last executing test programs: 5.350762682s ago: executing program 1 (id=1270): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="010000000000fcab5e60c500000048000300", @ANYRES32=r7, @ANYBLOB="70003300808000000802110000000802110000005050505050500000fefec240000000000000000004000200000602020202020201000406800000000700050309f00725030174092d1a200012fc01000004000000070000000b00000082c70104000007dd0ab83ba2c297ed037d530c"], 0x8c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r0, @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYRES8=r8], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {0x6}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc}}]}, 0x3c}}, 0x4000) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000002010300000000000000000002000005300002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000400000bb"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000005, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r9, 0x4010744d, 0x20000000) 5.0152289s ago: executing program 1 (id=1275): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 4.88231231s ago: executing program 1 (id=1276): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) 4.81710199s ago: executing program 1 (id=1278): r0 = socket$inet(0x2, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4.736439589s ago: executing program 1 (id=1280): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001400000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.033037537s ago: executing program 3 (id=1292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x6a, &(0x7f0000000500)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "166e70", 0x30, 0x3a, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0xd, 0x6, "422aab", 0x2, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) accept4(r1, 0x0, &(0x7f0000000180), 0x800) 2.936959982s ago: executing program 0 (id=1295): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="be", 0x1}, {0x0}], 0x2, 0xf, 0x3) 2.936871192s ago: executing program 3 (id=1296): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES64=r0], 0x1c}}, 0x0) 2.787169762s ago: executing program 0 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f00000000c0)=@ethtool_eee={0x45, 0x8, 0x8, 0x4, 0x4, 0x1ff, 0x0, 0x5, [0x8001, 0x3]}}) socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x3, 0x2, 0x4, 0x40221, r2, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x1, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x2}, 0x38) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) 2.730453351s ago: executing program 3 (id=1300): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) 2.59719066s ago: executing program 3 (id=1303): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r0, 0x0, &(0x7f0000000140)) 2.45255924s ago: executing program 3 (id=1307): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r2, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) 2.311227579s ago: executing program 3 (id=1308): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.179157179s ago: executing program 4 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000200000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000013f8000000200002000a00000000000000ff020000000000000000000000000001000000000d000100753a73"], 0x6c}}, 0x0) 2.086469739s ago: executing program 4 (id=1314): r0 = socket$inet(0x2, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.037548268s ago: executing program 0 (id=1315): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 1.975677718s ago: executing program 4 (id=1316): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000021c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0xc, 0x8000}}, 0x30) 1.967528818s ago: executing program 0 (id=1317): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 1.076968255s ago: executing program 4 (id=1320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x4, 0x4000000000, 0x8, 0xfffffffffffffffe, 0x0, 0x100], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 760.240363ms ago: executing program 0 (id=1321): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) write$cgroup_int(r0, &(0x7f0000000140)=0xfffffffffffff1a2, 0x12) add_key(&(0x7f0000000d00)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x6, 0x2031, 0xffffffffffffffff, 0xdb743000) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 614.475752ms ago: executing program 4 (id=1322): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 515.058912ms ago: executing program 4 (id=1323): rename(&(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000540)='./cgroup.cpu/cpuset.cpus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1d", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0, r2]}}], 0x14}, 0x0) recvmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2062, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000aa8cc829"], 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r4, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}]}]}]}, 0x3c}}, 0x0) 485.596352ms ago: executing program 0 (id=1324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xce1, &(0x7f0000000100)={0x0, 0x8ddc, 0x10310, 0xfffffffe, 0x4a, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240), 0x0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, 0x0) read$alg(r7, &(0x7f0000000240)=""/91, 0x5b) 347.182121ms ago: executing program 1 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f00000000c0)=@ethtool_eee={0x45, 0x8, 0x8, 0x4, 0x4, 0x1ff, 0x0, 0x5, [0x8001, 0x3]}}) socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x3, 0x2, 0x4, 0x40221, r2, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x1, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x2}, 0x38) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) 207.08293ms ago: executing program 2 (id=1326): r0 = socket$inet(0x2, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 182.23144ms ago: executing program 2 (id=1327): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 136.94165ms ago: executing program 2 (id=1328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000000000)={'veth0_to_bond\x00'}) 51.37443ms ago: executing program 2 (id=1329): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000002340)={0x4b, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x8, 0x20582a, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) 46.44572ms ago: executing program 2 (id=1330): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0}) 0s ago: executing program 2 (id=1331): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) kernel console output (not intermixed with test programs): T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.110481][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.122145][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.130682][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.141268][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.149896][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.175027][ T4175] device veth0_macvtap entered promiscuous mode [ 56.182824][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.192043][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.201060][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.210068][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.237483][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.248561][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.257992][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.266981][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.276444][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.285103][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.293473][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.301967][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.310234][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.318895][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.329866][ T4175] device veth1_macvtap entered promiscuous mode [ 56.345098][ T4182] device veth0_vlan entered promiscuous mode [ 56.355069][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.363889][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.373061][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.381264][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.389625][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.407172][ T4182] device veth1_vlan entered promiscuous mode [ 56.427259][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.438467][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.453600][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.474049][ T4186] device veth0_macvtap entered promiscuous mode [ 56.495341][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.507159][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.518805][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.528736][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.537660][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.547105][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.555635][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.585760][ T4186] device veth1_macvtap entered promiscuous mode [ 56.607979][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.625329][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.637109][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.663836][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.679095][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.689150][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.699643][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.710556][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.718205][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.727385][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.736665][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.745438][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.753769][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.762518][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.771518][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.782531][ T4175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.793316][ T4175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.802414][ T4175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.812560][ T4175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.824046][ T4182] device veth0_macvtap entered promiscuous mode [ 56.845929][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.857157][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.867551][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.878004][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.889572][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.904324][ T4182] device veth1_macvtap entered promiscuous mode [ 56.917159][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.926000][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.933789][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.942869][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.965198][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.973996][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.989002][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.997777][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.013737][ T3140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.015103][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.026969][ T3140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.029756][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.045950][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.091701][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.103175][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.114199][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.126275][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.136126][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.146798][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.158125][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.173459][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.184522][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.194559][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.206898][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.216886][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.227603][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.239078][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.259803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.269069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.278837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.288651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.308282][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.318183][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.328359][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.339186][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.348102][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.369427][ T356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.383258][ T356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.397216][ T3044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.415475][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.432936][ T3044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.488470][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.527677][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.541465][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.552659][ T3044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.575030][ T3044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.607161][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 57.619778][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.627588][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 57.635442][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.647384][ T356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.660122][ T356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.679222][ T3044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.688468][ T4217] Bluetooth: hci4: command 0x040f tx timeout [ 57.695208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.705167][ T4217] Bluetooth: hci1: command 0x040f tx timeout [ 57.711732][ T3044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.720640][ T4217] Bluetooth: hci3: command 0x040f tx timeout [ 57.725734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.761945][ T4249] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 57.788029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.800693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.820653][ T4174] device veth0_vlan entered promiscuous mode [ 57.829523][ T356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.841019][ T356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.863271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.875443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.889636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.898045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.913700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.933857][ T4174] device veth1_vlan entered promiscuous mode [ 57.974012][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.990577][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.003761][ T4174] device veth0_macvtap entered promiscuous mode [ 58.048561][ T4174] device veth1_macvtap entered promiscuous mode [ 58.264654][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.273346][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.288205][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.301060][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.319044][ T4270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.321253][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.339878][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.349768][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.360382][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.372077][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.383651][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.398102][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.408678][ T4269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 58.426632][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.436138][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.456577][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.468315][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.500988][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.511836][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.523273][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.534365][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.544237][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.555722][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.567933][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.583923][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.601355][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.644096][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.655608][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.663040][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.672994][ T4276] device bridge_slave_0 left promiscuous mode [ 58.684729][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.700474][ T4276] device bridge_slave_1 left promiscuous mode [ 58.708927][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.721546][ T4276] bond0: (slave bond_slave_0): Releasing backup interface [ 58.741431][ T4276] bond0: (slave bond_slave_1): Releasing backup interface [ 58.772150][ T4276] team0: Port device team_slave_0 removed [ 58.789812][ T4276] team0: Port device team_slave_1 removed [ 58.796598][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.804068][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.815498][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.822892][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.843040][ T4174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.852899][ T4174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.863534][ T4174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.886591][ T4174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.081934][ T3140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.101819][ T3140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.122340][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.193648][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.202645][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.216716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.499519][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.523101][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.538291][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.560658][ T4304] device bridge_slave_0 left promiscuous mode [ 59.567893][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.253355][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 60.256487][ T4304] device bridge_slave_1 left promiscuous mode [ 60.259466][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 60.272194][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 60.278432][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 60.284526][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 60.296143][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.406163][ T4304] bond0: (slave bond_slave_0): Releasing backup interface [ 60.484010][ T4304] bond0: (slave bond_slave_1): Releasing backup interface [ 60.583802][ T4304] team0: Port device team_slave_0 removed [ 60.617684][ T4304] team0: Port device team_slave_1 removed [ 60.624141][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.641955][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.661386][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.679865][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.984379][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 61.137321][ T4357] device wlan0 entered promiscuous mode [ 61.142982][ T4357] device macsec0 entered promiscuous mode [ 61.312273][ T4368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.366280][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.389678][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.436290][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.446862][ T4371] device bridge_slave_0 left promiscuous mode [ 61.453313][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.474746][ T4371] device bridge_slave_1 left promiscuous mode [ 61.481213][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.536153][ T4371] bond0: (slave bond_slave_0): Releasing backup interface [ 61.570559][ T4371] bond0: (slave bond_slave_1): Releasing backup interface [ 61.689559][ T4371] team0: Port device team_slave_0 removed [ 61.739884][ T4371] team0: Port device team_slave_1 removed [ 61.755368][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.780247][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.806116][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.829175][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.893417][ T4368] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 61.977775][ T4368] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 62.050634][ T4395] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 62.060567][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 62.132808][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 62.357271][ T4409] syz.1.58 sent an empty control message without MSG_MORE. [ 62.577607][ T4368] syz.3.46 (4368) used greatest stack depth: 19800 bytes left [ 62.860124][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.867564][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.163913][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.193133][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.458785][ T4406] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.467757][ T4406] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.477205][ T4406] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.486121][ T4406] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.559574][ T4411] netlink: 'syz.4.59': attribute type 39 has an invalid length. [ 63.592289][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 63.628338][ T4406] syz.2.56 (4406) used greatest stack depth: 19096 bytes left [ 63.946461][ T4459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.989634][ T4459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.042763][ T4459] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 64.069012][ T4459] bond0 (unregistering): Released all slaves [ 64.156407][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 64.222605][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 64.370715][ T4488] Zero length message leads to an empty skb [ 64.484863][ T4491] netlink: 'syz.1.85': attribute type 39 has an invalid length. [ 64.597727][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 64.608620][ T4487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'. [ 64.827902][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.857354][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.872916][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.883041][ T4507] device bridge_slave_0 left promiscuous mode [ 64.890081][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.901643][ T4507] device bridge_slave_1 left promiscuous mode [ 64.927501][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.993104][ T4507] team0: Port device team_slave_0 removed [ 65.009944][ T4507] team0: Port device team_slave_1 removed [ 65.017366][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.025528][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.034411][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.041973][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.213187][ T4527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.273519][ T4527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.310758][ T4527] bond0 (unregistering): Released all slaves [ 65.359127][ T4537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.405739][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'. [ 65.420363][ T4540] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 65.453099][ T4540] device bond1 entered promiscuous mode [ 65.461112][ T4540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.469255][ T4537] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 65.508095][ T4537] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 65.536893][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'. [ 65.686632][ T4549] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 65.912110][ T4554] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.206363][ T4562] device bridge0 entered promiscuous mode [ 67.038355][ T4594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.099432][ T4594] netlink: 'syz.4.119': attribute type 10 has an invalid length. [ 67.208847][ T4594] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 67.344804][ T4607] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 67.589693][ T4615] netlink: 232 bytes leftover after parsing attributes in process `syz.0.127'. [ 67.618864][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 67.912381][ T4628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'. [ 67.986137][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 68.962557][ T4637] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.971728][ T4637] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.984570][ T4637] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.993466][ T4637] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.093832][ T4639] __nla_validate_parse: 3 callbacks suppressed [ 69.093848][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 69.141877][ T4652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.209985][ T4648] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 69.233901][ T4648] device bond1 entered promiscuous mode [ 69.244651][ T4648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.252177][ T4651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.142'. [ 69.275468][ T4655] team0: Device macsec1 is already an upper device of the team interface [ 69.297663][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 69.312000][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 69.336420][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 69.364000][ T4664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.402001][ T4664] netlink: 'syz.2.145': attribute type 10 has an invalid length. [ 69.575243][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 69.601678][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 69.620717][ T4664] IPVS: Error connecting to the multicast addr [ 69.916363][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 70.388956][ T4706] netlink: 'syz.1.164': attribute type 3 has an invalid length. [ 70.621726][ T4718] device veth1_macvtap left promiscuous mode [ 70.663607][ T4721] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.827093][ T4728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.870294][ T4728] netlink: 'syz.4.171': attribute type 10 has an invalid length. [ 70.912324][ T4731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.173'. [ 70.983612][ T4734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 71.014815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 71.217483][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.224359][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.712267][ T4755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 71.941755][ T4765] xt_CT: No such helper "snmp" [ 72.062969][ T4776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.190'. [ 72.127032][ T4780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.166024][ T4780] netlink: 'syz.4.193': attribute type 10 has an invalid length. [ 72.654629][ T4693] Set syz1 is full, maxelem 65536 reached [ 73.570502][ T4802] team0: Mode changed to "random" [ 73.780845][ T4816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.821144][ T4816] netlink: 'syz.1.209': attribute type 10 has an invalid length. [ 73.840839][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 74.901739][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.029899][ T4857] __nla_validate_parse: 7 callbacks suppressed [ 75.029914][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 75.150011][ T4862] device wg1 entered promiscuous mode [ 75.166076][ T4862] device vlan2 entered promiscuous mode [ 75.178750][ T4862] device wg1 left promiscuous mode [ 75.356119][ T4875] syz.1.235 uses obsolete (PF_INET,SOCK_PACKET) [ 75.438237][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 75.516602][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 75.656529][ T4893] team0: No ports can be present during mode change [ 75.685721][ T4895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 75.935736][ T4913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 75.940557][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 76.069789][ T4925] team0: Mode changed to "random" [ 76.336043][ T1325] cfg80211: failed to load regulatory.db [ 76.393432][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 76.543158][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 76.573839][ T4953] team0: Mode changed to "random" [ 77.182752][ T4970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.253214][ T4970] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 77.689588][ T4993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.888557][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 77.904533][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.278874][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.312019][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.360080][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.404648][ T4227] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 78.443046][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.569084][ T5049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.598162][ T4227] usb 1-1: config 0 descriptor?? [ 78.740960][ T5053] mmap: syz.3.299 (5053) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.780561][ T5054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.803972][ T5054] netlink: 'syz.4.298': attribute type 10 has an invalid length. [ 79.020886][ T5061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.036225][ T5061] netlink: 'syz.2.301': attribute type 10 has an invalid length. [ 79.122468][ T4227] betop 0003:11C0:5506.0001: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.0-1/input0 [ 79.161345][ T4227] betop 0003:11C0:5506.0001: no inputs found [ 79.314008][ T4227] usb 1-1: USB disconnect, device number 2 [ 79.360741][ T5076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 79.644820][ T5094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.897868][ T5104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.937608][ T5104] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 80.169280][ T5099] Restarting kernel threads ... done. [ 80.196156][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 80.315295][ T5123] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.455628][ T5126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.468124][ T5126] netlink: 'syz.0.323': attribute type 10 has an invalid length. [ 80.496651][ T5126] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.597816][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 80.707025][ T5135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.184479][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.245677][ T5162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.296678][ T5162] netlink: 'syz.2.336': attribute type 10 has an invalid length. [ 81.404737][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 81.464458][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 81.594585][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.620283][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 81.680901][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.720824][ T13] usb 5-1: config 0 descriptor?? [ 81.806409][ T13] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 81.934487][ T4438] Bluetooth: hci2: command 0x0406 tx timeout [ 82.010734][ T5185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.067566][ T5185] netlink: 'syz.2.346': attribute type 10 has an invalid length. [ 82.472893][ T5208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.487269][ T5208] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 82.515862][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 82.704379][ T4227] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.844415][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.954399][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 83.085663][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 83.114584][ T13] gspca_vc032x: reg_w err -71 [ 83.114749][ T4227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.119347][ T13] vc032x: probe of 5-1:0.0 failed with error -71 [ 83.147061][ T13] usb 5-1: USB disconnect, device number 2 [ 83.222431][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.232692][ T4227] usb 2-1: config 4 has an invalid interface number: 146 but max is 0 [ 83.243227][ T4227] usb 2-1: config 4 has no interface number 0 [ 83.249420][ T23] usb 4-1: config 0 has no interfaces? [ 83.256000][ T4227] usb 2-1: config 4 interface 146 has no altsetting 0 [ 83.414544][ T23] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 83.423736][ T4227] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 83.432914][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.440981][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.449025][ T23] usb 4-1: Product: syz [ 83.453165][ T23] usb 4-1: Manufacturer: syz [ 83.457826][ T4227] usb 2-1: Product: syz [ 83.461984][ T4227] usb 2-1: Manufacturer: syz [ 83.466637][ T23] usb 4-1: SerialNumber: syz [ 83.471728][ T4227] usb 2-1: SerialNumber: syz [ 83.479221][ T23] usb 4-1: config 0 descriptor?? [ 83.721844][ T23] usb 4-1: USB disconnect, device number 2 [ 83.824560][ T4227] comedi comedi0: could not set alternate setting 3 in high speed [ 83.840927][ T4227] usbduxsigma 2-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 83.855099][ T4227] usbduxsigma: probe of 2-1:4.146 failed with error -71 [ 83.869105][ T4227] usb 2-1: USB disconnect, device number 2 [ 83.923371][ T5241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.951144][ T5241] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 84.565284][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 85.689534][ T5299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.394'. [ 85.949260][ T26] audit: type=1326 audit(1734824555.903:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 85.982713][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 86.024378][ T26] audit: type=1326 audit(1734824555.903:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.140042][ T26] audit: type=1326 audit(1734824555.953:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.211444][ T26] audit: type=1326 audit(1734824555.953:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.260871][ T26] audit: type=1326 audit(1734824555.953:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.290881][ T5323] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.319542][ T26] audit: type=1326 audit(1734824555.953:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.384359][ T26] audit: type=1326 audit(1734824555.953:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.424114][ T26] audit: type=1326 audit(1734824555.953:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.465960][ T26] audit: type=1326 audit(1734824555.963:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.489161][ T26] audit: type=1326 audit(1734824555.963:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 86.526760][ T5332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.407'. [ 86.823652][ T5352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 86.863722][ T5355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'. [ 87.081982][ T5365] process 'syz.4.422' launched './file0' with NULL argv: empty string added [ 87.350442][ T5384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.429'. [ 87.523511][ T5399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 88.491459][ T5434] netlink: 248 bytes leftover after parsing attributes in process `syz.4.448'. [ 88.894382][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.946321][ T5451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.958276][ T5451] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 88.969118][ T5451] IPVS: Error connecting to the multicast addr [ 88.993573][ T5453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'. [ 89.294682][ T1325] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.303732][ T1325] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.314004][ T1325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.322984][ T1325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 89.344034][ T1325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 89.420929][ T5468] netlink: 248 bytes leftover after parsing attributes in process `syz.1.463'. [ 89.504534][ T1325] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.518092][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.534425][ T1325] usb 5-1: Product: syz [ 89.538856][ T1325] usb 5-1: Manufacturer: syz [ 89.596425][ T1325] cdc_wdm 5-1:1.0: skipping garbage [ 89.601763][ T1325] cdc_wdm 5-1:1.0: skipping garbage [ 89.619738][ T1325] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 89.625776][ T1325] cdc_wdm 5-1:1.0: Unknown control protocol [ 89.805195][ T4227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.179288][ T5493] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 90.203232][ T5493] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 90.289471][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.307861][ T5497] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 90.324675][ T4227] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 90.337282][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.346142][ T4227] usb 3-1: Product: syz [ 90.364904][ T4227] usb 3-1: Manufacturer: syz [ 90.369838][ T4227] usb 3-1: SerialNumber: syz [ 90.412801][ T4227] usb 3-1: config 0 descriptor?? [ 90.416658][ T1325] usb 5-1: USB disconnect, device number 3 [ 91.355865][ T4227] hso 3-1:0.0: Failed to find INT IN ep [ 91.361831][ T4227] usb-storage 3-1:0.0: USB Mass Storage device detected [ 91.450257][ T4227] usb 3-1: USB disconnect, device number 2 [ 91.579338][ T5530] __nla_validate_parse: 2 callbacks suppressed [ 91.579351][ T5530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.487'. [ 91.755934][ T5543] tipc: Started in network mode [ 91.761053][ T5543] tipc: Node identity 080211000001, cluster identity 4711 [ 91.819692][ T5543] tipc: Enabled bearer , priority 0 [ 91.883403][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 91.883417][ T26] audit: type=1326 audit(1734824561.833:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 91.917681][ T5543] syzkaller0: mtu less than device minimum [ 91.934817][ T26] audit: type=1326 audit(1734824561.883:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 91.967144][ T26] audit: type=1326 audit(1734824561.883:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 92.037766][ T26] audit: type=1326 audit(1734824561.883:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 92.486599][ T26] audit: type=1326 audit(1734824561.883:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 92.740481][ T26] audit: type=1326 audit(1734824561.893:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 92.763236][ T26] audit: type=1326 audit(1734824561.893:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 92.935855][ T4227] tipc: Node number set to 134418688 [ 92.990957][ T5583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.502'. [ 93.394433][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.934688][ T4227] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 93.952933][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.956294][ T5631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.516'. [ 93.970298][ T4227] usb 4-1: Product: syz [ 93.979154][ T4227] usb 4-1: Manufacturer: syz [ 93.989410][ T4227] usb 4-1: SerialNumber: syz [ 94.011511][ T4227] usb 4-1: config 0 descriptor?? [ 94.056476][ T4227] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003 [ 94.145145][ T5637] tipc: Started in network mode [ 94.150522][ T5637] tipc: Node identity 080211000001, cluster identity 4711 [ 94.158661][ T5637] tipc: Enabled bearer , priority 0 [ 94.169890][ T5637] syzkaller0: mtu less than device minimum [ 94.386863][ T26] audit: type=1326 audit(1734824564.343:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 94.469874][ T26] audit: type=1326 audit(1734824564.373:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 94.504417][ T4227] (null): failure reading functionality [ 94.551814][ T4227] i2c i2c-1: connected i2c-tiny-usb device [ 94.596440][ T26] audit: type=1326 audit(1734824564.373:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 94.750033][ T4227] usb 4-1: USB disconnect, device number 3 [ 94.885548][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.896188][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.911532][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.052260][ T5687] tipc: Started in network mode [ 95.057354][ T5687] tipc: Node identity 080211000001, cluster identity 4711 [ 95.066578][ T5687] tipc: Enabled bearer , priority 0 [ 95.077518][ T5687] syzkaller0: mtu less than device minimum [ 95.844570][ T4227] tipc: Node number set to 134418688 [ 96.115585][ T23] tipc: Node number set to 134418688 [ 96.272286][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.282074][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.309722][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.348609][ T5728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 96.478597][ T5739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 96.967080][ T4165] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 97.362412][ T4165] Bluetooth: hci4: Injecting HCI hardware error event [ 97.372124][ T4177] Bluetooth: hci4: hardware error 0x00 [ 97.828169][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.870996][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.914756][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.015947][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 99.078800][ T5808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.189986][ T5808] netlink: 'syz.4.564': attribute type 10 has an invalid length. [ 100.450889][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 100.851694][ T5869] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 101.211161][ T5874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.586'. [ 101.323105][ T5876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.378675][ T5876] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 101.456370][ T5879] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.583043][ T5881] netlink: 148 bytes leftover after parsing attributes in process `syz.4.589'. [ 101.964497][ T5896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.974495][ T1325] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.001936][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 102.013155][ T5896] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 102.238298][ T5905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.598'. [ 102.394464][ T1325] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 102.413739][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.433990][ T1325] usb 4-1: config 0 descriptor?? [ 102.700124][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 102.722377][ T5915] device team0 entered promiscuous mode [ 102.731860][ T5914] device team0 left promiscuous mode [ 102.916193][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.945227][ T5925] netlink: 'syz.1.606': attribute type 10 has an invalid length. [ 103.204560][ T1325] usb 4-1: Cannot set autoneg [ 103.221383][ T1325] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 103.349803][ T1325] usb 4-1: USB disconnect, device number 4 [ 103.716174][ T4227] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 103.894997][ T5936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.947239][ T5943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.970111][ T5936] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 103.997781][ T5945] device team0 entered promiscuous mode [ 104.004239][ T5944] device team0 left promiscuous mode [ 104.074808][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.085244][ T4227] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 104.113931][ T4227] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.294438][ T4227] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 104.303510][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 104.311670][ T4227] usb 5-1: Product: syz [ 104.324532][ T4227] usb 5-1: Manufacturer: syz [ 104.329165][ T4227] usb 5-1: SerialNumber: syz [ 104.345796][ T4227] usb 5-1: config 0 descriptor?? [ 104.386274][ T4227] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 104.393679][ T4227] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 104.403454][ T4227] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 105.564877][ T26] audit: type=1326 audit(1734824575.513:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 105.628862][ T26] audit: type=1326 audit(1734824575.523:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 105.687827][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 105.753907][ T26] audit: type=1326 audit(1734824575.523:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 105.785087][ T5977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.829331][ T1325] usb 5-1: USB disconnect, device number 4 [ 105.840871][ T5977] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 106.525612][ T5992] netlink: 96 bytes leftover after parsing attributes in process `syz.3.631'. [ 107.915833][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.918197][ T4218] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.931229][ T6016] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 108.035773][ T6021] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 108.244382][ T1325] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.338289][ T4218] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.355164][ T4218] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.374447][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.400393][ T4218] usb 4-1: config 0 descriptor?? [ 108.446427][ T4218] pwc: Askey VC010 type 2 USB webcam detected. [ 108.662030][ T1325] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 108.674351][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.712803][ T1325] usb 3-1: config 0 descriptor?? [ 108.904478][ T4218] pwc: recv_control_msg error -32 req 02 val 2b00 [ 108.927661][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 108.944887][ T4218] pwc: recv_control_msg error -32 req 02 val 2700 [ 108.994458][ T4218] pwc: recv_control_msg error -32 req 02 val 2c00 [ 109.074117][ T6039] tipc: Resetting bearer [ 109.212966][ T6039] tipc: Resetting bearer [ 109.254573][ T4218] pwc: recv_control_msg error -71 req 04 val 1300 [ 109.284779][ T4218] pwc: recv_control_msg error -71 req 04 val 1400 [ 109.314754][ T4218] pwc: recv_control_msg error -71 req 02 val 2000 [ 109.344410][ T4218] pwc: recv_control_msg error -71 req 02 val 2100 [ 109.364449][ T4218] pwc: recv_control_msg error -71 req 04 val 1500 [ 109.395358][ T4218] pwc: recv_control_msg error -71 req 02 val 2500 [ 109.414578][ T1325] usb 3-1: Cannot set autoneg [ 109.419390][ T1325] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 109.429506][ T4218] pwc: recv_control_msg error -71 req 02 val 2400 [ 109.465550][ T6039] tipc: Resetting bearer [ 109.474968][ T4218] pwc: recv_control_msg error -71 req 02 val 2600 [ 109.478829][ T1325] usb 3-1: USB disconnect, device number 3 [ 109.514485][ T4218] pwc: recv_control_msg error -71 req 02 val 2900 [ 109.554471][ T4218] pwc: recv_control_msg error -71 req 02 val 2800 [ 109.616221][ T4218] pwc: recv_control_msg error -71 req 04 val 1100 [ 109.644990][ T4218] pwc: recv_control_msg error -71 req 04 val 1200 [ 109.679905][ T4218] pwc: Registered as video103. [ 109.688876][ T4218] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 109.729158][ T4218] usb 4-1: USB disconnect, device number 5 [ 110.001634][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.054772][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.135908][ T6068] netlink: 'syz.3.654': attribute type 10 has an invalid length. [ 110.273053][ T6086] device veth1_macvtap left promiscuous mode [ 110.434700][ T4227] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 110.454719][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.476132][ T4227] usb 2-1: config 0 descriptor?? [ 110.526075][ T4227] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 110.750224][ T4227] gp8psk: usb in 128 operation failed. [ 110.871616][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.903986][ T6119] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 111.009739][ T4218] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.017514][ T4227] gp8psk: usb in 146 operation failed. [ 111.022976][ T4227] gp8psk: failed to get FW version [ 111.069534][ T4227] gp8psk: usb in 149 operation failed. [ 111.075928][ T4227] gp8psk: failed to get FPGA version [ 111.104609][ T4227] gp8psk: usb in 138 operation failed. [ 111.115834][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.134476][ T1325] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.144889][ T4227] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 111.164795][ T4227] usb 2-1: media controller created [ 111.204626][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.251004][ T4227] gp8psk_fe: Frontend attached [ 111.266657][ T4227] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 111.285040][ T4227] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 111.394684][ T4218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.414389][ T4227] gp8psk: usb in 138 operation failed. [ 111.419969][ T4227] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 111.429572][ T4218] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 111.444434][ T4218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.452513][ T4227] gp8psk: found Genpix USB device pID = 203 (hex) [ 111.476145][ T4227] usb 2-1: USB disconnect, device number 3 [ 111.534615][ T4218] usb 3-1: config 0 descriptor?? [ 111.554723][ T1325] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 111.577341][ T4218] pwc: Askey VC010 type 2 USB webcam detected. [ 111.582325][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.623799][ T1325] usb 5-1: config 0 descriptor?? [ 111.705626][ T4227] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 112.004511][ T4218] pwc: recv_control_msg error -32 req 02 val 2b00 [ 112.054524][ T4218] pwc: recv_control_msg error -32 req 02 val 2700 [ 112.104576][ T4218] pwc: recv_control_msg error -32 req 02 val 2c00 [ 112.334424][ T1325] usb 5-1: Cannot set autoneg [ 112.339302][ T1325] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 112.375032][ T4218] pwc: recv_control_msg error -71 req 04 val 1300 [ 112.395027][ T4218] pwc: recv_control_msg error -71 req 04 val 1400 [ 112.438024][ T4218] pwc: recv_control_msg error -71 req 02 val 2000 [ 112.444838][ T1325] usb 5-1: USB disconnect, device number 5 [ 112.514866][ T4218] pwc: recv_control_msg error -71 req 02 val 2100 [ 112.564478][ T4218] pwc: recv_control_msg error -71 req 04 val 1500 [ 112.604460][ T4218] pwc: recv_control_msg error -71 req 02 val 2500 [ 112.624404][ T4218] pwc: recv_control_msg error -71 req 02 val 2400 [ 112.644422][ T4218] pwc: recv_control_msg error -71 req 02 val 2600 [ 112.664383][ T4218] pwc: recv_control_msg error -71 req 02 val 2900 [ 112.703771][ T4218] pwc: recv_control_msg error -71 req 02 val 2800 [ 112.734386][ T4218] pwc: recv_control_msg error -71 req 04 val 1100 [ 112.754449][ T4218] pwc: recv_control_msg error -71 req 04 val 1200 [ 112.763331][ T6187] netlink: 68 bytes leftover after parsing attributes in process `syz.1.678'. [ 112.763508][ T4218] pwc: Registered as video103. [ 112.795329][ T4218] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 112.842184][ T4218] usb 3-1: USB disconnect, device number 4 [ 112.884572][ T4438] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.184580][ T4438] usb 4-1: Using ep0 maxpacket: 8 [ 113.328475][ T4438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.520062][ T4438] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 113.520090][ T4438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.520109][ T4438] usb 4-1: Product: syz [ 113.520123][ T4438] usb 4-1: Manufacturer: syz [ 113.572250][ T4438] usb 4-1: SerialNumber: syz [ 113.573724][ T4438] usb 4-1: config 0 descriptor?? [ 113.619163][ T4438] smsusb:smsusb_probe: board id=2, interface number 0 [ 113.644727][ T4438] smsusb:smsusb_probe: Device initialized with return code -19 [ 113.790128][ T6230] batman_adv: batadv0: Adding interface: ip6gretap1 [ 113.839565][ T6230] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.946359][ T6230] batman_adv: batadv0: Interface activated: ip6gretap1 [ 114.301681][ T4177] Bluetooth: Wrong link type (-22) [ 114.307426][ T4177] Bluetooth: hci1: link tx timeout [ 114.312832][ T4177] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.329639][ T4218] usb 4-1: USB disconnect, device number 6 [ 114.890551][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.946354][ T6262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.016760][ T6271] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 115.120488][ T26] audit: type=1326 audit(1734824585.073:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 115.197391][ T26] audit: type=1326 audit(1734824585.123:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 115.675068][ T26] audit: type=1326 audit(1734824585.123:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 115.699445][ T26] audit: type=1326 audit(1734824585.123:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23388bd29 code=0x7ffc0000 [ 116.334399][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 116.605727][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.634739][ T6310] netlink: 'syz.4.726': attribute type 10 has an invalid length. [ 117.756384][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.803100][ T26] audit: type=1326 audit(1734824587.753:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 117.826551][ T6338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.880021][ T6331] netlink: 'syz.2.735': attribute type 10 has an invalid length. [ 117.897121][ T6331] IPVS: Error connecting to the multicast addr [ 117.923186][ T26] audit: type=1326 audit(1734824587.753:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 117.954651][ T1325] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.020031][ T26] audit: type=1326 audit(1734824587.803:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 118.121147][ T26] audit: type=1326 audit(1734824587.803:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 118.211946][ T26] audit: type=1326 audit(1734824587.803:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 118.234382][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 118.364534][ T1325] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 118.404655][ T1325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.443701][ T1325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.650785][ T4227] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.680011][ T1325] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.714501][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.722827][ T6351] batman_adv: batadv0: Adding interface: ip6gretap1 [ 118.744307][ T1325] usb 2-1: Product: syz [ 118.748625][ T6351] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.798825][ T1325] usb 2-1: Manufacturer: syz [ 118.803615][ T1325] usb 2-1: SerialNumber: syz [ 119.138405][ T6351] batman_adv: batadv0: Interface activated: ip6gretap1 [ 119.335502][ T1325] usb 2-1: 0:2 : does not exist [ 119.624341][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 119.682228][ T6362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.733296][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.744518][ T4227] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.752538][ T4227] usb 4-1: config 0 has no interface number 0 [ 119.784370][ T4227] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.795901][ T6359] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 119.814573][ T4227] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.823861][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.851604][ T4227] usb 4-1: config 0 descriptor?? [ 119.917006][ T4227] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 120.093218][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 120.207245][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.225555][ T6376] netlink: 'syz.0.752': attribute type 10 has an invalid length. [ 120.846300][ T1325] usb 2-1: USB disconnect, device number 4 [ 121.236061][ T4227] usb 4-1: USB disconnect, device number 7 [ 121.269101][ T6412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.321686][ T6407] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 121.614418][ T1325] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.836970][ T6418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.858199][ T6418] netlink: 'syz.3.768': attribute type 10 has an invalid length. [ 121.884508][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 122.034575][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.051190][ T1325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.092311][ T1325] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 122.104047][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.129065][ T1325] usb 2-1: config 0 descriptor?? [ 122.167317][ T1325] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 122.187710][ T5410] udevd[5410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.385144][ T13] usb 2-1: USB disconnect, device number 5 [ 122.591398][ T6440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.621049][ T6440] netlink: 'syz.3.779': attribute type 10 has an invalid length. [ 122.844225][ T6451] tipc: Started in network mode [ 122.851028][ T6451] tipc: Node identity 7f000001, cluster identity 4711 [ 122.859765][ T6451] tipc: Enabled bearer , priority 10 [ 123.007046][ T6459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.029961][ T6455] netlink: 'syz.0.785': attribute type 10 has an invalid length. [ 123.885908][ T6488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.905425][ T6488] netlink: 'syz.1.797': attribute type 10 has an invalid length. [ 123.979029][ T4218] tipc: Node number set to 2130706433 [ 125.018768][ T6518] loop7: detected capacity change from 0 to 16384 [ 125.045060][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 125.056017][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 125.064894][ T4181] Bluetooth: hci1: hardware error 0x00 [ 125.814365][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.084393][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 126.234550][ T13] usb 4-1: config 0 has too many interfaces: 42, using maximum allowed: 32 [ 126.252219][ T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 42 [ 126.276271][ T13] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 126.302731][ T13] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping [ 126.350499][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.381198][ T13] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 126.397949][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.418688][ T13] usb 4-1: config 0 descriptor?? [ 126.471191][ T13] kobil_sct 4-1:0.0: required endpoints missing [ 126.608793][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 126.675212][ T6538] binder: 6537:6538 ioctl c0306201 0 returned -14 [ 127.227323][ T13] usb 4-1: USB disconnect, device number 8 [ 127.420196][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 128.023206][ T26] audit: type=1326 audit(1734824597.973:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 128.045282][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.091812][ T26] audit: type=1326 audit(1734824597.973:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 128.131830][ T26] audit: type=1326 audit(1734824598.003:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 128.154620][ T26] audit: type=1326 audit(1734824598.003:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 128.176678][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.221060][ T26] audit: type=1326 audit(1734824598.003:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 128.243134][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.298521][ T26] audit: type=1326 audit(1734824598.023:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 128.344502][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.360650][ T26] audit: type=1326 audit(1734824598.023:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 128.408934][ T26] audit: type=1326 audit(1734824598.023:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 128.453081][ T26] audit: type=1326 audit(1734824598.023:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9e61eb690 code=0x7ffc0000 [ 128.475197][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.493063][ T26] audit: type=1326 audit(1734824598.023:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9e61ec92b code=0x7ffc0000 [ 128.634575][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 128.754822][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.776996][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.822584][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 128.843547][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 128.857274][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.872735][ T23] usb 4-1: config 0 descriptor?? [ 129.114180][ T6649] capability: warning: `syz.1.854' uses deprecated v2 capabilities in a way that may be insecure [ 130.241119][ T6672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.300712][ T6672] netlink: 'syz.4.861': attribute type 10 has an invalid length. [ 130.760168][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'. [ 130.795488][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'. [ 130.838372][ T6685] device macvlan1 entered promiscuous mode [ 130.862385][ T6685] device bond0 entered promiscuous mode [ 130.878183][ T6685] device wlan1 entered promiscuous mode [ 130.922835][ T6685] hsr1: Slave A (macvlan1) is not up; please bring it up to get a fully working HSR network [ 130.954647][ T6685] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 131.142025][ T13] usb 4-1: USB disconnect, device number 9 [ 132.327246][ T6721] fuse: Bad value for 'fd' [ 132.342392][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.377069][ T6725] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 132.406036][ T6725] IPVS: Error connecting to the multicast addr [ 132.424480][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.656228][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.662541][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.674406][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 132.795105][ T23] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 132.814055][ T23] usb 2-1: config 0 has no interface number 0 [ 132.986817][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 133.041338][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.091030][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.120434][ T23] usb 2-1: Product: syz [ 133.129831][ T6734] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 133.138004][ T23] usb 2-1: Manufacturer: syz [ 133.165784][ T23] usb 2-1: SerialNumber: syz [ 133.201565][ T23] usb 2-1: config 0 descriptor?? [ 134.060874][ T23] radio-si470x 2-1:0.35: this is not a si470x device. [ 134.124912][ T23] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 134.161838][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 134.185179][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 134.216610][ T23] usb 2-1: USB disconnect, device number 6 [ 134.286767][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 135.217694][ T26] kauditd_printk_skb: 84 callbacks suppressed [ 135.217779][ T26] audit: type=1326 audit(1734824605.103:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.416510][ T26] audit: type=1326 audit(1734824605.103:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.494820][ T26] audit: type=1326 audit(1734824605.103:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.525738][ T26] audit: type=1326 audit(1734824605.103:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.572052][ T26] audit: type=1326 audit(1734824605.103:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.610054][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 135.634358][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 135.648152][ T26] audit: type=1326 audit(1734824605.103:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.672845][ T6797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.721014][ T26] audit: type=1326 audit(1734824605.113:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.774683][ T26] audit: type=1326 audit(1734824605.113:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.780159][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 135.801591][ T26] audit: type=1326 audit(1734824605.243:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 135.834397][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 135.851082][ T26] audit: type=1326 audit(1734824605.253:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 136.795197][ T4165] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 137.045220][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.234589][ T4165] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 137.243325][ T4165] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 137.254180][ T4165] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.434375][ T4227] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.444918][ T4165] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.454370][ T4165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.462381][ T4165] usb 1-1: Product: syz [ 137.466831][ T4165] usb 1-1: Manufacturer: syz [ 137.471420][ T4165] usb 1-1: SerialNumber: syz [ 137.634504][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.674413][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 137.795712][ T4227] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.808033][ T4227] usb 2-1: config 0 has no interface number 0 [ 137.864556][ T4165] usb 1-1: 0:2 : does not exist [ 137.901162][ T4165] usb 1-1: USB disconnect, device number 3 [ 137.964574][ T4227] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 137.983334][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.020688][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 138.020747][ T4227] usb 2-1: Product: syz [ 138.044741][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.059743][ T4227] usb 2-1: Manufacturer: syz [ 138.065257][ T4227] usb 2-1: SerialNumber: syz [ 138.066954][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.088762][ T4227] usb 2-1: config 0 descriptor?? [ 138.097505][ T13] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 138.116715][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.132700][ T4227] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 138.140563][ T13] usb 3-1: config 0 descriptor?? [ 138.704448][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 138.710714][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 138.761328][ T13] usb 3-1: USB disconnect, device number 5 [ 138.784637][ T4227] gspca_spca1528: reg_w err -71 [ 138.814494][ T4227] spca1528: probe of 2-1:0.1 failed with error -71 [ 138.843549][ T4227] usb 2-1: USB disconnect, device number 7 [ 139.045187][ T6914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.269303][ T6921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.724838][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 139.754325][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.034346][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 140.184534][ T13] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 140.222662][ T13] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 140.271339][ T13] usb 4-1: config 6 has no interface number 0 [ 140.292813][ T13] usb 4-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xAA, skipping [ 140.350955][ T13] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.594436][ T13] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 140.606528][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.615504][ T13] usb 4-1: Product: syz [ 140.621664][ T13] usb 4-1: Manufacturer: syz [ 140.628106][ T13] usb 4-1: SerialNumber: syz [ 140.684346][ T4227] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.715656][ T13] hso 4-1:6.2: Failed to find INT IN ep [ 140.921390][ T4176] usb 4-1: USB disconnect, device number 10 [ 140.934441][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 141.057732][ T4227] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 141.244554][ T4227] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.266371][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.297524][ T4227] usb 3-1: Product: syz [ 141.314386][ T4227] usb 3-1: Manufacturer: syz [ 141.323681][ T4227] usb 3-1: SerialNumber: syz [ 141.360111][ T4227] usb 3-1: config 0 descriptor?? [ 141.632495][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 141.814326][ T4165] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.104441][ T4165] usb 4-1: Using ep0 maxpacket: 32 [ 142.474524][ T4165] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 142.489368][ T4165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.509632][ T4165] usb 4-1: Product: syz [ 142.516656][ T6973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.532131][ T4165] usb 4-1: Manufacturer: syz [ 142.542571][ T4165] usb 4-1: SerialNumber: syz [ 142.646181][ T4165] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 142.712225][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 142.764979][ T13] usb 3-1: USB disconnect, device number 6 [ 142.982430][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 142.982445][ T26] audit: type=1800 audit(1734824612.933:155): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.974" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 143.465263][ T4176] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.642395][ T7007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.663647][ T7007] netlink: 'syz.4.980': attribute type 10 has an invalid length. [ 144.005255][ T4176] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 144.019205][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.032421][ T4176] usb 1-1: Product: syz [ 144.043911][ T4176] usb 1-1: Manufacturer: syz [ 144.052948][ T4176] usb 1-1: SerialNumber: syz [ 144.080949][ T4176] usb 1-1: config 0 descriptor?? [ 144.566671][ T4176] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 144.591874][ T4176] usb 1-1: Firmware version (0.0) predates our first public release. [ 144.610995][ T4176] usb 1-1: Please update to version 0.2 or newer [ 144.654578][ T4176] usb 1-1: Firmware: build ìê± [ 144.660076][ T4176] usb 1-1: atusb_probe: initialization failed, error = -32 [ 144.679852][ T4176] atusb: probe of 1-1:0.0 failed with error -32 [ 144.859614][ T4176] usb 1-1: USB disconnect, device number 4 [ 144.936262][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 145.054409][ T4165] gspca_stk1135: reg_w 0x2ff err -71 [ 145.060856][ T4165] gspca_stk1135: serial bus timeout: status=0x00 [ 145.081303][ T4165] gspca_stk1135: Sensor write failed [ 145.099493][ T4165] gspca_stk1135: serial bus timeout: status=0x00 [ 145.119453][ T4165] gspca_stk1135: Sensor write failed [ 145.138590][ T4165] gspca_stk1135: serial bus timeout: status=0x00 [ 145.158587][ T4165] gspca_stk1135: Sensor read failed [ 145.169574][ T4165] gspca_stk1135: serial bus timeout: status=0x00 [ 145.184300][ T4165] gspca_stk1135: Sensor read failed [ 145.197834][ T4165] gspca_stk1135: Detected sensor type unknown (0x0) [ 145.214318][ T4165] gspca_stk1135: serial bus timeout: status=0x00 [ 145.230806][ T4165] gspca_stk1135: Sensor read failed [ 145.244218][ T4165] gspca_stk1135: serial bus timeout: status=0x00 [ 145.258728][ T4165] gspca_stk1135: Sensor read failed [ 145.269600][ T4165] gspca_stk1135: serial bus timeout: status=0x00 [ 145.286112][ T4165] gspca_stk1135: Sensor write failed [ 145.306660][ T4165] gspca_stk1135: serial bus timeout: status=0x00 [ 145.326546][ T4165] gspca_stk1135: Sensor write failed [ 145.335430][ T4165] stk1135: probe of 4-1:64.0 failed with error -71 [ 145.373043][ T4165] usb 4-1: USB disconnect, device number 11 [ 145.641479][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.684510][ T4176] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.692424][ T7039] netlink: 'syz.3.993': attribute type 10 has an invalid length. [ 145.944336][ T4176] usb 1-1: Using ep0 maxpacket: 16 [ 145.999705][ T7041] netlink: 140 bytes leftover after parsing attributes in process `syz.2.994'. [ 146.064564][ T4176] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.074816][ T4176] usb 1-1: config 0 has no interface number 0 [ 146.240862][ T4176] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 146.252349][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.261368][ T4176] usb 1-1: Product: syz [ 146.266145][ T4176] usb 1-1: Manufacturer: syz [ 146.272428][ T4176] usb 1-1: SerialNumber: syz [ 146.299091][ T4176] usb 1-1: config 0 descriptor?? [ 146.346308][ T4176] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 146.416416][ T7054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.923557][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 147.004427][ T4176] gspca_spca1528: reg_w err -71 [ 147.045126][ T4176] spca1528: probe of 1-1:0.1 failed with error -71 [ 147.073525][ T4176] usb 1-1: USB disconnect, device number 5 [ 147.459887][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.489687][ T7078] netlink: 'syz.2.1008': attribute type 10 has an invalid length. [ 147.854133][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 148.224396][ T4165] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.309998][ T7117] binder: 7116:7117 ioctl c0306201 0 returned -14 [ 148.390705][ T7117] binder: 7116:7117 ioctl c0306201 0 returned -14 [ 148.452858][ T26] audit: type=1326 audit(1734824618.403:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 148.517322][ T26] audit: type=1326 audit(1734824618.443:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 148.561784][ T26] audit: type=1326 audit(1734824618.443:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 148.630449][ T26] audit: type=1326 audit(1734824618.443:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 148.676257][ T7135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.680328][ T26] audit: type=1326 audit(1734824618.443:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 148.706497][ T7135] netlink: 'syz.4.1031': attribute type 10 has an invalid length. [ 148.710306][ T4165] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.732765][ T4165] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.743123][ T26] audit: type=1326 audit(1734824618.443:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 148.806793][ T26] audit: type=1326 audit(1734824618.443:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 148.834497][ T26] audit: type=1326 audit(1734824618.443:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3234dd29 code=0x7ffc0000 [ 148.864513][ T4165] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.873591][ T4165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.901091][ T4165] usb 1-1: SerialNumber: syz [ 148.915662][ T26] audit: type=1326 audit(1734824618.543:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbbb70d29 code=0x7ffc0000 [ 148.944126][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 148.974293][ T26] audit: type=1326 audit(1734824618.543:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbbb70d29 code=0x7ffc0000 [ 149.215072][ T4165] usb 1-1: 0:2 : does not exist [ 149.264206][ T4165] usb 1-1: USB disconnect, device number 6 [ 149.364335][ T4227] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.506940][ T5410] udevd[5410]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.614301][ T4227] usb 3-1: Using ep0 maxpacket: 8 [ 149.895575][ T4227] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 149.925160][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.943370][ T4227] usb 3-1: Product: syz [ 149.948270][ T4227] usb 3-1: Manufacturer: syz [ 149.952888][ T4227] usb 3-1: SerialNumber: syz [ 149.977625][ T4227] usb 3-1: config 0 descriptor?? [ 150.001145][ T7168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1045'. [ 150.221333][ T7178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.245970][ T7178] netlink: 'syz.0.1049': attribute type 10 has an invalid length. [ 150.264627][ T4227] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 150.375335][ T7183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.395048][ T7183] netlink: 'syz.3.1051': attribute type 10 has an invalid length. [ 151.633585][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.691958][ T7207] netlink: 'syz.3.1063': attribute type 10 has an invalid length. [ 151.941998][ T7212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.953873][ T7212] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 152.334565][ T4227] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 152.351001][ T4227] usb 3-1: USB disconnect, device number 7 [ 152.618418][ T13] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 152.869819][ T7240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.884367][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 152.891426][ T7234] netlink: 'syz.0.1076': attribute type 10 has an invalid length. [ 153.034511][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.060134][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 153.074367][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.101698][ T13] usb 4-1: config 0 descriptor?? [ 153.464378][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 153.561426][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 153.561436][ T26] audit: type=1326 audit(1734824623.513:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 153.597508][ T26] audit: type=1326 audit(1734824623.553:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 153.625351][ T26] audit: type=1326 audit(1734824623.553:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 153.651539][ T26] audit: type=1326 audit(1734824623.553:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 153.677760][ T26] audit: type=1326 audit(1734824623.553:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 153.702108][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 153.714342][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 153.764665][ T13] usb 4-1: USB disconnect, device number 12 [ 153.844800][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.863065][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 153.879234][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.074727][ T23] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 154.083824][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 154.125466][ T23] usb 2-1: Product: syz [ 154.145521][ T23] usb 2-1: Manufacturer: syz [ 154.164195][ T23] usb 2-1: SerialNumber: syz [ 154.197253][ T23] usb 2-1: config 0 descriptor?? [ 154.210364][ T26] audit: type=1326 audit(1734824624.163:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 154.246357][ T23] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 154.263331][ T23] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 154.273977][ T26] audit: type=1326 audit(1734824624.203:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 154.280334][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 154.309422][ T26] audit: type=1326 audit(1734824624.203:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 154.311044][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 154.360691][ T26] audit: type=1326 audit(1734824624.203:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 154.387885][ T26] audit: type=1326 audit(1734824624.203:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7249b32d29 code=0x7ffc0000 [ 154.486229][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.502969][ T7297] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 155.183105][ T7314] netlink: 'syz.0.1107': attribute type 1 has an invalid length. [ 155.424449][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 155.794416][ T23] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 155.803573][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.813872][ T23] usb 4-1: config 0 descriptor?? [ 155.844424][ T4218] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.855611][ T23] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 155.994406][ T4438] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.084426][ T4218] usb 3-1: Using ep0 maxpacket: 32 [ 156.250815][ T13] usb 2-1: USB disconnect, device number 8 [ 156.274522][ T4438] usb 1-1: Using ep0 maxpacket: 16 [ 156.295691][ T23] gspca_sunplus: reg_w_riv err -71 [ 156.300985][ T23] sunplus: probe of 4-1:0.0 failed with error -71 [ 156.326488][ T23] usb 4-1: USB disconnect, device number 13 [ 156.338929][ T7328] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 156.364615][ T4218] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 156.385557][ T4218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.394009][ T4218] usb 3-1: Product: syz [ 156.399038][ T4218] usb 3-1: Manufacturer: syz [ 156.403650][ T4218] usb 3-1: SerialNumber: syz [ 156.411206][ T4218] usb 3-1: config 0 descriptor?? [ 156.428697][ T4438] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 156.439748][ T4438] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.449799][ T4438] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.456509][ T4218] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 156.461172][ T4438] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.674921][ T4438] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.695029][ T4438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.703042][ T4438] usb 1-1: Product: syz [ 156.709719][ T4438] usb 1-1: Manufacturer: syz [ 156.715117][ T4438] usb 1-1: SerialNumber: syz [ 156.964470][ T4176] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.212513][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.236152][ T4438] usb 1-1: USB disconnect, device number 7 [ 157.242426][ T7358] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 157.498173][ T4176] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 157.519279][ T4176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.550147][ T4176] usb 2-1: Product: syz [ 157.556128][ T4176] usb 2-1: Manufacturer: syz [ 157.577885][ T4176] usb 2-1: SerialNumber: syz [ 157.620907][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 157.635658][ T4176] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 157.764421][ T4218] gspca_ov534_9: reg_w failed -71 [ 158.013361][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.037103][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.064674][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.078656][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.096811][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 158.117172][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.127913][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.135752][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.145648][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.153102][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.164422][ T4218] gspca_ov534_9: Unknown sensor 0000 [ 158.164481][ T4218] ov534_9: probe of 3-1:0.0 failed with error -22 [ 158.168312][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.191891][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.191999][ T4218] usb 3-1: USB disconnect, device number 8 [ 158.211325][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.223098][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.233990][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.245225][ T4176] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 158.246720][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.269960][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.278620][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.291522][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.299254][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.312388][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.320114][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.323601][ T7407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.337110][ T7407] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.339781][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.346422][ T7407] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.353513][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.362212][ T7407] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.375449][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.378777][ T7407] device geneve2 entered promiscuous mode [ 158.391449][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.399394][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.412846][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.420652][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.434841][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.442328][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.454415][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.461950][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.476477][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.484042][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.495254][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.503034][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.516226][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.523910][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.535096][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.542533][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.555218][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.560683][ T7413] netlink: 'syz.2.1149': attribute type 10 has an invalid length. [ 158.563290][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.578904][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.586584][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.594128][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.602712][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.611113][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.618870][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.628354][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.635998][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.643422][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.650934][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.658602][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.666641][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.674043][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.681449][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.689046][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.710455][ T13] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.803660][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 158.873654][ T23] usb 2-1: USB disconnect, device number 9 [ 158.899969][ T26] kauditd_printk_skb: 223 callbacks suppressed [ 158.899985][ T26] audit: type=1326 audit(1734824628.843:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.047356][ T26] audit: type=1326 audit(1734824628.843:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.130143][ T26] audit: type=1326 audit(1734824628.853:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.153836][ T26] audit: type=1326 audit(1734824628.853:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.215673][ T7442] program syz.3.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.236331][ T7444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.244922][ T26] audit: type=1326 audit(1734824628.853:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.274753][ T7444] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 159.284685][ T4176] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 159.292170][ T4176] ath9k_htc: Failed to initialize the device [ 159.292913][ T26] audit: type=1326 audit(1734824628.853:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.320636][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.324359][ T23] usb 2-1: ath9k_htc: USB layer deinitialized [ 159.339592][ T26] audit: type=1326 audit(1734824628.853:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.432140][ T26] audit: type=1326 audit(1734824628.853:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.454462][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.500392][ T26] audit: type=1326 audit(1734824628.853:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.522678][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.549585][ T26] audit: type=1326 audit(1734824628.853:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249b32d29 code=0x7fc00000 [ 159.571864][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.928061][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 160.034416][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.234486][ T23] usb 1-1: device descriptor read/64, error -71 [ 160.254529][ T1325] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.452291][ T7486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.494405][ T7486] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 160.505437][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.698649][ T23] usb 1-1: device descriptor read/64, error -71 [ 160.834873][ T23] usb usb1-port1: attempt power cycle [ 160.914912][ T1325] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 160.933056][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.964300][ T1325] usb 3-1: Product: syz [ 160.977878][ T1325] usb 3-1: Manufacturer: syz [ 160.988346][ T1325] usb 3-1: SerialNumber: syz [ 161.002691][ T7494] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1183'. [ 161.045243][ T1325] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 161.198737][ T7500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.243294][ T7500] netlink: 'syz.3.1186': attribute type 10 has an invalid length. [ 161.249640][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.291044][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 161.374478][ T23] usb 1-1: device descriptor read/8, error -71 [ 161.654601][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.749712][ T23] usb 1-1: device descriptor read/8, error -71 [ 161.775102][ T1325] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 161.874546][ T23] usb usb1-port1: unable to enumerate USB device [ 162.354552][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'. [ 162.440643][ T4165] usb 3-1: USB disconnect, device number 9 [ 162.889247][ T1325] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 162.906560][ T1325] ath9k_htc: Failed to initialize the device [ 162.913009][ T4165] usb 3-1: ath9k_htc: USB layer deinitialized [ 162.934491][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 163.034037][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 163.221123][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 163.237721][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.427908][ T7578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1221'. [ 163.484563][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 163.577465][ T13] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 163.591708][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.603044][ T13] usb 4-1: Product: syz [ 163.611283][ T13] usb 4-1: Manufacturer: syz [ 163.618396][ T13] usb 4-1: SerialNumber: syz [ 163.629627][ T13] usb 4-1: config 0 descriptor?? [ 163.686249][ T13] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 163.764669][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.778231][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.788584][ T23] usb 1-1: Product: syz [ 163.792830][ T23] usb 1-1: Manufacturer: syz [ 163.801254][ T23] usb 1-1: SerialNumber: syz [ 163.811613][ T23] usb 1-1: config 0 descriptor?? [ 163.844514][ T4218] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.074478][ T23] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.374683][ T4218] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.384805][ T4218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.392811][ T4218] usb 2-1: Product: syz [ 164.398220][ T4218] usb 2-1: Manufacturer: syz [ 164.402830][ T4218] usb 2-1: SerialNumber: syz [ 164.445362][ T4218] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.538505][ T7598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.551750][ T7598] netlink: 'syz.4.1229': attribute type 10 has an invalid length. [ 164.651658][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 165.004439][ T13] gspca_ov534_9: reg_w failed -71 [ 165.054400][ T4218] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.114423][ T4176] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.354362][ T4176] usb 3-1: Using ep0 maxpacket: 8 [ 165.454437][ T13] gspca_ov534_9: Unknown sensor 0000 [ 165.454509][ T13] ov534_9: probe of 4-1:0.0 failed with error -22 [ 165.467951][ T13] usb 4-1: USB disconnect, device number 14 [ 165.474744][ T4176] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 165.484770][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.502817][ T4176] usb 3-1: config 0 descriptor?? [ 165.662954][ T4165] usb 2-1: USB disconnect, device number 10 [ 165.904656][ T23] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 165.919174][ T23] usb 1-1: USB disconnect, device number 12 [ 166.084519][ T4218] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 166.096987][ T4218] ath9k_htc: Failed to initialize the device [ 166.108733][ T4165] usb 2-1: ath9k_htc: USB layer deinitialized [ 166.515659][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1243'. [ 166.702093][ T7638] kAFS: unable to lookup cell '' [ 166.828837][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'. [ 167.177484][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 167.274397][ T13] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 167.554386][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 167.904769][ T13] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 167.913833][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.932262][ T13] usb 1-1: Product: syz [ 167.941822][ T13] usb 1-1: Manufacturer: syz [ 167.947565][ T4176] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 167.959047][ T13] usb 1-1: SerialNumber: syz [ 167.967765][ T4176] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 167.987525][ T13] usb 1-1: config 0 descriptor?? [ 167.999600][ T4176] asix: probe of 3-1:0.0 failed with error -71 [ 168.021796][ T4176] usb 3-1: USB disconnect, device number 10 [ 168.191390][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1270'. [ 168.244601][ T13] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.454195][ T7699] kAFS: unable to lookup cell '' [ 168.823611][ T7717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.856609][ T7712] netlink: 'syz.2.1279': attribute type 10 has an invalid length. [ 169.084568][ T4445] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 169.220383][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 169.334490][ T4445] usb 2-1: Using ep0 maxpacket: 32 [ 169.517082][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 169.616110][ T4445] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 169.635487][ T4445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.662752][ T4445] usb 2-1: Product: syz [ 169.675408][ T4445] usb 2-1: Manufacturer: syz [ 169.690318][ T4445] usb 2-1: SerialNumber: syz [ 169.750493][ T4445] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 170.134513][ T13] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 170.157819][ T13] usb 1-1: USB disconnect, device number 13 [ 170.592359][ T7753] MPI: mpi too large (16392 bits) [ 170.861333][ T7776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.896485][ T7776] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 171.096885][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 171.096900][ T26] audit: type=1326 audit(1734824641.053:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 171.130735][ T26] audit: type=1326 audit(1734824641.083:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 171.159672][ T26] audit: type=1326 audit(1734824641.083:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 171.181852][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.232141][ T26] audit: type=1326 audit(1734824641.083:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 171.261891][ T26] audit: type=1326 audit(1734824641.083:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e61ecd29 code=0x7ffc0000 [ 171.284140][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.305495][ T26] audit: type=1326 audit(1734824641.083:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9e61eec47 code=0x7ffc0000 [ 171.354606][ T26] audit: type=1326 audit(1734824641.083:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe9e61eebbc code=0x7ffc0000 [ 171.356537][ T7804] tipc: Enabling of bearer rejected, media not registered [ 171.406103][ T26] audit: type=1326 audit(1734824641.083:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe9e61eeaf4 code=0x7ffc0000 [ 171.430800][ T7806] kAFS: unable to lookup cell '' [ 171.443295][ T26] audit: type=1326 audit(1734824641.083:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe9e61eeaf4 code=0x7ffc0000 [ 171.465502][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.472032][ T26] audit: type=1326 audit(1734824641.083:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe9e61eb98a code=0x7ffc0000 [ 171.504559][ T1325] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 171.774391][ T1325] usb 4-1: Using ep0 maxpacket: 8 [ 172.084900][ T1325] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 172.094055][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.114286][ T1325] usb 4-1: Product: syz [ 172.118470][ T1325] usb 4-1: Manufacturer: syz [ 172.123069][ T1325] usb 4-1: SerialNumber: syz [ 172.146379][ T1325] usb 4-1: config 0 descriptor?? [ 172.416496][ T1325] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.614444][ T4445] gspca_stk1135: reg_w 0x350 err -71 [ 172.621421][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 172.646627][ T4445] gspca_stk1135: Sensor write failed [ 172.662001][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 172.682175][ T4445] gspca_stk1135: Sensor write failed [ 172.698412][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 172.712659][ T4445] gspca_stk1135: Sensor read failed [ 172.733967][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 172.761345][ T4445] gspca_stk1135: Sensor read failed [ 172.771270][ T4445] gspca_stk1135: Detected sensor type unknown (0x0) [ 172.781595][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 172.788402][ T4445] gspca_stk1135: Sensor read failed [ 172.794003][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 172.804314][ T4445] gspca_stk1135: Sensor read failed [ 172.809792][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 172.819956][ T4445] gspca_stk1135: Sensor write failed [ 172.825701][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 172.832370][ T4445] gspca_stk1135: Sensor write failed [ 172.841035][ T4445] stk1135: probe of 2-1:64.0 failed with error -71 [ 172.861920][ T4445] usb 2-1: USB disconnect, device number 11 [ 173.210434][ T7839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.230084][ T7839] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 173.238212][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 173.612480][ T4177] ------------[ cut here ]------------ [ 173.619869][ T4177] WARNING: CPU: 0 PID: 4177 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450 [ 173.633289][ T4177] Modules linked in: [ 173.637447][ T4177] CPU: 0 PID: 4177 Comm: kworker/u5:1 Not tainted 5.15.175-syzkaller #0 [ 173.645861][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.656001][ T4177] Workqueue: hci2 hci_conn_timeout [ 173.661122][ T4177] RIP: 0010:hci_conn_timeout+0x250/0x450 [ 173.667110][ T4177] Code: 0a 8e e8 d3 49 6d f8 48 8b 35 64 49 ad 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 bb f5 f7 e8 90 6d 23 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff [ 173.686955][ T4177] RSP: 0018:ffffc90002eefc28 EFLAGS: 00010293 [ 173.693054][ T4177] RAX: ffffffff895d1750 RBX: ffff8881486f6138 RCX: ffff88802a93d940 [ 173.701197][ T4177] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 173.709213][ T4177] RBP: 00000000ffffffff R08: ffffffff895d1561 R09: ffffed10290dec03 [ 173.717879][ T4177] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 173.725972][ T4177] R13: ffff88801bfe5828 R14: ffff8881486f6000 R15: ffff88801bfe5818 [ 173.733966][ T4177] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 173.742987][ T4177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.749642][ T4177] CR2: 000000110c37fb78 CR3: 000000007415e000 CR4: 00000000003506f0 [ 173.757846][ T4177] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 173.765873][ T4177] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 173.773893][ T4177] Call Trace: [ 173.777312][ T4177] [ 173.780259][ T4177] ? __warn+0x15b/0x300 [ 173.784436][ T4177] ? hci_conn_timeout+0x250/0x450 [ 173.789543][ T4177] ? report_bug+0x1b7/0x2e0 [ 173.794035][ T4177] ? handle_bug+0x3d/0x70 [ 173.798609][ T4177] ? exc_invalid_op+0x16/0x40 [ 173.805536][ T4177] ? asm_exc_invalid_op+0x16/0x20 [ 173.811115][ T4177] ? hci_conn_timeout+0x61/0x450 [ 173.816163][ T4177] ? hci_conn_timeout+0x250/0x450 [ 173.821185][ T4177] ? hci_conn_timeout+0x250/0x450 [ 173.826723][ T4177] ? hci_conn_timeout+0x250/0x450 [ 173.831738][ T4177] process_one_work+0x8a1/0x10c0 [ 173.836899][ T4177] ? worker_detach_from_pool+0x260/0x260 [ 173.842543][ T4177] ? _raw_spin_lock_irqsave+0x120/0x120 [ 173.848161][ T4177] ? kthread_data+0x4e/0xc0 [ 173.852753][ T4177] ? wq_worker_running+0x97/0x170 [ 173.857874][ T4177] worker_thread+0xaca/0x1280 [ 173.862563][ T4177] kthread+0x3f6/0x4f0 [ 173.866697][ T4177] ? rcu_lock_release+0x20/0x20 [ 173.871553][ T4177] ? kthread_blkcg+0xd0/0xd0 [ 173.876300][ T4177] ret_from_fork+0x1f/0x30 [ 173.880716][ T4177] [ 173.883739][ T4177] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.891024][ T4177] CPU: 0 PID: 4177 Comm: kworker/u5:1 Not tainted 5.15.175-syzkaller #0 [ 173.899326][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.909362][ T4177] Workqueue: hci2 hci_conn_timeout [ 173.914458][ T4177] Call Trace: [ 173.917719][ T4177] [ 173.920630][ T4177] dump_stack_lvl+0x1e3/0x2d0 [ 173.925292][ T4177] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 173.930905][ T4177] ? panic+0x860/0x860 [ 173.934991][ T4177] ? hci_conn_timeout+0x200/0x450 [ 173.939999][ T4177] ? hci_conn_timeout+0x200/0x450 [ 173.945001][ T4177] panic+0x318/0x860 [ 173.948879][ T4177] ? __warn+0x16a/0x300 [ 173.953015][ T4177] ? fb_is_primary_device+0xd0/0xd0 [ 173.958195][ T4177] ? ret_from_fork+0x1f/0x30 [ 173.962761][ T4177] ? hci_conn_timeout+0x250/0x450 [ 173.967763][ T4177] __warn+0x2b2/0x300 [ 173.971726][ T4177] ? hci_conn_timeout+0x250/0x450 [ 173.976726][ T4177] report_bug+0x1b7/0x2e0 [ 173.981040][ T4177] handle_bug+0x3d/0x70 [ 173.985174][ T4177] exc_invalid_op+0x16/0x40 [ 173.989656][ T4177] asm_exc_invalid_op+0x16/0x20 [ 173.994486][ T4177] RIP: 0010:hci_conn_timeout+0x250/0x450 [ 174.000105][ T4177] Code: 0a 8e e8 d3 49 6d f8 48 8b 35 64 49 ad 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 bb f5 f7 e8 90 6d 23 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff [ 174.019689][ T4177] RSP: 0018:ffffc90002eefc28 EFLAGS: 00010293 [ 174.025739][ T4177] RAX: ffffffff895d1750 RBX: ffff8881486f6138 RCX: ffff88802a93d940 [ 174.033688][ T4177] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 174.041639][ T4177] RBP: 00000000ffffffff R08: ffffffff895d1561 R09: ffffed10290dec03 [ 174.049590][ T4177] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 174.057545][ T4177] R13: ffff88801bfe5828 R14: ffff8881486f6000 R15: ffff88801bfe5818 [ 174.065501][ T4177] ? hci_conn_timeout+0x61/0x450 [ 174.070420][ T4177] ? hci_conn_timeout+0x250/0x450 [ 174.075555][ T4177] ? hci_conn_timeout+0x250/0x450 [ 174.080584][ T4177] process_one_work+0x8a1/0x10c0 [ 174.085515][ T4177] ? worker_detach_from_pool+0x260/0x260 [ 174.091135][ T4177] ? _raw_spin_lock_irqsave+0x120/0x120 [ 174.096666][ T4177] ? kthread_data+0x4e/0xc0 [ 174.101150][ T4177] ? wq_worker_running+0x97/0x170 [ 174.106165][ T4177] worker_thread+0xaca/0x1280 [ 174.110845][ T4177] kthread+0x3f6/0x4f0 [ 174.114895][ T4177] ? rcu_lock_release+0x20/0x20 [ 174.119727][ T4177] ? kthread_blkcg+0xd0/0xd0 [ 174.124304][ T4177] ret_from_fork+0x1f/0x30 [ 174.128707][ T4177] [ 174.131930][ T4177] Kernel Offset: disabled [ 174.136398][ T4177] Rebooting in 86400 seconds..