last executing test programs: 1m29.067468168s ago: executing program 1 (id=836): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x3, 0x1, 0x2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private2, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe4) 1m26.388476369s ago: executing program 1 (id=848): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001600)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001080)="b3", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, &(0x7f00000002c0)) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x4c6) 1m21.120446052s ago: executing program 1 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000"], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x800) 1m20.959036158s ago: executing program 1 (id=860): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) openat$cgroup_type(r0, 0x0, 0x2, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)=',/0*!\x00', r3) 1m19.812909282s ago: executing program 1 (id=862): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f0000000680)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) close(r0) 1m19.673556695s ago: executing program 1 (id=863): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 1m7.581778792s ago: executing program 0 (id=891): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket$pppoe(0x18, 0x1, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000003b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x3, 0x1, 0x2}}, 0x80) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m6.53294188s ago: executing program 0 (id=893): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x2, 0x80000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = fsopen(&(0x7f00000004c0)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) symlinkat(&(0x7f0000000440)='./file0\x00', r4, 0x0) sync() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000500) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd31, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x44080) io_setup(0xea, &(0x7f00000000c0)) 1m5.630876564s ago: executing program 0 (id=896): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0xb, 0xb, 0xfffffffe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 1m5.361017281s ago: executing program 0 (id=897): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1m4.97924223s ago: executing program 3 (id=900): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x3, 0x1, 0x2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private2, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe4) 1m4.876063141s ago: executing program 0 (id=902): syz_emit_ethernet(0xca, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @remote, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x1, 0x5, "4eb8a6"}, {0x7, 0x12, "9606013d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x42, 0xffffffffffffffff, [{0x2, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x12, "02000948fd74062c8fb7060088866158"}, {0x0, 0x2}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x20, 0x0]}]}}}}}}}, 0x0) 1m3.000747405s ago: executing program 32 (id=863): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 1m2.962574532s ago: executing program 3 (id=905): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f00000010c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)}, 0x2404c8c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) 1m1.820859024s ago: executing program 3 (id=907): syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000003580)=0xf2c17809, 0x4) 1m1.448081167s ago: executing program 0 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000001a00), 0xf1a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x1000f) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 57.69299591s ago: executing program 3 (id=912): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 56.294696821s ago: executing program 3 (id=914): syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 54.896910391s ago: executing program 3 (id=918): mkdir(0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000700)=""/231, 0xe7}], 0x1, 0x200c, 0x22f) 5.604760864s ago: executing program 4 (id=980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x400) r8 = fanotify_init(0x10, 0x101000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r8, 0x455, 0x39, r9, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c4260d658dedb3e4613b80bdd68dd"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write(r14, &(0x7f0000000140)="5924afe85cf4c7", 0x7) close_range(r0, r9, 0x0) 5.443119087s ago: executing program 2 (id=981): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={'blake2s-128-generic\x00'}, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4d2", 0x84}) fsmount(0xffffffffffffffff, 0x0, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_PARAM={{0x79}, 0xce}}}, 0x7) 5.208859605s ago: executing program 4 (id=982): socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.742041442s ago: executing program 2 (id=983): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getresuid(0x0, &(0x7f0000000280), &(0x7f0000000300)) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3ed7, 0x0) 3.578392481s ago: executing program 4 (id=984): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = inotify_init1(0x800) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) inotify_add_watch(r1, 0x0, 0xa4000960) 3.480993961s ago: executing program 2 (id=985): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x320, 0x2e8, 0x2e8, 0x320, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x40, 0x0, 0x2, 'pptp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.399040813s ago: executing program 2 (id=986): rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 3.309582704s ago: executing program 2 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x30, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x1) 1.560883044s ago: executing program 2 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8814) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.560449356s ago: executing program 4 (id=989): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.322411052s ago: executing program 4 (id=990): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x1}) syz_io_uring_setup(0x522e, &(0x7f00000000c0)={0x0, 0x97db, 0x4000, 0x2, 0x3aa}, &(0x7f0000000000), &(0x7f0000000140)) 0s ago: executing program 4 (id=991): syz_open_dev$MSR(0x0, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x25) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.277077][ T1357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.290521][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.337095][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.350446][ T1484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.370738][ T1484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.388939][ T1484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.396660][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.400103][ T1484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.403332][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.415746][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.415768][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.472360][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.500227][ T4031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.522731][ T4031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.576839][ T4031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.580739][ T5800] veth0_macvtap: entered promiscuous mode [ 98.601780][ T4031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.626996][ T4031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.633085][ T4031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.708016][ T4031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.708672][ T5800] veth1_macvtap: entered promiscuous mode [ 98.713494][ T4031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.974079][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.974097][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.058336][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.111860][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.126726][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.126746][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.186270][ T3546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.187164][ T3546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.237121][ T3546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.239466][ T3546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.240267][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.240283][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.336173][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.336192][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.538730][ T1484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.538750][ T1484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.813487][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.813516][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.049372][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.049392][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.188984][ T5946] syzkaller0: entered promiscuous mode [ 100.189011][ T5946] syzkaller0: entered allmulticast mode [ 100.405128][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.405148][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.074425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.074457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.393807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.580763][ T5959] syz.3.15 (5959) used greatest stack depth: 18744 bytes left [ 101.774223][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.973971][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 102.003987][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.004018][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.004054][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 102.004075][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.028113][ T31] usb 2-1: config 0 descriptor?? [ 102.149270][ T5974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.465888][ T5978] Zero length message leads to an empty skb [ 102.753205][ T31] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 103.212887][ T5991] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 103.325514][ T5987] syzkaller1: entered promiscuous mode [ 103.325648][ T5987] syzkaller1: entered allmulticast mode [ 103.333862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.683787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.684847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.686064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.687259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.688395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.923802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.965383][ T5968] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 103.975959][ T1707] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.153945][ T1707] usb 5-1: Using ep0 maxpacket: 8 [ 104.166677][ T1707] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 104.166742][ T1707] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.166763][ T1707] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.166786][ T1707] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.166806][ T1707] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.166846][ T1707] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.166867][ T1707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.012039][ T1707] usb 5-1: usb_control_msg returned -71 [ 108.012086][ T1707] usbtmc 5-1:16.0: can't read capabilities [ 108.172252][ T1707] usb 5-1: USB disconnect, device number 2 [ 108.393944][ T9] usb 2-1: USB disconnect, device number 2 [ 109.478147][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 109.502231][ T6027] vlan2: entered promiscuous mode [ 109.502479][ T6027] vlan2: entered allmulticast mode [ 109.502494][ T6027] hsr_slave_1: entered allmulticast mode [ 109.675520][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 111.241755][ T6063] netlink: 'syz.1.44': attribute type 21 has an invalid length. [ 111.302400][ T6065] netlink: 'syz.1.44': attribute type 21 has an invalid length. [ 111.545963][ T6070] netlink: 'syz.4.45': attribute type 6 has an invalid length. [ 111.942767][ T6049] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 111.943253][ T6054] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 111.943411][ T6063] netlink: 156 bytes leftover after parsing attributes in process `syz.1.44'. [ 111.943937][ T6065] netlink: 156 bytes leftover after parsing attributes in process `syz.1.44'. [ 112.207260][ T6070] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.207622][ T6070] block device autoloading is deprecated and will be removed. [ 112.885311][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 113.037690][ T6080] syz.3.49 (6080) used greatest stack depth: 18168 bytes left [ 114.114008][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.274109][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 114.296774][ T5902] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 114.296803][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 114.296822][ T5902] usb 2-1: Product: syz [ 114.296836][ T5902] usb 2-1: Manufacturer: syz [ 114.296849][ T5902] usb 2-1: SerialNumber: syz [ 114.354463][ T6105] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.356948][ T5902] usb 2-1: config 0 descriptor?? [ 114.617076][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.617954][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.684674][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.833949][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 114.835618][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 114.835636][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.838808][ T5895] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 114.838823][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.838833][ T5895] usb 1-1: Product: syz [ 114.838840][ T5895] usb 1-1: Manufacturer: syz [ 114.838847][ T5895] usb 1-1: SerialNumber: syz [ 114.852383][ T5895] usb 1-1: config 0 descriptor?? [ 114.988385][ T5895] ipw 1-1:0.0: IPWireless converter converter detected [ 116.502190][ T5893] usb 1-1: USB disconnect, device number 2 [ 116.518106][ T5893] ipw 1-1:0.0: device disconnected [ 116.869406][ T5895] usb 2-1: USB disconnect, device number 3 [ 119.091617][ T37] audit: type=1326 audit(1760879862.582:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 119.118859][ T37] audit: type=1326 audit(1760879862.592:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 119.185534][ T37] audit: type=1326 audit(1760879862.652:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 119.185584][ T37] audit: type=1326 audit(1760879862.672:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 119.185625][ T37] audit: type=1326 audit(1760879862.672:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 119.185664][ T37] audit: type=1326 audit(1760879862.672:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 119.185705][ T37] audit: type=1326 audit(1760879862.672:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 119.185744][ T37] audit: type=1326 audit(1760879862.672:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 119.185785][ T37] audit: type=1326 audit(1760879862.672:10): auid=4294967295 uid=0 gid=24480 ses=4294967295 subj=_ pid=6160 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 119.488946][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'. [ 119.525069][ T37] audit: type=1326 audit(1760879862.992:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 120.156642][ T6175] lo speed is unknown, defaulting to 1000 [ 120.158576][ T6175] lo speed is unknown, defaulting to 1000 [ 120.213303][ T6175] lo speed is unknown, defaulting to 1000 [ 120.296554][ T6175] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.411670][ T6175] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.826600][ T6179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.86'. [ 120.927408][ T6175] lo speed is unknown, defaulting to 1000 [ 120.932270][ T6175] lo speed is unknown, defaulting to 1000 [ 121.006081][ T6175] lo speed is unknown, defaulting to 1000 [ 121.007587][ T6175] lo speed is unknown, defaulting to 1000 [ 121.009107][ T6175] lo speed is unknown, defaulting to 1000 [ 122.865196][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 123.113262][ T6227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.100'. [ 123.333936][ T5893] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 123.773684][ T6239] siw: device registration error -23 [ 124.361340][ T5893] usb 5-1: config 0 has no interfaces? [ 124.361364][ T5893] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.361376][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.437479][ T5893] usb 5-1: config 0 descriptor?? [ 124.653872][ T5805] usb 5-1: USB disconnect, device number 3 [ 125.750305][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.113'. [ 126.048169][ T37] kauditd_printk_skb: 51 callbacks suppressed [ 126.048188][ T37] audit: type=1326 audit(1760879869.512:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.048232][ T37] audit: type=1326 audit(1760879869.552:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.048275][ T37] audit: type=1326 audit(1760879869.552:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.048314][ T37] audit: type=1326 audit(1760879869.552:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.048356][ T37] audit: type=1326 audit(1760879869.552:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.048394][ T37] audit: type=1326 audit(1760879869.552:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.048443][ T37] audit: type=1326 audit(1760879869.552:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.073253][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 126.076667][ T37] audit: type=1326 audit(1760879869.582:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.083157][ T37] audit: type=1326 audit(1760879869.582:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 126.083916][ T37] audit: type=1326 audit(1760879869.582:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 128.648182][ T6305] netlink: 36 bytes leftover after parsing attributes in process `syz.4.125'. [ 129.393984][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.545653][ T5895] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.545671][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.547536][ T5895] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.547551][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.547561][ T5895] usb 5-1: Product: syz [ 129.547569][ T5895] usb 5-1: Manufacturer: syz [ 129.547576][ T5895] usb 5-1: SerialNumber: syz [ 129.551422][ T5895] usb 5-1: config 0 descriptor?? [ 129.621399][ T5895] usb 5-1: selecting invalid altsetting 0 [ 129.962599][ T5895] usb 5-1: USB disconnect, device number 4 [ 130.168671][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.993301][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 133.024565][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.024669][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.403261][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 133.403274][ T37] audit: type=1326 audit(1760879876.902:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.403302][ T37] audit: type=1326 audit(1760879876.902:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.403325][ T37] audit: type=1326 audit(1760879876.902:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.403347][ T37] audit: type=1326 audit(1760879876.902:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.403370][ T37] audit: type=1326 audit(1760879876.902:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.403391][ T37] audit: type=1326 audit(1760879876.902:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.403413][ T37] audit: type=1326 audit(1760879876.902:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.403435][ T37] audit: type=1326 audit(1760879876.902:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.407276][ T37] audit: type=1326 audit(1760879876.902:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 133.407330][ T37] audit: type=1326 audit(1760879876.912:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 134.585053][ T5893] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.757123][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 134.785808][ T5893] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 134.785826][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.785835][ T5893] usb 4-1: Product: syz [ 134.785842][ T5893] usb 4-1: Manufacturer: syz [ 134.785849][ T5893] usb 4-1: SerialNumber: syz [ 134.789136][ T5893] usb 4-1: config 0 descriptor?? [ 134.845650][ T5893] safe_serial 4-1:0.0: safe_serial converter detected [ 134.879246][ T5893] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 137.813020][ T5893] usb 4-1: USB disconnect, device number 2 [ 137.885721][ T5893] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 137.893552][ T5893] safe_serial 4-1:0.0: device disconnected [ 138.166175][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 138.502739][ T6418] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.267113][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.468980][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 139.503509][ T6438] vlan2: entered promiscuous mode [ 139.503633][ T6438] vlan2: entered allmulticast mode [ 139.503640][ T6438] hsr_slave_1: entered allmulticast mode [ 139.534571][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 139.675720][ T5893] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 139.675750][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.675768][ T5893] usb 1-1: Product: syz [ 139.675781][ T5893] usb 1-1: Manufacturer: syz [ 139.675794][ T5893] usb 1-1: SerialNumber: syz [ 139.723699][ T5893] usb 1-1: config 0 descriptor?? [ 139.738007][ T5893] safe_serial 1-1:0.0: safe_serial converter detected [ 139.816950][ T5893] usb 1-1: safe_serial converter now attached to ttyUSB0 [ 140.221284][ T5893] usb 1-1: USB disconnect, device number 3 [ 140.244988][ T5893] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 140.252453][ T5893] safe_serial 1-1:0.0: device disconnected [ 140.553651][ T6448] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.948555][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 140.948572][ T37] audit: type=1326 audit(1760879884.452:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 140.948829][ T37] audit: type=1326 audit(1760879884.452:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 140.948962][ T37] audit: type=1326 audit(1760879884.452:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 140.979070][ T37] audit: type=1326 audit(1760879884.482:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 140.979127][ T37] audit: type=1326 audit(1760879884.482:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 141.664832][ T5895] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.804511][ T5895] usb 4-1: device descriptor read/64, error -71 [ 142.134024][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.228912][ T6476] vlan2: entered promiscuous mode [ 142.235992][ T6476] vlan2: entered allmulticast mode [ 142.236014][ T6476] hsr_slave_1: entered allmulticast mode [ 142.263879][ T5895] usb 4-1: device descriptor read/64, error -71 [ 142.394277][ T5895] usb usb4-port1: attempt power cycle [ 142.743885][ T5895] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.767725][ T5895] usb 4-1: device descriptor read/8, error -71 [ 143.045364][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.066884][ T5895] usb 4-1: device descriptor read/8, error -71 [ 143.176518][ T5895] usb usb4-port1: unable to enumerate USB device [ 143.507529][ T6492] netlink: 'syz.0.184': attribute type 6 has an invalid length. [ 143.583462][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 144.194266][ T6500] F2FS-fs: Conflicting test_dummy_encryption options [ 144.949408][ T6511] netlink: 'syz.1.195': attribute type 1 has an invalid length. [ 145.803883][ T6516] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 145.817404][ T152] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.907212][ T6518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.019240][ T1411] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.090050][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 146.148114][ T6515] syz.3.194 (6515): drop_caches: 2 [ 146.317677][ T6525] F2FS-fs: Conflicting test_dummy_encryption options [ 146.548571][ T6532] process 'syz.4.189' launched './file0' with NULL argv: empty string added [ 146.584671][ T1707] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 146.715622][ T1707] usb 3-1: device descriptor read/64, error -71 [ 146.955504][ T1707] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.094588][ T1707] usb 3-1: device descriptor read/64, error -71 [ 147.196364][ T6536] netlink: 27 bytes leftover after parsing attributes in process `syz.0.198'. [ 147.196388][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.198'. [ 147.215241][ T1707] usb usb3-port1: attempt power cycle [ 147.585168][ T1707] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.625148][ T1707] usb 3-1: device descriptor read/8, error -71 [ 147.777199][ T6559] netlink: 'syz.1.209': attribute type 6 has an invalid length. [ 147.864364][ T1707] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.885230][ T1707] usb 3-1: device descriptor read/8, error -71 [ 147.994703][ T1707] usb usb3-port1: unable to enumerate USB device [ 148.403973][ T5902] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.560834][ T5902] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.560863][ T5902] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.560882][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.560930][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 148.562790][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 148.578965][ T5902] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.578995][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.579013][ T5902] usb 5-1: Product: syz [ 148.579026][ T5902] usb 5-1: Manufacturer: syz [ 148.684203][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 148.684224][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 148.733528][ T5902] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 148.733561][ T5902] cdc_wdm 5-1:1.0: Unknown control protocol [ 149.344333][ T1707] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 149.435439][ T5805] usb 5-1: USB disconnect, device number 5 [ 149.496732][ T1707] usb 1-1: config 0 has no interfaces? [ 149.496755][ T1707] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.496767][ T1707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.499978][ T1707] usb 1-1: config 0 descriptor?? [ 150.272193][ T6605] usb usb8: usbfs: process 6605 (syz.4.226) did not claim interface 0 before use [ 152.093818][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.203036][ T9] usb 1-1: USB disconnect, device number 4 [ 152.243871][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 152.244868][ T5895] usb 5-1: no configurations [ 152.244885][ T5895] usb 5-1: can't read configurations, error -22 [ 152.373972][ T5895] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.525140][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 152.525996][ T5895] usb 5-1: no configurations [ 152.526012][ T5895] usb 5-1: can't read configurations, error -22 [ 152.526630][ T5895] usb usb5-port1: attempt power cycle [ 152.873853][ T5895] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.894991][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 152.895870][ T5895] usb 5-1: no configurations [ 152.895885][ T5895] usb 5-1: can't read configurations, error -22 [ 153.044157][ T5895] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.069260][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 153.070176][ T5895] usb 5-1: no configurations [ 153.070191][ T5895] usb 5-1: can't read configurations, error -22 [ 153.070586][ T5895] usb usb5-port1: unable to enumerate USB device [ 153.506110][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 157.273919][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.425523][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 157.428433][ T5895] usb 5-1: no configurations [ 157.428451][ T5895] usb 5-1: can't read configurations, error -22 [ 157.581050][ T5895] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 157.765382][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 157.766177][ T5895] usb 5-1: no configurations [ 157.766194][ T5895] usb 5-1: can't read configurations, error -22 [ 157.766744][ T5895] usb usb5-port1: attempt power cycle [ 158.333844][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 158.354840][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 158.355666][ T5895] usb 5-1: no configurations [ 158.355681][ T5895] usb 5-1: can't read configurations, error -22 [ 158.484029][ T5895] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 158.504743][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 158.505364][ T5895] usb 5-1: no configurations [ 158.505373][ T5895] usb 5-1: can't read configurations, error -22 [ 158.505727][ T5895] usb usb5-port1: unable to enumerate USB device [ 160.303852][ T5895] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.492455][ T5895] usb 3-1: config 0 has no interfaces? [ 160.498510][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 160.498537][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.498562][ T5895] usb 3-1: Product: syz [ 160.498575][ T5895] usb 3-1: Manufacturer: syz [ 160.498588][ T5895] usb 3-1: SerialNumber: syz [ 160.534907][ T5895] usb 3-1: config 0 descriptor?? [ 161.005831][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.006133][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.759655][ T6775] netlink: 'syz.0.281': attribute type 21 has an invalid length. [ 161.759759][ T6775] netlink: 156 bytes leftover after parsing attributes in process `syz.0.281'. [ 161.760513][ T6775] netlink: 'syz.0.281': attribute type 21 has an invalid length. [ 161.760568][ T6775] netlink: 156 bytes leftover after parsing attributes in process `syz.0.281'. [ 162.863840][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.025442][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 163.026167][ T9] usb 2-1: no configurations [ 163.026182][ T9] usb 2-1: can't read configurations, error -22 [ 163.163900][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.355957][ T5805] usb 3-1: USB disconnect, device number 6 [ 163.370063][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 163.370817][ T9] usb 2-1: no configurations [ 163.370827][ T9] usb 2-1: can't read configurations, error -22 [ 163.371999][ T9] usb usb2-port1: attempt power cycle [ 163.736313][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.765762][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 163.769672][ T9] usb 2-1: no configurations [ 163.769689][ T9] usb 2-1: can't read configurations, error -22 [ 163.904022][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.931620][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 164.072710][ T9] usb 2-1: no configurations [ 164.072765][ T9] usb 2-1: can't read configurations, error -22 [ 164.075475][ T9] usb usb2-port1: unable to enumerate USB device [ 165.153011][ T37] audit: type=1326 audit(1760879908.652:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.165579][ T37] audit: type=1326 audit(1760879908.662:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.214539][ T37] audit: type=1326 audit(1760879908.672:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.214594][ T37] audit: type=1326 audit(1760879908.672:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.214636][ T37] audit: type=1326 audit(1760879908.672:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.215041][ T37] audit: type=1326 audit(1760879908.672:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.215085][ T37] audit: type=1326 audit(1760879908.672:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.215133][ T37] audit: type=1326 audit(1760879908.672:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.215172][ T37] audit: type=1326 audit(1760879908.692:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 165.215211][ T37] audit: type=1326 audit(1760879908.692:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6791 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1e3be8efc9 code=0x7ffc0000 [ 169.709125][ T6859] fuse: Bad value for 'rootmode' [ 169.793886][ T5968] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.954255][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 169.958101][ T5968] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.958124][ T5968] usb 5-1: config 0 has no interfaces? [ 169.958153][ T5968] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 169.958174][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.009514][ T5968] usb 5-1: config 0 descriptor?? [ 170.094337][ T5805] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.264465][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 170.294401][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.294427][ T5805] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.294463][ T5805] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 170.294484][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.326841][ T5805] usb 3-1: config 0 descriptor?? [ 171.494661][ T6895] fuse: Unknown parameter 'use00000000000000000000' [ 172.469519][ T5893] usb 5-1: USB disconnect, device number 14 [ 172.572953][ T6899] mmap: syz.1.321 (6899) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.900368][ T5893] usb 3-1: USB disconnect, device number 7 [ 173.712324][ T6929] fuse: Unknown parameter 'use00000000000000000000' [ 174.646436][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 175.178462][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 175.550274][ T6965] fuse: Unknown parameter 'use00000000000000000000' [ 176.288486][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 178.345213][ T7000] fuse: Unknown parameter 'user_i00000000000000000000' [ 181.017776][ T7040] fuse: Unknown parameter 'user_i00000000000000000000' [ 184.437959][ T7088] fuse: Unknown parameter 'user_i00000000000000000000' [ 185.148591][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.579370][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.254876][ T7119] fuse: Unknown parameter 'user_id00000000000000000000' [ 186.784176][ T5805] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.934272][ T5805] usb 1-1: Using ep0 maxpacket: 8 [ 186.936667][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 186.936686][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 186.938475][ T5805] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 186.938490][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.938500][ T5805] usb 1-1: Product: syz [ 186.938507][ T5805] usb 1-1: Manufacturer: syz [ 186.938514][ T5805] usb 1-1: SerialNumber: syz [ 186.942234][ T5805] usb 1-1: config 0 descriptor?? [ 187.046141][ T5805] ipw 1-1:0.0: IPWireless converter converter detected [ 187.226912][ T5790] usb 1-1: USB disconnect, device number 5 [ 187.228849][ T5790] ipw 1-1:0.0: device disconnected [ 187.313583][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.517710][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.723539][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.084387][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.266380][ T44] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.266398][ T44] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 192.266409][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.266521][ T44] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.271565][ T44] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.271591][ T44] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.271610][ T44] usb 3-1: Product: syz [ 192.271622][ T44] usb 3-1: Manufacturer: syz [ 192.351592][ T44] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 193.381156][ T7203] lo speed is unknown, defaulting to 1000 [ 194.441557][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.441602][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.077919][ T44] usb 3-1: USB disconnect, device number 8 [ 195.737050][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 195.737068][ T37] audit: type=1326 audit(1760879939.242:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 195.737111][ T37] audit: type=1326 audit(1760879939.242:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 195.737381][ T37] audit: type=1326 audit(1760879939.242:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 195.737425][ T37] audit: type=1326 audit(1760879939.242:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 195.953625][ T37] audit: type=1326 audit(1760879939.242:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 195.957752][ T37] audit: type=1326 audit(1760879939.242:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 195.957826][ T37] audit: type=1326 audit(1760879939.242:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 195.958018][ T37] audit: type=1326 audit(1760879939.242:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 195.958230][ T37] audit: type=1326 audit(1760879939.242:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eeccefc9 code=0x7ffc0000 [ 198.886307][ T7274] netlink: 148 bytes leftover after parsing attributes in process `syz.4.445'. [ 198.972180][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 199.079421][ T5902] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 199.253958][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 199.280362][ T5902] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 199.280394][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 199.280422][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.280443][ T5902] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.280482][ T5902] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.280503][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.503952][ T5902] usb 4-1: usb_control_msg returned -32 [ 199.504001][ T5902] usbtmc 4-1:16.0: can't read capabilities [ 199.563740][ T5902] usb 4-1: USB disconnect, device number 7 [ 201.484654][ T5895] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.643831][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 201.648009][ T5895] usb 4-1: config 2 has an invalid interface number: 157 but max is 0 [ 201.648035][ T5895] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 201.648053][ T5895] usb 4-1: config 2 has no interface number 0 [ 201.651172][ T5895] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 201.651198][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.651216][ T5895] usb 4-1: Product: syz [ 201.651228][ T5895] usb 4-1: Manufacturer: syz [ 201.651241][ T5895] usb 4-1: SerialNumber: syz [ 201.731832][ T5895] imon 4-1:2.157: unable to register, err -19 [ 201.763908][ T5968] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.923871][ T5968] usb 3-1: Using ep0 maxpacket: 8 [ 201.940900][ T5968] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 201.940931][ T5968] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 201.940954][ T5968] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.940975][ T5968] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.941014][ T5968] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.941043][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.240745][ T5968] usb 3-1: usb_control_msg returned -32 [ 202.240791][ T5968] usbtmc 3-1:16.0: can't read capabilities [ 202.274728][ T5805] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.305905][ T5790] usb 3-1: USB disconnect, device number 9 [ 202.353960][ T5895] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 202.433905][ T5805] usb 1-1: Using ep0 maxpacket: 8 [ 202.438002][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.439913][ T5805] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.439935][ T5805] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.439984][ T5805] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.447755][ T5805] usb 1-1: language id specifier not provided by device, defaulting to English [ 202.450611][ T5805] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.450637][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.450655][ T5805] usb 1-1: Product: syz [ 202.450668][ T5805] usb 1-1: Manufacturer: 屛뗝⏱钆睚É띔矚鰾娔셢莕ῗൡ蘥뜴㤊䤎眑鬤陃ꦂ缳Ἅ㝡䇌뮣踛磬曣㜛⍑ [ 202.450687][ T5805] usb 1-1: SerialNumber: syz [ 202.542331][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 202.567038][ T5895] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 202.567062][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 202.567072][ T5895] usb 5-1: Product: syz [ 202.567079][ T5895] usb 5-1: Manufacturer: syz [ 202.567087][ T5895] usb 5-1: SerialNumber: syz [ 202.572580][ T5895] usb 5-1: config 0 descriptor?? [ 202.728330][ T5805] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 202.728356][ T5805] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 202.728399][ T5805] cdc_ncm 1-1:1.0: bind() failure [ 202.784436][ T5805] usb 1-1: USB disconnect, device number 6 [ 202.791235][ T44] usb 4-1: USB disconnect, device number 8 [ 202.890033][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.914714][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.390904][ T7357] netlink: 148 bytes leftover after parsing attributes in process `syz.2.476'. [ 204.094025][ T5968] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 204.256020][ T5968] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.256043][ T5968] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 204.256052][ T5968] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.256082][ T5968] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 204.256095][ T5968] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 204.260602][ T5968] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.260620][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.260630][ T5968] usb 4-1: Product: syz [ 204.260637][ T5968] usb 4-1: Manufacturer: syz [ 204.344437][ T44] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 204.375850][ T5968] cdc_wdm 4-1:1.0: skipping garbage [ 204.375869][ T5968] cdc_wdm 4-1:1.0: skipping garbage [ 204.398385][ T5968] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 204.398399][ T5968] cdc_wdm 4-1:1.0: Unknown control protocol [ 204.494178][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 204.498725][ T44] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.498742][ T44] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.498754][ T44] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.498767][ T44] usb 2-1: config 1 interface 0 has no altsetting 0 [ 204.500717][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 204.500733][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.500742][ T44] usb 2-1: Product: syz [ 204.500750][ T44] usb 2-1: Manufacturer: syz [ 204.500757][ T44] usb 2-1: SerialNumber: syz [ 204.714164][ T5893] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.846015][ T44] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 204.864291][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 204.867684][ T5893] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 204.867716][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 204.867739][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.867760][ T5893] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.867798][ T5893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.867819][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.105588][ T1707] usb 2-1: USB disconnect, device number 8 [ 205.124207][ T5893] usb 1-1: usb_control_msg returned -32 [ 205.124236][ T5893] usbtmc 1-1:16.0: can't read capabilities [ 205.152900][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.153020][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.153252][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.153263][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.153497][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.153509][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.154382][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.154395][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.154618][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.154637][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.154864][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.154882][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.155093][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.155110][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.155340][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.155358][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.155581][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.155599][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.155819][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 205.155836][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 205.334761][ T44] usb 4-1: USB disconnect, device number 9 [ 205.337874][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 205.479992][ T1707] usblp1: removed [ 205.616044][ T5893] usb 1-1: USB disconnect, device number 7 [ 205.728045][ T5968] usb 5-1: USB disconnect, device number 15 [ 206.158428][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 206.225743][ T7401] netlink: 148 bytes leftover after parsing attributes in process `syz.4.494'. [ 207.120757][ T5893] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.650937][ T37] audit: type=1326 audit(1760879951.152:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 207.841889][ T37] audit: type=1326 audit(1760879951.152:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 207.841938][ T37] audit: type=1326 audit(1760879951.342:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 207.841977][ T37] audit: type=1326 audit(1760879951.342:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 207.842018][ T37] audit: type=1326 audit(1760879951.342:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 207.854325][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 207.877856][ T5893] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 207.877885][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 207.877903][ T5893] usb 1-1: Product: syz [ 207.877915][ T5893] usb 1-1: Manufacturer: syz [ 207.877928][ T5893] usb 1-1: SerialNumber: syz [ 207.994403][ T5893] usb 1-1: config 0 descriptor?? [ 208.019437][ T5902] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 208.173833][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 208.176150][ T5902] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 208.176184][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 208.176205][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.176225][ T5902] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.176265][ T5902] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.176284][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.293301][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.314582][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.396141][ T5902] usb 4-1: usb_control_msg returned -32 [ 208.396187][ T5902] usbtmc 4-1:16.0: can't read capabilities [ 208.435257][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 208.459010][ T5902] usb 4-1: USB disconnect, device number 10 [ 208.953849][ T37] audit: type=1326 audit(1760879952.392:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7453 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 208.953906][ T37] audit: type=1326 audit(1760879952.392:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7453 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 208.953948][ T37] audit: type=1326 audit(1760879952.402:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7453 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 208.953990][ T37] audit: type=1326 audit(1760879952.402:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7453 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 208.954032][ T37] audit: type=1326 audit(1760879952.402:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7453 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72220efc9 code=0x7ffc0000 [ 210.323930][ T5902] usb 1-1: USB disconnect, device number 8 [ 210.445307][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.519'. [ 210.843836][ T5968] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.994561][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 210.996920][ T5968] usb 5-1: config 2 has an invalid interface number: 157 but max is 0 [ 210.996945][ T5968] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 210.996963][ T5968] usb 5-1: config 2 has no interface number 0 [ 211.000245][ T5968] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 211.000283][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.000301][ T5968] usb 5-1: Product: syz [ 211.000315][ T5968] usb 5-1: Manufacturer: syz [ 211.000329][ T5968] usb 5-1: SerialNumber: syz [ 211.079501][ T5968] imon 5-1:2.157: unable to register, err -19 [ 211.672274][ T5893] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 212.062363][ T5968] usb 5-1: USB disconnect, device number 16 [ 212.118554][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 212.118594][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 212.120060][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 212.187573][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 212.187727][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 212.244466][ T5805] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.291098][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 212.299181][ T5893] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 212.299209][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 212.299227][ T5893] usb 3-1: Product: syz [ 212.299240][ T5893] usb 3-1: Manufacturer: syz [ 212.299253][ T5893] usb 3-1: SerialNumber: syz [ 212.316458][ T5893] usb 3-1: config 0 descriptor?? [ 212.394301][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 212.396559][ T5805] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 212.396591][ T5805] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.396614][ T5805] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.396637][ T5805] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.396677][ T5805] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.396699][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.419158][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 212.592290][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.593219][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.641777][ T5805] usb 2-1: GET_CAPABILITIES returned 0 [ 212.641825][ T5805] usbtmc 2-1:16.0: can't read capabilities [ 213.006780][ T5805] usb 2-1: USB disconnect, device number 9 [ 215.540854][ T5805] usb 3-1: USB disconnect, device number 10 [ 216.960090][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 217.937509][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 218.103820][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 218.106196][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 218.106226][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.106250][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.106271][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.106311][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.106332][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.409174][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 218.409219][ T9] usbtmc 5-1:16.0: can't read capabilities [ 218.454382][ T7566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.628007][ T9] usb 5-1: USB disconnect, device number 17 [ 219.507123][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 219.507139][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 221.443871][ T5895] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 221.514388][ T5805] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 221.596803][ T5895] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.596831][ T5895] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 221.596855][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.596910][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.599206][ T5895] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.599232][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.599250][ T5895] usb 2-1: Product: syz [ 221.599264][ T5895] usb 2-1: Manufacturer: syz [ 221.674353][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 221.679873][ T5805] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.679903][ T5805] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.679926][ T5805] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.679947][ T5805] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.679986][ T5805] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.680005][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.757738][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 221.757780][ T5895] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 222.014783][ T5805] usb 5-1: GET_CAPABILITIES returned 0 [ 222.014832][ T5805] usbtmc 5-1:16.0: can't read capabilities [ 222.368623][ T7654] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 222.404818][ T5805] usb 5-1: USB disconnect, device number 18 [ 225.013137][ T1707] usb 2-1: USB disconnect, device number 10 [ 226.173831][ T1707] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 226.335606][ T1707] usb 4-1: Using ep0 maxpacket: 32 [ 226.338315][ T1707] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 226.338349][ T1707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.374844][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 226.390870][ T1707] usb 4-1: config 0 descriptor?? [ 226.563869][ T5895] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 226.660034][ T1707] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 226.713899][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 226.716332][ T5895] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 226.716363][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.716386][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.716409][ T5895] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.716449][ T5895] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.716469][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.997368][ T1707] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 226.997438][ T1707] dib0700: firmware download failed at 7 with -22 [ 227.041877][ T5895] usb 1-1: GET_CAPABILITIES returned 0 [ 227.041924][ T5895] usbtmc 1-1:16.0: can't read capabilities [ 227.451942][ T5805] usb 1-1: USB disconnect, device number 9 [ 227.824135][ T1707] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 227.974057][ T1707] usb 2-1: Using ep0 maxpacket: 8 [ 227.977911][ T1707] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 227.977926][ T1707] usb 2-1: config 0 has no interface number 0 [ 227.991971][ T1707] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 227.992000][ T1707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.992018][ T1707] usb 2-1: Product: syz [ 227.992031][ T1707] usb 2-1: Manufacturer: syz [ 227.992044][ T1707] usb 2-1: SerialNumber: syz [ 228.058799][ T1707] usb 2-1: config 0 descriptor?? [ 228.079566][ T1707] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 228.079605][ T1707] pctv452e: pctv452e_power_ctrl: 1 [ 228.079605][ T1707] [ 228.079630][ T1707] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 228.079630][ T1707] [ 228.079880][ T1707] dvb-usb: bulk message failed: -22 (5/0) [ 228.188298][ T1707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.191825][ T1707] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 228.191880][ T1707] usb 2-1: media controller created [ 228.193631][ T1707] dvb-usb: bulk message failed: -22 (8/0) [ 228.193644][ T1707] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 228.194602][ T1707] dvb-usb: MAC address reading failed. [ 228.269708][ T7712] dvb-usb: bulk message failed: -22 (7/0) [ 228.269731][ T7712] pctv452e: I2C error -22; AA 02 04 00 02 -> aa 02 31 03 04 00 02 [ 229.059720][ T1707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.104572][ T9] usb 4-1: USB disconnect, device number 11 [ 229.507113][ T7727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.615'. [ 229.945723][ T1707] DVB: Unable to find symbol stb0899_attach() [ 229.945737][ T1707] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 230.224113][ T1707] rc_core: IR keymap rc-tt-1500 not found [ 230.224127][ T1707] Registered IR keymap rc-empty [ 230.225641][ T1707] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 230.228669][ T1707] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 230.349464][ T1707] dvb-usb: schedule remote query interval to 100 msecs. [ 230.349491][ T1707] pctv452e: pctv452e_power_ctrl: 0 [ 230.349491][ T1707] [ 230.349503][ T1707] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 230.424717][ T1707] usb 2-1: USB disconnect, device number 11 [ 230.821846][ T1707] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 230.923824][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 231.070313][ T7760] fuse: Unknown parameter '0x0000000000000004' [ 231.085481][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 231.106606][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 231.106633][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 231.106652][ T9] usb 1-1: Product: syz [ 231.106665][ T9] usb 1-1: Manufacturer: syz [ 231.106679][ T9] usb 1-1: SerialNumber: syz [ 231.143850][ T5895] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 231.164065][ T9] usb 1-1: config 0 descriptor?? [ 231.303852][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 231.326600][ T5895] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 231.326628][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.382105][ T5895] usb 3-1: config 0 descriptor?? [ 231.426376][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.426932][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.611051][ T5895] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 231.615775][ T5895] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 231.615807][ T5895] dib0700: firmware download failed at 7 with -22 [ 232.598576][ T7795] fuse: Unknown parameter '0x0000000000000004' [ 233.342608][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 233.342624][ T37] audit: type=1326 audit(1760879976.842:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.343236][ T37] audit: type=1326 audit(1760879976.842:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.353366][ T37] audit: type=1326 audit(1760879976.842:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.359793][ T37] audit: type=1326 audit(1760879976.862:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.360553][ T37] audit: type=1326 audit(1760879976.862:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.360977][ T37] audit: type=1326 audit(1760879976.862:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.361329][ T37] audit: type=1326 audit(1760879976.862:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.361885][ T37] audit: type=1326 audit(1760879976.862:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.362283][ T37] audit: type=1326 audit(1760879976.862:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.362763][ T37] audit: type=1326 audit(1760879976.862:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722ac5efc9 code=0x7ffc0000 [ 233.953594][ T1707] usb 1-1: USB disconnect, device number 10 [ 234.024652][ T44] usb 3-1: USB disconnect, device number 11 [ 234.325406][ T7824] fuse: Unknown parameter '0x0000000000000004' [ 236.095027][ T5893] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 236.154166][ T5805] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 236.285458][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 236.287673][ T5893] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 236.287696][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.331476][ T5893] usb 3-1: config 0 descriptor?? [ 236.346105][ T5805] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.346121][ T5805] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 236.346131][ T5805] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.346158][ T5805] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.348413][ T5805] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.348439][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.348457][ T5805] usb 4-1: Product: syz [ 236.348525][ T5805] usb 4-1: Manufacturer: syz [ 236.537228][ T5805] cdc_wdm 4-1:1.0: skipping garbage [ 236.537248][ T5805] cdc_wdm 4-1:1.0: skipping garbage [ 236.537282][ T5805] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 236.570831][ T5893] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 236.637701][ T5893] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 236.637733][ T5893] dib0700: firmware download failed at 7 with -22 [ 238.020368][ T7887] netlink: 148 bytes leftover after parsing attributes in process `syz.0.673'. [ 238.044989][ T7890] fuse: Bad value for 'fd' [ 238.867930][ T5805] usb 4-1: USB disconnect, device number 12 [ 238.937347][ T5902] usb 3-1: USB disconnect, device number 12 [ 239.442337][ T7932] fuse: Bad value for 'fd' [ 239.524532][ T5805] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 239.687532][ T5805] usb 1-1: Using ep0 maxpacket: 8 [ 239.691024][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.692770][ T5805] usb 1-1: config 4 interface 0 has no altsetting 0 [ 239.708057][ T5805] usb 1-1: string descriptor 0 read error: -22 [ 239.708158][ T5805] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 239.708180][ T5805] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 239.761706][ T5805] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 239.790061][ T5805] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.790520][ T5805] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 239.790572][ T5805] usb 1-1: media controller created [ 239.883871][ T5895] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 240.020274][ T7919] usb 1-1: dvb_usb_au6610: wlen=57, aborting [ 240.040779][ T5895] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.040807][ T5895] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 240.040825][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.040877][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.087180][ T5895] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.087209][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.087229][ T5895] usb 2-1: Product: syz [ 240.087242][ T5895] usb 2-1: Manufacturer: syz [ 240.139613][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 240.139634][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 240.139669][ T5895] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 240.175133][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.564100][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.578558][ T1707] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 240.689169][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.921631][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.976812][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.044532][ T1707] usb 3-1: Using ep0 maxpacket: 32 [ 241.047505][ T1707] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 241.047531][ T1707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.125448][ T1707] usb 3-1: config 0 descriptor?? [ 241.349726][ T1707] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 241.412288][ T1707] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 241.412345][ T1707] dib0700: firmware download failed at 7 with -22 [ 241.721257][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.871156][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 241.871311][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 241.878898][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.041308][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.467047][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.518294][ T7939] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 242.518405][ T5805] zl10353_read_register: readreg error (reg=127, ret==0) [ 242.578603][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.720903][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.812668][ T5895] usb 2-1: USB disconnect, device number 12 [ 243.147172][ T7974] fuse: Bad value for 'fd' [ 243.607938][ T5902] usb 3-1: USB disconnect, device number 13 [ 243.697423][ T5805] usb 1-1: USB disconnect, device number 11 [ 244.014748][ T5805] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 244.344821][ T5805] usb 1-1: Using ep0 maxpacket: 16 [ 244.705650][ T5805] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 244.705668][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 244.705679][ T5805] usb 1-1: Product: syz [ 244.705685][ T5805] usb 1-1: Manufacturer: syz [ 244.705692][ T5805] usb 1-1: SerialNumber: syz [ 244.758803][ T5805] usb 1-1: config 0 descriptor?? [ 245.056746][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.057051][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.192919][ T7994] syz.4.714 (7994) used greatest stack depth: 17808 bytes left [ 245.700225][ T44] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 245.844317][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 245.846682][ T44] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 245.846709][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.852684][ T44] usb 3-1: config 0 descriptor?? [ 246.084939][ T44] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 246.107654][ T44] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 246.107687][ T44] dib0700: firmware download failed at 7 with -22 [ 247.503741][ T5902] usb 1-1: USB disconnect, device number 12 [ 248.832196][ T5895] usb 3-1: USB disconnect, device number 14 [ 249.223825][ T5895] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 249.248346][ T8047] fuse: Unknown parameter 'fd0x0000000000000004' [ 249.396233][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 249.400719][ T5895] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 249.400763][ T5895] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 249.400810][ T5895] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 249.400834][ T5895] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 249.400857][ T5895] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 249.400879][ T5895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.408885][ T5895] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 249.408992][ T5895] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 249.409011][ T5895] usb 3-1: Product: syz [ 249.409023][ T5895] usb 3-1: Manufacturer: syz [ 249.409036][ T5895] usb 3-1: SerialNumber: syz [ 249.460216][ T5895] usb 3-1: config 0 descriptor?? [ 249.461450][ T8031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.473009][ T5895] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.499222][ T5895] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 249.624276][ T1707] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 249.688984][ T5895] usb 3-1: USB disconnect, device number 15 [ 249.697143][ T5895] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 249.784284][ T1707] usb 5-1: Using ep0 maxpacket: 16 [ 249.809201][ T1707] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 249.809229][ T1707] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 249.809248][ T1707] usb 5-1: Product: syz [ 249.809262][ T1707] usb 5-1: Manufacturer: syz [ 249.809276][ T1707] usb 5-1: SerialNumber: syz [ 249.889919][ T1707] usb 5-1: config 0 descriptor?? [ 250.131933][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.140977][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.697586][ T1177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.705981][ T5902] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.864624][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 250.867100][ T5902] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 250.867128][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.882017][ T5902] usb 2-1: config 0 descriptor?? [ 251.045828][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.102965][ T5902] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 251.114280][ T5902] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 251.114332][ T5902] dib0700: firmware download failed at 7 with -22 [ 251.128050][ T1177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.248773][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.269803][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.272061][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.298846][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.301849][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.493508][ T8076] fuse: Unknown parameter 'fd0x0000000000000004' [ 252.825311][ T8078] syz.2.747 (8078): drop_caches: 2 [ 252.910917][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.032562][ T1177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.096441][ T8071] lo speed is unknown, defaulting to 1000 [ 253.313496][ T8084] sctp: [Deprecated]: syz.2.748 (pid 8084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.313496][ T8084] Use struct sctp_sack_info instead [ 253.477144][ T5807] Bluetooth: hci0: command tx timeout [ 253.998141][ T44] usb 2-1: USB disconnect, device number 13 [ 255.027472][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 255.048065][ T44] usb 5-1: USB disconnect, device number 19 [ 255.453334][ T1177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.556596][ T5807] Bluetooth: hci0: command 0x041b tx timeout [ 255.886406][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.887365][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.118141][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.120282][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.120533][ T8071] bridge_slave_0: entered allmulticast mode [ 256.154877][ T8071] bridge_slave_0: entered promiscuous mode [ 256.180037][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.180172][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.180419][ T8071] bridge_slave_1: entered allmulticast mode [ 256.183233][ T8071] bridge_slave_1: entered promiscuous mode [ 256.947998][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.965409][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.344962][ T8071] team0: Port device team_slave_0 added [ 257.385737][ T8071] team0: Port device team_slave_1 added [ 257.651781][ T5807] Bluetooth: hci0: command 0x041b tx timeout [ 258.441663][ T1177] bridge_slave_1: left allmulticast mode [ 258.441852][ T1177] bridge_slave_1: left promiscuous mode [ 258.446605][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.587349][ T1177] bridge_slave_0: left allmulticast mode [ 258.587377][ T1177] bridge_slave_0: left promiscuous mode [ 258.587824][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.044266][ T44] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 259.196467][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 259.199352][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 259.200706][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.200720][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.200748][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.206181][ T44] usb 5-1: language id specifier not provided by device, defaulting to English [ 259.211294][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.211320][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.211337][ T44] usb 5-1: Product: syz [ 259.211349][ T44] usb 5-1: Manufacturer: 屛뗝⏱钆睚É띔矚鰾娔셢莕ῗൡ蘥뜴㤊䤎眑鬤陃ꦂ缳Ἅ㝡䇌뮣踛磬曣㜛⍑ [ 259.211368][ T44] usb 5-1: SerialNumber: syz [ 259.720418][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.721204][ T5807] Bluetooth: hci0: command 0x041b tx timeout [ 260.262601][ T8207] netlink: 208 bytes leftover after parsing attributes in process `syz.3.784'. [ 261.276723][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.793833][ T5807] Bluetooth: hci0: command 0x041b tx timeout [ 262.091444][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.568919][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.636574][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.737454][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.787091][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.840908][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.912599][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.035592][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.202559][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.268272][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.316212][ T1177] bond0 (unregistering): Released all slaves [ 263.400396][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.400412][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.400426][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.607285][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.607301][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.607326][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.734662][ T44] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 263.734676][ T44] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 263.734699][ T44] cdc_ncm 5-1:1.0: bind() failure [ 263.818279][ T8239] netlink: 208 bytes leftover after parsing attributes in process `syz.1.795'. [ 263.914191][ T44] usb 5-1: USB disconnect, device number 20 [ 264.021835][ T1707] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 264.308522][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.325465][ T1707] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.325494][ T1707] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.325512][ T1707] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.325562][ T1707] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.325586][ T1707] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.394659][ T1707] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.394687][ T1707] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.394704][ T1707] usb 3-1: Product: syz [ 264.394715][ T1707] usb 3-1: Manufacturer: syz [ 264.458067][ T1707] cdc_wdm 3-1:1.0: skipping garbage [ 264.458089][ T1707] cdc_wdm 3-1:1.0: skipping garbage [ 264.496472][ T1707] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 264.496493][ T1707] cdc_wdm 3-1:1.0: Unknown control protocol [ 264.604215][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.061172][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 265.255345][ T8071] hsr_slave_0: entered promiscuous mode [ 265.260076][ T8071] hsr_slave_1: entered promiscuous mode [ 265.276332][ T8071] debugfs: 'hsr0' already exists in 'hsr' [ 265.276377][ T8071] Cannot create hsr debugfs directory [ 267.236780][ T5968] usb 3-1: USB disconnect, device number 16 [ 269.396169][ T8276] lo speed is unknown, defaulting to 1000 [ 270.613959][ T1177] hsr_slave_0: left promiscuous mode [ 270.633970][ T1177] hsr_slave_1: left promiscuous mode [ 270.634935][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.635079][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.676273][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.676292][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.732693][ T1177] veth1_macvtap: left promiscuous mode [ 270.732904][ T1177] veth0_macvtap: left promiscuous mode [ 270.733089][ T1177] veth1_vlan: left promiscuous mode [ 270.733286][ T1177] veth0_vlan: left promiscuous mode [ 270.945108][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.048448][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.619323][ T5902] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 271.783911][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 271.785712][ T5902] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 271.785728][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.788779][ T5902] usb 2-1: config 0 descriptor?? [ 271.793916][ T44] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.975857][ T44] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.975883][ T44] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 271.975900][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.975950][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 271.975974][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 271.982266][ T44] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.982294][ T44] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.982312][ T44] usb 5-1: Product: syz [ 271.982325][ T44] usb 5-1: Manufacturer: syz [ 272.011973][ T5902] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 272.020003][ T5902] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 272.020051][ T5902] dib0700: firmware download failed at 7 with -22 [ 272.140361][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 272.140381][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 272.142297][ T44] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 272.142309][ T44] cdc_wdm 5-1:1.0: Unknown control protocol [ 272.415813][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.498501][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.715807][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 272.880719][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.066141][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 273.146084][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.224734][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 273.246218][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.451425][ T44] usb 2-1: USB disconnect, device number 14 [ 274.556626][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.605840][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.663601][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.665589][ T5902] usb 5-1: USB disconnect, device number 21 [ 274.724320][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.800897][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.848160][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.950630][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.014097][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.096824][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.913856][ T8071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.972840][ T8071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.012734][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 281.050682][ T8071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.101928][ T8071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.170515][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 281.173048][ T5895] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 281.173094][ T5895] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 281.173138][ T5895] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 281.173163][ T5895] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 281.173188][ T5895] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 281.173213][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.206451][ T5895] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 281.206478][ T5895] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 281.206497][ T5895] usb 4-1: Product: syz [ 281.206510][ T5895] usb 4-1: Manufacturer: syz [ 281.206523][ T5895] usb 4-1: SerialNumber: syz [ 281.215967][ T5895] usb 4-1: config 0 descriptor?? [ 281.220262][ T8407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.270071][ T5895] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 281.294136][ T5895] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 281.470077][ T5895] usb 4-1: USB disconnect, device number 13 [ 281.485931][ T5895] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 281.622897][ T8426] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 281.892597][ T8426] bond1: entered promiscuous mode [ 281.892625][ T8426] bond1: entered allmulticast mode [ 281.893188][ T8426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.996412][ T8428] bond1: (slave gretap1): making interface the new active one [ 282.013270][ T8428] gretap1: entered promiscuous mode [ 282.013475][ T8428] gretap1: entered allmulticast mode [ 282.016927][ T8428] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 282.368834][ T8445] netlink: 168 bytes leftover after parsing attributes in process `syz.3.847'. [ 282.512757][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.557101][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.574233][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.642404][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.654025][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.683352][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.686922][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.739697][ T1484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.921164][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.375812][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.237249][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.962406][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.425253][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.626527][ T8071] veth0_vlan: entered promiscuous mode [ 286.657137][ T8071] veth1_vlan: entered promiscuous mode [ 286.804554][ T8071] veth0_macvtap: entered promiscuous mode [ 286.871142][ T1707] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 286.934366][ T8071] veth1_macvtap: entered promiscuous mode [ 287.046042][ T1707] usb 3-1: Using ep0 maxpacket: 32 [ 287.050633][ T1707] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 287.050676][ T1707] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 287.050732][ T1707] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 287.050757][ T1707] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 287.050781][ T1707] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 287.050865][ T1707] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.062976][ T1707] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 287.063003][ T1707] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 287.063023][ T1707] usb 3-1: Product: syz [ 287.063036][ T1707] usb 3-1: Manufacturer: syz [ 287.063049][ T1707] usb 3-1: SerialNumber: syz [ 287.102399][ T1707] usb 3-1: config 0 descriptor?? [ 287.103163][ T8495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 287.174759][ T1707] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 287.204888][ T1707] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 287.252072][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.368562][ T1707] usb 3-1: USB disconnect, device number 17 [ 287.379784][ T1707] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 287.430110][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.524501][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.535536][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.583837][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.595418][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.714387][ T8507] netlink: 168 bytes leftover after parsing attributes in process `syz.1.859'. [ 288.751609][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.082935][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.082955][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.370873][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.370894][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.563788][ T5968] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 289.765808][ T5968] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 289.765836][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.769028][ T5968] usb 4-1: config 0 descriptor?? [ 291.258267][ T5968] usb 4-1: Cannot set autoneg [ 291.258608][ T5968] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 291.310637][ T5968] usb 4-1: USB disconnect, device number 14 [ 293.288566][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.354486][ T8564] tipc: Enabling of bearer rejected, failed to enable media [ 293.484445][ T8565] trusted_key: encrypted_key: insufficient parameters specified [ 293.566996][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.323908][ T1707] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 294.491435][ T1707] usb 1-1: Using ep0 maxpacket: 32 [ 294.500064][ T1707] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 294.500106][ T1707] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 294.500144][ T1707] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 294.500168][ T1707] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 294.500192][ T1707] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 294.500216][ T1707] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.571191][ T1707] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 294.571209][ T1707] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 294.571219][ T1707] usb 1-1: Product: syz [ 294.571226][ T1707] usb 1-1: Manufacturer: syz [ 294.571233][ T1707] usb 1-1: SerialNumber: syz [ 294.614913][ T1707] usb 1-1: config 0 descriptor?? [ 294.616106][ T8576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.620464][ T1707] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 294.645523][ T1707] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 294.855885][ T1707] usb 1-1: USB disconnect, device number 13 [ 294.871120][ T1707] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 295.115273][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.798413][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.882756][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.039224][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.228439][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.561043][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.013905][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.198309][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.333964][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.614050][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.730751][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.907759][ T8625] tipc: Enabling of bearer rejected, failed to enable media [ 299.612353][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.884'. [ 300.064033][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 300.231355][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.396427][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.991748][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.226999][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.244945][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 301.269565][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 301.295061][ T5790] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 301.356122][ T44] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 301.356150][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.356166][ T44] usb 4-1: Product: syz [ 301.356177][ T44] usb 4-1: Manufacturer: syz [ 301.356189][ T44] usb 4-1: SerialNumber: syz [ 301.369498][ T44] usb 4-1: config 0 descriptor?? [ 301.453737][ T5790] usb 5-1: Using ep0 maxpacket: 32 [ 301.459461][ T5790] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 301.459505][ T5790] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 301.459545][ T5790] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 301.459570][ T5790] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 301.459595][ T5790] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 301.459620][ T5790] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.470177][ T5790] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 301.470254][ T5790] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 301.470273][ T5790] usb 5-1: Product: syz [ 301.470286][ T5790] usb 5-1: Manufacturer: syz [ 301.470299][ T5790] usb 5-1: SerialNumber: syz [ 301.587038][ T5790] usb 5-1: config 0 descriptor?? [ 301.588183][ T8647] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 301.632151][ T5790] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 301.672532][ T5790] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 301.848644][ T5895] usb 5-1: USB disconnect, device number 22 [ 301.876399][ T5895] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 302.509010][ T8658] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 302.509496][ T8658] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 303.641625][ T5968] usb 4-1: USB disconnect, device number 15 [ 305.530198][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.655846][ T8682] lo speed is unknown, defaulting to 1000 [ 305.915838][ T5895] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 306.559540][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.563142][ T5895] usb 3-1: config 0 has no interfaces? [ 306.571538][ T5895] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 306.571567][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.571584][ T5895] usb 3-1: Product: syz [ 306.571596][ T5895] usb 3-1: Manufacturer: syz [ 306.571607][ T5895] usb 3-1: SerialNumber: syz [ 306.660562][ T5895] usb 3-1: config 0 descriptor?? [ 307.299683][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.303642][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.318546][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.319742][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.330271][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.396654][ T5790] usb 3-1: USB disconnect, device number 18 [ 309.058543][ T8698] overlayfs: failed to resolve './file1/file0': -2 [ 309.301406][ T1442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.397575][ T5120] Bluetooth: hci0: command tx timeout [ 309.464516][ T8706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.910'. [ 309.784207][ T44] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 310.163919][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 310.291326][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 310.404001][ T44] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 310.404022][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.404033][ T44] usb 5-1: Product: syz [ 310.404040][ T44] usb 5-1: Manufacturer: syz [ 310.404047][ T44] usb 5-1: SerialNumber: syz [ 310.515837][ T44] usb 5-1: config 0 descriptor?? [ 310.608647][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.621317][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.636142][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.665886][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.688905][ T1442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.728251][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.947691][ T8691] lo speed is unknown, defaulting to 1000 [ 311.974774][ T5120] Bluetooth: hci0: command tx timeout [ 312.043905][ T1442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.281767][ T8708] lo speed is unknown, defaulting to 1000 [ 312.834829][ T5120] Bluetooth: hci5: command tx timeout [ 313.152675][ T1442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.310431][ T5895] usb 5-1: USB disconnect, device number 23 [ 314.034862][ T5120] Bluetooth: hci0: command tx timeout [ 314.916453][ T5120] Bluetooth: hci5: command tx timeout [ 316.114068][ T5120] Bluetooth: hci0: command tx timeout [ 316.281972][ T8691] chnl_net:caif_netlink_parms(): no params data found [ 317.055929][ T5120] Bluetooth: hci5: command tx timeout [ 317.530027][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.530099][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.110188][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.138976][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.144359][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.154941][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.174003][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.223617][ T1442] bridge_slave_1: left allmulticast mode [ 318.224719][ T1442] bridge_slave_1: left promiscuous mode [ 318.224997][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.475108][ T1442] bridge_slave_0: left allmulticast mode [ 318.475128][ T1442] bridge_slave_0: left promiscuous mode [ 318.475304][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.584619][ T5807] Bluetooth: hci5: command tx timeout [ 320.299756][ T5807] Bluetooth: hci2: command tx timeout [ 320.823803][ T44] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 320.993861][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 320.999005][ T44] usb 3-1: config 253 has an invalid interface number: 176 but max is 0 [ 320.999032][ T44] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 321.000203][ T44] usb 3-1: config 253 has no interface number 0 [ 321.000510][ T44] usb 3-1: config 253 interface 176 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 321.000539][ T44] usb 3-1: config 253 interface 176 has no altsetting 0 [ 321.014424][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=25.28 [ 321.014453][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.014478][ T44] usb 3-1: Product: syz [ 321.014491][ T44] usb 3-1: Manufacturer: syz [ 321.014504][ T44] usb 3-1: SerialNumber: syz [ 321.056621][ T44] usb 3-1: cannot find UAC_HEADER [ 321.447950][ T44] snd-usb-audio 3-1:253.176: probe with driver snd-usb-audio failed with error -22 [ 321.451143][ T44] usb 3-1: USB disconnect, device number 19 [ 321.654385][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:253.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.359799][ T5807] Bluetooth: hci2: command tx timeout [ 323.214813][ T1442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.314455][ T1442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.357131][ T1442] bond0 (unregistering): Released all slaves [ 323.483822][ T5895] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 323.633948][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 323.686180][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 323.694188][ T5895] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 323.694217][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.694236][ T5895] usb 3-1: Product: syz [ 323.694250][ T5895] usb 3-1: Manufacturer: syz [ 323.694263][ T5895] usb 3-1: SerialNumber: syz [ 323.742242][ T5895] usb 3-1: config 0 descriptor?? [ 323.853973][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.926'. [ 324.180780][ T8708] chnl_net:caif_netlink_parms(): no params data found [ 324.434972][ T5807] Bluetooth: hci2: command tx timeout [ 325.575898][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.576027][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.576262][ T8691] bridge_slave_0: entered allmulticast mode [ 325.578757][ T8691] bridge_slave_0: entered promiscuous mode [ 325.581714][ T8752] lo speed is unknown, defaulting to 1000 [ 325.738527][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.738682][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.738897][ T8691] bridge_slave_1: entered allmulticast mode [ 325.740709][ T8691] bridge_slave_1: entered promiscuous mode [ 326.323821][ T1442] hsr_slave_0: left promiscuous mode [ 326.366163][ T1442] hsr_slave_1: left promiscuous mode [ 326.369273][ T1442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.369302][ T1442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.425677][ T1442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.425705][ T1442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.513808][ T5807] Bluetooth: hci2: command tx timeout [ 326.595283][ T1442] veth1_macvtap: left promiscuous mode [ 326.595399][ T1442] veth0_macvtap: left promiscuous mode [ 326.595661][ T1442] veth1_vlan: left promiscuous mode [ 326.595844][ T1442] veth0_vlan: left promiscuous mode [ 327.024673][ T5895] usb 3-1: USB disconnect, device number 20 [ 328.572322][ T8819] netlink: 6 bytes leftover after parsing attributes in process `syz.2.934'. [ 330.245697][ T1442] team0 (unregistering): Port device team_slave_1 removed [ 330.465080][ T1442] team0 (unregistering): Port device team_slave_0 removed [ 332.963120][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.998921][ T8825] tipc: Enabling of bearer rejected, failed to enable media [ 333.097206][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.118946][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.119170][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.119412][ T8708] bridge_slave_0: entered allmulticast mode [ 333.122239][ T8708] bridge_slave_0: entered promiscuous mode [ 333.278241][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.278397][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.278617][ T8708] bridge_slave_1: entered allmulticast mode [ 333.296858][ T8708] bridge_slave_1: entered promiscuous mode [ 334.568314][ T8691] team0: Port device team_slave_0 added [ 334.910614][ T8691] team0: Port device team_slave_1 added [ 334.966661][ T8708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.970835][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 335.170571][ T8708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.483824][ T1707] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 335.656321][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.656332][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.656347][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.683888][ T1707] usb 3-1: Using ep0 maxpacket: 8 [ 335.776652][ T1707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.780898][ T1707] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 335.780916][ T1707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.780926][ T1707] usb 3-1: Product: syz [ 335.780933][ T1707] usb 3-1: Manufacturer: syz [ 335.780940][ T1707] usb 3-1: SerialNumber: syz [ 335.859423][ T1707] usb 3-1: config 0 descriptor?? [ 335.918102][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.918114][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.918128][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.925876][ T8708] team0: Port device team_slave_0 added [ 336.015961][ T8708] team0: Port device team_slave_1 added [ 337.340958][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.340976][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.340999][ T8708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.433854][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 337.556315][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.556326][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.556342][ T8708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.563758][ T9] usb 5-1: device descriptor read/64, error -71 [ 337.570607][ T8691] hsr_slave_0: entered promiscuous mode [ 337.572694][ T8691] hsr_slave_1: entered promiscuous mode [ 337.636991][ T8691] debugfs: 'hsr0' already exists in 'hsr' [ 337.637012][ T8691] Cannot create hsr debugfs directory [ 337.803831][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 337.933812][ T9] usb 5-1: device descriptor read/64, error -71 [ 338.044700][ T9] usb usb5-port1: attempt power cycle [ 338.052967][ T5895] usb 3-1: USB disconnect, device number 21 [ 338.387921][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 338.404588][ T9] usb 5-1: device descriptor read/8, error -71 [ 338.653852][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 338.674757][ T9] usb 5-1: device descriptor read/8, error -71 [ 338.796095][ T9] usb usb5-port1: unable to enumerate USB device [ 339.124906][ T1442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.346293][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 339.370969][ T8708] hsr_slave_0: entered promiscuous mode [ 339.372364][ T8708] hsr_slave_1: entered promiscuous mode [ 339.373543][ T8708] debugfs: 'hsr0' already exists in 'hsr' [ 339.373569][ T8708] Cannot create hsr debugfs directory [ 339.597578][ T1442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.665475][ T8886] tipc: Enabling of bearer rejected, failed to enable media [ 340.003008][ T1442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.410323][ T1442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.993327][ T5968] lo speed is unknown, defaulting to 1000 [ 345.230106][ T8922] tipc: Enabling of bearer rejected, failed to enable media [ 345.230629][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.230860][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.231118][ T8752] bridge_slave_0: entered allmulticast mode [ 345.265027][ T8752] bridge_slave_0: entered promiscuous mode [ 345.320300][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.320449][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.320679][ T8752] bridge_slave_1: entered allmulticast mode [ 345.338346][ T8752] bridge_slave_1: entered promiscuous mode [ 345.697380][ T5968] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 345.709156][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.800014][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.843808][ T5968] usb 5-1: device descriptor read/64, error -71 [ 346.421186][ T5968] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 346.543995][ T5968] usb 5-1: device descriptor read/64, error -71 [ 346.634934][ T8752] team0: Port device team_slave_0 added [ 346.664095][ T5968] usb usb5-port1: attempt power cycle [ 346.698594][ T8752] team0: Port device team_slave_1 added [ 346.983382][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.983400][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.983425][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.013810][ T5968] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 347.044500][ T5968] usb 5-1: device descriptor read/8, error -71 [ 347.241836][ T1442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.277933][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.277945][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.277960][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.278448][ T8691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 347.303833][ T5968] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 347.324724][ T5968] usb 5-1: device descriptor read/8, error -71 [ 347.444291][ T5968] usb usb5-port1: unable to enumerate USB device [ 347.504306][ T8691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.544415][ T8691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.737363][ T1442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.975893][ T8691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 348.338989][ T1442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.548491][ T8752] hsr_slave_0: entered promiscuous mode [ 349.549689][ T8752] hsr_slave_1: entered promiscuous mode [ 349.550233][ T8752] debugfs: 'hsr0' already exists in 'hsr' [ 349.550248][ T8752] Cannot create hsr debugfs directory [ 349.563923][ T8964] lo speed is unknown, defaulting to 1000 [ 349.786394][ T1442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.423071][ T1442] bridge_slave_1: left allmulticast mode [ 351.423100][ T1442] bridge_slave_1: left promiscuous mode [ 351.423344][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.046931][ T1442] bridge_slave_0: left allmulticast mode [ 355.047000][ T1442] bridge_slave_0: left promiscuous mode [ 355.065084][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.150127][ T1442] bridge_slave_1: left allmulticast mode [ 356.150199][ T1442] bridge_slave_1: left promiscuous mode [ 356.189824][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.529820][ T1442] bridge_slave_0: left allmulticast mode [ 356.529851][ T1442] bridge_slave_0: left promiscuous mode [ 356.531044][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.358298][ T1442] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 357.359238][ T1442] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 358.974526][ T1442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.034714][ T1442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.058481][ T1442] bond0 (unregistering): Released all slaves [ 359.885676][ T1442] bond1 (unregistering): Released all slaves [ 361.525173][ T1442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.584599][ T1442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.609157][ T1442] bond0 (unregistering): Released all slaves [ 361.707463][ T8708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.194083][ T8708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.114970][ T8708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.339664][ T8708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.709362][ T5807] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 368.502023][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.524418][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.527169][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.529331][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.530226][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.941529][ T9066] ================================================================== [ 369.941549][ T9066] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 369.941593][ T9066] Read of size 8 at addr ffff888029a146f8 by task syz.2.988/9066 [ 369.941610][ T9066] [ 369.941633][ T9066] CPU: 1 UID: 0 PID: 9066 Comm: syz.2.988 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.941657][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.941677][ T9066] Call Trace: [ 369.941688][ T9066] [ 369.941703][ T9066] dump_stack_lvl+0x189/0x250 [ 369.941728][ T9066] ? __kasan_check_byte+0x12/0x40 [ 369.941751][ T9066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.941774][ T9066] ? lock_release+0x4b/0x3e0 [ 369.941797][ T9066] ? __virt_addr_valid+0x4a5/0x5c0 [ 369.941821][ T9066] print_report+0xca/0x240 [ 369.941847][ T9066] ? change_page_attr_set_clr+0x625/0xfc0 [ 369.941873][ T9066] kasan_report+0x118/0x150 [ 369.941895][ T9066] ? change_page_attr_set_clr+0x625/0xfc0 [ 369.941925][ T9066] change_page_attr_set_clr+0x625/0xfc0 [ 369.941955][ T9066] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 369.941981][ T9066] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 369.942006][ T9066] ? memtype_reserve+0x874/0xb30 [ 369.942037][ T9066] _set_pages_array+0x145/0x270 [ 369.942057][ T9066] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 369.942081][ T9066] ? drm_gem_shmem_mmap+0x18b/0x450 [ 369.942105][ T9066] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 369.942131][ T9066] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 369.942157][ T9066] drm_gem_shmem_mmap+0x193/0x450 [ 369.942181][ T9066] drm_gem_mmap_obj+0x18a/0x4e0 [ 369.942202][ T9066] drm_gem_mmap+0x38d/0x640 [ 369.942222][ T9066] ? __pfx_drm_gem_mmap+0x10/0x10 [ 369.942242][ T9066] ? __mas_set_range+0x12f/0x3c0 [ 369.942271][ T9066] mmap_region+0x18c9/0x20f0 [ 369.942294][ T9066] ? finish_task_switch+0x18b/0x950 [ 369.942328][ T9066] ? __pfx_mmap_region+0x10/0x10 [ 369.942354][ T9066] ? rcu_is_watching+0x15/0xb0 [ 369.942376][ T9066] ? trace_sched_exit_tp+0x36/0x110 [ 369.942398][ T9066] ? __schedule+0x1709/0x4c20 [ 369.942454][ T9066] ? irqentry_exit+0x74/0x90 [ 369.942480][ T9066] ? path_noexec+0x176/0x200 [ 369.942513][ T9066] ? shmem_mapping+0xd/0x50 [ 369.942529][ T9066] ? memfd_check_seals_mmap+0xcb/0x210 [ 369.942555][ T9066] do_mmap+0xc23/0x10c0 [ 369.942577][ T9066] ? __pfx_do_mmap+0x10/0x10 [ 369.942594][ T9066] ? rwbase_write_lock+0x56f/0x750 [ 369.942621][ T9066] vm_mmap_pgoff+0x2a9/0x4d0 [ 369.942652][ T9066] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 369.942680][ T9066] ? __fget_files+0x2a/0x420 [ 369.942702][ T9066] ? __fget_files+0x3a6/0x420 [ 369.942721][ T9066] ? __fget_files+0x2a/0x420 [ 369.942742][ T9066] ksys_mmap_pgoff+0x4e9/0x720 [ 369.942761][ T9066] ? __x64_sys_mmap+0x7f/0x140 [ 369.942790][ T9066] do_syscall_64+0xfa/0xfa0 [ 369.942808][ T9066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.942827][ T9066] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 369.942846][ T9066] ? clear_bhb_loop+0x60/0xb0 [ 369.942867][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.942887][ T9066] RIP: 0033:0x7f1e3be8efc9 [ 369.942910][ T9066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.942929][ T9066] RSP: 002b:00007f1e3a0ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 369.942958][ T9066] RAX: ffffffffffffffda RBX: 00007f1e3c0e6180 RCX: 00007f1e3be8efc9 [ 369.942974][ T9066] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 369.942988][ T9066] RBP: 00007f1e3bf11f91 R08: 0000000000000006 R09: 0000000100000000 [ 369.943003][ T9066] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 369.943015][ T9066] R13: 00007f1e3c0e6218 R14: 00007f1e3c0e6180 R15: 00007ffd63c49558 [ 369.943039][ T9066] [ 369.943046][ T9066] [ 369.943054][ T9066] Allocated by task 9066: [ 369.943063][ T9066] kasan_save_track+0x3e/0x80 [ 369.943080][ T9066] __kasan_kmalloc+0x93/0xb0 [ 369.943096][ T9066] __kvmalloc_node_noprof+0x3fd/0x920 [ 369.943115][ T9066] drm_gem_get_pages+0x169/0xa30 [ 369.943130][ T9066] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 369.943151][ T9066] drm_gem_shmem_mmap+0x193/0x450 [ 369.943172][ T9066] drm_gem_mmap_obj+0x18a/0x4e0 [ 369.943189][ T9066] drm_gem_mmap+0x38d/0x640 [ 369.943205][ T9066] mmap_region+0x18c9/0x20f0 [ 369.943227][ T9066] do_mmap+0xc23/0x10c0 [ 369.943242][ T9066] vm_mmap_pgoff+0x2a9/0x4d0 [ 369.943267][ T9066] ksys_mmap_pgoff+0x4e9/0x720 [ 369.943283][ T9066] do_syscall_64+0xfa/0xfa0 [ 369.943298][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.943315][ T9066] [ 369.943320][ T9066] The buggy address belongs to the object at ffff888029a14600 [ 369.943320][ T9066] which belongs to the cache kmalloc-256 of size 256 [ 369.943337][ T9066] The buggy address is located 0 bytes to the right of [ 369.943337][ T9066] allocated 248-byte region [ffff888029a14600, ffff888029a146f8) [ 369.943358][ T9066] [ 369.943363][ T9066] The buggy address belongs to the physical page: [ 369.943381][ T9066] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29a14 [ 369.943400][ T9066] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 369.943417][ T9066] flags: 0x80000000000040(head|node=0|zone=1) [ 369.943437][ T9066] page_type: f5(slab) [ 369.943455][ T9066] raw: 0080000000000040 ffff88813ff26b40 dead000000000100 dead000000000122 [ 369.943473][ T9066] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 369.943497][ T9066] head: 0080000000000040 ffff88813ff26b40 dead000000000100 dead000000000122 [ 369.943515][ T9066] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 369.943533][ T9066] head: 0080000000000001 ffffea0000a68501 00000000ffffffff 00000000ffffffff [ 369.943550][ T9066] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 369.943561][ T9066] page dumped because: kasan: bad access detected [ 369.943571][ T9066] page_owner tracks the page as allocated [ 369.943578][ T9066] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 33, tgid 33 (kdevtmpfs), ts 15757941717, free_ts 0 [ 369.943612][ T9066] post_alloc_hook+0x240/0x2a0 [ 369.943631][ T9066] get_page_from_freelist+0x28c0/0x2960 [ 369.943648][ T9066] __alloc_frozen_pages_noprof+0x181/0x370 [ 369.943665][ T9066] alloc_pages_mpol+0xd1/0x380 [ 369.943681][ T9066] allocate_slab+0x96/0x3a0 [ 369.943699][ T9066] ___slab_alloc+0xb12/0x13f0 [ 369.943714][ T9066] __slab_alloc+0xc6/0x1f0 [ 369.943730][ T9066] __kmalloc_noprof+0x14b/0x7d0 [ 369.943744][ T9066] security_inode_init_security+0x107/0x3f0 [ 369.943761][ T9066] shmem_mknod+0x1f6/0x3e0 [ 369.943782][ T9066] vfs_mknod+0x37f/0x3c0 [ 369.943806][ T9066] devtmpfs_work_loop+0x79c/0xce0 [ 369.943830][ T9066] devtmpfsd+0x4d/0x50 [ 369.943852][ T9066] kthread+0x711/0x8a0 [ 369.943870][ T9066] ret_from_fork+0x4bc/0x870 [ 369.943893][ T9066] ret_from_fork_asm+0x1a/0x30 [ 369.943916][ T9066] page_owner free stack trace missing [ 369.943923][ T9066] [ 369.943928][ T9066] Memory state around the buggy address: [ 369.943939][ T9066] ffff888029a14580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 369.943952][ T9066] ffff888029a14600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 369.943965][ T9066] >ffff888029a14680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 369.943976][ T9066] ^ [ 369.943988][ T9066] ffff888029a14700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 369.944001][ T9066] ffff888029a14780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 369.944011][ T9066] ================================================================== [ 369.944107][ T9066] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 369.944124][ T9066] CPU: 1 UID: 0 PID: 9066 Comm: syz.2.988 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.944148][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.944160][ T9066] Call Trace: [ 369.944169][ T9066] [ 369.944177][ T9066] dump_stack_lvl+0x99/0x250 [ 369.944201][ T9066] ? __asan_memcpy+0x40/0x70 [ 369.944228][ T9066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.944250][ T9066] ? __pfx__printk+0x10/0x10 [ 369.944278][ T9066] vpanic+0x237/0x6d0 [ 369.944297][ T9066] ? __pfx_vpanic+0x10/0x10 [ 369.944314][ T9066] ? preempt_schedule+0xae/0xc0 [ 369.944339][ T9066] ? __pfx_preempt_schedule+0x10/0x10 [ 369.944369][ T9066] panic+0xb9/0xc0 [ 369.944386][ T9066] ? __pfx_panic+0x10/0x10 [ 369.944406][ T9066] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 369.944438][ T9066] ? change_page_attr_set_clr+0x625/0xfc0 [ 369.944465][ T9066] check_panic_on_warn+0x89/0xb0 [ 369.944495][ T9066] ? change_page_attr_set_clr+0x625/0xfc0 [ 369.944522][ T9066] end_report+0x78/0x160 [ 369.944541][ T9066] kasan_report+0x129/0x150 [ 369.944563][ T9066] ? change_page_attr_set_clr+0x625/0xfc0 [ 369.944595][ T9066] change_page_attr_set_clr+0x625/0xfc0 [ 369.944625][ T9066] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 369.944651][ T9066] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 369.944676][ T9066] ? memtype_reserve+0x874/0xb30 [ 369.944708][ T9066] _set_pages_array+0x145/0x270 [ 369.944729][ T9066] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 369.944752][ T9066] ? drm_gem_shmem_mmap+0x18b/0x450 [ 369.944776][ T9066] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 369.944802][ T9066] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 369.944828][ T9066] drm_gem_shmem_mmap+0x193/0x450 [ 369.944854][ T9066] drm_gem_mmap_obj+0x18a/0x4e0 [ 369.944875][ T9066] drm_gem_mmap+0x38d/0x640 [ 369.944895][ T9066] ? __pfx_drm_gem_mmap+0x10/0x10 [ 369.944915][ T9066] ? __mas_set_range+0x12f/0x3c0 [ 369.944944][ T9066] mmap_region+0x18c9/0x20f0 [ 369.944969][ T9066] ? finish_task_switch+0x18b/0x950 [ 369.944999][ T9066] ? __pfx_mmap_region+0x10/0x10 [ 369.945024][ T9066] ? rcu_is_watching+0x15/0xb0 [ 369.945047][ T9066] ? trace_sched_exit_tp+0x36/0x110 [ 369.945069][ T9066] ? __schedule+0x1709/0x4c20 [ 369.945123][ T9066] ? irqentry_exit+0x74/0x90 [ 369.945148][ T9066] ? path_noexec+0x176/0x200 [ 369.945172][ T9066] ? shmem_mapping+0xd/0x50 [ 369.945188][ T9066] ? memfd_check_seals_mmap+0xcb/0x210 [ 369.945214][ T9066] do_mmap+0xc23/0x10c0 [ 369.945236][ T9066] ? __pfx_do_mmap+0x10/0x10 [ 369.945252][ T9066] ? rwbase_write_lock+0x56f/0x750 [ 369.945279][ T9066] vm_mmap_pgoff+0x2a9/0x4d0 [ 369.945310][ T9066] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 369.945337][ T9066] ? __fget_files+0x2a/0x420 [ 369.945359][ T9066] ? __fget_files+0x3a6/0x420 [ 369.945379][ T9066] ? __fget_files+0x2a/0x420 [ 369.945401][ T9066] ksys_mmap_pgoff+0x4e9/0x720 [ 369.945421][ T9066] ? __x64_sys_mmap+0x7f/0x140 [ 369.945449][ T9066] do_syscall_64+0xfa/0xfa0 [ 369.945468][ T9066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.945492][ T9066] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 369.945512][ T9066] ? clear_bhb_loop+0x60/0xb0 [ 369.945533][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.945553][ T9066] RIP: 0033:0x7f1e3be8efc9 [ 369.945570][ T9066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.945588][ T9066] RSP: 002b:00007f1e3a0ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 369.945610][ T9066] RAX: ffffffffffffffda RBX: 00007f1e3c0e6180 RCX: 00007f1e3be8efc9 [ 369.945625][ T9066] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 369.945639][ T9066] RBP: 00007f1e3bf11f91 R08: 0000000000000006 R09: 0000000100000000 [ 369.945653][ T9066] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 369.945666][ T9066] R13: 00007f1e3c0e6218 R14: 00007f1e3c0e6180 R15: 00007ffd63c49558 [ 369.945690][ T9066] [ 369.945947][ T9066] Kernel Offset: disabled