.466787][ T8129] veth1_macvtap: entered promiscuous mode [ 206.510272][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.527213][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.542778][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.555319][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.579098][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.596100][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.704314][ T30] audit: type=1326 audit(1760339533.909:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.1.852" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94539 code=0x0 [ 206.729484][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.748234][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.769508][ T8205] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 206.776135][ T8205] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 206.799167][ T8205] vhci_hcd vhci_hcd.0: Device attached [ 206.826066][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.838865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.340360][ T5841] Bluetooth: hci5: command tx timeout [ 207.489381][ T8206] vhci_hcd: connection reset by peer [ 207.497155][ T1151] vhci_hcd: stop threads [ 207.506137][ T1151] vhci_hcd: release socket [ 207.533410][ T1151] vhci_hcd: disconnect device [ 207.585362][ T43] vhci_hcd: vhci_device speed not set [ 207.763607][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 208.816026][ T8240] netlink: 'syz.3.862': attribute type 1 has an invalid length. [ 208.964017][ T8240] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.079089][ T8244] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 209.159941][ T8244] bond5: (slave wlan1): Enslaving as an active interface with a down link [ 209.235316][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.398502][ T9] usb 6-1: device descriptor read/64, error -71 [ 209.421021][ T5841] Bluetooth: hci5: command tx timeout [ 209.885227][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 209.976291][ T5908] vhci_hcd: vhci_device speed not set [ 210.035221][ T9] usb 6-1: device descriptor read/64, error -71 [ 210.155635][ T9] usb usb6-port1: attempt power cycle [ 210.283086][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 210.365352][ T5970] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 210.505341][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 210.539439][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.550602][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.566333][ T9] usb 6-1: device descriptor read/8, error -71 [ 210.573962][ T5970] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 210.583862][ T5970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.592357][ T5970] usb 3-1: Manufacturer: syz [ 210.602588][ T5970] usb 3-1: config 0 descriptor?? [ 210.775437][ T5925] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 210.818097][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 210.848138][ T9] usb 6-1: device descriptor read/8, error -71 [ 210.955750][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 210.975444][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.975675][ T9] usb usb6-port1: unable to enumerate USB device [ 210.998610][ T5925] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 211.021947][ T5970] pyra 0003:1E7D:2CF6.0004: unknown global tag 0xe [ 211.025000][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.045503][ T5970] pyra 0003:1E7D:2CF6.0004: item 0 4 1 14 parsing failed [ 211.048130][ T5925] usb 2-1: Product: syz [ 211.059929][ T5925] usb 2-1: Manufacturer: syz [ 211.075836][ T5925] usb 2-1: SerialNumber: syz [ 211.077070][ T5970] pyra 0003:1E7D:2CF6.0004: parse failed [ 211.097127][ T5970] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -22 [ 211.097716][ T5925] usb 2-1: config 0 descriptor?? [ 211.113273][ T8270] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 211.152044][ T5925] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 211.227348][ T5925] usb 3-1: USB disconnect, device number 13 [ 211.368522][ T5894] usb 2-1: USB disconnect, device number 15 [ 211.505266][ T5841] Bluetooth: hci5: command tx timeout [ 212.361958][ T8309] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.889'. [ 212.403884][ T8309] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 214.745358][ T30] audit: type=1326 audit(1760339541.949:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.2.908" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64539 code=0x0 [ 214.800290][ T8360] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 214.806812][ T8360] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 214.823613][ T8360] vhci_hcd vhci_hcd.0: Device attached [ 214.848888][ T8364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.910'. [ 215.065229][ T43] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 215.484273][ T8361] vhci_hcd: connection reset by peer [ 215.494612][ T12] vhci_hcd: stop threads [ 215.501106][ T12] vhci_hcd: release socket [ 215.507906][ T12] vhci_hcd: disconnect device [ 216.102934][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'. [ 217.480407][ T30] audit: type=1326 audit(1760339544.689:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.0.931" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0 [ 217.562990][ T8419] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 217.569526][ T8419] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.587291][ T8419] vhci_hcd vhci_hcd.0: Device attached [ 217.753505][ T8427] loop6: detected capacity change from 0 to 7 [ 217.771494][ T5886] Dev loop6: unable to read RDB block 7 [ 217.777838][ T5886] loop6: AHDI p3 p4 [ 217.782062][ T5886] loop6: partition table partially beyond EOD, truncated [ 217.791533][ T5886] loop6: p3 start 1886353253 is beyond EOD, truncated [ 217.865806][ T5970] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 218.028209][ T8427] Dev loop6: unable to read RDB block 7 [ 218.049393][ T8427] loop6: AHDI p3 p4 [ 218.053452][ T8427] loop6: partition table partially beyond EOD, truncated [ 218.075761][ T8427] loop6: p3 start 1886353253 is beyond EOD, truncated [ 218.241229][ T8420] vhci_hcd: connection reset by peer [ 218.256316][ T12] vhci_hcd: stop threads [ 218.260617][ T12] vhci_hcd: release socket [ 218.284708][ T12] vhci_hcd: disconnect device [ 218.510971][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.940'. [ 220.235245][ T43] vhci_hcd: vhci_device speed not set [ 220.515813][ T30] audit: type=1326 audit(1760339547.709:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.5.954" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f76539 code=0x0 [ 220.693955][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 220.707734][ T8486] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 220.714356][ T8486] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.749018][ T8486] vhci_hcd vhci_hcd.0: Device attached [ 221.145247][ T5925] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 221.321178][ T8487] vhci_hcd: connection reset by peer [ 221.337702][ T1151] vhci_hcd: stop threads [ 221.341993][ T1151] vhci_hcd: release socket [ 221.385299][ T1151] vhci_hcd: disconnect device [ 223.015390][ T5970] vhci_hcd: vhci_device speed not set [ 223.420874][ T30] audit: type=1326 audit(1760339550.629:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.976" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64539 code=0x0 [ 223.674761][ T8554] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 223.681380][ T8554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 223.823644][ T8554] vhci_hcd vhci_hcd.0: Device attached [ 224.075466][ T5894] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 224.186723][ T8555] vhci_hcd: connection reset by peer [ 224.214426][ T36] vhci_hcd: stop threads [ 224.233464][ T36] vhci_hcd: release socket [ 224.256274][ T36] vhci_hcd: disconnect device [ 224.710888][ T8566] tipc: Started in network mode [ 224.716104][ T8566] tipc: Node identity 7a7cdf9cc907, cluster identity 4711 [ 224.755468][ T8566] tipc: Enabled bearer , priority 0 [ 224.803797][ T8570] syzkaller0: entered promiscuous mode [ 224.809769][ T8570] syzkaller0: entered allmulticast mode [ 225.041244][ T5887] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 225.076950][ T5929] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 225.257537][ T8575] tipc: Resetting bearer [ 225.305247][ T5887] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 225.323123][ T5929] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 225.368020][ T5887] usb 1-1: USB disconnect, device number 15 [ 225.378754][ T5929] usb 4-1: USB disconnect, device number 6 [ 225.529492][ T8563] tipc: Resetting bearer [ 225.800769][ T8563] tipc: Disabling bearer [ 225.875935][ T5901] tipc: Node number set to 3011239836 [ 226.285887][ T5925] vhci_hcd: vhci_device speed not set [ 226.500752][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 226.620595][ T30] audit: type=1326 audit(1760339553.829:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.993" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0 [ 226.635253][ T5901] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 226.751417][ T8604] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 226.758041][ T8604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 226.827759][ T8604] vhci_hcd vhci_hcd.0: Device attached [ 226.879153][ T5901] usb 2-1: not running at top speed; connect to a high speed hub [ 226.898351][ T5901] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.921890][ T5901] usb 2-1: config 1 interface 0 has no altsetting 0 [ 226.934656][ T5901] usb 2-1: language id specifier not provided by device, defaulting to English [ 226.950163][ T5901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 226.961409][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.975269][ T5901] usb 2-1: Product: syz [ 226.980066][ T5901] usb 2-1: Manufacturer: Ꝡ [ 226.984681][ T5901] usb 2-1: SerialNumber: syz [ 227.002831][ T1107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.055542][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 227.075479][ T1218] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 227.119511][ T1107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.207491][ T5887] usb 6-1: device descriptor read/64, error -71 [ 227.212296][ T5901] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 227.242314][ T5901] usb 2-1: USB disconnect, device number 16 [ 227.263410][ T5901] usblp0: removed [ 227.268664][ T1107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.424786][ T8605] vhci_hcd: connection reset by peer [ 227.433862][ T1107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.445511][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 227.463260][ T3491] vhci_hcd: stop threads [ 227.475912][ T3491] vhci_hcd: release socket [ 227.481229][ T3491] vhci_hcd: disconnect device [ 227.605827][ T5887] usb 6-1: device descriptor read/64, error -71 [ 227.739208][ T1107] bridge_slave_1: left allmulticast mode [ 227.752766][ T1107] bridge_slave_1: left promiscuous mode [ 227.759312][ T5887] usb usb6-port1: attempt power cycle [ 227.775113][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.841040][ T1107] bridge_slave_0: left allmulticast mode [ 227.856973][ T1107] bridge_slave_0: left promiscuous mode [ 227.863166][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.285591][ T5887] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 228.297160][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 228.373565][ T5887] usb 6-1: device descriptor read/8, error -71 [ 228.615365][ T5887] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 228.656976][ T5887] usb 6-1: device descriptor read/8, error -71 [ 228.797188][ T5887] usb usb6-port1: unable to enumerate USB device [ 229.106569][ T8649] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 229.166218][ T5894] vhci_hcd: vhci_device speed not set [ 229.179480][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.190783][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.201252][ T1107] bond0 (unregistering): Released all slaves [ 229.290916][ T1107] bond1 (unregistering): Released all slaves [ 229.382257][ T1107] bond2 (unregistering): Released all slaves [ 229.475466][ T1107] bond3 (unregistering): Released all slaves [ 229.565806][ T1107] bond4 (unregistering): Released all slaves [ 229.652247][ T1107] bond5 (unregistering): Released all slaves [ 229.740852][ T1107] bond6 (unregistering): Released all slaves [ 229.891578][ T1107] bond7 (unregistering): Released all slaves [ 229.912170][ T8646] bridge0: port 3(syz_tun) entered blocking state [ 229.919279][ T8646] bridge0: port 3(syz_tun) entered disabled state [ 229.938203][ T8646] syz_tun: entered allmulticast mode [ 229.970459][ T8646] syz_tun: left allmulticast mode [ 229.997794][ T8649] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 230.180373][ T8652] bond5: (slave wlan1): Releasing active interface [ 230.226474][ T1107] tipc: Left network mode [ 230.645234][ T30] audit: type=1326 audit(1760339557.839:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.0.1016" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0 [ 230.645400][ T5925] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 230.666519][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.781879][ T8681] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 230.788423][ T8681] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.885452][ T8681] vhci_hcd vhci_hcd.0: Device attached [ 230.922867][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 230.973206][ T5925] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 230.997851][ T5925] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 231.215311][ T5925] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.227781][ T5925] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 231.251602][ T5925] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 231.270779][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.280918][ T5925] usb 2-1: Product: syz [ 231.285332][ T5925] usb 2-1: Manufacturer: syz [ 231.289940][ T5925] usb 2-1: SerialNumber: syz [ 231.313163][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 231.324636][ T5925] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input16 [ 231.525373][ T5925] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 231.549313][ T5925] (id 0x00) [ 231.569783][ T1107] hsr_slave_0: left promiscuous mode [ 231.596626][ T1107] hsr_slave_1: left promiscuous mode [ 231.607249][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.633406][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.671559][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.720325][ T5925] rc_core: IR keymap rc-imon-pad not found [ 231.737093][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.782966][ T5925] Registered IR keymap rc-empty [ 231.797595][ T5925] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 231.822718][ T5925] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 231.864768][ T8682] vhci_hcd: connection closed [ 231.872966][ T36] vhci_hcd: stop threads [ 231.907298][ T5925] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 231.926535][ T1107] veth1_macvtap: left promiscuous mode [ 231.933347][ T1107] veth0_macvtap: left promiscuous mode [ 231.949481][ T36] vhci_hcd: release socket [ 231.959706][ T36] vhci_hcd: disconnect device [ 231.980132][ T1107] veth1_vlan: left promiscuous mode [ 231.997165][ T5925] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input17 [ 232.001329][ T1107] veth0_vlan: left promiscuous mode [ 232.104774][ T5925] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:17> initialized [ 232.205349][ T1218] vhci_hcd: vhci_device speed not set [ 232.667796][ T8717] netlink: 'syz.2.1028': attribute type 1 has an invalid length. [ 233.410324][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 233.481729][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 233.877962][ T1218] usb 2-1: USB disconnect, device number 17 [ 234.158454][ T8717] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 234.556213][ T8746] bridge0: port 3(syz_tun) entered blocking state [ 234.637556][ T8746] bridge0: port 3(syz_tun) entered disabled state [ 234.654303][ T30] audit: type=1326 audit(1760339561.859:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.1035" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64539 code=0x0 [ 234.656011][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 234.696569][ T8746] syz_tun: entered allmulticast mode [ 234.704864][ T8746] syz_tun: entered promiscuous mode [ 234.727033][ T8746] bridge0: port 3(syz_tun) entered blocking state [ 234.733851][ T8746] bridge0: port 3(syz_tun) entered forwarding state [ 234.743138][ T8752] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 234.810365][ T8752] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 234.820668][ T8752] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 234.865026][ T8761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 234.871600][ T8761] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.885508][ T8761] vhci_hcd vhci_hcd.0: Device attached [ 234.894994][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 234.982197][ T8752] bond3: (slave vcan1): making interface the new active one [ 234.990590][ T8752] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 235.000068][ T8764] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 235.023602][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 235.124888][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.135524][ T5925] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 235.359163][ T5908] pwc: Logitech/Cisco VT Camera webcam detected. [ 235.761843][ T8779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.763389][ T5908] pwc: send_video_command error -71 [ 235.810995][ T5908] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 235.844609][ T5908] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 235.901062][ T5908] usb 4-1: USB disconnect, device number 7 [ 235.980592][ T8762] vhci_hcd: connection reset by peer [ 236.030003][ T1151] vhci_hcd: stop threads [ 236.034332][ T1151] vhci_hcd: release socket [ 236.074247][ T1151] vhci_hcd: disconnect device [ 236.122876][ T8789] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 236.167069][ T8789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.245350][ T5887] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 236.262293][ T8789] bond6: (slave veth5): Enslaving as an active interface with a down link [ 236.425624][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 236.440168][ T5887] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 236.478138][ T5887] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 236.552591][ T5887] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.572630][ T5887] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 236.599660][ T5887] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 236.637304][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.657604][ T5887] usb 1-1: Product: syz [ 236.661825][ T5887] usb 1-1: Manufacturer: syz [ 236.689768][ T5887] usb 1-1: SerialNumber: syz [ 236.742697][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 236.763837][ T5887] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input18 [ 237.101241][ T5887] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 237.140921][ T5887] (id 0x00) [ 237.275447][ T5887] rc_core: IR keymap rc-imon-pad not found [ 237.305103][ T5887] Registered IR keymap rc-empty [ 237.323576][ T5887] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 237.352068][ T5887] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 237.416582][ T5887] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 237.464265][ T5887] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input19 [ 237.530490][ T5887] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:16> initialized [ 238.298419][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 238.450988][ T8841] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 238.546456][ T5894] IPVS: starting estimator thread 0... [ 238.571819][ T8841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.792562][ T8845] IPVS: using max 31 ests per chain, 74400 per kthread [ 238.836352][ T8848] bond6: (slave veth5): Enslaving as an active interface with a down link [ 239.483823][ T8871] netlink: 'syz.5.1064': attribute type 6 has an invalid length. [ 239.988301][ T5970] usb 1-1: USB disconnect, device number 16 [ 240.285253][ T5925] vhci_hcd: vhci_device speed not set [ 241.136567][ T8913] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 241.349342][ T8916] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.400737][ T8916] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 241.426659][ T8921] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 241.489492][ T8913] macvlan4: entered promiscuous mode [ 241.500633][ T8913] macvlan4: entered allmulticast mode [ 241.507323][ T8913] bond7: entered promiscuous mode [ 241.534869][ T8913] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 241.554244][ T8913] bond7: left promiscuous mode [ 241.620392][ T8918] bond7: (slave gretap1): making interface the new active one [ 241.632195][ T8918] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 241.703280][ T8926] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 241.750968][ T8926] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 241.778419][ T8926] bond7: (slave vcan1): making interface the new active one [ 241.786812][ T8926] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 241.821207][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 241.971377][ T8927] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.915231][ T5970] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.085217][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 243.097116][ T5970] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 243.109250][ T5970] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 243.135198][ T5970] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.158267][ T5970] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 243.207500][ T5970] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 243.235582][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.244458][ T5970] usb 3-1: Product: syz [ 243.250182][ T5970] usb 3-1: Manufacturer: syz [ 243.254798][ T5970] usb 3-1: SerialNumber: syz [ 243.283670][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 243.302780][ T5970] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input20 [ 243.535285][ T5970] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 243.549438][ T5970] (id 0x00) [ 243.695227][ T5970] rc_core: IR keymap rc-imon-pad not found [ 243.724178][ T5970] Registered IR keymap rc-empty [ 243.741938][ T5970] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 243.764832][ T5970] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 243.796345][ T5970] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 243.820761][ T5970] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input21 [ 243.855599][ T5970] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:14> initialized [ 244.172128][ T8965] imon:vfd_write: invalid payload size [ 244.189515][ T5925] usb 3-1: USB disconnect, device number 14 [ 244.264584][ T30] audit: type=1326 audit(1760339571.469:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.5.1110" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f76539 code=0x0 [ 244.527953][ T9006] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 244.534584][ T9006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 244.609479][ T9006] vhci_hcd vhci_hcd.0: Device attached [ 244.783982][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 244.855868][ T5925] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 245.073344][ T9012] vhci_hcd: connection reset by peer [ 245.087926][ T1107] vhci_hcd: stop threads [ 245.105204][ T1107] vhci_hcd: release socket [ 245.116961][ T1107] vhci_hcd: disconnect device [ 245.465449][ T5894] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 245.625537][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 245.637540][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.662629][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.677644][ T5894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.695207][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.703953][ T5894] usb 2-1: Product: syz [ 245.725455][ T5894] usb 2-1: Manufacturer: syz [ 245.730105][ T5894] usb 2-1: SerialNumber: syz [ 245.895302][ T5908] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 245.962132][ T5894] usb 2-1: 0:2 : does not exist [ 245.968482][ T5894] usb 2-1: unit 9 not found! [ 245.998240][ T5894] usb 2-1: USB disconnect, device number 18 [ 246.051568][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.082965][ T5908] usb 6-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 246.109173][ T9054] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 246.279922][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.312174][ T5908] pwc: Logitech/Cisco VT Camera webcam detected. [ 246.509098][ T5908] pwc: Failed to set LED on/off time (-71) [ 246.519511][ T5908] pwc: send_video_command error -71 [ 246.524765][ T5908] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 246.538914][ T5908] Philips webcam 6-1:127.0: probe with driver Philips webcam failed with error -71 [ 246.560426][ T5908] usb 6-1: USB disconnect, device number 10 [ 246.705259][ T5894] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 246.802845][ T30] audit: type=1326 audit(1760339574.009:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.1.1138" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94539 code=0x0 [ 246.864913][ T9076] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 246.871535][ T9076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.882142][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 246.889458][ T9076] vhci_hcd vhci_hcd.0: Device attached [ 246.908758][ T5894] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 246.925741][ T5894] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 246.935326][ T5894] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 246.962653][ T5894] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 246.987219][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 246.997124][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 247.021279][ T5894] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 247.030442][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.054100][ T5894] usb 1-1: Product: syz [ 247.064865][ T5894] usb 1-1: Manufacturer: syz [ 247.078116][ T5894] usb 1-1: SerialNumber: syz [ 247.087777][ T5894] usb 1-1: config 0 descriptor?? [ 247.114259][ T5894] hub 1-1:0.0: bad descriptor, ignoring hub [ 247.141784][ T5894] hub 1-1:0.0: probe with driver hub failed with error -5 [ 247.145276][ T5908] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 247.284318][ T9082] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 247.318070][ T9082] kvm: pic: non byte read [ 247.346940][ T9082] kvm: pic: non byte read [ 247.371892][ T9082] kvm: pic: non byte read [ 247.390851][ T9082] kvm: pic: non byte read [ 247.410482][ T9082] kvm: pic: non byte read [ 247.459860][ T5894] usb 1-1: USB disconnect, device number 17 [ 247.593826][ T9077] vhci_hcd: connection reset by peer [ 247.599810][ T1107] vhci_hcd: stop threads [ 247.604089][ T1107] vhci_hcd: release socket [ 247.628108][ T1107] vhci_hcd: disconnect device [ 247.704919][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 249.059906][ T9132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1158'. [ 249.229010][ T30] audit: type=1326 audit(1760339576.429:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.5.1159" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f76539 code=0x0 [ 249.319962][ T9138] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 249.326583][ T9138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.352247][ T9138] vhci_hcd vhci_hcd.0: Device attached [ 249.990822][ T9143] vhci_hcd: connection reset by peer [ 250.005019][ T3009] vhci_hcd: stop threads [ 250.018925][ T3009] vhci_hcd: release socket [ 250.244229][ T3009] vhci_hcd: disconnect device [ 250.342959][ T5925] vhci_hcd: vhci_device speed not set [ 250.403631][ T9160] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 250.414121][ T9160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.015278][ T5887] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 251.167170][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.185315][ T5887] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.221849][ T5887] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 251.243752][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 251.257848][ T5887] usb 3-1: Product: syz [ 251.262047][ T5887] usb 3-1: SerialNumber: syz [ 251.274963][ T5887] usb 3-1: config 0 descriptor?? [ 251.882544][ T30] audit: type=1326 audit(1760339579.089:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.5.1183" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f76539 code=0x0 [ 251.940013][ T9197] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 251.946658][ T9197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.992962][ T9197] vhci_hcd vhci_hcd.0: Device attached [ 252.019482][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 252.265353][ T5925] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 252.286214][ T5908] vhci_hcd: vhci_device speed not set [ 252.681494][ T9198] vhci_hcd: connection reset by peer [ 252.696050][ T2987] vhci_hcd: stop threads [ 252.713889][ T2987] vhci_hcd: release socket [ 252.727082][ T2987] vhci_hcd: disconnect device [ 253.821451][ T5970] usb 3-1: USB disconnect, device number 15 [ 254.275280][ T5970] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 254.485605][ T5970] usb 3-1: Using ep0 maxpacket: 8 [ 254.492737][ T5970] usb 3-1: unable to get BOS descriptor or descriptor too short [ 254.504405][ T5970] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 254.514324][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.530960][ T5970] usb 3-1: Product: syz [ 254.562074][ T5970] usb 3-1: Manufacturer: syz [ 254.580616][ T5970] usb 3-1: SerialNumber: syz [ 254.852425][ T5970] asix 3-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 254.902978][ T5970] asix 3-1:7.0: probe with driver asix failed with error -71 [ 254.949968][ T5970] usb 3-1: USB disconnect, device number 16 [ 255.080485][ T9291] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 255.151356][ T9291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.319395][ T9297] bond5: (slave veth3): Enslaving as an active interface with a down link [ 255.741255][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.748456][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.807849][ T5970] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 255.988023][ T5970] usb 1-1: Using ep0 maxpacket: 8 [ 256.020250][ T5970] usb 1-1: config 199 has an invalid interface number: 2 but max is 0 [ 256.035299][ T5970] usb 1-1: config 199 has no interface number 0 [ 256.041858][ T5970] usb 1-1: config 199 interface 2 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 256.061742][ T5970] usb 1-1: config 199 interface 2 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 256.075765][ T5970] usb 1-1: config 199 interface 2 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 256.324663][ T5970] usb 1-1: config 199 interface 2 has no altsetting 0 [ 256.335674][ T5970] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e1.c7 [ 256.342425][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 256.355250][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.395683][ T5970] usb 1-1: Product: syz [ 256.407254][ T5970] usb 1-1: Manufacturer: syz [ 256.446068][ T5970] usb 1-1: SerialNumber: syz [ 256.750803][ T5970] usb 1-1: USB disconnect, device number 18 [ 256.774276][ T5970] ================================================================== [ 256.782385][ T5970] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 256.790120][ T5970] Read of size 8 at addr ffff8880793258a0 by task kworker/0:7/5970 [ 256.798031][ T5970] [ 256.800384][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 256.800409][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.800422][ T5970] Workqueue: usb_hub_wq hub_event [ 256.800451][ T5970] Call Trace: [ 256.800460][ T5970] [ 256.800469][ T5970] dump_stack_lvl+0x189/0x250 [ 256.800491][ T5970] ? __kasan_check_byte+0x12/0x40 [ 256.800514][ T5970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.800532][ T5970] ? lock_release+0x4b/0x3e0 [ 256.800556][ T5970] ? __virt_addr_valid+0x4a5/0x5c0 [ 256.800576][ T5970] print_report+0xca/0x240 [ 256.800597][ T5970] ? hdm_disconnect+0x10d/0x1c0 [ 256.800613][ T5970] kasan_report+0x118/0x150 [ 256.800635][ T5970] ? hdm_disconnect+0x10d/0x1c0 [ 256.800654][ T5970] hdm_disconnect+0x10d/0x1c0 [ 256.800672][ T5970] usb_unbind_interface+0x26e/0x910 [ 256.800695][ T5970] ? __pfx_usb_unbind_interface+0x10/0x10 [ 256.800714][ T5970] device_release_driver_internal+0x4d9/0x800 [ 256.800741][ T5970] bus_remove_device+0x34d/0x410 [ 256.800761][ T5970] device_del+0x511/0x8e0 [ 256.800784][ T5970] ? __pfx_device_del+0x10/0x10 [ 256.800804][ T5970] ? kobject_put+0x446/0x480 [ 256.800829][ T5970] usb_disable_device+0x3e9/0x8a0 [ 256.800860][ T5970] usb_disconnect+0x330/0x950 [ 256.800888][ T5970] hub_event+0x1cf5/0x4a20 [ 256.800915][ T5970] ? do_raw_spin_lock+0x121/0x290 [ 256.800935][ T5970] ? register_lock_class+0x51/0x320 [ 256.800962][ T5970] ? __pfx_hub_event+0x10/0x10 [ 256.800979][ T5970] ? process_scheduled_works+0x9ef/0x17b0 [ 256.801005][ T5970] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.801039][ T5970] ? process_scheduled_works+0x9ef/0x17b0 [ 256.801063][ T5970] ? process_scheduled_works+0x9ef/0x17b0 [ 256.801088][ T5970] process_scheduled_works+0xae1/0x17b0 [ 256.801124][ T5970] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.801154][ T5970] worker_thread+0x8a0/0xda0 [ 256.801179][ T5970] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.801207][ T5970] ? __kthread_parkme+0x7b/0x200 [ 256.801236][ T5970] kthread+0x711/0x8a0 [ 256.801255][ T5970] ? __pfx_worker_thread+0x10/0x10 [ 256.801277][ T5970] ? __pfx_kthread+0x10/0x10 [ 256.801295][ T5970] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.801319][ T5970] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.801335][ T5970] ? __pfx_kthread+0x10/0x10 [ 256.801352][ T5970] ret_from_fork+0x4bc/0x870 [ 256.801375][ T5970] ? __pfx_ret_from_fork+0x10/0x10 [ 256.801399][ T5970] ? __switch_to_asm+0x39/0x70 [ 256.801419][ T5970] ? __switch_to_asm+0x33/0x70 [ 256.801438][ T5970] ? __pfx_kthread+0x10/0x10 [ 256.801456][ T5970] ret_from_fork_asm+0x1a/0x30 [ 256.801482][ T5970] [ 256.801490][ T5970] [ 257.056684][ T5970] Allocated by task 5970: [ 257.061003][ T5970] kasan_save_track+0x3e/0x80 [ 257.065678][ T5970] __kasan_kmalloc+0x93/0xb0 [ 257.070267][ T5970] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 257.075626][ T5970] hdm_probe+0x96/0x1400 [ 257.079854][ T5970] usb_probe_interface+0x668/0xc30 [ 257.084954][ T5970] really_probe+0x26d/0x9e0 [ 257.089449][ T5970] __driver_probe_device+0x18c/0x2f0 [ 257.094724][ T5970] driver_probe_device+0x4f/0x430 [ 257.099740][ T5970] __device_attach_driver+0x2ce/0x530 [ 257.105191][ T5970] bus_for_each_drv+0x251/0x2e0 [ 257.110032][ T5970] __device_attach+0x2b8/0x400 [ 257.114787][ T5970] bus_probe_device+0x185/0x260 [ 257.119623][ T5970] device_add+0x7b6/0xb50 [ 257.123955][ T5970] usb_set_configuration+0x1a87/0x20e0 [ 257.129399][ T5970] usb_generic_driver_probe+0x8d/0x150 [ 257.134854][ T5970] usb_probe_device+0x1c4/0x390 [ 257.139690][ T5970] really_probe+0x26d/0x9e0 [ 257.144191][ T5970] __driver_probe_device+0x18c/0x2f0 [ 257.149482][ T5970] driver_probe_device+0x4f/0x430 [ 257.154498][ T5970] __device_attach_driver+0x2ce/0x530 [ 257.159855][ T5970] bus_for_each_drv+0x251/0x2e0 [ 257.164697][ T5970] __device_attach+0x2b8/0x400 [ 257.169449][ T5970] bus_probe_device+0x185/0x260 [ 257.174283][ T5970] device_add+0x7b6/0xb50 [ 257.178701][ T5970] usb_new_device+0xa39/0x16f0 [ 257.183454][ T5970] hub_event+0x2958/0x4a20 [ 257.187855][ T5970] process_scheduled_works+0xae1/0x17b0 [ 257.193395][ T5970] worker_thread+0x8a0/0xda0 [ 257.197977][ T5970] kthread+0x711/0x8a0 [ 257.202033][ T5970] ret_from_fork+0x4bc/0x870 [ 257.206611][ T5970] ret_from_fork_asm+0x1a/0x30 [ 257.211374][ T5970] [ 257.213682][ T5970] Freed by task 5970: [ 257.217648][ T5970] kasan_save_track+0x3e/0x80 [ 257.222316][ T5970] __kasan_save_free_info+0x46/0x50 [ 257.227502][ T5970] __kasan_slab_free+0x5c/0x80 [ 257.232270][ T5970] kfree+0x19a/0x6d0 [ 257.236155][ T5970] device_release+0x9c/0x1c0 [ 257.240736][ T5970] kobject_put+0x22b/0x480 [ 257.245397][ T5970] hdm_disconnect+0xf3/0x1c0 [ 257.249971][ T5970] usb_unbind_interface+0x26e/0x910 [ 257.255238][ T5970] device_release_driver_internal+0x4d9/0x800 [ 257.261294][ T5970] bus_remove_device+0x34d/0x410 [ 257.266221][ T5970] device_del+0x511/0x8e0 [ 257.270537][ T5970] usb_disable_device+0x3e9/0x8a0 [ 257.275553][ T5970] usb_disconnect+0x330/0x950 [ 257.280221][ T5970] hub_event+0x1cf5/0x4a20 [ 257.284623][ T5970] process_scheduled_works+0xae1/0x17b0 [ 257.290158][ T5970] worker_thread+0x8a0/0xda0 [ 257.294737][ T5970] kthread+0x711/0x8a0 [ 257.298797][ T5970] ret_from_fork+0x4bc/0x870 [ 257.303377][ T5970] ret_from_fork_asm+0x1a/0x30 [ 257.308128][ T5970] [ 257.310524][ T5970] The buggy address belongs to the object at ffff888079324000 [ 257.310524][ T5970] which belongs to the cache kmalloc-8k of size 8192 [ 257.324996][ T5970] The buggy address is located 6304 bytes inside of [ 257.324996][ T5970] freed 8192-byte region [ffff888079324000, ffff888079326000) [ 257.338954][ T5970] [ 257.341273][ T5970] The buggy address belongs to the physical page: [ 257.347678][ T5970] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79320 [ 257.356434][ T5970] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 257.364919][ T5970] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 257.372918][ T5970] page_type: f5(slab) [ 257.376892][ T5970] raw: 00fff00000000040 ffff88813ffa7280 0000000000000000 0000000000000001 [ 257.385547][ T5970] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 257.394118][ T5970] head: 00fff00000000040 ffff88813ffa7280 0000000000000000 0000000000000001 [ 257.402774][ T5970] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 257.411431][ T5970] head: 00fff00000000003 ffffea0001e4c801 00000000ffffffff 00000000ffffffff [ 257.420110][ T5970] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 257.429198][ T5970] page dumped because: kasan: bad access detected [ 257.435608][ T5970] page_owner tracks the page as allocated [ 257.441305][ T5970] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5847, tgid 5847 (syz-executor), ts 78844017658, free_ts 78801953051 [ 257.461001][ T5970] post_alloc_hook+0x240/0x2a0 [ 257.465755][ T5970] get_page_from_freelist+0x2365/0x2440 [ 257.471299][ T5970] __alloc_frozen_pages_noprof+0x181/0x370 [ 257.477101][ T5970] alloc_pages_mpol+0x232/0x4a0 [ 257.481939][ T5970] allocate_slab+0x96/0x3a0 [ 257.486434][ T5970] ___slab_alloc+0xe94/0x18a0 [ 257.491101][ T5970] __slab_alloc+0x65/0x100 [ 257.495505][ T5970] __kvmalloc_node_noprof+0x6ba/0x910 [ 257.500867][ T5970] pfifo_fast_init+0x242/0x6c0 [ 257.505634][ T5970] qdisc_create_dflt+0x13b/0x4e0 [ 257.510565][ T5970] dev_activate+0x378/0x1150 [ 257.515147][ T5970] __dev_open+0x69c/0x880 [ 257.519465][ T5970] __dev_change_flags+0x1ea/0x6d0 [ 257.524488][ T5970] netif_change_flags+0x88/0x1a0 [ 257.529416][ T5970] do_setlink+0xc55/0x41c0 [ 257.533828][ T5970] rtnl_newlink+0x1619/0x1c80 [ 257.538491][ T5970] page last free pid 3491 tgid 3491 stack trace: [ 257.544800][ T5970] __free_frozen_pages+0xbc4/0xd30 [ 257.549903][ T5970] __put_partials+0x146/0x170 [ 257.554567][ T5970] put_cpu_partial+0x1f2/0x2e0 [ 257.559317][ T5970] __slab_free+0x2b9/0x390 [ 257.563723][ T5970] qlist_free_all+0x97/0x140 [ 257.568300][ T5970] kasan_quarantine_reduce+0x148/0x160 [ 257.573741][ T5970] __kasan_slab_alloc+0x22/0x80 [ 257.578599][ T5970] __kmalloc_cache_noprof+0x36f/0x6f0 [ 257.583970][ T5970] __ipv6_dev_mc_inc+0x44f/0xa50 [ 257.588909][ T5970] addrconf_dad_work+0x3d0/0x14b0 [ 257.593925][ T5970] process_scheduled_works+0xae1/0x17b0 [ 257.599458][ T5970] worker_thread+0x8a0/0xda0 [ 257.604037][ T5970] kthread+0x711/0x8a0 [ 257.608091][ T5970] ret_from_fork+0x4bc/0x870 [ 257.612670][ T5970] ret_from_fork_asm+0x1a/0x30 [ 257.617425][ T5970] [ 257.619732][ T5970] Memory state around the buggy address: [ 257.625347][ T5970] ffff888079325780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.633419][ T5970] ffff888079325800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.641478][ T5970] >ffff888079325880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.649524][ T5970] ^ [ 257.654617][ T5970] ffff888079325900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.662672][ T5970] ffff888079325980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.670717][ T5970] ================================================================== [ 257.712546][ T5970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 257.719800][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 257.729196][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.739265][ T5970] Workqueue: usb_hub_wq hub_event [ 257.744294][ T5970] Call Trace: [ 257.747560][ T5970] [ 257.750482][ T5970] dump_stack_lvl+0x99/0x250 [ 257.755077][ T5970] ? __asan_memcpy+0x40/0x70 [ 257.759654][ T5970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.764836][ T5970] ? __pfx__printk+0x10/0x10 [ 257.769422][ T5970] vpanic+0x237/0x6d0 [ 257.773403][ T5970] ? __pfx_vpanic+0x10/0x10 [ 257.777898][ T5970] ? preempt_schedule+0xae/0xc0 [ 257.782746][ T5970] ? __pfx_preempt_schedule+0x10/0x10 [ 257.788112][ T5970] panic+0xb9/0xc0 [ 257.791825][ T5970] ? __pfx_panic+0x10/0x10 [ 257.796234][ T5970] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 257.802125][ T5970] ? hdm_disconnect+0x10d/0x1c0 [ 257.806962][ T5970] check_panic_on_warn+0x89/0xb0 [ 257.811904][ T5970] ? hdm_disconnect+0x10d/0x1c0 [ 257.816763][ T5970] end_report+0x78/0x160 [ 257.821007][ T5970] kasan_report+0x129/0x150 [ 257.825505][ T5970] ? hdm_disconnect+0x10d/0x1c0 [ 257.830345][ T5970] hdm_disconnect+0x10d/0x1c0 [ 257.835099][ T5970] usb_unbind_interface+0x26e/0x910 [ 257.840298][ T5970] ? __pfx_usb_unbind_interface+0x10/0x10 [ 257.846028][ T5970] device_release_driver_internal+0x4d9/0x800 [ 257.852092][ T5970] bus_remove_device+0x34d/0x410 [ 257.857020][ T5970] device_del+0x511/0x8e0 [ 257.861343][ T5970] ? __pfx_device_del+0x10/0x10 [ 257.866183][ T5970] ? kobject_put+0x446/0x480 [ 257.870767][ T5970] usb_disable_device+0x3e9/0x8a0 [ 257.875819][ T5970] usb_disconnect+0x330/0x950 [ 257.880498][ T5970] hub_event+0x1cf5/0x4a20 [ 257.884913][ T5970] ? do_raw_spin_lock+0x121/0x290 [ 257.889929][ T5970] ? register_lock_class+0x51/0x320 [ 257.895127][ T5970] ? __pfx_hub_event+0x10/0x10 [ 257.899881][ T5970] ? process_scheduled_works+0x9ef/0x17b0 [ 257.905605][ T5970] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.910802][ T5970] ? process_scheduled_works+0x9ef/0x17b0 [ 257.916545][ T5970] ? process_scheduled_works+0x9ef/0x17b0 [ 257.922258][ T5970] process_scheduled_works+0xae1/0x17b0 [ 257.927803][ T5970] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.933777][ T5970] worker_thread+0x8a0/0xda0 [ 257.938369][ T5970] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.944703][ T5970] ? __kthread_parkme+0x7b/0x200 [ 257.949650][ T5970] kthread+0x711/0x8a0 [ 257.953724][ T5970] ? __pfx_worker_thread+0x10/0x10 [ 257.958828][ T5970] ? __pfx_kthread+0x10/0x10 [ 257.963408][ T5970] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.968599][ T5970] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.973971][ T5970] ? __pfx_kthread+0x10/0x10 [ 257.978636][ T5970] ret_from_fork+0x4bc/0x870 [ 257.983219][ T5970] ? __pfx_ret_from_fork+0x10/0x10 [ 257.988322][ T5970] ? __switch_to_asm+0x39/0x70 [ 257.993073][ T5970] ? __switch_to_asm+0x33/0x70 [ 257.997823][ T5970] ? __pfx_kthread+0x10/0x10 [ 258.002396][ T5970] ret_from_fork_asm+0x1a/0x30 [ 258.007156][ T5970] [ 258.010434][ T5970] Kernel Offset: disabled [ 258.014748][ T5970] Rebooting in 86400 seconds..