last executing test programs: 20.457380473s ago: executing program 2 (id=2863): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x40c4) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x11, 0xfffffffffffffd9e, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000340)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 15.870895337s ago: executing program 2 (id=2873): r0 = syz_open_dev$media(&(0x7f0000000040), 0xe3, 0x82) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000300)) 15.748724363s ago: executing program 1 (id=2874): r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000000000000000185200000800000000000000000000008520000003000000181a0000", @ANYRES32, @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5cd9c28b38cfec8059fccc8904a9047f89dcdaa9f3e00f17b6ffbd1a166de180819ba31bb57f539f1c95972a865cf7a60"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_emit_ethernet(0x82, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)={r6}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@getaddr={0x14, 0x16, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008084) socket$inet(0x2, 0xa, 0x9) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x1ff, 0x0, @remote, @empty, 0x80, 0x80, 0xfffffffc, 0xdc67}}) 15.032524943s ago: executing program 2 (id=2875): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 14.333984323s ago: executing program 2 (id=2876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @remote, 0x1}, {0xa, 0x4e21, 0xe6, @empty, 0x6a}, r5, 0x4}}, 0x48) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) 14.044478765s ago: executing program 1 (id=2878): syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001e580)=""/102400, 0x19000) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) 13.869399772s ago: executing program 3 (id=2880): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x309, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040084}, 0x8880) 13.323880705s ago: executing program 2 (id=2882): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x4, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 13.265438828s ago: executing program 1 (id=2883): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x40c4) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x11, 0xfffffffffffffd9e, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000340)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 13.013468259s ago: executing program 2 (id=2885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x6) r4 = syz_open_dev$media(&(0x7f0000000040), 0xe3, 0x82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000300)) 10.38456437s ago: executing program 3 (id=2888): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r1, 0x0, &(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004040)=""/4072, 0xfe8, 0x0, 0x0}, &(0x7f0000000000)=0x40) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) keyctl$revoke(0x3, r3) 9.44528677s ago: executing program 4 (id=2890): socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000000000000000185200000800000000000000000000008520000003000000181a0000", @ANYRES32, @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5cd9c28b38cfec8059fccc8904a9047f89dcdaa9f3e00f17b6ffbd1a166de180819ba31bb57f539f1c95972a865cf7a60"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_emit_ethernet(0x82, 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 8.577366177s ago: executing program 4 (id=2891): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x6, 0x0) 7.745363522s ago: executing program 1 (id=2892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @remote, 0x1}, {0xa, 0x4e21, 0xe6, @empty, 0x6a}, r5, 0x4}}, 0x48) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) 7.265729372s ago: executing program 1 (id=2894): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x9, 0xa, {0x0}, {0xee00}, 0x12, 0x6}) getpgrp(r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x5, 0x7, 0x5, 0x100, 0x2, 0x1, 0x8, 0x4, 0x8006, 0xffffffff, 0x1, 0x1a449, 0x2, 0x40000003, 0x89, 0x22, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x3, 0x10000, 0xfffffff8]}) 6.786302203s ago: executing program 0 (id=2896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e00000011008188040f46ec0800b9cca7480ef4210000fee3bd6efb440013030e001b000d000008ba", 0x29}], 0x1}, 0x48d4) 6.644970999s ago: executing program 4 (id=2897): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, 0x0, 0x8880) 5.784827545s ago: executing program 0 (id=2898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a876"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 5.585313444s ago: executing program 3 (id=2899): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 4.909941532s ago: executing program 3 (id=2900): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) 4.898477623s ago: executing program 0 (id=2901): socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000000000000000185200000800000000000000000000008520000003000000181a0000", @ANYRES32, @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5cd9c28b38cfec8059fccc8904a9047f89dcdaa9f3e00f17b6ffbd1a166de180819ba31bb57f539f1c95972a865cf7a60"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_emit_ethernet(0x82, 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 4.27814492s ago: executing program 1 (id=2902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40c4) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x11, 0xfffffffffffffd9e, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000340)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 4.234129391s ago: executing program 3 (id=2903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r3, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, r5) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) 4.179856463s ago: executing program 0 (id=2904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x6}}, 0x20) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) 2.488334675s ago: executing program 3 (id=2905): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.406222949s ago: executing program 0 (id=2906): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x6, 0x0) 2.165390319s ago: executing program 4 (id=2907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e00000011008188040f46ec0800b9cca7480ef4210000fee3bd6efb440013030e001b000d000008ba800082", 0x2c}], 0x1}, 0x48d4) 566.726307ms ago: executing program 4 (id=2908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdbc97000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x8, [@const={0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x1}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x6}}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x8, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x2e, 0x2e, 0x30, 0x61]}}, 0x0, 0x94, 0x0, 0x1, 0xd, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x803, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(0xffffffffffffffff, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000780)=0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000007c0)=""/4096, &(0x7f0000000000)=0x1000) 112.214516ms ago: executing program 4 (id=2909): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 0s ago: executing program 0 (id=2910): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="670e2b12d882f9da3bb0e685619e52672ed924b81378e4aab467490a1ffdd548a0f06b126469e9c26153ebe61bf66cb10078eaef7ffcaecbb2ecf9aaf0f15aff9328534a1fbc5fecde908b7322b7953f95bc3cbbe8b7f5867b68a7d2d8398778ff81f167800775"], 0x15) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x1b) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 44718][ T4347] usb 2-1: config 0 descriptor?? [ 332.956904][ T7934] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.376143][ T4347] betop 0003:8380:1850.0004: report_id 1146923772 is invalid [ 333.414694][ T4347] betop 0003:8380:1850.0004: item 0 4 1 8 parsing failed [ 333.464455][ T4347] betop 0003:8380:1850.0004: parse failed [ 333.483743][ T4347] betop: probe of 0003:8380:1850.0004 failed with error -22 [ 333.577442][ T4347] usb 2-1: USB disconnect, device number 7 [ 333.878043][ T7948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 333.884979][ T7948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 333.894007][ T7948] vhci_hcd vhci_hcd.0: Device attached [ 334.188603][ T951] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 334.624168][ T7949] vhci_hcd: connection reset by peer [ 334.640759][ T7507] vhci_hcd: stop threads [ 334.645776][ T7507] vhci_hcd: release socket [ 334.723615][ T7954] Bluetooth: MGMT ver 1.22 [ 335.318948][ T7507] vhci_hcd: disconnect device [ 335.765164][ T7961] netlink: 'syz.0.1036': attribute type 12 has an invalid length. [ 336.803629][ T7968] kvm: pic: non byte write [ 336.958095][ T6118] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.066663][ T4347] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 337.278110][ T4347] usb 2-1: Using ep0 maxpacket: 8 [ 337.285334][ T4347] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 337.309413][ T4347] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.341274][ T4347] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.372927][ T4347] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.418092][ T4347] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.466034][ T4347] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 337.495212][ T4347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.722408][ T4347] usb 2-1: usb_control_msg returned -32 [ 337.728318][ T4347] usbtmc 2-1:16.0: can't read capabilities [ 340.310076][ T951] vhci_hcd: vhci_device speed not set [ 340.333486][ T7] usb 2-1: USB disconnect, device number 8 [ 340.415418][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'. [ 340.810609][ T8006] 9pnet: Could not find request transport: fd0x0000000000000003 [ 340.953180][ T8009] netlink: 'syz.0.1051': attribute type 27 has an invalid length. [ 343.602634][ T8038] capability: warning: `syz.2.1061' uses 32-bit capabilities (legacy support in use) [ 344.481734][ T8059] netlink: 'syz.4.1066': attribute type 27 has an invalid length. [ 344.979535][ T8053] 9pnet: Could not find request transport: fd0x0000000000000003 [ 346.455491][ T8088] --map-set only usable from mangle table [ 347.795872][ T8096] infiniband syz2: set down [ 347.800816][ T8096] infiniband syz2: added ipvlan0 [ 347.865634][ T8096] RDS/IB: syz2: added [ 347.870461][ T8096] smc: adding ib device syz2 with port count 1 [ 347.877041][ T8096] smc: ib device syz2 port 1 has pnetid [ 349.041716][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.914711][ T8131] netlink: 'syz.3.1086': attribute type 12 has an invalid length. [ 352.647439][ T8144] autofs4:pid:8144:autofs_fill_super: called with bogus options [ 353.283055][ T8151] tmpfs: Unknown parameter 'usrquota' [ 354.521068][ T8161] rdma_rxe: rxe_register_device failed with error -23 [ 354.529313][ T8161] rdma_rxe: failed to add ipvlan0 [ 356.410903][ T8171] netlink: 'syz.1.1097': attribute type 12 has an invalid length. [ 359.210113][ T8189] autofs4:pid:8189:autofs_fill_super: called with bogus options [ 359.568227][ T8191] netlink: 'syz.2.1103': attribute type 12 has an invalid length. [ 361.739128][ T8216] netlink: 'syz.0.1111': attribute type 12 has an invalid length. [ 362.629640][ T8229] device syzkaller0 entered promiscuous mode [ 364.202567][ T8240] netlink: 'syz.0.1117': attribute type 12 has an invalid length. [ 364.813960][ T8246] autofs4:pid:8246:autofs_fill_super: called with bogus options [ 364.821446][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 365.041624][ T8251] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 365.651777][ T8258] netlink: 'syz.4.1123': attribute type 12 has an invalid length. [ 368.318811][ T4366] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.417082][ T22] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 368.417768][ T14] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 368.432431][ T3653] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 368.487702][ T14] dvb_usb_az6027: probe of 5-1:0.0 failed with error -110 [ 368.506669][ T14] usb 5-1: USB disconnect, device number 12 [ 368.564901][ T22] dvb_usb_az6027: probe of 4-1:0.0 failed with error -2 [ 368.624286][ T22] usb 4-1: USB disconnect, device number 13 [ 368.643414][ T3653] dvb_usb_az6027: probe of 3-1:0.0 failed with error -2 [ 368.678125][ T4314] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 368.683502][ T3653] usb 3-1: USB disconnect, device number 18 [ 369.028497][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 369.287150][ T4314] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 369.384345][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.684112][ T4314] usb 2-1: config 0 descriptor?? [ 369.923490][ T4314] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 370.738439][ T4314] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 370.747593][ T4314] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 372.961839][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 372.967810][ T8341] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.653489][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 375.717191][ T8396] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 375.803726][ T8404] netlink: 'syz.1.1164': attribute type 12 has an invalid length. [ 377.721409][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 378.588528][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.595181][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.922035][ T8437] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 378.934692][ T8437] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 380.921226][ T8444] tipc: Enabled bearer , priority 0 [ 380.959502][ T8444] tipc: Resetting bearer [ 381.052662][ T8443] tipc: Disabling bearer [ 381.315554][ T8450] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.752373][ T8459] device vlan2 entered promiscuous mode [ 381.768305][ T8459] device bridge0 entered promiscuous mode [ 382.068273][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 385.336994][ T8501] device bridge2 entered promiscuous mode [ 393.234175][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 393.234192][ T26] audit: type=1326 audit(1764284352.851:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 393.717179][ T26] audit: type=1326 audit(1764284352.851:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 393.887856][ T26] audit: type=1326 audit(1764284352.861:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 394.016424][ T26] audit: type=1326 audit(1764284352.861:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 394.069778][ T26] audit: type=1326 audit(1764284352.861:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 394.095003][ T26] audit: type=1326 audit(1764284352.861:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 394.119024][ T26] audit: type=1326 audit(1764284352.871:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 394.141991][ T26] audit: type=1326 audit(1764284352.871:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 394.165773][ T26] audit: type=1326 audit(1764284352.881:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 394.210047][ T26] audit: type=1326 audit(1764284352.881:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 396.896779][ T8645] device syzkaller1 entered promiscuous mode [ 397.535798][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 397.909738][ T8668] netlink: 'syz.3.1246': attribute type 12 has an invalid length. [ 398.631690][ T8672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1248'. [ 398.710279][ T8672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1248'. [ 399.193303][ T8682] input: syz0 as /devices/virtual/input/input20 [ 399.439666][ T8682] input: failed to attach handler leds to device input20, error: -6 [ 400.602043][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 400.611708][ T8692] device bridge_slave_1 left promiscuous mode [ 400.622136][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.684043][ T8692] device bridge_slave_0 left promiscuous mode [ 400.751005][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.958290][ T8141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.887941][ T8704] netlink: 'syz.0.1257': attribute type 12 has an invalid length. [ 404.359257][ T7993] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 404.578034][ T7993] usb 1-1: Using ep0 maxpacket: 16 [ 405.029975][ T7993] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.086307][ T7993] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 405.106887][ T7993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.151806][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 405.209505][ T7993] usb 1-1: config 0 descriptor?? [ 407.896202][ T8758] netlink: 'syz.4.1272': attribute type 12 has an invalid length. [ 408.453441][ T14] usb 1-1: USB disconnect, device number 14 [ 409.707523][ T8766] tipc: Enabled bearer , priority 0 [ 409.728719][ T8766] device syzkaller0 entered promiscuous mode [ 409.781213][ T8766] tipc: Resetting bearer [ 409.797302][ T8765] tipc: Resetting bearer [ 409.841814][ T8765] tipc: Disabling bearer [ 412.166446][ T8791] netlink: 'syz.0.1283': attribute type 12 has an invalid length. [ 413.707589][ T8802] device syzkaller1 entered promiscuous mode [ 415.598077][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 415.598093][ T26] audit: type=1326 audit(1764284375.371:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 416.287592][ T26] audit: type=1326 audit(1764284375.421:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 416.634397][ T26] audit: type=1326 audit(1764284375.461:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 416.754836][ T26] audit: type=1326 audit(1764284375.541:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 416.866539][ T26] audit: type=1326 audit(1764284375.541:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 417.099455][ T26] audit: type=1326 audit(1764284375.541:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 417.123040][ T26] audit: type=1326 audit(1764284375.541:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 417.148311][ T26] audit: type=1326 audit(1764284375.581:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 417.188558][ T26] audit: type=1326 audit(1764284375.621:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 418.041994][ T26] audit: type=1326 audit(1764284375.631:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 418.460829][ T8857] device syzkaller1 entered promiscuous mode [ 418.658229][ T4329] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 418.889169][ T4329] usb 5-1: Using ep0 maxpacket: 32 [ 418.923049][ T4329] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 419.004743][ T4329] usb 5-1: config 0 has no interface number 0 [ 419.078797][ T4329] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 419.210093][ T4329] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 419.315819][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.406171][ T4329] usb 5-1: Product: syz [ 419.426358][ T4329] usb 5-1: Manufacturer: syz [ 419.450983][ T4329] usb 5-1: SerialNumber: syz [ 419.504604][ T4329] usb 5-1: config 0 descriptor?? [ 419.535117][ T8855] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 419.766907][ T8855] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 421.565260][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 421.574486][ T26] audit: type=1326 audit(1764284381.331:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.137134][ T26] audit: type=1326 audit(1764284381.331:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.153423][ T8889] overlayfs: overlapping lowerdir path [ 422.221094][ T26] audit: type=1326 audit(1764284381.331:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.277187][ T4329] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.306916][ T4329] asix: probe of 5-1:0.188 failed with error -71 [ 422.361643][ T4329] usb 5-1: USB disconnect, device number 13 [ 422.394520][ T26] audit: type=1326 audit(1764284381.331:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.468506][ T26] audit: type=1326 audit(1764284381.331:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.496163][ T26] audit: type=1326 audit(1764284381.341:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.533947][ T26] audit: type=1326 audit(1764284381.341:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.629886][ T26] audit: type=1326 audit(1764284381.341:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.718057][ T26] audit: type=1326 audit(1764284381.341:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 422.858621][ T26] audit: type=1326 audit(1764284381.341:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 428.675017][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 428.676698][ T26] audit: type=1326 audit(1764284388.451:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 429.302828][ T26] audit: type=1326 audit(1764284388.541:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 429.330713][ T26] audit: type=1326 audit(1764284388.541:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 429.360744][ T26] audit: type=1326 audit(1764284388.711:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 429.543421][ T26] audit: type=1326 audit(1764284388.751:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 429.825502][ T52] block nbd2: Attempted send on invalid socket [ 429.846768][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 429.919744][ T52] block nbd2: Attempted send on invalid socket [ 429.931188][ T52] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 429.964135][ T9008] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 429.991215][ T1152] block nbd2: Attempted send on invalid socket [ 429.998058][ T1152] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.014455][ T9008] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 430.042849][ T1152] block nbd2: Attempted send on invalid socket [ 430.065173][ T1152] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.106400][ T52] block nbd2: Attempted send on invalid socket [ 430.108158][ T26] audit: type=1326 audit(1764284388.751:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 430.113368][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.159887][ T9008] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 430.202095][ T52] block nbd2: Attempted send on invalid socket [ 430.299088][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.348109][ T9008] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 430.368130][ T26] audit: type=1326 audit(1764284388.881:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 430.391366][ T52] block nbd2: Attempted send on invalid socket [ 430.397581][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.410865][ T1152] block nbd2: Attempted send on invalid socket [ 430.417086][ T1152] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.434780][ T9008] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 430.468197][ T1152] block nbd2: Attempted send on invalid socket [ 430.474515][ T1152] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.488196][ T9008] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 430.494834][ T26] audit: type=1326 audit(1764284388.921:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 430.525656][ T26] audit: type=1326 audit(1764284389.051:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 430.541320][ T9021] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1335'. [ 430.565820][ T1152] block nbd2: Attempted send on invalid socket [ 430.572258][ T1152] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.583521][ T9008] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 430.598309][ T9008] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 430.612166][ T9008] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 432.958214][ T5219] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 433.185380][ T9061] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1346'. [ 433.542185][ T9069] netlink: 'syz.2.1347': attribute type 12 has an invalid length. [ 434.879122][ T4314] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 435.979728][ T9080] netlink: 'syz.4.1350': attribute type 12 has an invalid length. [ 436.374396][ T4314] dvb_usb_az6027: probe of 2-1:0.0 failed with error -110 [ 436.548181][ T4314] usb 2-1: USB disconnect, device number 9 [ 439.108010][ T4329] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 439.300350][ T4329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.334528][ T4329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.414427][ T9123] netlink: 'syz.4.1362': attribute type 12 has an invalid length. [ 439.847253][ T4329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 439.860824][ T4329] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 439.957357][ T4329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.012524][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.018906][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.077107][ T4329] usb 2-1: config 0 descriptor?? [ 441.115342][ T4329] hid-generic 0003:057E:2019.0005: hidraw0: USB HID v0.00 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 441.238075][ T4329] usb 2-1: USB disconnect, device number 10 [ 441.593553][ T9137] fido_id[9137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 444.622335][ T9167] netlink: 'syz.2.1374': attribute type 12 has an invalid length. [ 446.776923][ T9180] block device autoloading is deprecated and will be removed. [ 448.006318][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 448.051420][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 448.607622][ T9197] netlink: 556 bytes leftover after parsing attributes in process `syz.0.1383'. [ 453.100130][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 454.253927][ T9240] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1399'. [ 454.284115][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 456.177984][ T22] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 456.371631][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.413294][ T22] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 456.474085][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.506508][ T22] usb 3-1: config 0 descriptor?? [ 457.313734][ T22] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 457.346215][ T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input22 [ 457.517085][ T22] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 457.556093][ T9281] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1413'. [ 459.326646][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 460.048417][ T27] usb 3-1: USB disconnect, device number 19 [ 461.193347][ T9329] device syzkaller0 entered promiscuous mode [ 461.265971][ T9336] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1427'. [ 461.535808][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1429'. [ 465.110593][ T9370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1439'. [ 465.436935][ T22] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 465.645156][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 465.660955][ T22] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 465.739847][ T22] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 465.763775][ T22] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 465.800632][ T9387] 9pnet: Could not find request transport: fd0x0000000000000003 [ 465.823234][ T22] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 465.858985][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.897764][ T22] usb 3-1: Product: syz [ 465.908014][ T22] usb 3-1: Manufacturer: syz [ 465.916863][ T22] usb 3-1: SerialNumber: syz [ 465.980567][ T22] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 466.010606][ T22] imon 3-1:155.0: unable to initialize intf0, err -19 [ 466.020667][ T22] imon:imon_probe: failed to initialize context! [ 466.027075][ T22] imon 3-1:155.0: unable to register, err -19 [ 466.238503][ T7507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.773990][ T9390] netlink: 'syz.1.1447': attribute type 27 has an invalid length. [ 468.754753][ T22] usb 3-1: USB disconnect, device number 20 [ 469.013539][ T9423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1455'. [ 473.805576][ T9465] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1470'. [ 473.924198][ T9456] 9pnet: Could not find request transport: fd0x0000000000000003 [ 474.400450][ T9480] device syzkaller1 entered promiscuous mode [ 474.536140][ T9456] netlink: 'syz.3.1467': attribute type 27 has an invalid length. [ 476.876319][ T9505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1484'. [ 477.222531][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 483.152201][ T9549] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 483.223209][ T9549] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 483.271713][ T9549] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 483.316568][ T9549] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 483.359499][ T9549] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 483.388391][ T9549] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 483.400090][ T9549] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 483.413595][ T9549] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 483.434915][ T9549] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 483.465766][ T9549] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 483.516845][ T9558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1497'. [ 483.738814][ T9564] device syzkaller1 entered promiscuous mode [ 483.829296][ T9563] tipc: Enabled bearer , priority 0 [ 483.856367][ T9563] device syzkaller0 entered promiscuous mode [ 483.966783][ T9567] tipc: Resetting bearer [ 483.982562][ T9560] tipc: Resetting bearer [ 484.021897][ T9560] tipc: Disabling bearer [ 484.184723][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 485.910620][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1504'. [ 486.236225][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 486.251192][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 486.848836][ T9601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1509'. [ 487.160894][ T9606] device syzkaller1 entered promiscuous mode [ 488.367047][ T9619] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 488.432562][ T9619] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 488.519140][ T9619] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 488.577838][ T9619] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 488.599037][ T9619] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 488.626455][ T9619] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 488.640049][ T9619] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 488.662894][ T9619] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 488.853316][ T9619] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 488.862113][ T9619] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 489.740905][ T9640] xt_hashlimit: size too large, truncated to 1048576 [ 491.168520][ T9659] device syzkaller1 entered promiscuous mode [ 493.018130][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 493.222527][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.249594][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 493.280764][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 493.318176][ T27] usb 1-1: Product: syz [ 493.338691][ T27] usb 1-1: Manufacturer: syz [ 493.343674][ T27] usb 1-1: SerialNumber: syz [ 493.770697][ T27] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 494.895372][ T27] usb 1-1: USB disconnect, device number 15 [ 494.914605][ T27] usblp0: removed [ 496.367082][ T9707] device syzkaller1 entered promiscuous mode [ 497.637337][ T9725] device syzkaller0 entered promiscuous mode [ 498.047974][ T4373] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 498.248091][ T4373] usb 3-1: Using ep0 maxpacket: 8 [ 498.259047][ T4373] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 498.315813][ T4373] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.348148][ T4373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.397504][ T4373] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 498.433677][ T4373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 498.521874][ T4373] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.552117][ T4373] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.596631][ T4373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.839996][ T4373] usb 3-1: usb_control_msg returned -32 [ 498.846184][ T4373] usbtmc 3-1:16.0: can't read capabilities [ 498.896836][ T7813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 499.668988][ T9747] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 499.888870][ T4373] usb 3-1: USB disconnect, device number 21 [ 499.937049][ T9756] device syzkaller0 entered promiscuous mode [ 501.922645][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.929435][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.441059][ T9796] 9pnet: Could not find request transport: fd0x0000000000000003 [ 506.773410][ T9800] netlink: 'syz.0.1560': attribute type 27 has an invalid length. [ 508.416493][ T9827] device syzkaller0 entered promiscuous mode [ 509.855344][ T9831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.211820][ T9831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.550494][ T9861] IPVS: sh: FWM 3 0x00000003 - no destination available [ 510.609324][ T9856] IPVS: sh: FWM 3 0x00000003 - no destination available [ 511.732735][ T9831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.805517][ T9848] device syzkaller1 entered promiscuous mode [ 512.161235][ T9831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.937594][ T9831] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.030255][ T9831] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.056209][ T9876] 9pnet: Could not find request transport: fd0x0000000000000003 [ 513.076118][ T9831] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.113099][ T9831] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.459323][ T9882] netlink: 'syz.2.1580': attribute type 27 has an invalid length. [ 515.936196][ T9912] device syzkaller1 entered promiscuous mode [ 518.328028][ T4357] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 518.597993][ T4357] usb 3-1: Using ep0 maxpacket: 8 [ 518.605160][ T4357] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 519.793440][ T4357] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.828368][ T4357] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.848102][ T4357] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.868042][ T4357] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.908020][ T4357] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.944067][ T4357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.172144][ T4357] usb 3-1: usb_control_msg returned -32 [ 520.187963][ T4357] usbtmc 3-1:16.0: can't read capabilities [ 520.971754][ T9942] device syzkaller0 entered promiscuous mode [ 521.659288][ T4357] usb 3-1: USB disconnect, device number 22 [ 521.999511][ T9950] device syzkaller1 entered promiscuous mode [ 524.398339][ T9978] siw: device registration error -23 [ 524.423357][ T9978] netlink: 'syz.3.1613': attribute type 4 has an invalid length. [ 526.565288][ T26] audit: type=1326 audit(1764284486.341:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78f749 code=0x7ffc0000 [ 526.588499][ T9983] 9pnet: Could not find request transport: fd0x0000000000000003 [ 526.628004][ T26] audit: type=1326 audit(1764284486.341:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78f749 code=0x7ffc0000 [ 528.020467][ T9997] device syzkaller1 entered promiscuous mode [ 528.913233][ T9986] netlink: 'syz.3.1615': attribute type 27 has an invalid length. [ 529.899838][T10003] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1620'. [ 531.320141][ T7443] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 535.770438][T10047] device syzkaller1 entered promiscuous mode [ 537.246958][T10071] tipc: Enabled bearer , priority 0 [ 537.259156][T10071] device syzkaller0 entered promiscuous mode [ 537.296179][T10070] tipc: Resetting bearer [ 537.609138][T10070] tipc: Disabling bearer [ 539.438435][T10089] device syzkaller1 entered promiscuous mode [ 542.661174][T10118] device syzkaller0 entered promiscuous mode [ 544.184363][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 546.477260][T10149] device syzkaller1 entered promiscuous mode [ 548.122408][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 549.945001][T10182] tipc: Enabled bearer , priority 0 [ 549.960818][T10182] device syzkaller0 entered promiscuous mode [ 550.899728][T10179] tipc: Resetting bearer [ 550.982244][T10179] tipc: Disabling bearer [ 556.041366][T10232] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 557.375278][T10250] device syzkaller0 entered promiscuous mode [ 561.510036][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 562.884153][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.890568][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.244579][T10303] bond0 speed is unknown, defaulting to 1000 [ 563.252221][T10303] bond0 speed is unknown, defaulting to 1000 [ 563.267893][T10303] bond0 speed is unknown, defaulting to 1000 [ 563.511316][T10303] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 563.592612][T10303] bond0 speed is unknown, defaulting to 1000 [ 563.605072][T10303] bond0 speed is unknown, defaulting to 1000 [ 564.132323][T10303] bond0 speed is unknown, defaulting to 1000 [ 564.152508][T10303] bond0 speed is unknown, defaulting to 1000 [ 564.158154][ T8992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.179083][T10303] bond0 speed is unknown, defaulting to 1000 [ 568.309776][ T14] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 568.786509][T10358] device syzkaller1 entered promiscuous mode [ 568.790939][ T14] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 569.461166][T10366] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 572.056328][T10400] device syzkaller0 entered promiscuous mode [ 572.426722][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 572.440283][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 572.568677][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 572.574759][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 572.879175][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 572.976594][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 573.233248][T10405] ceph: No mds server is up or the cluster is laggy [ 573.678310][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 573.684322][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 574.981052][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 574.987117][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 575.507318][T10427] netlink: 'syz.1.1734': attribute type 27 has an invalid length. [ 581.356514][T10466] netlink: 'syz.1.1746': attribute type 27 has an invalid length. [ 581.494545][T10476] 9pnet_fd: p9_fd_create_tcp (10476): problem connecting socket to 127.0.0.1 [ 581.834933][T10483] bridge0: port 1(gretap0) entered blocking state [ 581.843683][T10483] bridge0: port 1(gretap0) entered disabled state [ 581.861805][T10483] device gretap0 entered promiscuous mode [ 581.927390][T10483] Bluetooth: MGMT ver 1.22 [ 582.509108][T10476] 9pnet_fd: p9_fd_create_tcp (10476): problem connecting socket to 127.0.0.1 [ 586.587939][ T14] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 586.787896][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 586.796765][ T14] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 586.823954][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.854400][ T14] usb 3-1: Product: syz [ 586.889442][ T14] usb 3-1: Manufacturer: syz [ 586.903351][ T14] usb 3-1: SerialNumber: syz [ 586.997462][ T14] usb 3-1: config 0 descriptor?? [ 587.626217][ T14] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 589.117638][ T14] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 589.286265][ T14] usb 3-1: USB disconnect, device number 23 [ 591.389667][T10570] tipc: Enabling of bearer rejected, failed to enable media [ 591.399015][T10570] device syzkaller0 entered promiscuous mode [ 592.306755][T10582] netlink: 'syz.3.1779': attribute type 12 has an invalid length. [ 596.159583][ T7536] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 597.908055][ T26] audit: type=1326 audit(1764284557.531:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 598.183439][ T26] audit: type=1326 audit(1764284557.541:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 598.362177][ T26] audit: type=1326 audit(1764284557.551:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 598.391409][ T26] audit: type=1326 audit(1764284557.551:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 598.441290][ T26] audit: type=1326 audit(1764284557.551:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 598.464764][ T26] audit: type=1326 audit(1764284557.551:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 598.502432][ T26] audit: type=1326 audit(1764284557.551:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 598.527238][ T26] audit: type=1326 audit(1764284557.551:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 598.661504][ T26] audit: type=1326 audit(1764284557.551:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 599.530573][ T26] audit: type=1326 audit(1764284557.561:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 599.770715][T10663] netlink: 'syz.2.1800': attribute type 12 has an invalid length. [ 601.694640][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 603.459770][T10705] affs: No valid root block on device nullb0 [ 604.130011][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 604.130223][ T26] audit: type=1326 audit(1764284563.911:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 604.169355][ T26] audit: type=1326 audit(1764284563.911:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 604.204888][ T26] audit: type=1326 audit(1764284563.981:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 604.678011][ T26] audit: type=1326 audit(1764284564.011:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 604.795821][ T26] audit: type=1326 audit(1764284564.011:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 604.997945][ T26] audit: type=1326 audit(1764284564.011:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 605.328309][ T26] audit: type=1326 audit(1764284564.011:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 605.351058][ T26] audit: type=1326 audit(1764284564.011:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 605.406577][ T26] audit: type=1326 audit(1764284564.011:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 605.601782][ T26] audit: type=1326 audit(1764284564.021:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 606.207087][T10726] netlink: 'syz.3.1817': attribute type 12 has an invalid length. [ 609.436936][ T1152] nbd_handle_cmd: 2 callbacks suppressed [ 609.437028][ T1152] block nbd4: Attempted send on invalid socket [ 609.450828][ T1152] blk_print_req_error: 2 callbacks suppressed [ 609.450877][ T1152] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 615.216636][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 615.216652][ T26] audit: type=1326 audit(1764284574.991:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 615.280486][ T26] audit: type=1326 audit(1764284574.991:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 615.314691][ T26] audit: type=1326 audit(1764284574.991:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 615.576178][ T26] audit: type=1326 audit(1764284574.991:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 615.810861][ T26] audit: type=1326 audit(1764284574.991:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 616.478461][ T26] audit: type=1326 audit(1764284575.031:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 616.559849][ T26] audit: type=1326 audit(1764284575.031:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 616.588490][ T26] audit: type=1326 audit(1764284575.031:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 616.615944][ T26] audit: type=1326 audit(1764284575.031:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 616.647599][ T26] audit: type=1326 audit(1764284575.031:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 618.089843][ T14] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 618.438417][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.468665][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.489807][ T14] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 618.507885][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.546500][ T14] usb 5-1: SerialNumber: syz [ 619.264523][ T14] usb 5-1: 0:2 : does not exist [ 619.293256][ T14] usb 5-1: USB disconnect, device number 14 [ 619.589514][T10048] udevd[10048]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.769168][T10863] tipc: Enabling of bearer rejected, failed to enable media [ 619.807363][T10863] device syzkaller0 entered promiscuous mode [ 620.258867][ T26] kauditd_printk_skb: 98 callbacks suppressed [ 620.258884][ T26] audit: type=1326 audit(1764284579.671:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63a6b865e7 code=0x7ffc0000 [ 621.360730][ T26] audit: type=1326 audit(1764284579.671:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63a6b2b829 code=0x7ffc0000 [ 621.392914][ T26] audit: type=1326 audit(1764284579.671:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 621.666927][ T26] audit: type=1326 audit(1764284579.681:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63a6b865e7 code=0x7ffc0000 [ 621.725699][ T26] audit: type=1326 audit(1764284579.681:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63a6b2b829 code=0x7ffc0000 [ 622.131693][ T26] audit: type=1326 audit(1764284579.681:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 622.154483][ T26] audit: type=1326 audit(1764284579.691:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63a6b865e7 code=0x7ffc0000 [ 622.177354][ T26] audit: type=1326 audit(1764284579.691:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63a6b2b829 code=0x7ffc0000 [ 622.201594][ T26] audit: type=1326 audit(1764284579.691:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 622.226168][ T26] audit: type=1326 audit(1764284579.701:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63a6b865e7 code=0x7ffc0000 [ 624.330260][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.336841][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.930538][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 626.930553][ T26] audit: type=1326 audit(1764284586.711:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 627.005650][ T26] audit: type=1326 audit(1764284586.711:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 627.106045][ T26] audit: type=1326 audit(1764284586.741:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 627.139877][ T26] audit: type=1326 audit(1764284586.741:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 627.316808][ T26] audit: type=1326 audit(1764284586.741:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 627.428029][ T26] audit: type=1326 audit(1764284586.741:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 628.522164][ T26] audit: type=1326 audit(1764284586.741:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 628.796091][ T26] audit: type=1326 audit(1764284586.741:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 628.846465][ T26] audit: type=1326 audit(1764284586.741:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 630.371564][T10354] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 630.713510][ T26] audit: type=1326 audit(1764284586.741:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 632.469624][T10988] device syzkaller0 entered promiscuous mode [ 632.590993][T10991] device vxcan1 entered promiscuous mode [ 635.185687][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 635.185703][ T26] audit: type=1326 audit(1764284594.961:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 635.415686][ T26] audit: type=1326 audit(1764284594.961:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 635.455134][ T26] audit: type=1326 audit(1764284595.001:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 635.564224][ T26] audit: type=1326 audit(1764284595.001:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 635.682441][ T26] audit: type=1326 audit(1764284595.001:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 635.766685][ T26] audit: type=1326 audit(1764284595.001:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 635.884461][ T26] audit: type=1326 audit(1764284595.001:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 636.066657][ T26] audit: type=1326 audit(1764284595.001:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 636.233886][ T26] audit: type=1326 audit(1764284595.001:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 636.337141][ T26] audit: type=1326 audit(1764284595.001:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11003 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 639.229165][T11039] device syzkaller0 entered promiscuous mode [ 640.195615][ T26] kauditd_printk_skb: 110 callbacks suppressed [ 640.195628][ T26] audit: type=1326 audit(1764284599.971:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90ec7865e7 code=0x7ffc0000 [ 640.344835][ T26] audit: type=1326 audit(1764284599.971:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90ec72b829 code=0x7ffc0000 [ 640.367488][ T26] audit: type=1326 audit(1764284599.971:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f90ec78f749 code=0x7ffc0000 [ 640.431085][ T26] audit: type=1326 audit(1764284599.991:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90ec7865e7 code=0x7ffc0000 [ 640.513874][ T26] audit: type=1326 audit(1764284599.991:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90ec72b829 code=0x7ffc0000 [ 640.714067][ T26] audit: type=1326 audit(1764284599.991:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f90ec78f749 code=0x7ffc0000 [ 640.746064][ T26] audit: type=1326 audit(1764284599.991:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90ec7865e7 code=0x7ffc0000 [ 640.776396][ T26] audit: type=1326 audit(1764284599.991:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90ec72b829 code=0x7ffc0000 [ 640.806115][ T26] audit: type=1326 audit(1764284599.991:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f90ec78f749 code=0x7ffc0000 [ 640.839913][ T26] audit: type=1326 audit(1764284600.011:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90ec7865e7 code=0x7ffc0000 [ 641.519931][T11064] netlink: 'syz.0.1920': attribute type 12 has an invalid length. [ 642.890042][T11081] netlink: 'syz.2.1925': attribute type 10 has an invalid length. [ 642.941083][T11081] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 643.207904][ T27] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 643.422221][ T27] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 643.438002][ T27] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 643.474676][ T27] usb 2-1: config 150 has no interface number 0 [ 643.499654][ T27] usb 2-1: config 150 interface 204 has no altsetting 0 [ 643.518143][ T27] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 643.537752][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.557612][ T27] usb 2-1: Product: syz [ 643.567297][ T27] usb 2-1: Manufacturer: syz [ 643.574349][ T27] usb 2-1: SerialNumber: syz [ 643.792083][ T27] xr_serial 2-1:150.204: skipping garbage [ 643.799446][ T27] xr_serial 2-1:150.204: xr_serial converter detected [ 644.842576][ T27] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 645.338368][T11101] netlink: 'syz.2.1932': attribute type 12 has an invalid length. [ 645.389156][ T27] usb 2-1: USB disconnect, device number 11 [ 645.415684][ T27] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 645.528849][ T27] xr_serial 2-1:150.204: device disconnected [ 650.734771][ T26] kauditd_printk_skb: 287 callbacks suppressed [ 650.734787][ T26] audit: type=1326 audit(1764284610.511:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 651.078583][ T26] audit: type=1326 audit(1764284610.511:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 651.658796][ T26] audit: type=1326 audit(1764284610.551:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 651.681721][ T26] audit: type=1326 audit(1764284610.551:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 651.745310][ T26] audit: type=1326 audit(1764284610.551:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 651.805152][ T26] audit: type=1326 audit(1764284610.551:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 651.863614][ T26] audit: type=1326 audit(1764284610.551:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 651.889920][ T26] audit: type=1326 audit(1764284610.551:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 651.974692][ T26] audit: type=1326 audit(1764284610.551:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 652.193760][ T26] audit: type=1326 audit(1764284610.551:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 652.651703][T11170] netlink: 'syz.2.1950': attribute type 7 has an invalid length. [ 655.367678][T11185] overlayfs: missing 'lowerdir' [ 656.630203][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 656.630243][ T26] audit: type=1326 audit(1764284616.411:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 656.862852][ T26] audit: type=1326 audit(1764284616.411:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.114987][ T26] audit: type=1326 audit(1764284616.441:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.193723][ T26] audit: type=1326 audit(1764284616.441:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.223796][ T26] audit: type=1326 audit(1764284616.441:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.257299][ T26] audit: type=1326 audit(1764284616.441:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.296304][ T26] audit: type=1326 audit(1764284616.441:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.319920][ T26] audit: type=1326 audit(1764284616.441:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.372850][ T26] audit: type=1326 audit(1764284616.441:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.443243][ T26] audit: type=1326 audit(1764284616.441:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 657.592425][T11210] Illegal XDP return value 424652280 on prog (id 47) dev syz_tun, expect packet loss! [ 658.714375][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1969'. [ 660.246517][T11253] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 660.374169][T11253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.451671][T11253] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 663.357952][T10343] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 664.207988][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 664.573439][T11282] binder_alloc: 11281: binder_alloc_buf, no vma [ 666.858528][T11311] binder_alloc: 11310: binder_alloc_buf, no vma [ 670.477348][T11336] overlayfs: missing 'lowerdir' [ 672.511295][ T3653] libceph: connect (1)[c::]:6789 error -101 [ 672.517310][ T3653] libceph: mon0 (1)[c::]:6789 connect error [ 672.596236][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 672.870778][ T3653] libceph: connect (1)[c::]:6789 error -101 [ 672.879731][ T3653] libceph: mon0 (1)[c::]:6789 connect error [ 673.423960][ T3653] libceph: connect (1)[c::]:6789 error -101 [ 673.459946][ T3653] libceph: mon0 (1)[c::]:6789 connect error [ 673.825056][T11359] ceph: No mds server is up or the cluster is laggy [ 675.038035][ T27] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 675.142515][T11393] overlayfs: missing 'lowerdir' [ 675.257228][ T27] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 675.267928][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.276250][ T27] usb 5-1: Product: syz [ 675.281303][ T27] usb 5-1: Manufacturer: syz [ 675.338024][ T27] usb 5-1: SerialNumber: syz [ 675.400652][ T27] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 675.526041][ T27] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 675.970120][ T4329] usb 5-1: USB disconnect, device number 15 [ 676.637919][ T27] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 676.645928][ T27] ath9k_htc: Failed to initialize the device [ 676.746932][ T4329] usb 5-1: ath9k_htc: USB layer deinitialized [ 676.962584][T11409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2023'. [ 682.366394][T11446] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 682.380919][T11446] exFAT-fs (loop0): unable to read boot sector [ 682.390591][T11446] exFAT-fs (loop0): failed to read boot sector [ 682.397107][T11446] exFAT-fs (loop0): failed to recognize exfat type [ 685.760678][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.767021][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.838386][T11540] netlink: 'syz.3.2057': attribute type 1 has an invalid length. [ 691.028515][T11540] 8021q: adding VLAN 0 to HW filter on device bond4 [ 691.040670][T11543] bond4: (slave dummy0): making interface the new active one [ 691.050817][T11543] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 691.059797][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 692.188988][T11558] netlink: 'syz.2.2062': attribute type 12 has an invalid length. [ 699.361598][T11617] bond0 speed is unknown, defaulting to 1000 [ 702.095842][T11656] tipc: Enabled bearer , priority 0 [ 703.035531][T11656] tipc: Resetting bearer [ 703.082324][T11655] tipc: Disabling bearer [ 703.854456][T11676] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 703.861017][T11676] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 703.905221][T11676] vhci_hcd vhci_hcd.0: Device attached [ 703.943303][T11686] binder: BINDER_SET_CONTEXT_MGR already set [ 703.968940][T11686] binder: 11685:11686 ioctl 4018620d 200000000040 returned -16 [ 704.047863][ T4357] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 704.172172][ T27] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 704.249659][ T4357] usb 3-1: config 0 has no interfaces? [ 704.255213][ T4357] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 704.283898][ T4357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.328533][ T4357] usb 3-1: config 0 descriptor?? [ 705.012321][T11677] usbip_core: unknown command [ 705.017050][T11677] vhci_hcd: unknown pdu 0 [ 705.047878][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.056891][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.071162][T11677] usbip_core: unknown command [ 705.077115][ T4357] usb 3-1: USB disconnect, device number 24 [ 705.141387][ T7443] vhci_hcd: stop threads [ 705.146240][ T7443] vhci_hcd: release socket [ 705.398819][ T27] usb 37-1: device descriptor read/64, error -71 [ 705.471354][ T7443] vhci_hcd: disconnect device [ 705.597990][ T27] vhci_hcd: vhci_device speed not set [ 707.693803][T11708] ax25_connect(): syz.2.2107 uses autobind, please contact jreuter@yaina.de [ 710.496210][T11742] Cannot find add_set index 128 as target [ 713.567930][ T27] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 713.763241][ T27] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 713.777171][ T27] usb 1-1: config 7 has no interface number 0 [ 713.812341][ T27] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 713.835537][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.847603][ T27] usb 1-1: Product: syz [ 713.852638][ T27] usb 1-1: Manufacturer: syz [ 713.857637][ T27] usb 1-1: SerialNumber: syz [ 714.919948][ T27] as10x_usb: device has been detected [ 714.937615][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 715.017674][ T27] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 715.099712][ T27] as10x_usb: error during firmware upload part1 [ 715.124972][ T27] Registered device Elgato EyeTV DTT Deluxe [ 715.144285][ T27] usb 1-1: USB disconnect, device number 16 [ 715.205853][ T27] Unregistered device Elgato EyeTV DTT Deluxe [ 715.216581][ T27] as10x_usb: device has been disconnected [ 717.495640][T11805] tipc: Enabled bearer , priority 0 [ 717.503110][T11805] device syzkaller0 entered promiscuous mode [ 717.984213][T11804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2140'. [ 718.008007][T11803] tipc: Resetting bearer [ 718.361907][T11803] tipc: Disabling bearer [ 722.530162][T11850] tipc: Enabling of bearer rejected, failed to enable media [ 722.624208][T11860] sd 0:0:1:0: device reset [ 723.221495][ T1152] block nbd1: Attempted send on invalid socket [ 723.228258][ T1152] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 727.949988][T11905] tipc: Enabled bearer , priority 0 [ 727.969784][T11905] device syzkaller0 entered promiscuous mode [ 728.600064][T11904] tipc: Resetting bearer [ 728.677359][T11904] tipc: Disabling bearer [ 728.723871][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 728.723888][ T26] audit: type=1326 audit(1764284688.501:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 728.800908][ T26] audit: type=1326 audit(1764284688.501:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 728.982153][ T26] audit: type=1326 audit(1764284688.541:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 729.062150][ T26] audit: type=1326 audit(1764284688.551:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 730.261012][T11930] overlayfs: missing 'lowerdir' [ 730.319155][ T26] audit: type=1326 audit(1764284688.551:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 730.342846][ T26] audit: type=1326 audit(1764284688.551:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 730.370967][ T26] audit: type=1326 audit(1764284688.561:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 731.337611][ T26] audit: type=1326 audit(1764284688.561:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 731.918131][ T26] audit: type=1326 audit(1764284688.561:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 732.098323][ T26] audit: type=1326 audit(1764284688.561:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.1.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41ce38f749 code=0x7ffc0000 [ 734.035155][T11957] tipc: Enabled bearer , priority 0 [ 734.068486][T11957] device syzkaller0 entered promiscuous mode [ 734.153107][T11957] tipc: Resetting bearer [ 734.174358][T11956] tipc: Resetting bearer [ 734.239541][T11956] tipc: Disabling bearer [ 739.605222][T12005] can0: slcan on ttyS3. [ 739.779106][T12003] can0 (unregistered): slcan off ttyS3. [ 739.972938][T12009] netlink: 'syz.0.2200': attribute type 27 has an invalid length. [ 745.730355][T12045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.773192][T12045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.728993][T12045] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.739075][T12045] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.751570][T12045] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.760884][T12045] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.893979][T12045] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.903095][T12045] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.912197][T12045] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.921269][T12045] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.979780][T12101] netlink: 'syz.3.2215': attribute type 27 has an invalid length. [ 747.200512][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.206965][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.557981][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 747.757178][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.824963][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 747.847646][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 747.916267][T12123] dlm: no locking on control device [ 747.993712][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.036059][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.642767][ T27] usb 1-1: Product: syz [ 748.674857][ T27] usb 1-1: Manufacturer: syz [ 748.701316][ T27] usb 1-1: SerialNumber: syz [ 748.919486][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.942444][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.973373][ T27] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 749.013917][ T27] usb 1-1: USB disconnect, device number 17 [ 749.567923][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 749.758396][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 749.769171][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 749.797883][ T27] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 749.817826][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.839084][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 750.037917][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 750.050211][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.061903][ T27] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 750.077902][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.777915][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 750.787038][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.061272][ T27] usb 1-1: can't set config #16, error -71 [ 751.078610][ T27] usb 1-1: USB disconnect, device number 18 [ 751.178983][T12153] autofs4:pid:12153:autofs_fill_super: called with bogus options [ 754.107962][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 754.328004][ T4357] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 754.435792][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 754.996582][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 755.069185][T12176] bond0 speed is unknown, defaulting to 1000 [ 755.083680][ T27] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 755.116567][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 755.126931][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 755.161404][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 755.163207][ T4357] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 755.206398][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 755.235903][ T4357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.257959][ T4357] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 755.297023][ T4357] usb 3-1: too many endpoints for config 1 interface 0 altsetting 247: 49, using maximum allowed: 30 [ 755.307183][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.344469][ T4357] usb 3-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 755.387861][ T4357] usb 3-1: config 1 interface 0 has no altsetting 0 [ 755.391684][ T27] usbtmc 1-1:16.0: bulk endpoints not found [ 755.424421][ T4357] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 755.469646][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 755.488003][ T4357] usb 3-1: Product: syz [ 755.503560][ T4357] usb 3-1: Manufacturer: syz [ 755.739019][ T4357] usb 3-1: USB disconnect, device number 25 [ 755.945920][T12185] overlayfs: missing 'lowerdir' [ 757.750571][ T27] usb 1-1: USB disconnect, device number 19 [ 758.039060][T12202] autofs4:pid:12202:autofs_fill_super: called with bogus options [ 759.348014][ T52] block nbd1: Attempted send on invalid socket [ 759.354261][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.368892][ T52] block nbd1: Attempted send on invalid socket [ 759.375202][ T52] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.385202][T12205] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 759.407107][ T52] block nbd1: Attempted send on invalid socket [ 759.413689][ T52] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.435207][T12205] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 759.454183][ T1152] block nbd1: Attempted send on invalid socket [ 759.460552][ T1152] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.478544][ T52] block nbd1: Attempted send on invalid socket [ 759.484791][ T52] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.494416][T12205] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 759.529010][ T1152] block nbd1: Attempted send on invalid socket [ 759.535340][ T1152] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.545161][T12205] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 759.555597][ T1152] block nbd1: Attempted send on invalid socket [ 759.561938][ T1152] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.571855][ T1152] block nbd1: Attempted send on invalid socket [ 759.578438][ T1152] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.682241][T12205] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 759.748237][ T52] block nbd1: Attempted send on invalid socket [ 759.754570][ T52] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.764250][T12205] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 759.802043][ T52] block nbd1: Attempted send on invalid socket [ 759.808320][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.867947][T12205] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 759.948348][T12205] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 760.017987][T12205] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 763.062028][T12229] Sensor B: ================= START STATUS ================= [ 763.071176][T12229] Sensor B: Test Pattern: 75% Colorbar [ 763.077172][T12229] Sensor B: Show Information: All [ 763.082479][T12229] Sensor B: Vertical Flip: false [ 763.087673][T12229] Sensor B: Horizontal Flip: false [ 763.092992][T12229] Sensor B: Brightness: 128 [ 763.097710][T12229] Sensor B: Contrast: 128 [ 763.102262][T12229] Sensor B: Hue: 0 [ 763.106350][T12229] Sensor B: Saturation: 128 [ 763.111023][T12229] Sensor B: ================== END STATUS ================== [ 763.821389][T12224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.061443][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2259'. [ 774.495433][T12322] 9pnet: Could not find request transport: 0x0000000000000003 [ 774.530779][T12322] netlink: 'syz.3.2271': attribute type 27 has an invalid length. [ 776.226503][T12343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2275'. [ 781.945478][T12353] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.952762][T12353] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.841120][T12376] 9pnet: Could not find request transport: 0x0000000000000003 [ 783.970335][T12353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.995571][T12353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.370688][T12353] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.439655][T12353] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.461500][T12353] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.476405][T12353] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.664661][T12380] netlink: 'syz.2.2284': attribute type 27 has an invalid length. [ 785.018985][T10343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.054774][T10343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.204379][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 786.564147][T12384] bond0 speed is unknown, defaulting to 1000 [ 788.591264][T12444] netlink: 'syz.1.2298': attribute type 27 has an invalid length. [ 789.106198][T12439] 9pnet: Could not find request transport: 0x0000000000000003 [ 789.124233][T12449] binder: 12448:12449 ioctl 4018620d 0 returned -22 [ 790.492935][T12473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2308'. [ 791.297969][T12481] binder: 12480:12481 ioctl 4018620d 0 returned -22 [ 792.716992][T12486] bond0 speed is unknown, defaulting to 1000 [ 793.666515][T12514] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2322'. [ 794.907922][T12526] binder: 12523:12526 ioctl 4018620d 0 returned -22 [ 794.916462][T12525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 797.351178][T12543] bond0 speed is unknown, defaulting to 1000 [ 797.902908][T12562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2335'. [ 799.350257][T12575] binder: BINDER_SET_CONTEXT_MGR already set [ 799.387845][T12575] binder: 12574:12575 ioctl 4018620d 200000000040 returned -16 [ 802.003474][T12602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2347'. [ 804.698750][T12617] binder: BINDER_SET_CONTEXT_MGR already set [ 804.704808][T12617] binder: 12616:12617 ioctl 4018620d 200000000040 returned -16 [ 804.791252][T12619] tipc: Enabled bearer , priority 0 [ 804.809827][T12619] device syzkaller0 entered promiscuous mode [ 804.858437][T12619] tipc: Resetting bearer [ 804.882994][T12618] tipc: Resetting bearer [ 804.943675][T12625] program syz.0.2355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 805.054688][T12618] tipc: Disabling bearer [ 805.430665][T12633] netlink: 'syz.0.2356': attribute type 27 has an invalid length. [ 805.848675][T12628] 9pnet: Could not find request transport: f0x0000000000000003 [ 806.616818][T12643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2359'. [ 807.122733][T12657] binder: BINDER_SET_CONTEXT_MGR already set [ 807.135226][T12657] binder: 12655:12657 ioctl 4018620d 200000000040 returned -16 [ 808.640431][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.646832][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.979754][T12687] binder: 12686:12687 ioctl c0306201 0 returned -14 [ 811.570709][T12721] binder: 12720:12721 ioctl c0306201 0 returned -14 [ 814.622386][T12759] binder: 12756:12759 ioctl c0306201 0 returned -14 [ 815.564393][T12775] autofs4:pid:12775:autofs_fill_super: called with bogus options [ 819.233136][T12792] rdma_rxe: rxe_register_device failed with error -23 [ 819.241876][T12792] rdma_rxe: failed to add ipvlan0 [ 820.907539][T12802] binder: BINDER_SET_CONTEXT_MGR already set [ 820.940801][T12802] binder: 12801:12802 ioctl 4018620d 200000000040 returned -16 [ 822.437789][T12827] autofs4:pid:12827:autofs_fill_super: called with bogus options [ 823.568451][T12837] device syzkaller0 entered promiscuous mode [ 827.008286][ T1152] nbd_handle_cmd: 2 callbacks suppressed [ 827.008352][ T1152] block nbd2: Attempted send on invalid socket [ 827.020930][ T1152] blk_print_req_error: 2 callbacks suppressed [ 827.020946][ T1152] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 831.082262][T12938] autofs4:pid:12938:autofs_fill_super: called with bogus options [ 833.979520][ T52] block nbd1: Attempted send on invalid socket [ 833.985892][ T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 835.236954][T12967] autofs4:pid:12967:autofs_fill_super: called with bogus options [ 838.171779][ T1152] block nbd2: Attempted send on invalid socket [ 838.178563][ T1152] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 840.711662][T13015] autofs4:pid:13015:autofs_fill_super: called with bogus options [ 843.517776][ T52] block nbd2: Attempted send on invalid socket [ 843.524122][ T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 846.527285][T13059] ieee802154 phy0 wpan0: encryption failed: -22 [ 848.904315][ T1152] block nbd4: Attempted send on invalid socket [ 848.910857][ T1152] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 849.336161][T13086] autofs4:pid:13086:autofs_fill_super: called with bogus options [ 854.001478][T13134] autofs4:pid:13134:autofs_fill_super: called with bogus options [ 859.167160][T13179] autofs4:pid:13179:autofs_fill_super: called with bogus options [ 861.433361][T13203] tipc: Enabled bearer , priority 0 [ 861.453590][T13203] device syzkaller0 entered promiscuous mode [ 861.503692][T13203] tipc: Resetting bearer [ 861.542909][T13202] tipc: Resetting bearer [ 862.163202][T13202] tipc: Disabling bearer [ 862.812265][T13215] autofs4:pid:13215:autofs_fill_super: called with bogus options [ 864.157975][ T1152] block nbd3: Attempted send on invalid socket [ 864.164398][ T1152] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.035250][T13270] autofs4:pid:13270:autofs_fill_super: called with bogus options [ 870.083676][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.094371][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.445062][ T1152] block nbd1: Attempted send on invalid socket [ 870.452392][ T1152] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 870.975650][T13282] 9pnet: Could not find request transport: fd0x0000000000000003 [ 872.664561][T13255] tipc: Enabling of bearer rejected, failed to enable media [ 872.689374][T13285] netlink: 'syz.3.2536': attribute type 27 has an invalid length. [ 872.942686][T13239] bond0 speed is unknown, defaulting to 1000 [ 876.927940][T13324] affs: No valid root block on device nullb0 [ 876.945689][ T1152] block nbd3: Attempted send on invalid socket [ 876.952257][ T1152] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 882.416327][ T1152] block nbd0: Attempted send on invalid socket [ 882.422819][ T1152] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 882.797905][T12382] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 882.805645][T12017] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 882.949727][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 882.949742][ T26] audit: type=1326 audit(1764284842.731:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 882.997547][ T26] audit: type=1326 audit(1764284842.731:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.028081][T12017] usb 4-1: Using ep0 maxpacket: 8 [ 883.106321][T12382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 883.115246][ T26] audit: type=1326 audit(1764284842.761:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.118407][T12017] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 883.141046][ T26] audit: type=1326 audit(1764284842.761:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.193201][ T26] audit: type=1326 audit(1764284842.761:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.215429][T12382] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 883.228788][ T26] audit: type=1326 audit(1764284842.761:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.228831][ T26] audit: type=1326 audit(1764284842.761:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.228868][ T26] audit: type=1326 audit(1764284842.761:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.228904][ T26] audit: type=1326 audit(1764284842.761:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.228940][ T26] audit: type=1326 audit(1764284842.761:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4078f749 code=0x7ffc0000 [ 883.350869][T12017] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 883.363184][T12017] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 883.377348][T12017] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.396953][T12017] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 883.406458][T12017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.432836][T12382] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 883.453936][T12382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.498393][T12382] usb 3-1: config 0 descriptor?? [ 883.530135][T13372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 883.652328][T12017] usb 4-1: GET_CAPABILITIES returned 0 [ 883.658789][T12017] usbtmc 4-1:16.0: can't read capabilities [ 883.758520][T13372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.814107][T13372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.828663][T12382] usbhid 3-1:0.0: can't add hid device: -71 [ 883.843706][T12382] usbhid: probe of 3-1:0.0 failed with error -71 [ 883.880501][T12382] usb 3-1: USB disconnect, device number 26 [ 883.917028][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 883.932304][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 883.941542][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 883.950670][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 883.959792][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 883.968909][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 883.989146][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 883.998321][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.007544][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.016656][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.025768][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.055521][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.058298][ T4333] usb 4-1: USB disconnect, device number 14 [ 884.064778][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.079853][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.088951][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.098041][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 884.754663][T13392] bond0 speed is unknown, defaulting to 1000 [ 884.760875][T12382] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 884.947789][T12382] usb 3-1: Using ep0 maxpacket: 32 [ 884.954967][T12382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 885.097799][T12382] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 885.145223][T12382] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 885.174594][T12382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.232756][T12382] usb 3-1: config 0 descriptor?? [ 885.404164][T12382] usb 3-1: can't set config #0, error -71 [ 885.416280][T12382] usb 3-1: USB disconnect, device number 27 [ 888.194238][ T1152] block nbd3: Attempted send on invalid socket [ 888.200607][ T1152] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 888.272489][ T26] kauditd_printk_skb: 212 callbacks suppressed [ 888.272504][ T26] audit: type=1326 audit(1764284848.051:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.307533][ T26] audit: type=1326 audit(1764284848.051:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.346305][ T26] audit: type=1326 audit(1764284848.081:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.399823][ T26] audit: type=1326 audit(1764284848.081:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.430724][ T26] audit: type=1326 audit(1764284848.081:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.458924][ T26] audit: type=1326 audit(1764284848.111:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.491127][ T26] audit: type=1326 audit(1764284848.111:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.519264][ T26] audit: type=1326 audit(1764284848.111:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.555792][ T26] audit: type=1326 audit(1764284848.111:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.583053][ T26] audit: type=1326 audit(1764284848.111:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 888.947253][T13442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 888.953819][T13442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 889.021926][T13442] vhci_hcd vhci_hcd.0: Device attached [ 889.075324][T13443] vhci_hcd: connection closed [ 889.081077][ T7361] vhci_hcd: stop threads [ 889.166984][ T7361] vhci_hcd: release socket [ 889.204070][ T7361] vhci_hcd: disconnect device [ 889.237985][ T27] vhci_hcd: vhci_device speed not set [ 890.241897][T13457] netlink: 'syz.3.2582': attribute type 1 has an invalid length. [ 890.249962][T13457] netlink: 'syz.3.2582': attribute type 2 has an invalid length. [ 894.225752][ T7361] Bluetooth: hci5: Frame reassembly failed (-84) [ 896.008001][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 898.410180][T13515] mkiss: ax0: crc mode is auto. [ 900.319816][T13540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2607'. [ 901.214366][ T26] kauditd_printk_skb: 214 callbacks suppressed [ 901.214378][ T26] audit: type=1326 audit(1764284860.991:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 901.243366][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.250061][ T26] audit: type=1326 audit(1764284860.991:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 901.272599][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.312064][ T26] audit: type=1326 audit(1764284861.041:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 901.735064][ T26] audit: type=1326 audit(1764284861.041:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 902.206926][ T26] audit: type=1326 audit(1764284861.041:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 902.243242][ T26] audit: type=1326 audit(1764284861.041:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 902.299133][ T26] audit: type=1326 audit(1764284861.041:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 902.323991][ T26] audit: type=1326 audit(1764284861.041:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 902.348345][ T26] audit: type=1326 audit(1764284861.041:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 902.371497][ T26] audit: type=1326 audit(1764284861.041:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8a78f749 code=0x7ffc0000 [ 902.623915][ T4274] Bluetooth: hci4: unexpected event 0x32 length: 29 > 9 [ 906.662431][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 906.662445][ T26] audit: type=1326 audit(1764284866.441:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 906.861199][ T26] audit: type=1326 audit(1764284866.441:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 907.426176][ T26] audit: type=1326 audit(1764284866.481:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 907.507652][ T26] audit: type=1326 audit(1764284866.481:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 907.540889][ T26] audit: type=1326 audit(1764284866.481:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 907.577188][ T26] audit: type=1326 audit(1764284866.491:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 907.618283][ T26] audit: type=1326 audit(1764284866.491:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 907.640737][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.877838][ T26] audit: type=1326 audit(1764284866.491:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 908.653366][ T26] audit: type=1326 audit(1764284866.491:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 908.677066][ T26] audit: type=1326 audit(1764284866.491:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a6b8f749 code=0x7ffc0000 [ 911.093448][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2641'. [ 911.211692][T13650] sch_tbf: peakrate 14652803538553308261 is lower than or equals to rate 15103033197031310884 ! [ 911.390681][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2641'. [ 915.671844][T13695] tipc: Enabling of bearer rejected, failed to enable media [ 916.357830][ T4373] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 916.548156][ T4373] usb 5-1: Using ep0 maxpacket: 32 [ 916.576205][ T4373] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 916.631764][ T4373] usb 5-1: config 0 has no interface number 0 [ 916.646024][ T4373] usb 5-1: config 0 interface 12 has no altsetting 0 [ 916.683654][ T4373] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 916.711711][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.754761][ T4373] usb 5-1: Product: syz [ 916.796611][ T4373] usb 5-1: Manufacturer: syz [ 916.830270][ T4373] usb 5-1: SerialNumber: syz [ 916.846094][ T4373] usb 5-1: config 0 descriptor?? [ 916.880594][ T4373] f81534 5-1:0.12: required endpoints missing [ 917.949145][ T4333] usb 5-1: USB disconnect, device number 16 [ 919.468707][T13721] binder: 13720:13721 ioctl c0306201 0 returned -14 [ 923.618901][ T27] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 923.810672][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.872673][ T27] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 923.933523][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.958648][ T27] usb 3-1: config 0 descriptor?? [ 924.226750][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 924.238820][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 925.009195][ T27] usb 3-1: USB disconnect, device number 28 [ 925.271223][T13772] binder: 13771:13772 ioctl c0306201 0 returned -14 [ 925.387795][ T27] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 925.598280][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 925.610494][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.622041][ T27] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 925.637793][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.689530][ T27] usb 3-1: config 0 descriptor?? [ 925.732330][ T27] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 925.774499][ T27] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 926.585936][T12382] usb 3-1: USB disconnect, device number 29 [ 926.606876][T12382] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 927.654619][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2683'. [ 927.728939][T13802] sch_tbf: peakrate 14652803538553308261 is lower than or equals to rate 15103033197031310884 ! [ 930.262081][T13810] bond0 speed is unknown, defaulting to 1000 [ 930.347568][T13817] binder: 13816:13817 ioctl c0306201 0 returned -14 [ 930.410361][T12382] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 930.627912][T12382] usb 3-1: Using ep0 maxpacket: 16 [ 930.635902][T12382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 930.680583][T12382] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 930.700628][T12382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.710789][T12382] usb 3-1: Product: syz [ 930.715067][T12382] usb 3-1: Manufacturer: syz [ 930.720061][T12382] usb 3-1: SerialNumber: syz [ 930.741586][T12382] usb 3-1: config 0 descriptor?? [ 930.787415][T12382] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 930.807081][T12382] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 931.388975][T12382] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 931.526713][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.533386][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.372283][T12382] em28xx 3-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 932.414534][T12382] em28xx 3-1:0.0: board has no eeprom [ 932.548884][ T1152] block nbd0: Attempted send on invalid socket [ 932.555165][ T1152] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 932.779348][T12382] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 932.792446][T12382] em28xx 3-1:0.0: dvb set to bulk mode. [ 932.805146][T12017] em28xx 3-1:0.0: Binding DVB extension [ 932.833214][T13839] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.846343][T12382] usb 3-1: USB disconnect, device number 30 [ 932.898695][T12382] em28xx 3-1:0.0: Disconnecting em28xx [ 933.314085][T12017] em28xx 3-1:0.0: Registering input extension [ 933.341896][T12382] em28xx 3-1:0.0: Closing input extension [ 933.611943][T12382] em28xx 3-1:0.0: Freeing device [ 935.896140][ T52] block nbd4: Attempted send on invalid socket [ 935.902439][ T52] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 936.508991][T13876] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.342125][T13885] 9pnet: Could not find request transport: fd0x0000000000000003 [ 939.760648][ T52] block nbd2: Attempted send on invalid socket [ 939.766898][ T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 940.758421][T13923] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.748645][T13943] 9pnet: Could not find request transport: fd0x0000000000000003 [ 943.282122][ T52] block nbd1: Attempted send on invalid socket [ 943.288409][ T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 945.684580][T13977] binder: BINDER_SET_CONTEXT_MGR already set [ 945.708034][T13977] binder: 13976:13977 ioctl 4018620d 200000000040 returned -16 [ 948.235283][T13992] 9pnet: Could not find request transport: fd0x0000000000000003 [ 950.231875][T14036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.301662][T14049] 9pnet: Could not find request transport: fd0x0000000000000003 [ 956.030347][T14072] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.316192][T14080] tipc: Enabled bearer , priority 0 [ 957.892835][T14078] tipc: Disabling bearer [ 962.736996][T14105] 9pnet: Could not find request transport: fd0x0000000000000003 [ 963.300673][T14119] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.863987][T14131] tipc: Enabled bearer , priority 0 [ 964.910837][T14131] device syzkaller0 entered promiscuous mode [ 965.025762][T14129] tipc: Resetting bearer [ 965.230961][T14129] tipc: Disabling bearer [ 967.283546][T14158] 9pnet: Could not find request transport: fd0x0000000000000003 [ 971.793131][T14203] 9pnet: Could not find request transport: fd0x0000000000000003 [ 972.846378][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2803'. [ 973.278163][T14223] sch_tbf: peakrate 14652803538553308261 is lower than or equals to rate 15103033197031310884 ! [ 977.402621][T14253] 9pnet: Could not find request transport: fd0x0000000000000003 [ 979.649850][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2823'. [ 979.846762][T14286] sch_tbf: peakrate 14652803538553308261 is lower than or equals to rate 15103033197031310884 ! [ 980.176990][T14292] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2824'. [ 981.473316][T14302] 9pnet: Could not find request transport: fd0x0000000000000003 [ 987.193549][T14351] tipc: Enabled bearer , priority 0 [ 987.212710][T14351] device syzkaller0 entered promiscuous mode [ 987.421006][T14355] 9pnet: Could not find request transport: fd0x0000000000000003 [ 987.698211][T14351] tipc: Resetting bearer [ 987.751014][T14350] tipc: Resetting bearer [ 987.836749][T14350] tipc: Disabling bearer [ 991.444171][T14385] ======================================================= [ 991.444171][T14385] WARNING: The mand mount option has been deprecated and [ 991.444171][T14385] and is ignored by this kernel. Remove the mand [ 991.444171][T14385] option from the mount to silence this warning. [ 991.444171][T14385] ======================================================= [ 992.959883][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.966311][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.569046][T14413] 9pnet: Could not find request transport: fd0x0000000000000003 [ 995.987062][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2861'. [ 1000.099307][T14463] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1001.640750][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 1003.595163][T12382] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1004.388139][T14502] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1004.597742][T12382] usb 5-1: Using ep0 maxpacket: 32 [ 1004.604635][T12382] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1004.892640][T12382] usb 5-1: config 0 has no interface number 0 [ 1005.082847][T12382] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1005.289272][T12382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.523069][T12382] usb 5-1: Product: syz [ 1005.554409][T13492] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1005.564996][T13492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1005.573728][T12382] usb 5-1: Manufacturer: syz [ 1005.578858][T12382] usb 5-1: SerialNumber: syz [ 1005.583920][T13492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1005.608334][T12382] usb 5-1: config 0 descriptor?? [ 1005.613689][T13492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1005.630076][T13492] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1005.637467][T13492] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1005.649856][T12382] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1005.831006][T12382] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1006.033803][T12382] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1006.308669][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1006.407602][T12382] usb 5-1: USB disconnect, device number 17 [ 1006.430620][T14512] bond0 speed is unknown, defaulting to 1000 [ 1006.475458][T12382] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1006.515602][T12382] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1006.536171][T12382] quatech2 5-1:0.51: device disconnected [ 1006.630221][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2887'. [ 1007.678110][ T4274] Bluetooth: hci5: command 0x0409 tx timeout [ 1008.130129][T14512] chnl_net:caif_netlink_parms(): no params data found [ 1008.452825][T14512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.489087][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.563154][T14512] device bridge_slave_0 entered promiscuous mode [ 1008.624654][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.721956][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.786389][T14512] device bridge_slave_1 entered promiscuous mode [ 1009.757761][T13492] Bluetooth: hci5: command 0x041b tx timeout [ 1009.985012][T14563] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1010.023756][T14512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.128163][T14512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.834727][T14512] team0: Port device team_slave_0 added [ 1010.845765][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1010.868908][T14512] team0: Port device team_slave_1 added [ 1011.001654][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1011.468502][T14512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.481156][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.542324][T14512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.582219][T14512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.613858][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.958518][T13492] Bluetooth: hci5: command 0x040f tx timeout [ 1012.219066][T14512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.975008][T14512] device hsr_slave_0 entered promiscuous mode [ 1014.035598][T14512] device hsr_slave_1 entered promiscuous mode [ 1014.128157][T14512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1014.147857][T14512] Cannot create hsr debugfs directory [ 1014.157927][T13492] Bluetooth: hci5: command 0x0419 tx timeout [ 1014.687541][ T7356] tipc: Left network mode [ 1014.921827][T14604] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1016.315979][ T4274] Bluetooth: hci4: command 0x1003 tx timeout [ 1016.324214][T13492] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1016.961740][ T7356] bond0: (slave wlan1): Releasing backup interface [ 1017.256182][ T7356] ------------[ cut here ]------------ [ 1017.262702][ T7356] WARNING: CPU: 0 PID: 7356 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 1017.273540][ T7356] Modules linked in: [ 1017.277494][ T7356] CPU: 0 PID: 7356 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 1017.285495][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1017.295655][ T7356] Workqueue: netns cleanup_net [ 1017.300588][ T7356] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 1017.307535][ T7356] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 45 2f f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 00 7f 00 e8 f0 15 df f7 <0f> 0b eb c5 48 c7 c1 64 9f 1f 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1017.327374][ T7356] RSP: 0018:ffffc900051076e8 EFLAGS: 00010293 [ 1017.333655][ T7356] RAX: ffffffff89a1c070 RBX: ffff8880705995a8 RCX: ffff888074fbbb80 [ 1017.341773][ T7356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.349897][ T7356] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1c3ed56 [ 1017.358045][ T7356] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: ffff88807059aae0 [ 1017.366101][ T7356] R13: 1ffff1100e0b32b5 R14: ffff88807059a258 R15: dffffc0000000000 [ 1017.374219][ T7356] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1017.383307][ T7356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1017.390051][ T7356] CR2: 00007ffebe3e7428 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 1017.398253][ T7356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1017.406327][ T7356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1017.414446][ T7356] Call Trace: [ 1017.417912][ T7356] [ 1017.420911][ T7356] ? trace_drv_return_void+0x240/0x240 [ 1017.426465][ T7356] unregister_netdevice_many+0x12ab/0x1840 [ 1017.432595][ T7356] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1017.438444][ T7356] ? alloc_netdev_mqs+0xf00/0xf00 [ 1017.443575][ T7356] ? mutex_unlock+0x10/0x10 [ 1017.448249][ T7356] ? unregister_netdevice_queue+0x1aa/0x360 [ 1017.454225][ T7356] ? list_netdevice+0x6c0/0x6c0 [ 1017.459235][ T7356] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 1017.465389][ T7356] ? cfg80211_shutdown_all_interfaces+0x175/0x1c0 [ 1017.471989][ T7356] ieee80211_remove_interfaces+0x429/0x6d0 [ 1017.478001][ T7356] ? ieee80211_do_stop+0x1d70/0x1d70 [ 1017.483373][ T7356] ? up_write+0x1bb/0x420 [ 1017.487894][ T7356] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1017.494294][ T7356] ieee80211_unregister_hw+0x59/0x290 [ 1017.499854][ T7356] mac80211_hwsim_del_radio+0x270/0x450 [ 1017.505494][ T7356] ? rhashtable_remove_fast+0xc50/0xc50 [ 1017.511190][ T7356] ? net_generic+0x1e/0x240 [ 1017.515790][ T7356] hwsim_exit_net+0x581/0x640 [ 1017.520618][ T7356] ? hwsim_init_net+0x80/0x80 [ 1017.525410][ T7356] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1017.531468][ T7356] cleanup_net+0x6f0/0xb80 [ 1017.535976][ T7356] ? ops_free_list+0x3b0/0x3b0 [ 1017.540878][ T7356] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1017.546986][ T7356] ? _raw_spin_unlock+0x40/0x40 [ 1017.552024][ T7356] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1017.557330][ T7356] ? process_one_work+0x7a1/0x1160 [ 1017.562585][ T7356] process_one_work+0x898/0x1160 [ 1017.567831][ T7356] ? worker_detach_from_pool+0x240/0x240 [ 1017.573545][ T7356] ? _raw_spin_lock_irq+0xab/0xe0 [ 1017.578718][ T7356] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1017.584274][ T7356] ? kthread_data+0x4b/0xc0 [ 1017.588948][ T7356] worker_thread+0xaa2/0x1250 [ 1017.593853][ T7356] kthread+0x29d/0x330 [ 1017.598062][ T7356] ? worker_clr_flags+0x1a0/0x1a0 [ 1017.603167][ T7356] ? kthread_blkcg+0xd0/0xd0 [ 1017.607898][ T7356] ret_from_fork+0x1f/0x30 [ 1017.612436][ T7356] [ 1017.615535][ T7356] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1017.622832][ T7356] CPU: 0 PID: 7356 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 1017.630720][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1017.640776][ T7356] Workqueue: netns cleanup_net [ 1017.645654][ T7356] Call Trace: [ 1017.648935][ T7356] [ 1017.651875][ T7356] dump_stack_lvl+0x168/0x22e [ 1017.656557][ T7356] ? memcpy+0x3c/0x60 [ 1017.660547][ T7356] ? show_regs_print_info+0x12/0x12 [ 1017.665748][ T7356] ? load_image+0x3b0/0x3b0 [ 1017.670357][ T7356] panic+0x2c9/0x710 [ 1017.674441][ T7356] ? bpf_jit_dump+0xd0/0xd0 [ 1017.678961][ T7356] ? __warn+0x2e0/0x4f0 [ 1017.683300][ T7356] __warn+0x2f8/0x4f0 [ 1017.687301][ T7356] ? ieee80211_link_release_channel+0x150/0x180 [ 1017.693551][ T7356] ? ieee80211_link_release_channel+0x150/0x180 [ 1017.699801][ T7356] report_bug+0x2ba/0x4f0 [ 1017.704140][ T7356] ? ieee80211_link_release_channel+0x150/0x180 [ 1017.710392][ T7356] handle_bug+0x3a/0x70 [ 1017.714564][ T7356] exc_invalid_op+0x16/0x40 [ 1017.719074][ T7356] asm_exc_invalid_op+0x16/0x20 [ 1017.723953][ T7356] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 1017.730811][ T7356] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 45 2f f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 00 7f 00 e8 f0 15 df f7 <0f> 0b eb c5 48 c7 c1 64 9f 1f 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1017.750421][ T7356] RSP: 0018:ffffc900051076e8 EFLAGS: 00010293 [ 1017.756602][ T7356] RAX: ffffffff89a1c070 RBX: ffff8880705995a8 RCX: ffff888074fbbb80 [ 1017.764661][ T7356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.772644][ T7356] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1c3ed56 [ 1017.780628][ T7356] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: ffff88807059aae0 [ 1017.788611][ T7356] R13: 1ffff1100e0b32b5 R14: ffff88807059a258 R15: dffffc0000000000 [ 1017.796616][ T7356] ? ieee80211_link_release_channel+0x150/0x180 [ 1017.802882][ T7356] ? ieee80211_link_release_channel+0x150/0x180 [ 1017.809149][ T7356] ? trace_drv_return_void+0x240/0x240 [ 1017.814647][ T7356] unregister_netdevice_many+0x12ab/0x1840 [ 1017.820474][ T7356] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1017.826118][ T7356] ? alloc_netdev_mqs+0xf00/0xf00 [ 1017.831151][ T7356] ? mutex_unlock+0x10/0x10 [ 1017.835683][ T7356] ? unregister_netdevice_queue+0x1aa/0x360 [ 1017.841584][ T7356] ? list_netdevice+0x6c0/0x6c0 [ 1017.846453][ T7356] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 1017.852538][ T7356] ? cfg80211_shutdown_all_interfaces+0x175/0x1c0 [ 1017.858963][ T7356] ieee80211_remove_interfaces+0x429/0x6d0 [ 1017.864805][ T7356] ? ieee80211_do_stop+0x1d70/0x1d70 [ 1017.870100][ T7356] ? up_write+0x1bb/0x420 [ 1017.874443][ T7356] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1017.880779][ T7356] ieee80211_unregister_hw+0x59/0x290 [ 1017.886160][ T7356] mac80211_hwsim_del_radio+0x270/0x450 [ 1017.891726][ T7356] ? rhashtable_remove_fast+0xc50/0xc50 [ 1017.897273][ T7356] ? net_generic+0x1e/0x240 [ 1017.901807][ T7356] hwsim_exit_net+0x581/0x640 [ 1017.906520][ T7356] ? hwsim_init_net+0x80/0x80 [ 1017.911205][ T7356] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1017.917025][ T7356] cleanup_net+0x6f0/0xb80 [ 1017.921471][ T7356] ? ops_free_list+0x3b0/0x3b0 [ 1017.926240][ T7356] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1017.932144][ T7356] ? _raw_spin_unlock+0x40/0x40 [ 1017.937004][ T7356] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1017.942214][ T7356] ? process_one_work+0x7a1/0x1160 [ 1017.947329][ T7356] process_one_work+0x898/0x1160 [ 1017.952286][ T7356] ? worker_detach_from_pool+0x240/0x240 [ 1017.957954][ T7356] ? _raw_spin_lock_irq+0xab/0xe0 [ 1017.962989][ T7356] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1017.968372][ T7356] ? kthread_data+0x4b/0xc0 [ 1017.972895][ T7356] worker_thread+0xaa2/0x1250 [ 1017.977598][ T7356] kthread+0x29d/0x330 [ 1017.981685][ T7356] ? worker_clr_flags+0x1a0/0x1a0 [ 1017.986723][ T7356] ? kthread_blkcg+0xd0/0xd0 [ 1017.991330][ T7356] ret_from_fork+0x1f/0x30 [ 1017.995764][ T7356] [ 1017.999091][ T7356] Kernel Offset: disabled [ 1018.003668][ T7356] Rebooting in 86400 seconds..