last executing test programs: 15.096297812s ago: executing program 2 (id=4267): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaad3ae28ac9afea5e1000000c2790f3ba2c6effe57405b12af6d968502907800000000e000005e091b40a42b1cd5f16a"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb50000000000", 0xd7}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file1/file0\x00', &(0x7f00000003c0), 0x200020, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 13.717979134s ago: executing program 2 (id=4271): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3", 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/111, 0x6f}], 0x1}, 0x10000) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}], 0x1, 0x4000000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12.098228736s ago: executing program 1 (id=4276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) 11.050610081s ago: executing program 1 (id=4278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) epoll_create1(0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r4}) 9.899001794s ago: executing program 2 (id=4280): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x108060a, 0x5, 0x0, 0x5, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0xffffffffffff625c, {{0x7, 0x56, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1}) 9.019187106s ago: executing program 0 (id=4285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30f1ff00000800054000000021540000001d0a01010000000000000000070000000b00020073797a31000000000900010073797a"], 0xc4}}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8.466821951s ago: executing program 1 (id=4287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) 7.596021212s ago: executing program 3 (id=4288): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.467757842s ago: executing program 0 (id=4289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 7.444611164s ago: executing program 1 (id=4290): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaad3ae28ac9afea5e1000000c2790f3ba2c6effe57405b12af6d968502907800000000e000005e091b40a42b1cd5f16a"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb50000000000", 0xd7}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file1/file0\x00', &(0x7f00000003c0), 0x200020, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 6.39348856s ago: executing program 3 (id=4291): syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x8c4) 5.961371995s ago: executing program 1 (id=4292): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp1(0xffffff9c, 0x0, 0x2, 0x0) 5.863987623s ago: executing program 2 (id=4293): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000004c0)={0x4, 0x200, 0x7fffffff, 0x800}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20) 4.865813834s ago: executing program 2 (id=4294): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x22941, 0x2, 0x10}, 0x5a) 4.753509483s ago: executing program 3 (id=4295): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() capset(&(0x7f0000000080)={0x20071026}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 4.479322375s ago: executing program 2 (id=4296): fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb4d, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.713504598s ago: executing program 3 (id=4297): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9300a000000000"], 0x8) 3.711400738s ago: executing program 0 (id=4298): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"87412fcf3b7656866352bfc3b2a97409f657f12f35013bff5243e9df7287106d02bcb0d638722ca4b8c03c00d8a7008f57b74d0fb9eda8c8d8a733262574a53c242d4bc2315f2a4330212629510faf60e06a809b44e3e956079f8e15309975eff5624b8e45b4290e4fd8619c8cda5e70e7fb7483bcb2d4dd171510932e4433505aa14c048b20f8bcea3979ac05e8a7f8c69335943f945df35be808e545a8701b5be1992667e07680101ae7c1052ba83cc3bd6351e484cc28c90390cc9a670f8e82994662194133d1416df6adf63f7d4dfa6bd4d6ed755b91231e5ad99cd82cde77441875b7f23566f34ec3ef4c58ca1243a22bdb0f3d0c3c0cf3567d3624b00e0822cc27b0c10cd3ebbfe5cee69113acf809ee9cb63e761d1b8b74c19cd23e3e4701f08d76318d0f11a28ad24f46105b6d53b071cc8e51e0b54609f2757158c24bb01751b963681616d9fe8948f2234a5f53ecb3af48f3896e53c92a4a0035c1a22c08dd13808f8d26772e52c418e2860f4d1c51b77ce73bf7ae4a0023218a4e3af6ac7fb00396b4d5d69996e39638c42c51384bca0d141bc64e27ad1cbccc3d45cec59fd5fc46e312696c47b8d1b029c7cbd0194c675d445e93f7abf8bf2d4765f03e57fde167382ece70993a0cfe964e1a6f75b88af69739f654043da63c32c4101f30de250b052f7eb6da1eecf5dd1d6d29b63620af24d62c31c6566c82763b7ab4293441dd14d369f08cf1189a58047952bf8f973c095ffbdfa9b91bbfa8c3c894d85f08fd311ab1eae103318761b47a93a6cae00204635a8cb57b3204c4b8fbb2dfef3c596f8d4dda918110abd6ebc5bf26311c438898a7f814ae9ff9ab8c8f23282906cf57dc2e167bd3be0a2b19945b3dde4e7fe2d01056a1d9d486e543bf2454c4e4219ffc33ae22a824b0e1058706656c59cc6e5c08fcbe0a88d35cf178136aabf450453dec7878bccc1daca7c6690983be524e83a17f9ce02ec0a58c125916cd7575ac1cc02f8485562f1542da73fa09d2be7f4d3e629fde6e5c58389a1ffb95b146e1d1b2a25aede59f02c5f9a55fc53b1867ee3863fb838e0750beb6939097aca0c03ebded37f2ffa945339fcc99ad006aa71863358bf300a71df24adc6b00c2687e7756a8d5e93668ba13989e824dbb992050748b87b9300ffea6ccf04a990046f5522749d80d45444866e3d7c21dfb786563e3ca11b5311eb3f8b7ed70e73ef02e477d76dea6c14bf1b47a2cda66a024eae350efb34d11fd512d0921d16e6c5e90845be2a5e8ea30f438f331f1e316c5d6e60526249300e6fc921dd8c0c8d470e2485b9145b12ed332b0de2bc3b29f7dbf980617c378f28ebfd8b0a37c89124c79c5b2f344b5c3b5d0f3a8641093b4b06d5a67c152a510a56a0bef5a24fea0869455e7d54535163289a970e6e908aacd0c30f85fbf16b923e5d18a997b5b0b1f2bd15a7f1ccc33b8cf1b8fd0e0f8f4f0ff533669e5f71f460f3672f6ca7a1539997689fd6f97f296f53761bf94f5f75aa274cb5ae67b25682cca33c87da759c0c99e064fa973af0d2d6ccf82266a48241d2284eda04590bc80c31b0c0b04fa104cce536fbb29508a222c4a777c072348502a27272ff9656a0fba49538be263d23e9bce31f3e5d573b1cbc0b0ecb27170c2eb10115dd8ecaee8f0ead3202d3c855223c196a7343fd6d2c152430add0c5d088a406f40e4aad95fc2d30655ca81f65aeeaf81eb82821da75334ed82cb09f41c891c53cd193ca8f99017fd28f5b454ada00989697756f2aaf11254c67dca0ee39d51a6dfcd09732401bdda91de59ef0af9a8711c8b3365caab3a941c3aae59a3cc51f7604b8dd945e174a69d556ea00dbf82baef3c263488eaa96c009c399486d7d828dbddf34acf90575c55463cd92b55162647cb1a282e2670928eb9c0c0af020202d2387bffcbe4006019d20b0963da0fbbdf9fefd6ef1f8fb5ba0c6ea129b004df63bcd06d7d6d09b6783e70a1bfa6d2fc1066621f7ea859cca0467c8322b32655eb23f5d3197ebc0a49ecf867c3e934e91ea31c3415ccc7adf01ca6a2e835eed34cd953f2cf89aec22a48cd3ba586001f15012f9c8edaeead6df6ee6cdaaadd62cffd7fd34bb175065cee2a9a79776cc13bb74930e1edc108e03eba8b3bb2c62d1d695d5284c8cad21d9bedad563e2e96570ea03b23032d818d305c188810116bea0e19f33e7a4eb71e2e86281f55c095ad24005dccee4685395206dbfb7480d55f00e191407844cd6ba022ceea6eac1e5ef1107df340764065ff13480924b4d63c00ee00f9b9bfebee99d9ec920a821fcf06f14a1b5bb4e0590dc30a5c9944f5b2ffe6ff0c62165930cf450718b2ad74775553c6a5de2d9eab709912158b00b87836cf8feab171d774fa0745222902d0c99b312240e900e2759211168947d6d52eaf5f9df731d9d2b1ea2cf2713ca5a9fc9c64761f19012bca4d901e65ccae30197b6c3f57d82d7990d0c82d07a9dcd147a470319f0c6261b8cd5eec858a88ca9a28663220ccc0e2361dc40daffd486e625c403013d70bd4b029f8f63797ae6e7b02e800fdf709824b0e27b6073792fcee6c2cc1477368d0832723a2b13ba98daee9cdf9ede4eb6e7aeea7b37c04fee94db6f28c8252cc0b4b36af066b3b148ceb6765357eb01a071fbeef1d41b296d1627066b9ab344ddb259df37cb9e301e26a5cdf362c8f015236c7aed0cadf533431d9336fe9b5cf17f66964ccdff0db89526b9f2256fc3b82e4e749c5672cb14884935efeb65a44ff9035bbb648242bd508449afd0740491ab5819b75f19802b6741d854fbd87e694df208c55a3751c0865cd09e1e328d079693aef4fc437c9bf977c9aeae7b0a4cebf0c54ebe02efec8f53c7889af5b16ab4eb13422d5ba73a76db75d7cffe779b0ffdcc0ad429dd09448b54f10bac299361d7d649e7d38b7c470ab9f77daeba576783a7b0161e59a61f96d407773bc79c4beadc19c1a1dfde445f819aee6afecccad3579e26542321b53ab0877544c25eaa638e405449ad26c9b8ca38838ab31a8387bd7772e521e80df7c63a534f9eb6c0aacc513d17a78ae076bbaac2472153aa43ca3aa454ab5b334126a74e72e833ab718384e3a8c0e3a7a62e89362cd3da082f83052e91c02ed49739357b77546329969214dc0ca44fbdbf98eb558bb20a328788cf80e358db5b55b1c91b1d3e116642527a40850e9935eb894afc010c67be9034d05dbc5ef41f5660c849c588718c8c6517715e3fec863265fb873b03e8c3d60c7bd69ac8fa156cc5455add9ba2b9b2bcf31eae846cd31ac2b6e29bbed6384ae9bc96a2b68d13fddeaf64f08653547416782ab3eb6e206699fe084d51e32911d994626a3e7970dac2b3a7aa79222ea714228dfaeb1947894db1c4e5f21d5149f2f1b9df2084e6e848da180422e7db75f32deaec04f0cec0c3dab199dca6f932e4f774e7a072798d465a79010e08f284bf01fae43340269269eecc7b43ace70661ea38a4f19faa2df9867437dd55c5e711672057fed655eb02c3e8b05516cd08ce5db30c2adae57bb30bb45590d566bd74956d86269bf8ee9ca064780ead780c8f10795e4d93bfefddaebacfb93ab6333c8b5318c0d73d55364c2dfe057184d837d9a9c41b9070cfe2366f9bdcbf30dd9d5b8566c6204bfdb1c11dd936d9a4b288172a706f0ac9b3b8e0e97fa35579e73fe600134eb004dd9c8d1a7f4d625419c2d48b1a906ac1f7ef34f3c9a816de3c53f6f019a4a554f6a282a21f45891ffaa1e85c5af43f949c8a495dfe7953f53793dac5455b679f90efb678d25b9a7b7326193c34922487a2d83b1689261891d55ca69954c5f4d1fb1824c577cdc8dc4a22d5662e15f87ad729df239ec9ee007556c633d5dbbb4874568d11375250dd836e944c523ffcde1c156613877715c1895a0b755a971b41a1167542d5a94b2930e818fa18d169ed1f95db235cabba2f0b8162c93a31e549ee7903cb8ea9b15a39486b1d1347957e768ab1c372513f0816fd03d64e03c95019bb47b221a60f36c9ad2e4eee321175fdc6dcde5bea9d1bf73cd8ac2919a4f652fea4e1f5e761f5aeb78d925f175e066595e642a2f0c9eeb9313432bb0726ad27e3767007a27bfcdaa83a91b903ca122a3c0d503dc1ff3bdcedb096d0c7c74a67536ce50cc4b1aedef43a8d7bd26f657e3044b6ff25b01e91eb50cd17a2b28b2190e088786c5f3a6b79cf10c7de46cf94aecfdf3e99fc7ff07ca0d051375d81c888eeb525ac2b38036700a5646ab2a3814e7e91441f3dc6c0a149804142fecd91f6d6fff02e6058a670cef325dd009897fb9f7650eeabcfd832e30d2d59080c56fe524666f992c090f5ba17cad9ec034374ed4b98d46fa87b9068b31bf99d80714a736218992e37d674a0100128f93503156f9d53070cbcbb6f1aa4758a2b0012ae3b44ed0952a9ab17a626e9ccd994c401a9749b209d95223a0aa6533654a34cb1b3d4581475a22692daf84e4b87e68f6e53124cb6e3598a363d9157e94fb7d3eb59d6871766a1c3e40820f5eb917b03483cec88524ea8deb4f44dcc2bd73d01fb5ab3f45179c9d176666b6d8264aa7a6694aa208f3a8b9e6269d8b57d233d721750ef14b7b9f711e8c90bd480dbfa0c01d6dd3e899162cbde3c55f0dc0a438347b740fcde9aa0ecd9dd8e1265da91a5dd0d502608c045a54d1a23b91aaf0bb0bcb1174429cae5f2bd99011325d3df263621f110550a181767299fe386125069d08614adf9a1f3070fdcbae318c7b995d75e0ae92e5ab781d1fa0aa71c6a9a5b886835469e204da4c4592375df674a95edc197f097386e2b1de0e068df16c80dd7cd281e5c7ac6ed8d472dfdf8a4cb3dfe753635872c9c9f2a7928fc079b9191c72074b84bfdbcf6a8851bd3796f3d8ea0c9a5b124336dde9c80314aaad1e479a83a32c3ea57fd606c4753551a323cc2e83dfdb4ce40330b05a92172842f9c9df0d69c5cac7c1533c8f422dc7f9f5d697f679ea103f386d4d27fa9d3abdb335d78e6e3a1f0287056f65bb82850317883d80eb676acfd2c9c3da6f530c4f10c32865575bc75432bbf646de1f20fea33ba709befa14099bb52938dea4870a79c6814fb47ad4b8d0d8f180c8dfaa629a39ee861da33dbb0729450802e0dd1e669a07cc74e395986f13850c51fe7b7b4f295fafec913e26df87087c1868c8debbe48f83428819357c953e525abba44d25a3ceb23660c8df4f667463063179b792605a1609dcf63bef3114f4a7a41e54caeb6f164737bb508a91c015cfa960e7971dbb9f5a6bf13cdde7584c37a0e143fa5e6132cd553518f7a277b02aa89a9cd7efe86cc86122a7066c5d60de76cfa6aaf0ae10323534ff6065b715a4c1c2c376338c355fea617b5b77aed0375856516de8b9a556f45f0a907255b4417e3ff9d3363ee9c0317f076cea2f2a90477957f6b72d73085f4f700d18e194d136f253d5c5b1b5fa0a76b37aba42baf527b247aa3ae4ef229d14eae58ebbb7dfd69f4f9bcfb56295ea8ce8cad5c71ee9293d8738c36bdccfd56f99f2c4e42848e3a86b365bf470242e2dec850b61988e4ac505d11e46ae9448d9bab6f208d751921dca54c3ac30fc16fae710bf64401238bef451efd53ac49cc2a1b40d50b59e196ac8fa8272f36ab11abf2ad7d7534c2da0d491f6fad41e63de771f8ec66752c4914dc3d7db34b3b21ce286d077e9900933e650b7d63bd021d3ec71f913efef9ff089c0c762b65bb6f50fcfcaed08d2db57b59b613f269072", 0x1000}}, 0x1006) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 2.596440219s ago: executing program 0 (id=4299): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@deltaction={0x14, 0x31, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x24004000) syz_open_dev$loop(0x0, 0x75f, 0xa382) sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = memfd_create(0x0, 0x1) pwritev(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x800000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 2.591185859s ago: executing program 3 (id=4300): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x2) 1.948721721s ago: executing program 1 (id=4301): syz_open_dev$video4linux(&(0x7f0000000000), 0x80000001, 0x10001) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x74, 0x23f2) syz_emit_ethernet(0xae, &(0x7f00000004c0)=ANY=[], 0x0) syz_io_uring_setup(0x2be, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000500)={0x5, 0x4, 0x7, 0x8001}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) 1.822635122s ago: executing program 0 (id=4302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, 0x0) 756.784229ms ago: executing program 0 (id=4303): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x4a86, 0x0) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(0x0, 0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(0x0, 0x401, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x4008800) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 0s ago: executing program 3 (id=4304): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): pected cc 0x0c03 length: 249 > 1 [ 1034.910472][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1034.925123][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1034.972971][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1034.987525][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1035.000466][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.069948][ T7484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.180710][ T7484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.494802][ T7484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.134168][T14652] chnl_net:caif_netlink_parms(): no params data found [ 1037.164854][T13311] Bluetooth: hci0: command tx timeout [ 1037.230683][ T7484] tipc: Left network mode [ 1037.660549][T14652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.692659][T14652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.708777][T14652] bridge_slave_0: entered allmulticast mode [ 1037.736613][T14652] bridge_slave_0: entered promiscuous mode [ 1037.777250][T14652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.797714][T14652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.826196][T14652] bridge_slave_1: entered allmulticast mode [ 1037.854272][T14652] bridge_slave_1: entered promiscuous mode [ 1038.313146][T14652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.348641][T14702] netlink: 'syz.2.2509': attribute type 10 has an invalid length. [ 1038.372450][T14702] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1038.401332][T14652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.934152][T14652] team0: Port device team_slave_0 added [ 1039.081274][T14652] team0: Port device team_slave_1 added [ 1039.241966][T13311] Bluetooth: hci0: command tx timeout [ 1039.316844][ T7484] dvmrp17 (unregistering): left allmulticast mode [ 1039.364185][T14652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.377442][T14652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.412569][T14652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.099014][T14652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.156118][T14652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.237377][T14652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.621425][ T7484] hsr_slave_0: left promiscuous mode [ 1040.654407][ T7484] hsr_slave_1: left promiscuous mode [ 1040.673234][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.717005][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.745162][T14725] kvm: pic: non byte read [ 1040.756277][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.774454][T14725] kvm: pic: non byte read [ 1040.780266][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.805051][T14725] kvm: pic: non byte read [ 1040.810407][ T7484] bridge_slave_1: left allmulticast mode [ 1040.825209][ T7484] bridge_slave_1: left promiscuous mode [ 1040.828366][T14725] kvm: pic: non byte read [ 1040.862370][T14725] kvm: pic: non byte read [ 1040.863670][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.905179][T14725] kvm: pic: non byte read [ 1040.914201][ T7484] bridge_slave_0: left allmulticast mode [ 1040.921658][ T7484] bridge_slave_0: left promiscuous mode [ 1040.924676][T14725] kvm: pic: non byte read [ 1040.951534][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.987255][T14725] kvm: pic: non byte read [ 1041.044667][T14725] kvm: pic: non byte read [ 1041.098277][T14725] kvm: pic: non byte read [ 1041.118867][ T7484] veth1_macvtap: left promiscuous mode [ 1041.136909][ T7484] veth0_macvtap: left promiscuous mode [ 1041.318381][T13311] Bluetooth: hci0: command tx timeout [ 1043.399387][T13311] Bluetooth: hci0: command tx timeout [ 1043.455855][ T7484] team0 (unregistering): Port device team_slave_1 removed [ 1043.603460][ T7484] team0 (unregistering): Port device team_slave_0 removed [ 1043.870924][ T7484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.223742][ T7484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.816535][ T7484] bond0 (unregistering): Released all slaves [ 1046.115588][T14652] hsr_slave_0: entered promiscuous mode [ 1046.146730][T14652] hsr_slave_1: entered promiscuous mode [ 1046.182600][T14652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1046.196454][T14652] Cannot create hsr debugfs directory [ 1047.625820][ T7484] IPVS: stop unused estimator thread 0... [ 1049.446434][T14652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1049.488772][T14652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1049.517007][T14652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1049.545089][T14652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1049.985108][T14652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.086955][T14652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.176136][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.183360][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.275024][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.282216][ T7484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.347513][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.356625][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.127486][T14864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.223915][T14864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.614345][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.620885][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.929333][T14864] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.941328][T14864] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.950915][T14864] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.959952][T14864] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.069295][T14864] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1055.458974][T14652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.104238][T14652] veth0_vlan: entered promiscuous mode [ 1056.205852][T14652] veth1_vlan: entered promiscuous mode [ 1056.590899][T14652] veth0_macvtap: entered promiscuous mode [ 1056.705771][T14652] veth1_macvtap: entered promiscuous mode [ 1056.975542][T14652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.045518][T14652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.093579][T14652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.134055][T14652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.185076][T14652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.234910][T14652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.255391][T14652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.265958][T14652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.310993][T14652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.360083][T14652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.405421][T14652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.439572][T14652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.467371][T14652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.498387][T14652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.549571][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.557544][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.560432][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.573673][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.918119][T14956] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2498'. [ 1060.843271][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2564'. [ 1061.698266][T14900] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1061.968487][T14900] usb 4-1: Using ep0 maxpacket: 8 [ 1062.084599][T14900] usb 4-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 1062.173211][T14900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1062.254953][T14900] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1062.338842][T14900] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1062.355346][T14900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.427435][T14900] hub 4-1:1.0: bad descriptor, ignoring hub [ 1062.456267][T14900] hub: probe of 4-1:1.0 failed with error -5 [ 1062.537758][T14900] cdc_wdm 4-1:1.0: skipping garbage [ 1062.600216][T14900] cdc_wdm 4-1:1.0: skipping garbage [ 1062.626902][T14900] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1064.016706][T14900] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1064.330878][T14900] usb 1-1: Using ep0 maxpacket: 8 [ 1064.405362][T14900] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1064.469721][T14988] [U]  [ 1064.489539][T14900] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1064.513786][T14900] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1064.541524][T14900] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.561906][T14900] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1064.582135][ T28] usb 4-1: USB disconnect, device number 20 [ 1064.592647][T14900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.841693][T14900] usb 1-1: GET_CAPABILITIES returned 0 [ 1064.867430][T14900] usbtmc 1-1:16.0: can't read capabilities [ 1065.070258][ T28] usb 1-1: USB disconnect, device number 24 [ 1065.882349][T14900] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1066.213318][T14900] usb 4-1: Using ep0 maxpacket: 8 [ 1066.273054][T14900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.294757][T14900] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 1066.294847][T14900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1066.294895][T14900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1066.294979][T14900] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.394090][T14900] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1066.394181][T14900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.394204][T14900] usb 4-1: Product: syz [ 1066.394220][T14900] usb 4-1: Manufacturer: syz [ 1066.394236][T14900] usb 4-1: SerialNumber: syz [ 1066.559532][T14900] usb 4-1: config 0 descriptor?? [ 1066.564474][T15060] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1066.679809][T14900] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1066.958805][ T788] usb 4-1: USB disconnect, device number 21 [ 1071.009912][T15109] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2592'. [ 1074.504097][T15150] sctp: [Deprecated]: syz.3.2602 (pid 15150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1074.504097][T15150] Use struct sctp_sack_info instead [ 1082.567137][T15243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2632'. [ 1083.385801][T15248] picdev_read: 77 callbacks suppressed [ 1083.385819][T15248] kvm: pic: non byte read [ 1083.492070][T15248] kvm: pic: non byte read [ 1083.508315][T15248] kvm: pic: non byte read [ 1083.526582][T15248] kvm: pic: non byte read [ 1083.552517][T15248] kvm: pic: non byte read [ 1083.623600][T15248] kvm: pic: non byte read [ 1083.648514][T15248] kvm: pic: non byte read [ 1083.660219][T15248] kvm: pic: non byte read [ 1083.674527][T15248] kvm: pic: non byte read [ 1083.686715][T15248] kvm: pic: non byte read [ 1087.298112][T14898] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1088.108792][T14898] usb 2-1: Using ep0 maxpacket: 32 [ 1088.124871][T14898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.148127][T14898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.157959][T14898] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1088.178091][T14898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.197072][T14898] usb 2-1: config 0 descriptor?? [ 1088.618430][ T788] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1088.822065][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 1088.841118][ T788] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1088.849455][T14898] ft260 0003:0403:6030.000E: unknown main item tag 0x7 [ 1088.862484][ T788] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1088.878090][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.899399][ T788] usb 4-1: config 0 descriptor?? [ 1088.913202][ T788] hub 4-1:0.0: bad descriptor, ignoring hub [ 1088.919605][ T5777] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1088.946379][ T788] hub: probe of 4-1:0.0 failed with error -5 [ 1088.963754][ T788] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1089.051702][T14898] ft260 0003:0403:6030.000E: failed to retrieve chip version [ 1089.065121][T14898] ft260: probe of 0003:0403:6030.000E failed with error -5 [ 1089.130234][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.141378][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.151586][ T5777] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1089.168426][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.190680][ T5777] usb 1-1: config 0 descriptor?? [ 1089.411622][T15314] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1089.506565][T15319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2653'. [ 1089.600338][T15320] netlink: 'syz.0.2653': attribute type 1 has an invalid length. [ 1092.901409][ T5777] usbhid 1-1:0.0: can't add hid device: -71 [ 1092.907449][ T5777] usbhid: probe of 1-1:0.0 failed with error -71 [ 1092.916389][ T5777] usb 1-1: USB disconnect, device number 25 [ 1092.947104][ T28] usb 2-1: USB disconnect, device number 24 [ 1093.138521][ T788] usb 4-1: USB disconnect, device number 22 [ 1093.389500][T15332] picdev_read: 164 callbacks suppressed [ 1093.389514][T15332] kvm: pic: non byte read [ 1093.413445][T15332] kvm: pic: non byte read [ 1093.432574][T15332] kvm: pic: non byte read [ 1093.441206][T15332] kvm: pic: non byte read [ 1093.454312][T15332] kvm: pic: non byte read [ 1093.460915][T15332] kvm: pic: non byte read [ 1093.465997][T15332] kvm: pic: non byte read [ 1093.478364][T15332] kvm: pic: non byte read [ 1093.487933][T15332] kvm: pic: non byte read [ 1093.499141][T15332] kvm: pic: non byte read [ 1096.608116][ T788] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1096.788106][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 1096.796649][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.812858][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.822907][ T788] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1096.832334][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.850444][ T788] usb 3-1: config 0 descriptor?? [ 1097.058173][ T28] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1097.251117][ T28] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 1097.268338][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.305375][ T28] usb 2-1: config 0 has no interface number 0 [ 1097.318509][ T788] ft260 0003:0403:6030.000F: unknown main item tag 0x7 [ 1097.328769][ T28] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 1097.349331][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.378743][ T28] usb 2-1: config 0 descriptor?? [ 1097.423391][ T28] usb 2-1: bad CDC descriptors [ 1097.448528][ T28] usb 2-1: bad CDC descriptors [ 1097.499875][ T788] ft260 0003:0403:6030.000F: failed to retrieve chip version [ 1097.515327][ T788] ft260: probe of 0003:0403:6030.000F failed with error -5 [ 1098.076965][T14900] usb 2-1: USB disconnect, device number 25 [ 1099.741902][T15396] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 1100.375681][ T5777] usb 3-1: USB disconnect, device number 16 [ 1103.080306][T15424] blktrace: Concurrent blktraces are not allowed on sg0 [ 1103.188500][T14900] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1103.582131][T14900] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 1103.818674][T14900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.838193][T14900] usb 3-1: config 0 has no interface number 0 [ 1103.844856][T14900] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 1103.854532][T14900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.897462][T14900] usb 3-1: config 0 descriptor?? [ 1103.923037][T14900] usb 3-1: bad CDC descriptors [ 1103.932175][T14900] usb 3-1: bad CDC descriptors [ 1104.818485][ T28] usb 3-1: USB disconnect, device number 17 [ 1105.008214][T14900] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1105.208380][T14900] usb 1-1: Using ep0 maxpacket: 32 [ 1105.283535][T14900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.296005][T14900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.308347][T14900] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1105.317440][T14900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.328857][T14900] usb 1-1: config 0 descriptor?? [ 1105.941030][T14900] ft260 0003:0403:6030.0010: unknown main item tag 0x7 [ 1106.639719][T14900] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 1106.667738][T14900] ft260 0003:0403:6030.0010: failed to retrieve system status [ 1106.675879][T14900] ft260: probe of 0003:0403:6030.0010 failed with error -32 [ 1107.211542][T15456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1108.707161][ T28] usb 1-1: USB disconnect, device number 26 [ 1109.681608][T15475] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2702'. [ 1111.208124][ T5822] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1111.553911][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 1112.102376][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.119504][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.129451][ T5822] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1112.139021][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.150398][ T5822] usb 1-1: config 0 descriptor?? [ 1112.664989][ T5822] ft260 0003:0403:6030.0011: unknown main item tag 0x7 [ 1112.891606][ T5822] ft260 0003:0403:6030.0011: chip code: 6424 8183 [ 1113.007877][T15511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2714'. [ 1113.143301][ T5822] ft260 0003:0403:6030.0011: failed to retrieve system status [ 1113.151606][ T5822] ft260: probe of 0003:0403:6030.0011 failed with error -32 [ 1113.987589][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 1115.073378][ T5777] usb 1-1: USB disconnect, device number 27 [ 1115.984573][T15549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2727'. [ 1116.046637][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.046734][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.852341][T15572] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 1116.862098][T14900] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1117.878751][T14900] usb 4-1: Using ep0 maxpacket: 32 [ 1117.913051][T14900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.991921][T14900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.010972][T14900] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1118.043006][T14900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.076193][T14900] usb 4-1: config 0 descriptor?? [ 1118.378076][ T5777] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1118.510972][T14900] ft260 0003:0403:6030.0012: unknown main item tag 0x7 [ 1118.705428][T14900] ft260 0003:0403:6030.0012: chip code: 6424 8183 [ 1118.905951][T14900] ft260 0003:0403:6030.0012: failed to retrieve system status [ 1118.915252][T14900] ft260: probe of 0003:0403:6030.0012 failed with error -32 [ 1119.088401][T15591] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1119.598732][ T5777] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1119.607943][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.627070][ T5777] usb 2-1: config 0 descriptor?? [ 1119.641526][ T5777] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1119.653170][ T5777] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 1120.172871][ T5777] usb 4-1: USB disconnect, device number 23 [ 1120.788880][ T5777] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1121.027439][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.053135][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.088515][ T5777] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1121.108054][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.124283][ T5777] usb 4-1: config 0 descriptor?? [ 1121.289650][ T788] usb 2-1: USB disconnect, device number 26 [ 1121.370317][T15603] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1121.477761][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2742'. [ 1121.563493][T15607] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 1124.839117][ T5777] usbhid 4-1:0.0: can't add hid device: -71 [ 1124.866344][ T5777] usbhid: probe of 4-1:0.0 failed with error -71 [ 1124.893628][ T5777] usb 4-1: USB disconnect, device number 24 [ 1126.038867][T15628] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1126.045455][T15628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1126.058227][T15628] vhci_hcd vhci_hcd.0: Device attached [ 1126.308405][ T5777] vhci_hcd: vhci_device speed not set [ 1126.382862][T15630] binder: BINDER_SET_CONTEXT_MGR already set [ 1126.391743][T15628] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 1126.398398][T15628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1126.407971][T15628] vhci_hcd vhci_hcd.0: Device attached [ 1126.408454][T15630] binder: 15627:15630 ioctl 4018620d 2000000001c0 returned -16 [ 1126.438177][ T5777] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1126.593064][T15639] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2750'. [ 1126.707754][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2751'. [ 1128.318542][T15635] vhci_hcd: connection closed [ 1128.319010][ T34] vhci_hcd: stop threads [ 1128.351930][ T34] vhci_hcd: release socket [ 1128.353102][T15632] vhci_hcd: connection reset by peer [ 1128.369423][ T34] vhci_hcd: disconnect device [ 1128.525407][ T34] vhci_hcd: stop threads [ 1128.555947][ T34] vhci_hcd: release socket [ 1128.560939][ T34] vhci_hcd: disconnect device [ 1128.757844][T15661] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1128.764898][T15661] PKCS7: Only support pkcs7_signedData type [ 1130.134831][ T28] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1130.328226][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 1130.378648][ T28] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.378796][ T28] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.446728][ T28] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1130.446843][ T28] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1130.446939][ T28] usb 4-1: Product: syz [ 1130.447035][ T28] usb 4-1: Manufacturer: syz [ 1130.498337][ T28] hub 4-1:4.0: USB hub found [ 1130.919116][ T28] hub 4-1:4.0: 2 ports detected [ 1131.054905][T15670] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2760'. [ 1131.381337][T15678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2763'. [ 1131.638744][ T5777] vhci_hcd: vhci_device speed not set [ 1132.269422][ T788] hub 4-1:4.0: activate --> -90 [ 1132.685194][ T28] usb 4-1-port2: cannot warm reset (err = -71) [ 1132.686498][T14899] usb 4-1: USB disconnect, device number 25 [ 1133.514964][T15696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2770'. [ 1133.633299][T15705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2773'. [ 1135.406749][T15737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1136.001216][T15729] delete_channel: no stack [ 1136.013777][T15740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1137.258261][T14897] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1137.458126][T14897] usb 3-1: Using ep0 maxpacket: 32 [ 1137.477458][T14897] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.526332][T14897] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.566443][T14897] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1137.586079][T14897] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1137.598249][T14897] usb 3-1: Product: syz [ 1137.602994][T14897] usb 3-1: Manufacturer: syz [ 1137.617244][T14897] hub 3-1:4.0: USB hub found [ 1138.288636][T14897] hub 3-1:4.0: 2 ports detected [ 1138.372718][T15760] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2794'. [ 1138.409230][T15767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2796'. [ 1140.247580][T14897] hub 3-1:4.0: activate --> -90 [ 1140.309583][T15785] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1140.316178][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1140.341694][T15785] vhci_hcd vhci_hcd.0: Device attached [ 1140.413058][T15789] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 1140.419729][T15789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1140.468135][T14897] usb 3-1-port2: cannot warm reset (err = -71) [ 1140.488608][T14897] usb 3-1-port2: cannot warm reset (err = -71) [ 1140.494833][T14897] usb 3-1-port2: Cannot enable. Maybe the USB cable is bad? [ 1140.530394][T15789] vhci_hcd vhci_hcd.0: Device attached [ 1140.538378][T14899] vhci_hcd: vhci_device speed not set [ 1140.546226][T14897] usb 3-1-port2: cannot disable (err = -71) [ 1140.570307][T14898] usb 3-1: Failed to suspend device, error -71 [ 1140.628106][T14899] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1140.740745][T14900] usb 3-1: USB disconnect, device number 18 [ 1140.980495][T15787] vhci_hcd: connection reset by peer [ 1140.999840][T15790] vhci_hcd: connection closed [ 1141.003597][ T34] vhci_hcd: stop threads [ 1141.024566][ T34] vhci_hcd: release socket [ 1141.042330][ T34] vhci_hcd: disconnect device [ 1141.061001][ T34] vhci_hcd: stop threads [ 1141.070472][ T34] vhci_hcd: release socket [ 1141.090035][ T34] vhci_hcd: disconnect device [ 1141.625842][T15801] binder_alloc: 15799: binder_alloc_buf, no vma [ 1141.680331][T15792] delete_channel: no stack [ 1141.887892][T15803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2807'. [ 1141.900220][T15803] netlink: set zone limit has 8 unknown bytes [ 1142.004618][T15804] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 1142.012397][T15804] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1143.176196][T15808] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2808'. [ 1144.095293][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 1144.268266][T14900] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1144.458170][T14900] usb 1-1: Using ep0 maxpacket: 32 [ 1144.469414][T14900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.480443][T14900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.490356][T14900] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1144.500444][T14900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.512186][T14900] usb 1-1: config 0 descriptor?? [ 1144.940731][T14900] ft260 0003:0403:6030.0013: unknown main item tag 0x7 [ 1145.136838][T14900] ft260 0003:0403:6030.0013: chip code: 6424 8183 [ 1145.358901][T14900] ft260 0003:0403:6030.0013: failed to retrieve system status [ 1145.366982][T14900] ft260: probe of 0003:0403:6030.0013 failed with error -5 [ 1145.386864][T14898] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1145.601121][T14898] usb 2-1: Using ep0 maxpacket: 32 [ 1145.617680][T14898] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.636876][T14898] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.668347][T14898] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1145.682677][T14898] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1145.712919][T14898] usb 2-1: Product: syz [ 1145.731331][T14898] usb 2-1: Manufacturer: syz [ 1145.769987][T14898] hub 2-1:4.0: USB hub found [ 1145.888646][T14899] vhci_hcd: vhci_device speed not set [ 1145.986477][T14898] hub 2-1:4.0: 2 ports detected [ 1146.988837][ T788] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1147.193282][ T788] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1147.202465][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.242002][ T788] usb 3-1: config 0 descriptor?? [ 1147.266672][ T788] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1147.270750][T14898] hub 2-1:4.0: activate --> -90 [ 1147.295591][ T788] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 1147.402102][T14899] usb 1-1: USB disconnect, device number 28 [ 1147.527249][T14902] usb 3-1: USB disconnect, device number 19 [ 1147.705226][T14898] usb 2-1-port2: cannot warm reset (err = -71) [ 1147.712331][T14899] usb 2-1: USB disconnect, device number 27 [ 1148.448307][ T788] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1148.648292][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 1148.761040][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.761107][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.761268][ T788] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1148.761387][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.764654][T15862] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1148.764722][T15862] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1148.766164][T15862] vhci_hcd vhci_hcd.0: Device attached [ 1148.797461][ T788] usb 1-1: config 0 descriptor?? [ 1148.848702][T15856] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2823'. [ 1148.968216][T14902] vhci_hcd: vhci_device speed not set [ 1148.994441][T15862] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 1148.994472][T15862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1148.995034][T15862] vhci_hcd vhci_hcd.0: Device attached [ 1149.038386][T14902] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1149.250027][ T788] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 1149.321672][T15869] vhci_hcd: connection closed [ 1149.323191][ T7484] vhci_hcd: stop threads [ 1149.344644][T15864] vhci_hcd: connection reset by peer [ 1149.362781][ T7484] vhci_hcd: release socket [ 1149.371675][ T7484] vhci_hcd: disconnect device [ 1149.388619][ T7484] vhci_hcd: stop threads [ 1149.401294][ T7484] vhci_hcd: release socket [ 1149.421290][ T7484] vhci_hcd: disconnect device [ 1149.429200][ T788] ft260 0003:0403:6030.0014: chip code: 6424 8183 [ 1149.630622][ T788] ft260 0003:0403:6030.0014: failed to retrieve system status [ 1149.640530][ T788] ft260: probe of 0003:0403:6030.0014 failed with error -5 [ 1150.415103][T15872] delete_channel: no stack [ 1150.941705][T15890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2833'. [ 1150.951395][T15890] netlink: set zone limit has 8 unknown bytes [ 1151.251761][T15893] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1151.261801][T15893] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1152.162492][T14898] usb 1-1: USB disconnect, device number 29 [ 1152.583442][T15898] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2836'. [ 1152.863396][T15908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2838'. [ 1153.742311][T15924] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1153.748890][T15924] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1153.793928][T15924] vhci_hcd vhci_hcd.0: Device attached [ 1153.988245][T14898] vhci_hcd: vhci_device speed not set [ 1154.054107][T15924] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 1154.060785][T15924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1154.077353][T14898] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1154.176887][T15924] vhci_hcd vhci_hcd.0: Device attached [ 1154.198282][T14902] vhci_hcd: vhci_device speed not set [ 1154.298127][T14900] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1154.467348][T15930] vhci_hcd: connection closed [ 1154.468889][T15928] vhci_hcd: connection reset by peer [ 1154.479642][ T11] vhci_hcd: stop threads [ 1154.483942][ T11] vhci_hcd: release socket [ 1154.504110][ T11] vhci_hcd: disconnect device [ 1154.522346][T14900] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1154.532767][ T11] vhci_hcd: stop threads [ 1154.532776][T14900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.537044][ T11] vhci_hcd: release socket [ 1154.566349][T14900] usb 4-1: config 0 descriptor?? [ 1154.608153][ T11] vhci_hcd: disconnect device [ 1154.620764][T14900] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1154.636824][T14900] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 1154.648205][ T788] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1154.708225][T14899] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1154.838529][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 1154.851998][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.863011][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.888930][ T788] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1154.918146][T14899] usb 1-1: Using ep0 maxpacket: 32 [ 1154.920610][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.941623][T14899] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.958917][T14899] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.963559][ T788] usb 3-1: config 0 descriptor?? [ 1155.026915][T14900] usb 4-1: USB disconnect, device number 26 [ 1155.036407][T14899] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1155.049262][T14899] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1155.059093][T14899] usb 1-1: Product: syz [ 1155.063312][T14899] usb 1-1: Manufacturer: syz [ 1155.089189][T14899] hub 1-1:4.0: USB hub found [ 1155.305862][T14899] hub 1-1:4.0: 2 ports detected [ 1155.461827][ T788] ft260 0003:0403:6030.0015: unknown main item tag 0x7 [ 1155.621482][ T788] ft260 0003:0403:6030.0015: chip code: 6424 8183 [ 1155.828620][ T788] ft260 0003:0403:6030.0015: failed to retrieve system status [ 1155.833019][ T788] ft260: probe of 0003:0403:6030.0015 failed with error -5 [ 1156.107560][T15941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2850'. [ 1156.856124][T15948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2852'. [ 1157.082767][T14902] hub 1-1:4.0: activate --> -90 [ 1157.502846][T14902] usb 1-1-port2: cannot warm reset (err = -71) [ 1157.520707][T14900] usb 1-1: USB disconnect, device number 30 [ 1157.527044][T14902] usb 1-1-port2: cannot warm reset (err = -71) [ 1157.560813][T14902] usb 1-1-port2: Cannot enable. Maybe the USB cable is bad? [ 1157.905766][T14900] usb 3-1: USB disconnect, device number 20 [ 1158.830193][T15977] netlink: 'syz.3.2863': attribute type 20 has an invalid length. [ 1158.902067][T15977] dvmrp17: entered allmulticast mode [ 1159.378152][T14898] vhci_hcd: vhci_device speed not set [ 1159.503000][T15978] program syz.2.2862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1159.526048][T15978] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1162.072917][T16012] tipc: Started in network mode [ 1162.081591][T16012] tipc: Node identity 4, cluster identity 4711 [ 1162.092019][T16012] tipc: Node number set to 4 [ 1163.189929][T16019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2872'. [ 1165.290401][T16042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2877'. [ 1166.979394][T16067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1169.269472][T16104] tipc: Started in network mode [ 1169.274523][T16104] tipc: Node identity 4, cluster identity 4711 [ 1169.281033][T16104] tipc: Node number set to 4 [ 1170.949570][T16126] netlink: 'syz.1.2899': attribute type 20 has an invalid length. [ 1171.048442][T16126] dvmrp17: entered allmulticast mode [ 1172.129495][T16129] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2900'. [ 1173.441939][T16152] fuse: Unknown parameter 'grou00000000000000000000' [ 1175.250835][T16180] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1176.142159][T16188] netlink: 'syz.2.2914': attribute type 20 has an invalid length. [ 1176.223666][T16188] dvmrp17: entered allmulticast mode [ 1177.483923][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.490548][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.758659][T16200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2918'. [ 1178.366481][T16211] kvm: kvm [16210]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4e95 [ 1178.406253][T16221] fuse: Bad value for 'group_id' [ 1180.363606][T16241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2927'. [ 1180.389854][T16241] netlink: set zone limit has 8 unknown bytes [ 1182.253121][T16255] fuse: Bad value for 'group_id' [ 1184.671770][T16273] fuse: Unknown parameter 'group_i00000000000000000000' [ 1184.906512][T16272] kvm: kvm [16271]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4e95 [ 1186.751535][T16298] fuse: Bad value for 'group_id' [ 1187.052656][T16306] fuse: Unknown parameter 'group_i00000000000000000000' [ 1187.815785][T16308] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1190.983179][T16339] fuse: Unknown parameter 'group_i00000000000000000000' [ 1193.505462][T16365] fuse: Unknown parameter 'group_id00000000000000000000' [ 1193.635575][T16368] binder: BINDER_SET_CONTEXT_MGR already set [ 1193.655334][T16368] binder: 16367:16368 ioctl 4018620d 2000000001c0 returned -16 [ 1195.218083][T16378] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1196.580955][T16387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2970'. [ 1199.134667][T16405] fuse: Unknown parameter 'group_id00000000000000000000' [ 1199.270157][T16407] binder: BINDER_SET_CONTEXT_MGR already set [ 1199.285156][T16407] binder: 16406:16407 ioctl 4018620d 2000000001c0 returned -16 [ 1200.578754][T16420] program syz.0.2982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1200.608864][T16420] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1200.705197][T16425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2984'. [ 1201.550031][T16428] kvm: kvm [16427]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb40000007da1 [ 1202.865961][T16443] fuse: Unknown parameter 'group_id00000000000000000000' [ 1204.038508][T16458] binder: BINDER_SET_CONTEXT_MGR already set [ 1204.044752][T16458] binder: 16450:16458 ioctl 4018620d 2000000001c0 returned -16 [ 1205.227229][T16473] fuse: Bad value for 'user_id' [ 1206.135322][T16483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3003'. [ 1206.158311][T16483] netlink: set zone limit has 8 unknown bytes [ 1206.266511][T16485] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 1206.274485][T16485] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1208.278721][T16504] fuse: Bad value for 'user_id' [ 1209.335292][T16524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3015'. [ 1210.175560][T16538] fuse: Bad value for 'user_id' [ 1211.445776][T16553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3025'. [ 1212.161585][T16550] kvm: kvm [16548]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb40000007da1 [ 1214.540401][T16591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3035'. [ 1218.285531][T16621] fuse: Bad value for 'fd' [ 1219.001148][T16627] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3048'. [ 1219.609104][T16641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1219.725025][T16641] netlink: set zone limit has 8 unknown bytes [ 1220.121357][T16645] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 1220.128743][T16645] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1221.711443][T16661] fuse: Bad value for 'fd' [ 1222.190844][T16669] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3059'. [ 1222.296051][T16674] fuse: Unknown parameter 'group_id00000000000000000000' [ 1222.524263][T16672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1223.178333][ T5777] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1223.262894][T16684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3065'. [ 1223.308804][T16684] netlink: set zone limit has 8 unknown bytes [ 1223.407925][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 1223.445170][T16686] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1223.759208][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.771110][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.781034][ T5777] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1223.790491][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.809355][ T5777] usb 1-1: config 0 descriptor?? [ 1223.977506][T16690] fuse: Bad value for 'fd' [ 1224.166316][T16699] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3071'. [ 1224.234579][ T5777] ft260 0003:0403:6030.0016: unknown main item tag 0x7 [ 1224.288816][T16701] fuse: Unknown parameter 'group_id00000000000000000000' [ 1224.513299][ T5777] ft260 0003:0403:6030.0016: chip code: 6424 8183 [ 1224.713994][ T5777] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1224.942950][ T5777] ft260 0003:0403:6030.0016: failed to retrieve status: -32, no wakeup [ 1225.035773][ T5777] ft260 0003:0403:6030.0016: failed to retrieve status: -32 [ 1225.050861][ T5777] ft260 0003:0403:6030.0016: failed to reset I2C controller: -71 [ 1225.128729][ T5777] usb 1-1: USB disconnect, device number 31 [ 1225.490856][T16715] fuse: Bad value for 'fd' [ 1225.548686][T16717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3076'. [ 1225.580018][T16717] netlink: set zone limit has 8 unknown bytes [ 1225.796615][T16721] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1226.433883][T16725] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3080'. [ 1226.565228][T16729] fuse: Unknown parameter 'group_id00000000000000000000' [ 1229.687243][T16751] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3090'. [ 1229.884205][ T5777] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1230.381316][T16760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1230.394124][T16760] netlink: set zone limit has 8 unknown bytes [ 1230.463934][T16761] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1230.496062][ T5777] usb 3-1: Using ep0 maxpacket: 32 [ 1231.273951][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.286782][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.340443][ T5777] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1231.363813][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.403939][ T5777] usb 3-1: config 0 descriptor?? [ 1231.839725][ T5777] ft260 0003:0403:6030.0017: unknown main item tag 0x7 [ 1232.031315][ T5777] ft260 0003:0403:6030.0017: chip code: 6424 8183 [ 1232.036923][T16769] kvm: kvm [16768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6b00 [ 1232.061608][T16769] kvm: kvm [16768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xeb00 [ 1232.073403][T16769] kvm: kvm [16768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa300 [ 1232.095777][T16769] kvm: kvm [16768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa300 [ 1232.271182][T16776] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3096'. [ 1232.304387][ T5777] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1232.908757][ T5777] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 1232.947220][ T5777] ft260 0003:0403:6030.0017: failed to retrieve status: -32 [ 1232.978653][ T5777] ft260 0003:0403:6030.0017: failed to reset I2C controller: -71 [ 1233.166022][ T5777] usb 3-1: USB disconnect, device number 21 [ 1234.316095][T16783] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3099'. [ 1234.530923][T16794] fuse: Invalid rootmode [ 1234.588355][T14899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1235.298221][T14899] usb 2-1: Using ep0 maxpacket: 32 [ 1235.305361][T14899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.317130][T14899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.327162][T14899] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1235.338211][T14899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.352279][T14899] usb 2-1: config 0 descriptor?? [ 1235.874149][T14899] ft260 0003:0403:6030.0018: unknown main item tag 0x7 [ 1236.003334][T16805] kvm: kvm [16804]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6b00 [ 1236.045631][T16805] kvm: kvm [16804]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xeb00 [ 1236.078229][T14899] ft260 0003:0403:6030.0018: chip code: 6424 8183 [ 1236.081041][T16805] kvm: kvm [16804]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa300 [ 1236.127471][T16805] kvm: kvm [16804]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa300 [ 1236.275444][T14899] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1236.473279][T14899] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 1236.520532][T14899] ft260 0003:0403:6030.0018: failed to retrieve status: -32 [ 1236.546040][T14899] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71 [ 1236.635303][T14899] usb 2-1: USB disconnect, device number 28 [ 1237.479182][T16822] fuse: Bad value for 'rootmode' [ 1238.112852][T16825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.123526][T16825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.134276][T16825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.255652][T16830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3115'. [ 1238.275155][T16830] netlink: set zone limit has 8 unknown bytes [ 1238.283612][T16825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.294435][T16825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.305073][T16825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.564422][T16830] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1238.923402][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.930861][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.321801][T16852] fuse: Bad value for 'rootmode' [ 1239.485810][T14899] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1239.605436][T16857] binder: 16855:16857 ioctl 4018620d 0 returned -22 [ 1239.758217][T14899] usb 1-1: Using ep0 maxpacket: 32 [ 1239.965213][T14899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.036229][T14899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.046646][T14899] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1240.057092][T14899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.075312][T14899] usb 1-1: config 0 descriptor?? [ 1240.285084][T16861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1240.298184][T16861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.308423][T16861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1240.318942][T16861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.328823][T16861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1240.339404][T16861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.599415][T14899] ft260 0003:0403:6030.0019: unknown main item tag 0x7 [ 1240.796865][T14899] ft260 0003:0403:6030.0019: chip code: 6424 8183 [ 1241.002272][T14899] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1241.200739][T14899] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 1241.209785][T14899] ft260 0003:0403:6030.0019: failed to retrieve status: -5 [ 1241.411750][T14899] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 1241.429845][T14899] usb 1-1: USB disconnect, device number 32 [ 1241.963859][T16863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1241.972996][T16863] netlink: set zone limit has 8 unknown bytes [ 1241.998667][T16863] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1242.159913][T16872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3131'. [ 1244.138428][T14900] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1244.398219][T14900] usb 2-1: Using ep0 maxpacket: 32 [ 1244.524111][T14900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.567769][T14900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.580257][T14900] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1244.589921][T14900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.601797][T14900] usb 2-1: config 0 descriptor?? [ 1245.094691][T16894] tipc: Started in network mode [ 1245.100032][T16894] tipc: Node identity 4, cluster identity 4711 [ 1245.106673][T16894] tipc: Node number set to 4 [ 1245.512441][T14900] ft260 0003:0403:6030.001A: unknown main item tag 0x7 [ 1245.663972][T14900] ft260 0003:0403:6030.001A: chip code: 6424 8183 [ 1245.766183][T16899] binder: 16898:16899 ioctl 4018620d 0 returned -22 [ 1245.864934][T14900] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1245.933424][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1245.944128][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.954057][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1245.964873][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.974754][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1245.985229][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.065665][T14900] ft260 0003:0403:6030.001A: failed to retrieve status: -32, no wakeup [ 1246.090839][T14900] ft260 0003:0403:6030.001A: failed to retrieve status: -5 [ 1246.292732][T14900] ft260 0003:0403:6030.001A: failed to reset I2C controller: -71 [ 1246.324611][T14900] usb 2-1: USB disconnect, device number 29 [ 1248.108325][T16914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3143'. [ 1248.455725][T16927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3147'. [ 1248.470993][T16927] netlink: set zone limit has 8 unknown bytes [ 1248.499934][T16927] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1248.849670][T16930] tipc: Started in network mode [ 1248.854826][T16930] tipc: Node identity 4, cluster identity 4711 [ 1248.862226][T16930] tipc: Node number set to 4 [ 1249.364902][T16937] binder: 16934:16937 ioctl 4018620d 0 returned -22 [ 1250.498271][T14900] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1250.768278][T14900] usb 2-1: Using ep0 maxpacket: 32 [ 1250.791788][T14900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.802980][T14900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.817008][T14900] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1250.832177][T14900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.879038][T14900] usb 2-1: config 0 descriptor?? [ 1251.649217][T14900] ft260 0003:0403:6030.001B: unknown main item tag 0x7 [ 1251.848934][T14900] ft260 0003:0403:6030.001B: chip code: 6424 8183 [ 1252.214989][T14900] ft260 0003:0403:6030.001B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1252.218931][T16958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3158'. [ 1252.382176][T16958] netlink: set zone limit has 8 unknown bytes [ 1252.458206][T14900] ft260 0003:0403:6030.001B: failed to retrieve status: -32, no wakeup [ 1252.477750][T16958] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1252.498447][T14900] ft260 0003:0403:6030.001B: failed to retrieve status: -5 [ 1252.705995][T14900] ft260 0003:0403:6030.001B: failed to reset I2C controller: -71 [ 1252.769368][T14900] usb 2-1: USB disconnect, device number 30 [ 1254.065442][T16975] binder: BINDER_SET_CONTEXT_MGR already set [ 1254.084207][T16975] binder: 16974:16975 ioctl 4018620d 2000000001c0 returned -16 [ 1257.027103][T17004] fuse: Bad value for 'fd' [ 1257.519839][T17008] kvm: kvm [17007]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4e95 [ 1258.378772][T17019] binder: BINDER_SET_CONTEXT_MGR already set [ 1258.404353][T17019] binder: 17018:17019 ioctl 4018620d 2000000001c0 returned -16 [ 1259.872584][T17037] fuse: Unknown parameter 'user_i00000000000000000000' [ 1261.842931][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.853462][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.863334][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.873874][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.883780][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.894240][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.245351][T17066] binder: BINDER_SET_CONTEXT_MGR already set [ 1262.252715][T17066] binder: 17065:17066 ioctl 4018620d 2000000001c0 returned -16 [ 1263.479482][T17073] fuse: Unknown parameter 'user_id00000000000000000000' [ 1263.563420][T17076] fuse: Invalid rootmode [ 1265.306916][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.317451][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.327313][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.337774][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.347708][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.358280][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.865926][T17099] kvm: kvm [17092]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4e95 [ 1267.130520][T17106] fuse: Unknown parameter 'user_id00000000000000000000' [ 1267.196624][T17108] fuse: Invalid rootmode [ 1268.226925][T17128] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1268.352877][T17133] fuse: Unknown parameter 'user_id00000000000000000000' [ 1268.577227][T17140] fuse: Bad value for 'rootmode' [ 1268.579161][T17135] kvm: kvm [17134]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4e95 [ 1269.255560][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.266558][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.276800][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.287648][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.297777][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.308512][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.941236][T17155] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1271.032930][T17159] fuse: Bad value for 'fd' [ 1271.093092][T17161] fuse: Bad value for 'rootmode' [ 1271.433664][T17174] kvm: kvm [17173]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4e95 [ 1272.718898][T17189] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3236'. [ 1272.910906][T17192] fuse: Bad value for 'rootmode' [ 1273.143490][T17198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1273.616546][T17195] binder: 17193:17195 ioctl c0306201 0 returned -14 [ 1273.639317][T17195] binder: BINDER_SET_CONTEXT_MGR already set [ 1273.651455][T17195] binder: 17193:17195 ioctl 4018620d 2000000001c0 returned -16 [ 1275.728957][T17227] fuse: Unknown parameter 'use00000000000000000000' [ 1275.729964][T17225] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1276.913172][T17242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1277.726855][T17256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.737823][T17256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.748632][T17256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.759486][T17256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.769696][T17256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.780574][T17256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.772488][T17270] fuse: Unknown parameter 'use00000000000000000000' [ 1280.379979][T17282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1280.826446][T17290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.838433][T17290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.853340][T17290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.865293][T17290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.875256][T17290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.887408][T17290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.084927][T17301] fuse: Unknown parameter 'use00000000000000000000' [ 1284.124284][T17316] binder: BINDER_SET_CONTEXT_MGR already set [ 1284.139863][T17318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3278'. [ 1284.236004][T17316] binder: 17314:17316 ioctl 4018620d 2000000001c0 returned -16 [ 1284.619943][T17322] overlayfs: failed to resolve './file1': -2 [ 1284.830627][T17327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.841502][T17327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.851412][T17327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.861860][T17327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.871799][T17327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.882263][T17327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.698784][T17353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1288.685337][T17364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.695992][T17364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.705974][T17364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.716487][T17364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.726359][T17364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.736850][T17364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.682932][T17375] fuse: Unknown parameter 'user_i00000000000000000000' [ 1292.157623][T17409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.168680][T17409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.179137][T17409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.190215][T17409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.190265][T17409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.190301][T17409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.722743][T17421] fuse: Unknown parameter 'user_id00000000000000000000' [ 1293.172502][T17433] overlayfs: failed to resolve './file0': -2 [ 1293.319861][T17429] kvm: kvm [17428]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb1a4 [ 1293.338390][T17429] kvm: kvm [17428]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2b04 [ 1293.352568][T17429] kvm: kvm [17428]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x33e4 [ 1293.385606][T17429] kvm: kvm [17428]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8ac4 [ 1293.789020][T17439] netlink: 'syz.2.3314': attribute type 10 has an invalid length. [ 1293.810876][T17439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.829298][T17439] bond0: (slave team0): Enslaving as an active interface with an up link [ 1294.242497][T17442] fuse: Unknown parameter 'fd0x0000000000000004' [ 1294.344896][T17438] binder: 17437:17438 unknown command 1074553619 [ 1294.351460][T17438] binder: 17437:17438 ioctl c0306201 200000000540 returned -22 [ 1295.016953][T17453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.065841][T17453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.076529][T17453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.099038][T17453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.111312][T17453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.140956][T17453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.912621][T17470] fuse: Unknown parameter 'fd0x0000000000000004' [ 1296.165048][T17476] netlink: 'syz.0.3328': attribute type 20 has an invalid length. [ 1296.388905][T17476] dvmrp17: entered allmulticast mode [ 1297.092098][T17487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.104885][T17487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.115431][T17487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.126639][T17487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.137145][T17487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.153040][T17487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.986412][T14899] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1298.303496][T14899] usb 1-1: Using ep0 maxpacket: 8 [ 1298.336655][T17501] fuse: Unknown parameter 'fd0x0000000000000004' [ 1298.344148][T14899] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1298.353885][T14899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.383460][T14899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1298.396610][T14899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1298.409349][T14899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.420236][T14899] usb 1-1: Product: syz [ 1298.424461][T14899] usb 1-1: Manufacturer: syz [ 1298.430878][T14899] usb 1-1: SerialNumber: syz [ 1298.492947][T17503] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3337'. [ 1299.034336][T14899] usb 1-1: 0:2 : does not exist [ 1299.083725][T14899] usb 1-1: USB disconnect, device number 33 [ 1299.126120][T17513] udevd[17513]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1299.330491][T17517] netlink: 'syz.3.3341': attribute type 20 has an invalid length. [ 1299.964166][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.978225][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.991072][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.002819][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.013087][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.024763][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.374438][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.384472][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.902751][T17530] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3347'. [ 1301.082669][T17540] overlayfs: failed to resolve './file0': -2 [ 1301.172171][T17534] kvm: kvm [17531]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb1a4 [ 1301.191537][T17534] kvm: kvm [17531]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2b04 [ 1301.268532][T17534] kvm: kvm [17531]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x33e4 [ 1301.276461][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.281081][T17534] kvm: kvm [17531]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8ac4 [ 1301.292985][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.306776][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.320179][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.330744][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.341889][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.732027][T17556] netlink: 'syz.3.3354': attribute type 20 has an invalid length. [ 1304.268034][T17567] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1306.182951][T17580] fuse: Bad value for 'fd' [ 1306.484695][T17584] kvm: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xbcd4 [ 1306.522381][T17584] kvm_intel: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1ca9 [ 1306.607763][T17584] kvm: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xba24 [ 1306.643625][T17584] kvm: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xeb09 [ 1306.689764][T17584] kvm: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x8db4 [ 1306.730115][T17584] kvm_intel: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x4656 [ 1306.743748][T17584] kvm: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb195 [ 1306.760147][T17584] kvm: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x9623 [ 1306.777735][T17584] kvm: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xba76 [ 1306.802119][T17584] kvm_intel: kvm [17581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x29b1 [ 1307.821373][T17607] netlink: 'syz.0.3369': attribute type 20 has an invalid length. [ 1307.833499][T17602] netlink: 'syz.2.3368': attribute type 72 has an invalid length. [ 1309.213736][T17621] fuse: Bad value for 'fd' [ 1312.536131][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xbcd4 [ 1312.556025][T17645] kvm_intel: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1ca9 [ 1312.597433][T17655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3382'. [ 1312.620617][T17652] netlink: 'syz.3.3381': attribute type 72 has an invalid length. [ 1312.651567][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xba24 [ 1312.685517][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xeb09 [ 1312.731242][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x8db4 [ 1312.760547][T17645] kvm_intel: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x4656 [ 1312.782289][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb195 [ 1312.800413][T17659] fuse: Unknown parameter '0x0000000000000003' [ 1313.020847][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x9623 [ 1313.082268][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xba76 [ 1313.879752][T17671] netlink: 'syz.3.3386': attribute type 20 has an invalid length. [ 1315.403317][T17683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1315.482116][T17686] netlink: 'syz.1.3392': attribute type 72 has an invalid length. [ 1316.681430][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.691975][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.701916][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.712380][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.722261][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.732725][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.990040][T17699] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3397'. [ 1317.711843][T17696] kvm: kvm [17695]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xbcd4 [ 1317.722286][T17709] netlink: 'syz.2.3400': attribute type 10 has an invalid length. [ 1317.834181][T17711] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3401'. [ 1317.879175][T17713] fuse: Unknown parameter '0x0000000000000003' [ 1318.022128][T17716] netlink: 'syz.2.3403': attribute type 20 has an invalid length. [ 1318.648545][T17725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.659183][T17725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.669109][T17725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.679857][T17725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.689709][T17725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.700232][T17725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.798373][T10994] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1318.988352][T10994] usb 4-1: Using ep0 maxpacket: 16 [ 1318.995411][T10994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1319.007371][T10994] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1319.016908][T10994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.029829][T10994] usb 4-1: Product: syz [ 1319.034102][T10994] usb 4-1: Manufacturer: syz [ 1319.039476][T10994] usb 4-1: SerialNumber: syz [ 1319.064121][T10994] usb 4-1: config 0 descriptor?? [ 1319.076261][T10994] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1319.097826][T10994] usb 4-1: Detected FT232B [ 1320.037034][T17744] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3412'. [ 1320.189733][T17746] netlink: 'syz.2.3413': attribute type 10 has an invalid length. [ 1320.343193][T17748] fuse: Unknown parameter '0x0000000000000003' [ 1320.807708][T17752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3416'. [ 1321.814313][T17763] netlink: 'syz.0.3419': attribute type 20 has an invalid length. [ 1322.630809][T10994] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1322.648289][T10994] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1322.667792][T10994] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1322.713066][T10994] usb 4-1: USB disconnect, device number 27 [ 1322.757660][T10994] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1322.804059][T10994] ftdi_sio 4-1:0.0: device disconnected [ 1322.950771][T17771] binder: 17770:17771 ioctl c0306201 0 returned -14 [ 1323.205464][T17774] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3422'. [ 1323.358671][T17781] fuse: Unknown parameter '0x0000000000000003' [ 1323.946837][T17783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3425'. [ 1323.976558][T17778] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1323.983121][T17778] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1323.994270][T17778] vhci_hcd vhci_hcd.0: Device attached [ 1324.358397][T17784] vhci_hcd: connection closed [ 1324.358650][ T59] vhci_hcd: stop threads [ 1324.374082][ T59] vhci_hcd: release socket [ 1324.379512][ T59] vhci_hcd: disconnect device [ 1324.388099][T14902] vhci_hcd: vhci_device speed not set [ 1327.217257][T17820] fuse: Unknown parameter '0x0000000000000003' [ 1327.695347][T17823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3435'. [ 1328.094022][T17828] overlayfs: failed to resolve './file0': -2 [ 1330.306026][T17853] fuse: Unknown parameter 'fd0x0000000000000003' [ 1330.798157][T10994] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1330.988059][T10994] usb 3-1: Using ep0 maxpacket: 32 [ 1331.072769][T10994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.084741][T10994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.107321][T10994] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1331.116782][T10994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.155353][T10994] usb 3-1: config 0 descriptor?? [ 1331.371055][T17862] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3446'. [ 1331.836769][T10994] ft260 0003:0403:6030.001C: unknown main item tag 0x7 [ 1332.250869][T10994] ft260 0003:0403:6030.001C: chip code: 6424 8183 [ 1332.550301][T10994] ft260 0003:0403:6030.001C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1332.778933][T10994] ft260 0003:0403:6030.001C: failed to retrieve status: -32, no wakeup [ 1333.098104][T10994] usb 3-1: reset high-speed USB device number 22 using dummy_hcd [ 1334.043525][T17884] fuse: Unknown parameter 'fd0x0000000000000003' [ 1334.080603][ T788] usb 3-1: USB disconnect, device number 22 [ 1334.904320][T17899] netlink: 'syz.1.3456': attribute type 20 has an invalid length. [ 1335.598447][T17902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3457'. [ 1335.859281][T17910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3460'. [ 1336.768575][T14900] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1336.948122][T14900] usb 1-1: Using ep0 maxpacket: 32 [ 1336.965690][T14900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.001619][T14900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.018323][T14900] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1337.041753][T14900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.067621][T14900] usb 1-1: config 0 descriptor?? [ 1337.528301][T14900] ft260 0003:0403:6030.001D: unknown main item tag 0x7 [ 1337.700302][T14900] ft260 0003:0403:6030.001D: chip code: 6424 8183 [ 1337.900928][T14900] ft260 0003:0403:6030.001D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1338.101541][T14900] ft260 0003:0403:6030.001D: failed to retrieve status: -32, no wakeup [ 1338.366233][T14900] usb 1-1: USB disconnect, device number 34 [ 1338.664465][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3468'. [ 1339.316641][T17948] netlink: 'syz.2.3470': attribute type 20 has an invalid length. [ 1340.106639][T17963] overlayfs: missing 'lowerdir' [ 1340.526144][T17969] netlink: 'syz.2.3478': attribute type 10 has an invalid length. [ 1340.581259][T17969] binder: 17967:17969 unknown command 1074553619 [ 1340.587701][T17969] binder: 17967:17969 ioctl c0306201 200000000540 returned -22 [ 1341.488192][T14900] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1342.308095][T14900] usb 4-1: Using ep0 maxpacket: 32 [ 1342.318328][T14900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.332287][T14900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.399594][T14900] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1342.424981][T14900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.444837][T14900] usb 4-1: config 0 descriptor?? [ 1342.793228][T17982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1342.817295][T17983] binder: 17979:17983 ioctl c0306201 0 returned -14 [ 1342.879869][T14900] ft260 0003:0403:6030.001E: unknown main item tag 0x7 [ 1343.068600][T14900] ft260 0003:0403:6030.001E: chip code: 6424 8183 [ 1343.261234][T17988] overlayfs: missing 'lowerdir' [ 1343.269397][T14900] ft260 0003:0403:6030.001E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1343.519013][T14900] ft260 0003:0403:6030.001E: failed to retrieve status: -32, no wakeup [ 1343.628631][T17992] netlink: 'syz.1.3486': attribute type 20 has an invalid length. [ 1343.999395][T14900] usb 4-1: USB disconnect, device number 28 [ 1344.877844][T18008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3492'. [ 1344.992986][T18010] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1344.999560][T18010] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1345.015668][T18010] vhci_hcd vhci_hcd.0: Device attached [ 1345.113946][T18015] overlayfs: missing 'lowerdir' [ 1345.208205][T14900] vhci_hcd: vhci_device speed not set [ 1345.234300][T18019] binder: 18016:18019 ioctl c0306201 0 returned -14 [ 1345.279610][T14900] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 1345.868203][T14899] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1345.879764][T18012] vhci_hcd: connection reset by peer [ 1345.904833][ T58] vhci_hcd: stop threads [ 1345.915302][ T58] vhci_hcd: release socket [ 1345.933646][ T58] vhci_hcd: disconnect device [ 1346.132985][T18028] netlink: 'syz.2.3498': attribute type 10 has an invalid length. [ 1346.588453][T14899] usb 1-1: Using ep0 maxpacket: 32 [ 1346.601321][T14899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.615090][T14899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.630724][T14899] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1346.641499][T14899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.665177][T14899] usb 1-1: config 0 descriptor?? [ 1346.821227][T18031] netlink: 'syz.2.3499': attribute type 20 has an invalid length. [ 1347.591339][T18035] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1347.623560][T14899] ft260 0003:0403:6030.001F: unknown main item tag 0x7 [ 1347.836664][T14899] ft260 0003:0403:6030.001F: chip code: 6424 8183 [ 1347.975040][T18043] overlayfs: missing 'lowerdir' [ 1348.037520][T14899] ft260 0003:0403:6030.001F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1348.188310][T18045] kvm: kvm [18044]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1f80 [ 1348.202845][T18045] kvm: kvm [18044]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3310 [ 1348.213766][T18045] kvm: kvm [18044]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4640 [ 1348.228558][T18045] kvm: kvm [18044]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x7740 [ 1348.238732][T14899] ft260 0003:0403:6030.001F: failed to retrieve status: -32, no wakeup [ 1348.493776][T14899] usb 1-1: USB disconnect, device number 35 [ 1348.855171][T18052] binder: 18048:18052 ioctl c0306201 0 returned -14 [ 1349.158857][T18053] netlink: 'syz.3.3507': attribute type 10 has an invalid length. [ 1349.401169][T18053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.425884][T18053] bond0: (slave team0): Enslaving as an active interface with an up link [ 1349.677219][T18063] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1349.683829][T18063] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1349.718189][T18063] vhci_hcd vhci_hcd.0: Device attached [ 1350.300320][T14902] vhci_hcd: vhci_device speed not set [ 1350.354532][T18067] vhci_hcd: connection closed [ 1350.356713][ T58] vhci_hcd: stop threads [ 1350.359098][T18075] overlayfs: missing 'lowerdir' [ 1350.362747][ T58] vhci_hcd: release socket [ 1350.375470][T14902] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 1350.395130][ T58] vhci_hcd: disconnect device [ 1350.438549][T14900] vhci_hcd: vhci_device speed not set [ 1350.573228][T18081] syzkaller1: entered promiscuous mode [ 1350.579114][T18081] syzkaller1: entered allmulticast mode [ 1351.068312][T14896] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1351.210100][T18085] kvm: kvm [18084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1f80 [ 1351.221121][T18085] kvm: kvm [18084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3310 [ 1351.258265][T14896] usb 1-1: Using ep0 maxpacket: 32 [ 1351.278774][T18085] kvm: kvm [18084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4640 [ 1351.285389][T14896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.333732][T18085] kvm: kvm [18084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x7740 [ 1351.338214][T14896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.368328][T14896] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1351.408352][T14896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.420202][T14896] usb 1-1: config 0 descriptor?? [ 1351.658111][T14900] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1351.854209][T14896] ft260 0003:0403:6030.0020: unknown main item tag 0x7 [ 1351.873473][T14900] usb 2-1: config 0 has no interfaces? [ 1351.882475][T14900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1351.891827][T14900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.905277][T14900] usb 2-1: Product: syz [ 1351.909633][T14900] usb 2-1: Manufacturer: syz [ 1351.914345][T14900] usb 2-1: SerialNumber: syz [ 1351.924947][T14900] usb 2-1: config 0 descriptor?? [ 1352.055184][T14896] ft260 0003:0403:6030.0020: chip code: 6424 8183 [ 1352.286782][T14896] ft260 0003:0403:6030.0020: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1352.534099][T14896] ft260 0003:0403:6030.0020: failed to retrieve status: -32, no wakeup [ 1352.716662][T18094] binder: 18093:18094 unknown command 1074553619 [ 1352.723070][T18094] binder: 18093:18094 ioctl c0306201 200000000540 returned -22 [ 1352.827028][T10994] usb 1-1: USB disconnect, device number 36 [ 1353.156166][T18106] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1353.197058][T18106] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1354.776752][T18119] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1354.783339][T18119] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1354.798810][T18119] vhci_hcd vhci_hcd.0: Device attached [ 1355.008514][T14900] vhci_hcd: vhci_device speed not set [ 1355.188033][T14900] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 1355.979684][T18121] vhci_hcd: connection reset by peer [ 1356.007683][ T8003] vhci_hcd: stop threads [ 1356.012850][ T8003] vhci_hcd: release socket [ 1356.018047][ T8003] vhci_hcd: disconnect device [ 1356.058133][T14902] vhci_hcd: vhci_device speed not set [ 1358.072482][T18134] netlink: 'syz.2.3531': attribute type 10 has an invalid length. [ 1358.107453][T18134] binder: 18133:18134 unknown command 1074553619 [ 1358.113899][T18134] binder: 18133:18134 ioctl c0306201 200000000540 returned -22 [ 1358.471988][T18142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.482496][T18142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.492368][T18142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.502838][T18142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.512800][T18142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.523254][T18142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.187336][ T5822] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1360.336330][T14900] vhci_hcd: vhci_device speed not set [ 1360.415073][ T5822] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 1360.424364][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.432933][ T5822] usb 1-1: Product: syz [ 1360.437225][ T5822] usb 1-1: Manufacturer: syz [ 1360.442013][ T5822] usb 1-1: SerialNumber: syz [ 1360.471335][ T5822] usb 1-1: config 0 descriptor?? [ 1360.503187][ T5822] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1360.803202][ T5822] gspca_spca501: reg write: error -71 [ 1360.808792][ T5822] spca501 1-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1360.818570][ T5822] spca501: probe of 1-1:0.0 failed with error -22 [ 1360.832574][ T5822] usb 1-1: Found UVC 0.00 device syz (0000:0000) [ 1360.846572][ T5822] usb 1-1: No valid video chain found. [ 1360.906432][ T5822] usb 1-1: USB disconnect, device number 37 [ 1361.150671][T18162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3540'. [ 1361.803180][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.813530][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.158717][T18167] netlink: 'syz.0.3542': attribute type 10 has an invalid length. [ 1362.470172][T18089] Set syz1 is full, maxelem 65536 reached [ 1362.521288][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.542048][T18167] bond0: (slave team0): Enslaving as an active interface with an up link [ 1362.598060][T18166] binder: 18165:18166 unknown command 1074553619 [ 1362.604457][T18166] binder: 18165:18166 ioctl c0306201 200000000540 returned -22 [ 1362.738797][ T5822] usb 2-1: USB disconnect, device number 31 [ 1364.902308][T18204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3552'. [ 1366.386671][T18218] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1366.393240][T18218] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1366.425703][T18218] vhci_hcd vhci_hcd.0: Device attached [ 1366.618031][T14902] vhci_hcd: vhci_device speed not set [ 1366.698153][T14902] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 1367.365830][T18221] vhci_hcd: connection reset by peer [ 1367.405868][ T2895] vhci_hcd: stop threads [ 1367.416483][ T2895] vhci_hcd: release socket [ 1367.457284][ T2895] vhci_hcd: disconnect device [ 1368.877592][ T34] Bluetooth: hci4: Frame reassembly failed (-84) [ 1368.899366][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 1368.957838][ T58] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1369.208040][T14896] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1369.287996][ T5822] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1369.388162][T14896] usb 4-1: Using ep0 maxpacket: 8 [ 1369.395747][T14896] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1369.405011][T14896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.422619][T14896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1369.429997][T14896] pvrusb2: ********** [ 1369.434101][T14896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1369.444890][T14896] pvrusb2: Important functionality might not be entirely working. [ 1369.452830][T14896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1369.464410][T14896] pvrusb2: ********** [ 1369.483537][ T5822] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 1369.492921][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.501020][ T5822] usb 3-1: Product: syz [ 1369.505590][ T5822] usb 3-1: Manufacturer: syz [ 1369.510284][ T5822] usb 3-1: SerialNumber: syz [ 1369.519549][ T5822] usb 3-1: config 0 descriptor?? [ 1369.534915][ T5822] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1369.626267][ T2318] pvrusb2: Invalid write control endpoint [ 1369.686325][ T2318] pvrusb2: Invalid write control endpoint [ 1369.693470][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1369.704909][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1369.713152][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1369.731060][ T2318] pvrusb2: Device being rendered inoperable [ 1369.737095][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1369.744487][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1369.756538][ T5822] gspca_spca501: reg write: error -71 [ 1369.758445][ T2318] pvrusb2: Attached sub-driver cx25840 [ 1369.769757][ T5822] spca501 3-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1369.779142][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1369.779929][ T5822] spca501: probe of 3-1:0.0 failed with error -22 [ 1369.789470][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1369.807552][ T5822] usb 3-1: Found UVC 0.00 device syz (0000:0000) [ 1369.818789][ T5822] usb 3-1: No valid video chain found. [ 1369.829834][ T5822] usb 3-1: USB disconnect, device number 23 [ 1369.833604][T18240] pvrusb2: Attempted to execute control transfer when device not ok [ 1369.845665][T14896] usb 4-1: USB disconnect, device number 29 [ 1370.838280][T13311] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1371.559755][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.570396][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.580342][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.590904][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.600774][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.611227][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.818049][T14902] vhci_hcd: vhci_device speed not set [ 1372.404348][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1372.479555][T18273] ip6tnl1: entered allmulticast mode [ 1372.816831][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3577'. [ 1373.858127][ T788] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1374.074114][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.093061][ T788] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1374.110056][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.128803][ T788] usb 4-1: config 0 descriptor?? [ 1374.560577][ T788] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 1374.573843][ T788] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0021/input/input12 [ 1374.708633][ T788] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1375.187778][T14902] usb 4-1: USB disconnect, device number 30 [ 1376.908263][T18305] netlink: 'syz.3.3584': attribute type 10 has an invalid length. [ 1377.075719][T18304] binder: 18303:18304 unknown command 1074553619 [ 1377.082172][T18304] binder: 18303:18304 ioctl c0306201 200000000540 returned -22 [ 1378.031436][T18328] overlayfs: missing 'lowerdir' [ 1378.083839][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1378.748114][T14902] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1379.100314][T14902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.111530][T14902] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1379.146674][T14902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.199245][T14902] usb 2-1: config 0 descriptor?? [ 1379.629686][T14902] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 1379.665607][T14902] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input13 [ 1380.264511][T14902] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1380.368935][T18348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1380.524422][T18348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.539525][T18348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1380.554079][T18348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.579167][T18348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1380.581290][T18343] binder: 18341:18343 unknown command 1074553619 [ 1380.598349][T18343] binder: 18341:18343 ioctl c0306201 200000000540 returned -22 [ 1380.628160][T18348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.657521][T10994] usb 2-1: USB disconnect, device number 32 [ 1380.671427][T18345] netlink: 'syz.0.3596': attribute type 10 has an invalid length. [ 1380.785135][T18350] fido_id[18350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1380.947397][T18358] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1380.969291][T18358] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1382.030271][T18373] netlink: 'syz.2.3605': attribute type 20 has an invalid length. [ 1382.339279][T18383] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1382.372642][T18383] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1385.161722][T18419] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1385.198293][T18419] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1385.666475][T18427] syz_tun: entered allmulticast mode [ 1386.270407][T18423] syz_tun: left allmulticast mode [ 1388.003324][T18449] netlink: 'syz.0.3630': attribute type 20 has an invalid length. [ 1388.099571][T18450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3631'. [ 1390.687749][T18468] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3635'. [ 1391.740178][T18488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3642'. [ 1392.134156][T18495] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3644'. [ 1392.245111][T18496] netlink: 'syz.0.3645': attribute type 20 has an invalid length. [ 1392.650214][T18503] syz_tun: entered allmulticast mode [ 1393.250414][T18499] syz_tun: left allmulticast mode [ 1394.443680][T18519] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3654'. [ 1395.571621][T18526] netlink: 'syz.2.3656': attribute type 10 has an invalid length. [ 1395.644609][T18526] binder: 18523:18526 unknown command 1074553619 [ 1395.651371][T18526] binder: 18523:18526 ioctl c0306201 200000000540 returned -22 [ 1396.508413][T18538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3658'. [ 1397.375436][T18552] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1398.752632][T18560] binder: 18558:18560 unknown command 1074553619 [ 1398.759293][T18560] binder: 18558:18560 ioctl c0306201 200000000540 returned -22 [ 1399.816409][T18566] netlink: 'syz.3.3668': attribute type 20 has an invalid length. [ 1402.663480][T18585] tipc: Enabling of bearer rejected, failed to enable media [ 1406.051384][T18593] binder: 18592:18593 unknown command 1074553619 [ 1406.057801][T18593] binder: 18592:18593 ioctl c0306201 200000000540 returned -22 [ 1406.188948][T18617] overlayfs: missing 'workdir' [ 1407.420532][T18628] netlink: 'syz.2.3685': attribute type 20 has an invalid length. [ 1407.584768][T18632] bridge0: port 3(team0) entered blocking state [ 1407.591689][T18632] bridge0: port 3(team0) entered disabled state [ 1407.599141][T18632] team0: entered allmulticast mode [ 1407.604343][T18632] team_slave_0: entered allmulticast mode [ 1407.610190][T18632] team_slave_1: entered allmulticast mode [ 1407.628287][T18632] team0: entered promiscuous mode [ 1407.633462][T18632] team_slave_0: entered promiscuous mode [ 1407.641613][T18632] team_slave_1: entered promiscuous mode [ 1407.652228][T18632] bridge0: port 3(team0) entered blocking state [ 1407.658680][T18632] bridge0: port 3(team0) entered forwarding state [ 1411.096137][T18651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.109636][T18651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.168194][T18651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.186225][T18651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.206833][T18651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.218077][T18651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.575181][T18669] netlink: set zone limit has 8 unknown bytes [ 1412.599725][T18671] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1412.674345][T18674] bpq0: left promiscuous mode [ 1412.679358][T18674] bpq0: entered allmulticast mode [ 1414.321213][T18685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1414.332071][T18685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.342486][T18685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1414.353263][T18685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.363438][T18685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1414.374212][T18685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.232470][T18700] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3710'. [ 1415.291222][T18702] netlink: 'syz.3.3708': attribute type 20 has an invalid length. [ 1415.768875][T18716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3712'. [ 1415.789310][T18715] netlink: set zone limit has 8 unknown bytes [ 1417.998220][T18730] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1418.004774][T18730] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1418.018785][T18730] vhci_hcd vhci_hcd.0: Device attached [ 1418.238153][T14902] vhci_hcd: vhci_device speed not set [ 1418.308208][T14902] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 1418.484260][T18735] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3720'. [ 1418.898281][T18732] vhci_hcd: connection reset by peer [ 1418.949714][ T7484] vhci_hcd: stop threads [ 1418.954031][ T7484] vhci_hcd: release socket [ 1418.978079][ T7484] vhci_hcd: disconnect device [ 1422.185607][T18761] fuse: Unknown parameter '0x0000000000000007' [ 1423.320668][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.327685][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.710965][T18769] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3729'. [ 1423.833716][T14902] vhci_hcd: vhci_device speed not set [ 1424.102421][T18784] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1424.109024][T18784] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1424.153018][T18784] vhci_hcd vhci_hcd.0: Device attached [ 1424.279024][T18793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3736'. [ 1424.358438][T14900] vhci_hcd: vhci_device speed not set [ 1424.458222][T14900] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 1424.916943][T18786] vhci_hcd: connection reset by peer [ 1424.938490][ T59] vhci_hcd: stop threads [ 1424.942905][ T59] vhci_hcd: release socket [ 1424.958070][ T59] vhci_hcd: disconnect device [ 1425.972327][T18814] fuse: Unknown parameter '0x0000000000000007' [ 1427.254263][T18820] binder: 18817:18820 unknown command 1074553619 [ 1427.263172][T18820] binder: 18817:18820 ioctl c0306201 200000000540 returned -22 [ 1429.638054][T14900] vhci_hcd: vhci_device speed not set [ 1431.765882][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1431.783392][T18867] ip6tnl1: entered allmulticast mode [ 1433.209094][T18886] netlink: 'syz.1.3770': attribute type 10 has an invalid length. [ 1433.335233][T18886] bridge0: port 3(team0) entered disabled state [ 1433.353154][T18887] binder: 18884:18887 unknown command 1074553619 [ 1433.366652][T18887] binder: 18884:18887 ioctl c0306201 200000000540 returned -22 [ 1433.811197][T18886] team0: left allmulticast mode [ 1433.821459][T18886] team_slave_0: left allmulticast mode [ 1433.827230][T18886] team_slave_1: left allmulticast mode [ 1433.834045][T18886] team0: left promiscuous mode [ 1433.840804][T18886] team_slave_0: left promiscuous mode [ 1433.870567][T18886] team_slave_1: left promiscuous mode [ 1433.927919][T18886] bridge0: port 3(team0) entered disabled state [ 1434.019868][T18886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.034626][T18886] bond0: (slave team0): Enslaving as an active interface with an up link [ 1436.392343][T18927] netlink: 'syz.2.3782': attribute type 10 has an invalid length. [ 1437.106904][T18927] binder: 18922:18927 unknown command 1074553619 [ 1437.113327][T18927] binder: 18922:18927 ioctl c0306201 200000000540 returned -22 [ 1439.888712][T18956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3787'. [ 1440.580227][T18956] ip6tnl1: entered allmulticast mode [ 1441.649481][T14898] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1441.785648][T18974] netlink: 'syz.0.3794': attribute type 10 has an invalid length. [ 1441.796287][T18974] binder: 18973:18974 unknown command 1074553619 [ 1441.802910][T18974] binder: 18973:18974 ioctl c0306201 200000000540 returned -22 [ 1441.848013][T14898] usb 2-1: Using ep0 maxpacket: 16 [ 1441.859667][T14898] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1441.871881][T14898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.887991][T14898] usb 2-1: config 0 has no interface number 0 [ 1441.903192][T14898] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1441.920720][T14898] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1441.934180][T14898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.946041][T14898] usb 2-1: Product: syz [ 1441.952933][T14898] usb 2-1: Manufacturer: syz [ 1441.957732][T14898] usb 2-1: SerialNumber: syz [ 1441.969912][T14898] usb 2-1: config 0 descriptor?? [ 1442.597918][T14898] CoreChips: probe of 2-1:0.41 failed with error -22 [ 1442.678315][T14898] usb 2-1: USB disconnect, device number 33 [ 1444.360371][T18994] netlink: 'syz.2.3800': attribute type 20 has an invalid length. [ 1444.361495][T18996] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1445.248428][T18996] cramfs: wrong magic [ 1450.347431][T19053] netlink: 'syz.0.3818': attribute type 21 has an invalid length. [ 1450.364864][T19053] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 1450.377660][T19053] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1452.275815][T19069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3823'. [ 1453.688563][T19094] ALSA: mixer_oss: invalid index 40000 [ 1454.797957][T19098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.808502][T19098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.818373][T19098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.828919][T19098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.838784][T19098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.849251][T19098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.949702][T19099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3832'. [ 1454.970798][T19101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3834'. [ 1456.028186][T19099] ip6tnl1: entered allmulticast mode [ 1461.469269][T19167] netlink: 'syz.3.3854': attribute type 10 has an invalid length. [ 1461.511574][T19167] binder: 19165:19167 unknown command 1074553619 [ 1461.519016][T19167] binder: 19165:19167 ioctl c0306201 200000000540 returned -22 [ 1464.320631][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.331199][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.341095][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.351663][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.361618][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.372077][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.691876][T19212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1466.774121][T19212] syz.3.3868: attempt to access beyond end of device [ 1466.774121][T19212] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1466.789953][T19212] gfs2: error 10 reading superblock [ 1470.158856][T19252] netlink: 'syz.2.3880': attribute type 10 has an invalid length. [ 1470.181901][T19252] binder: 19251:19252 unknown command 1074553619 [ 1470.188410][T19252] binder: 19251:19252 ioctl c0306201 200000000540 returned -22 [ 1470.484821][T19266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3882'. [ 1475.560808][T19303] netlink: set zone limit has 8 unknown bytes [ 1476.503365][T19313] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1476.525678][T19313] cramfs: wrong magic [ 1478.786718][T19343] netlink: set zone limit has 8 unknown bytes [ 1482.903610][T19379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3916'. [ 1482.952600][T19379] ip6tnl1: entered allmulticast mode [ 1483.224997][T19384] netlink: set zone limit has 8 unknown bytes [ 1484.682615][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.689134][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.182293][T19452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'. [ 1491.262735][T19452] ip6tnl1: entered allmulticast mode [ 1496.521243][T19486] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1496.527836][T19486] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1496.547026][T19486] vhci_hcd vhci_hcd.0: Device attached [ 1496.758046][T14898] vhci_hcd: vhci_device speed not set [ 1496.925781][T14898] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 1496.950166][T19494] vhci_hcd: connection reset by peer [ 1496.956321][ T8003] vhci_hcd: stop threads [ 1496.965905][ T8003] vhci_hcd: release socket [ 1496.971036][ T8003] vhci_hcd: disconnect device [ 1498.613167][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1499.849778][T19530] netlink: 'syz.0.3966': attribute type 10 has an invalid length. [ 1499.897577][T19530] binder: 19528:19530 unknown command 1074553619 [ 1499.905481][T19530] binder: 19528:19530 ioctl c0306201 200000000540 returned -22 [ 1502.058264][T14898] vhci_hcd: vhci_device speed not set [ 1504.080358][T19562] netlink: set zone limit has 8 unknown bytes [ 1508.157385][T19605] netlink: set zone limit has 8 unknown bytes [ 1510.116712][T19621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1510.123313][T19621] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1510.320965][T19623] vhci_hcd: connection closed [ 1510.329169][T19621] vhci_hcd vhci_hcd.0: Device attached [ 1510.360515][ T8003] vhci_hcd: stop threads [ 1510.386542][ T8003] vhci_hcd: release socket [ 1510.401297][ T8003] vhci_hcd: disconnect device [ 1510.523815][T19634] netlink: 'syz.0.3998': attribute type 10 has an invalid length. [ 1510.561719][T19634] binder: 19631:19634 unknown command 1074553619 [ 1510.569132][T19634] binder: 19631:19634 ioctl c0306201 200000000540 returned -22 [ 1515.628127][T19669] binder: 19666:19669 unknown command 1074553619 [ 1515.634754][T19669] binder: 19666:19669 ioctl c0306201 200000000540 returned -22 [ 1516.529824][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1519.630490][T19716] netlink: 'syz.0.4021': attribute type 10 has an invalid length. [ 1519.742010][T19716] binder: 19713:19716 unknown command 1074553619 [ 1519.754744][T19716] binder: 19713:19716 ioctl c0306201 200000000540 returned -22 [ 1525.028433][T19762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4033'. [ 1529.760204][T19800] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1529.766802][T19800] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1529.774964][T19800] vhci_hcd vhci_hcd.0: Device attached [ 1530.097302][T14902] vhci_hcd: vhci_device speed not set [ 1530.177967][T14902] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 1530.481613][T19802] vhci_hcd: connection reset by peer [ 1530.832069][T19812] netlink: 'syz.3.4052': attribute type 10 has an invalid length. [ 1530.849730][ T2895] vhci_hcd: stop threads [ 1530.864929][ T2895] vhci_hcd: release socket [ 1530.880233][ T2895] vhci_hcd: disconnect device [ 1530.944897][T19812] binder: 19810:19812 unknown command 1074553619 [ 1530.955257][T19812] binder: 19810:19812 ioctl c0306201 200000000540 returned -22 [ 1532.527699][T19838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4057'. [ 1533.756232][T19851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.767030][T19851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.777602][T19851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.788407][T19851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.799164][T19851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.809920][T19851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.397477][T19854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1534.404074][T19854] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1534.505320][T19854] vhci_hcd vhci_hcd.0: Device attached [ 1534.587384][T19856] vhci_hcd: connection closed [ 1534.587681][ T1100] vhci_hcd: stop threads [ 1534.636132][ T1100] vhci_hcd: release socket [ 1534.674779][ T1100] vhci_hcd: disconnect device [ 1535.367945][T14902] vhci_hcd: vhci_device speed not set [ 1537.013141][T19880] netlink: set zone limit has 8 unknown bytes [ 1537.997440][T19888] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1538.004006][T19888] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1538.027890][T19888] vhci_hcd vhci_hcd.0: Device attached [ 1538.086820][T19890] vhci_hcd: connection closed [ 1538.093005][ T1100] vhci_hcd: stop threads [ 1538.108061][ T1100] vhci_hcd: release socket [ 1538.112578][ T1100] vhci_hcd: disconnect device [ 1538.497509][T19903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4079'. [ 1541.485310][T19927] netlink: set zone limit has 8 unknown bytes [ 1542.826802][T19936] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1542.833383][T19936] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1542.884692][T19936] vhci_hcd vhci_hcd.0: Device attached [ 1542.902717][T19939] vhci_hcd: connection closed [ 1542.910812][ T1100] vhci_hcd: stop threads [ 1542.951088][ T1100] vhci_hcd: release socket [ 1542.955577][ T1100] vhci_hcd: disconnect device [ 1544.302903][T19956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1545.439941][T19971] netlink: set zone limit has 8 unknown bytes [ 1546.290204][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.296669][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.368140][T19980] netlink: 'syz.0.4105': attribute type 10 has an invalid length. [ 1547.418929][T19980] binder: 19976:19980 unknown command 1074553619 [ 1547.427961][T19980] binder: 19976:19980 ioctl c0306201 200000000540 returned -22 [ 1547.753782][T19993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4111'. [ 1550.145532][T20005] netlink: set zone limit has 8 unknown bytes [ 1553.829728][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4126'. [ 1555.332827][T20055] netlink: 'syz.2.4131': attribute type 10 has an invalid length. [ 1555.380457][T20055] binder: 20051:20055 unknown command 1074553619 [ 1555.386939][T20055] binder: 20051:20055 ioctl c0306201 200000000540 returned -22 [ 1557.374234][T20065] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1557.380816][T20065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1557.394217][T20065] vhci_hcd vhci_hcd.0: Device attached [ 1557.427951][T20068] vhci_hcd: connection closed [ 1557.430989][ T8003] vhci_hcd: stop threads [ 1557.441629][ T8003] vhci_hcd: release socket [ 1557.446210][ T8003] vhci_hcd: disconnect device [ 1559.785536][T20089] netlink: 'syz.1.4142': attribute type 10 has an invalid length. [ 1560.366137][T20089] binder: 20085:20089 unknown command 1074553619 [ 1560.373045][T20089] binder: 20085:20089 ioctl c0306201 200000000540 returned -22 [ 1561.245337][T20105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1561.408852][T20105] ip6tnl1: entered allmulticast mode [ 1562.021974][T20109] netlink: set zone limit has 8 unknown bytes [ 1563.151522][T20116] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1563.158097][T20116] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1563.201150][T20116] vhci_hcd vhci_hcd.0: Device attached [ 1563.231709][T20119] vhci_hcd: connection closed [ 1563.232164][ T1100] vhci_hcd: stop threads [ 1563.243395][ T1100] vhci_hcd: release socket [ 1563.259832][ T1100] vhci_hcd: disconnect device [ 1565.675701][T20137] netlink: 'syz.0.4155': attribute type 10 has an invalid length. [ 1565.702992][T20137] binder: 20135:20137 unknown command 1074553619 [ 1565.709736][T20137] binder: 20135:20137 ioctl c0306201 200000000540 returned -22 [ 1566.392378][T20142] netlink: set zone limit has 8 unknown bytes [ 1569.174888][T20162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1569.181463][T20162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1569.231586][T20162] vhci_hcd vhci_hcd.0: Device attached [ 1569.283944][T20168] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4163'. [ 1569.415461][T20163] vhci_hcd: connection closed [ 1569.416360][ T11] vhci_hcd: stop threads [ 1569.658015][ T11] vhci_hcd: release socket [ 1569.742478][T10994] vhci_hcd: vhci_device speed not set [ 1569.803570][ T11] vhci_hcd: disconnect device [ 1570.888914][T20187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4166'. [ 1571.564391][T20192] netlink: set zone limit has 8 unknown bytes [ 1573.798420][T20205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4173'. [ 1573.966493][T20205] syz.1.4173: attempt to access beyond end of device [ 1573.966493][T20205] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1574.007897][T20205] gfs2: error 10 reading superblock [ 1576.713358][T20232] netlink: set zone limit has 8 unknown bytes [ 1581.536248][T20262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1581.590659][T20262] ip6tnl1: entered allmulticast mode [ 1583.842253][T20290] netlink: 'syz.3.4201': attribute type 10 has an invalid length. [ 1583.856307][T20290] binder: 20288:20290 unknown command 1074553619 [ 1583.863022][T20290] binder: 20288:20290 ioctl c0306201 200000000540 returned -22 [ 1587.432883][T20319] syz.3.4212: attempt to access beyond end of device [ 1587.432883][T20319] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1587.448627][T20319] gfs2: error 10 reading superblock [ 1588.489051][T20328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4211'. [ 1588.724851][T20328] ip6tnl1: entered allmulticast mode [ 1590.186934][T20344] netlink: set zone limit has 8 unknown bytes [ 1595.503632][T20392] netlink: set zone limit has 8 unknown bytes [ 1599.983838][T20438] netlink: set zone limit has 8 unknown bytes [ 1601.985375][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4247'. [ 1602.237375][T20448] syz.1.4247: attempt to access beyond end of device [ 1602.237375][T20448] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1602.262515][T20448] gfs2: error 10 reading superblock [ 1605.947139][T20483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4259'. [ 1606.429393][T20487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4257'. [ 1607.561838][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.568476][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.228402][T20525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1614.758166][T20553] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4281'. [ 1615.315329][T20569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4285'. [ 1618.607993][T10994] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1618.816477][T10994] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1618.834952][T10994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.843752][T10994] usb 2-1: Product: syz [ 1618.876566][T10994] usb 2-1: Manufacturer: syz [ 1618.897269][T10994] usb 2-1: SerialNumber: syz [ 1618.920708][T10994] usb 2-1: config 0 descriptor?? [ 1618.935292][T10994] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1619.337260][T20601] capability: warning: `syz.3.4295' uses deprecated v2 capabilities in a way that may be insecure [ 1619.349370][T10994] sonixb 2-1:0.0: Error writing register 01: -71 [ 1619.355769][T10994] sonixb: probe of 2-1:0.0 failed with error -71 [ 1619.512317][T10994] usb 2-1: USB disconnect, device number 34 [ 1621.662993][T20622] netlink: 'syz.0.4299': attribute type 10 has an invalid length. [ 1621.765858][T20622] binder: 20617:20622 unknown command 1074553619 [ 1621.772601][T20622] binder: 20617:20622 ioctl c0306201 200000000540 returned -22 [ 1622.144270][T20620] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1622.150865][T20620] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1622.160223][T20620] vhci_hcd vhci_hcd.0: Device attached [ 1622.181982][T20624] vhci_hcd: connection closed [ 1622.183260][ T1100] vhci_hcd: stop threads [ 1622.207939][ T1100] vhci_hcd: release socket [ 1622.212402][ T1100] vhci_hcd: disconnect device [ 1624.223442][T20640] netlink: set zone limit has 8 unknown bytes [ 1624.899363][T20641] bpq0: entered promiscuous mode [ 1624.904709][T20641] bpq0: left allmulticast mode [ 1625.069564][T20642] ================================================================== [ 1625.077682][T20642] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5ba/0x740 [ 1625.085674][T20642] Read of size 1 at addr ffff88801af7e432 by task syz.3.4304/20642 [ 1625.093566][T20642] [ 1625.095900][T20642] CPU: 1 PID: 20642 Comm: syz.3.4304 Not tainted 6.6.101-syzkaller #0 [ 1625.104053][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1625.114136][T20642] Call Trace: [ 1625.117416][T20642] [ 1625.120354][T20642] dump_stack_lvl+0x16c/0x230 [ 1625.125047][T20642] ? __lock_acquire+0x7c80/0x7c80 [ 1625.130125][T20642] ? show_regs_print_info+0x20/0x20 [ 1625.135329][T20642] ? load_image+0x3b0/0x3b0 [ 1625.139843][T20642] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1625.145230][T20642] ? __virt_addr_valid+0x18c/0x540 [ 1625.150439][T20642] ? __virt_addr_valid+0x469/0x540 [ 1625.155562][T20642] print_report+0xac/0x220 [ 1625.159984][T20642] ? rose_transmit_link+0x5ba/0x740 [ 1625.165283][T20642] kasan_report+0x117/0x150 [ 1625.169802][T20642] ? kmem_cache_alloc_node+0x17f/0x330 [ 1625.175323][T20642] ? rose_transmit_link+0x5ba/0x740 [ 1625.180551][T20642] rose_transmit_link+0x5ba/0x740 [ 1625.185582][T20642] ? skb_put+0x11b/0x210 [ 1625.189833][T20642] rose_write_internal+0x11d1/0x1ab0 [ 1625.195126][T20642] ? rose_validate_nr+0x120/0x120 [ 1625.200154][T20642] ? __timer_delete+0x6b/0x290 [ 1625.204927][T20642] ? skb_queue_purge_reason+0x6c/0x1c0 [ 1625.210413][T20642] rose_release+0x24e/0x510 [ 1625.214935][T20642] sock_close+0xbd/0x230 [ 1625.219198][T20642] ? sock_mmap+0xa0/0xa0 [ 1625.223448][T20642] __fput+0x234/0x970 [ 1625.227446][T20642] task_work_run+0x1ce/0x250 [ 1625.232049][T20642] ? task_work_cancel+0x240/0x240 [ 1625.237102][T20642] get_signal+0x1235/0x1400 [ 1625.241643][T20642] ? task_work_add+0x3a3/0x440 [ 1625.246412][T20642] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 1625.251789][T20642] ? wake_bit_function+0x200/0x200 [ 1625.256905][T20642] ? __might_fault+0xaa/0x120 [ 1625.261587][T20642] arch_do_signal_or_restart+0x96/0x780 [ 1625.267233][T20642] ? __sys_connect+0x240/0x420 [ 1625.272002][T20642] ? get_sigframe_size+0x20/0x20 [ 1625.276953][T20642] ? exit_to_user_mode_loop+0x3b/0x110 [ 1625.282419][T20642] exit_to_user_mode_loop+0x70/0x110 [ 1625.287713][T20642] exit_to_user_mode_prepare+0xb1/0x140 [ 1625.293264][T20642] syscall_exit_to_user_mode+0x1a/0x50 [ 1625.298735][T20642] do_syscall_64+0x61/0xb0 [ 1625.303167][T20642] ? clear_bhb_loop+0x40/0x90 [ 1625.307848][T20642] ? clear_bhb_loop+0x40/0x90 [ 1625.312534][T20642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1625.318442][T20642] RIP: 0033:0x7f7eecb8eb69 [ 1625.322866][T20642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.342487][T20642] RSP: 002b:00007f7eed9f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1625.350926][T20642] RAX: fffffffffffffe00 RBX: 00007f7eecdb6160 RCX: 00007f7eecb8eb69 [ 1625.358926][T20642] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000e [ 1625.366906][T20642] RBP: 00007f7eecc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1625.374883][T20642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1625.382942][T20642] R13: 0000000000000000 R14: 00007f7eecdb6160 R15: 00007ffdbbc6f068 [ 1625.390927][T20642] [ 1625.393960][T20642] [ 1625.396304][T20642] Allocated by task 18674: [ 1625.400719][T20642] kasan_set_track+0x4e/0x70 [ 1625.405311][T20642] __kasan_kmalloc+0x8f/0xa0 [ 1625.409902][T20642] rose_add_node+0x23a/0xdd0 [ 1625.414495][T20642] rose_rt_ioctl+0xa42/0xfb0 [ 1625.419084][T20642] rose_ioctl+0x3cf/0x8b0 [ 1625.423430][T20642] sock_do_ioctl+0xd7/0x2f0 [ 1625.427941][T20642] sock_ioctl+0x623/0x7a0 [ 1625.432285][T20642] __se_sys_ioctl+0xfd/0x170 [ 1625.436874][T20642] do_syscall_64+0x55/0xb0 [ 1625.441298][T20642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1625.447198][T20642] [ 1625.449534][T20642] Freed by task 20641: [ 1625.453593][T20642] kasan_set_track+0x4e/0x70 [ 1625.458186][T20642] kasan_save_free_info+0x2e/0x50 [ 1625.463290][T20642] ____kasan_slab_free+0x126/0x1e0 [ 1625.468415][T20642] slab_free_freelist_hook+0x130/0x1b0 [ 1625.473868][T20642] __kmem_cache_free+0xba/0x1f0 [ 1625.478726][T20642] rose_rt_device_down+0x43d/0x490 [ 1625.483857][T20642] rose_device_event+0x604/0x690 [ 1625.488792][T20642] notifier_call_chain+0x197/0x390 [ 1625.493903][T20642] __dev_notify_flags+0x18e/0x2e0 [ 1625.498932][T20642] dev_change_flags+0xe8/0x1a0 [ 1625.503711][T20642] dev_ifsioc+0x6a7/0xe20 [ 1625.508050][T20642] dev_ioctl+0x7e2/0x1170 [ 1625.512406][T20642] sock_do_ioctl+0x226/0x2f0 [ 1625.517016][T20642] sock_ioctl+0x623/0x7a0 [ 1625.521350][T20642] __se_sys_ioctl+0xfd/0x170 [ 1625.525947][T20642] do_syscall_64+0x55/0xb0 [ 1625.530364][T20642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1625.536287][T20642] [ 1625.538609][T20642] Last potentially related work creation: [ 1625.544319][T20642] kasan_save_stack+0x3e/0x60 [ 1625.548997][T20642] __kasan_record_aux_stack+0xaf/0xc0 [ 1625.554373][T20642] insert_work+0x3d/0x310 [ 1625.558706][T20642] __queue_work+0xd2c/0x1020 [ 1625.563300][T20642] call_timer_fn+0x16e/0x530 [ 1625.567893][T20642] __run_timers+0x558/0x7d0 [ 1625.572391][T20642] run_timer_softirq+0x67/0xf0 [ 1625.577172][T20642] handle_softirqs+0x280/0x820 [ 1625.581966][T20642] __irq_exit_rcu+0xc7/0x190 [ 1625.586563][T20642] irq_exit_rcu+0x9/0x20 [ 1625.590820][T20642] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1625.596459][T20642] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1625.602454][T20642] [ 1625.604773][T20642] Second to last potentially related work creation: [ 1625.611350][T20642] kasan_save_stack+0x3e/0x60 [ 1625.616030][T20642] __kasan_record_aux_stack+0xaf/0xc0 [ 1625.621503][T20642] insert_work+0x3d/0x310 [ 1625.625836][T20642] __queue_work+0xd2c/0x1020 [ 1625.630423][T20642] call_timer_fn+0x16e/0x530 [ 1625.635006][T20642] __run_timers+0x558/0x7d0 [ 1625.639515][T20642] run_timer_softirq+0x67/0xf0 [ 1625.644277][T20642] handle_softirqs+0x280/0x820 [ 1625.649037][T20642] __irq_exit_rcu+0xc7/0x190 [ 1625.653643][T20642] irq_exit_rcu+0x9/0x20 [ 1625.657883][T20642] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1625.663558][T20642] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1625.669563][T20642] [ 1625.671882][T20642] The buggy address belongs to the object at ffff88801af7e400 [ 1625.671882][T20642] which belongs to the cache kmalloc-512 of size 512 [ 1625.685933][T20642] The buggy address is located 50 bytes inside of [ 1625.685933][T20642] freed 512-byte region [ffff88801af7e400, ffff88801af7e600) [ 1625.699641][T20642] [ 1625.701959][T20642] The buggy address belongs to the physical page: [ 1625.708394][T20642] page:ffffea00006bdf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801af7dc00 pfn:0x1af7c [ 1625.719845][T20642] head:ffffea00006bdf00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1625.728780][T20642] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1625.736761][T20642] page_type: 0xffffffff() [ 1625.741102][T20642] raw: 00fff00000000840 ffff888017841c80 ffffea0000c2d410 ffffea0001778810 [ 1625.749681][T20642] raw: ffff88801af7dc00 000000000010000d 00000001ffffffff 0000000000000000 [ 1625.758266][T20642] page dumped because: kasan: bad access detected [ 1625.764686][T20642] page_owner tracks the page as allocated [ 1625.770402][T20642] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6992796658, free_ts 0 [ 1625.790228][T20642] post_alloc_hook+0x1cd/0x210 [ 1625.795023][T20642] get_page_from_freelist+0x195c/0x19f0 [ 1625.800581][T20642] __alloc_pages+0x1e3/0x460 [ 1625.805181][T20642] alloc_page_interleave+0x24/0x1e0 [ 1625.810420][T20642] alloc_slab_page+0x5d/0x170 [ 1625.815108][T20642] new_slab+0x87/0x2e0 [ 1625.819184][T20642] ___slab_alloc+0xc6d/0x12f0 [ 1625.823883][T20642] __kmem_cache_alloc_node+0x1a2/0x260 [ 1625.829350][T20642] kmalloc_trace+0x2a/0xe0 [ 1625.833771][T20642] device_add+0xbe/0xc20 [ 1625.838049][T20642] tty_register_device_attr+0x401/0x8f0 [ 1625.843601][T20642] tty_register_driver+0x5a9/0xb20 [ 1625.848718][T20642] legacy_pty_init+0x3a6/0x600 [ 1625.853488][T20642] pty_init+0xe/0x20 [ 1625.857382][T20642] do_one_initcall+0x1fd/0x750 [ 1625.862166][T20642] do_initcall_level+0x137/0x1f0 [ 1625.867227][T20642] page_owner free stack trace missing [ 1625.872593][T20642] [ 1625.874913][T20642] Memory state around the buggy address: [ 1625.881074][T20642] ffff88801af7e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1625.889129][T20642] ffff88801af7e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1625.897273][T20642] >ffff88801af7e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1625.905346][T20642] ^ [ 1625.910970][T20642] ffff88801af7e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1625.919028][T20642] ffff88801af7e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1625.927258][T20642] ================================================================== [ 1625.992437][T20642] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1625.999676][T20642] CPU: 0 PID: 20642 Comm: syz.3.4304 Not tainted 6.6.101-syzkaller #0 [ 1626.007839][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1626.017902][T20642] Call Trace: [ 1626.021181][T20642] [ 1626.024110][T20642] dump_stack_lvl+0x16c/0x230 [ 1626.028811][T20642] ? show_regs_print_info+0x20/0x20 [ 1626.034021][T20642] ? load_image+0x3b0/0x3b0 [ 1626.038543][T20642] panic+0x2c0/0x710 [ 1626.042443][T20642] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.048624][T20642] ? bpf_jit_dump+0xd0/0xd0 [ 1626.053143][T20642] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1626.059047][T20642] ? _raw_spin_unlock+0x40/0x40 [ 1626.063908][T20642] ? rose_transmit_link+0x5ba/0x740 [ 1626.069122][T20642] check_panic_on_warn+0x84/0xa0 [ 1626.074062][T20642] ? rose_transmit_link+0x5ba/0x740 [ 1626.079265][T20642] end_report+0x6f/0x140 [ 1626.083511][T20642] kasan_report+0x128/0x150 [ 1626.088029][T20642] ? kmem_cache_alloc_node+0x17f/0x330 [ 1626.093493][T20642] ? rose_transmit_link+0x5ba/0x740 [ 1626.098714][T20642] rose_transmit_link+0x5ba/0x740 [ 1626.103781][T20642] ? skb_put+0x11b/0x210 [ 1626.108035][T20642] rose_write_internal+0x11d1/0x1ab0 [ 1626.113358][T20642] ? rose_validate_nr+0x120/0x120 [ 1626.118384][T20642] ? __timer_delete+0x6b/0x290 [ 1626.123173][T20642] ? skb_queue_purge_reason+0x6c/0x1c0 [ 1626.128640][T20642] rose_release+0x24e/0x510 [ 1626.133146][T20642] sock_close+0xbd/0x230 [ 1626.137395][T20642] ? sock_mmap+0xa0/0xa0 [ 1626.141643][T20642] __fput+0x234/0x970 [ 1626.145647][T20642] task_work_run+0x1ce/0x250 [ 1626.150248][T20642] ? task_work_cancel+0x240/0x240 [ 1626.155303][T20642] get_signal+0x1235/0x1400 [ 1626.159821][T20642] ? task_work_add+0x3a3/0x440 [ 1626.164589][T20642] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 1626.169967][T20642] ? wake_bit_function+0x200/0x200 [ 1626.175093][T20642] ? __might_fault+0xaa/0x120 [ 1626.179770][T20642] arch_do_signal_or_restart+0x96/0x780 [ 1626.185323][T20642] ? __sys_connect+0x240/0x420 [ 1626.190088][T20642] ? get_sigframe_size+0x20/0x20 [ 1626.195035][T20642] ? exit_to_user_mode_loop+0x3b/0x110 [ 1626.200501][T20642] exit_to_user_mode_loop+0x70/0x110 [ 1626.205798][T20642] exit_to_user_mode_prepare+0xb1/0x140 [ 1626.211350][T20642] syscall_exit_to_user_mode+0x1a/0x50 [ 1626.216816][T20642] do_syscall_64+0x61/0xb0 [ 1626.221233][T20642] ? clear_bhb_loop+0x40/0x90 [ 1626.225905][T20642] ? clear_bhb_loop+0x40/0x90 [ 1626.230579][T20642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.236481][T20642] RIP: 0033:0x7f7eecb8eb69 [ 1626.240900][T20642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1626.260542][T20642] RSP: 002b:00007f7eed9f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1626.268961][T20642] RAX: fffffffffffffe00 RBX: 00007f7eecdb6160 RCX: 00007f7eecb8eb69 [ 1626.276931][T20642] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000e [ 1626.284901][T20642] RBP: 00007f7eecc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1626.292870][T20642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.300838][T20642] R13: 0000000000000000 R14: 00007f7eecdb6160 R15: 00007ffdbbc6f068 [ 1626.308821][T20642] [ 1626.312138][T20642] Kernel Offset: disabled [ 1626.316462][T20642] Rebooting in 86400 seconds..