last executing test programs: 11.562104886s ago: executing program 0 (id=5086): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@sha1={0x1, "8a80b887a79e3c31000a070f574aa0b616c6714d"}, 0x15, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 10.333228024s ago: executing program 0 (id=5089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000001780)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x18b, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x2e}, @dstopts={0x6, 0x2, '\x00', [@ra={0x5, 0x2, 0xc8f3}, @jumbo={0xc2, 0x4, 0x80000000}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x6c, 0xe, 0x4, 0x7, 0x80, 0x40, 0x7, [@mcast1, @private1, @empty, @private1, @loopback, @mcast1, @mcast1]}, @hopopts={0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x2f, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x64}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77cd2c7005b05917ca99319130bdb6c271112b"}}}}, 0x1b3) 10.111255088s ago: executing program 0 (id=5090): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="200e11000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.592169136s ago: executing program 2 (id=5101): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xe, 0x6, "f0803bb556c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.698958064s ago: executing program 0 (id=5105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 6.609407549s ago: executing program 0 (id=5107): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000011c0)="93bffc", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="51e657", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001280)="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", 0x788}], 0x1}}], 0x3, 0xc0d0) 6.439593327s ago: executing program 0 (id=5109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.266814042s ago: executing program 2 (id=5111): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 5.080218129s ago: executing program 2 (id=5112): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={0x0}) 4.119983524s ago: executing program 4 (id=5115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050429bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c000280386c01"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) 4.09927096s ago: executing program 1 (id=5116): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="200e11000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.970262541s ago: executing program 4 (id=5117): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$key(0xf, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.75292848s ago: executing program 4 (id=5119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x13, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.547910894s ago: executing program 4 (id=5120): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/97, 0x61, 0x5) 3.466007893s ago: executing program 2 (id=5121): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.282312405s ago: executing program 4 (id=5122): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000024) fcntl$notify(r5, 0x402, 0x80000032) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r8, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000004008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x97ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='x') 2.554507139s ago: executing program 3 (id=5124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000001780)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x19b, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x2e}, @dstopts={0x6, 0x3, '\x00', [@ra={0x5, 0x2, 0xc8f3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x6c, 0xe, 0x4, 0x7, 0x80, 0x40, 0x7, [@mcast1, @private1, @empty, @private1, @loopback, @mcast1, @mcast1]}, @hopopts={0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x2f, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x64}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77cd2c7005b05917ca99319130bdb6c271112b"}}}}, 0x1c3) 2.501077838s ago: executing program 1 (id=5125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 2.335944093s ago: executing program 1 (id=5126): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x24000008) 2.271270906s ago: executing program 3 (id=5127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x209, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000884) 2.22962585s ago: executing program 1 (id=5128): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000080), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0xa, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x7) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000880)={{}, "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"}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe", 0x16) read$char_usb(r0, &(0x7f00000003c0)=""/241, 0xf1) r4 = syz_open_dev$dri(0x0, 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0xb, 0x32, 0x9}) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e1f, 0x2, @local, 0x1}, 0x1c) 2.196246975s ago: executing program 3 (id=5129): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioperm(0x5c5, 0x0, 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) munmap(&(0x7f0000456000/0x2000)=nil, 0x2000) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) pipe(&(0x7f0000000040)) openat$binderfs_ctrl(0xffffff9c, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.614631889s ago: executing program 3 (id=5130): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x318, 0xd0, 0x0, 0x200, 0x200, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xff], [0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x6, 0x0, 0x14}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0xfffffffc}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, [0xffffffff], [0xffffffff, 0x0, 0xffffff00], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x0, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 1.462668901s ago: executing program 3 (id=5131): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={0x0}) 1.188862633s ago: executing program 2 (id=5132): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0xc, 0x0, 0x4f, 0x0, 0x4}, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r2, 0x0, 0x0) 733.834742ms ago: executing program 1 (id=5133): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 601.902433ms ago: executing program 1 (id=5134): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbb0000080190780a010102ac141471040090780000100045a707800064d5e5c101000000000000ac1e01012a000001000000000000000000000000000000000000009333aa0a25ac56cbfee9849fbacc46d0743edab50bdb7b98d91a096b1151986687589860aadd2d2c1ffbf1968295599003c20b0d8e228304e4"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r4, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffd, 0x6, 0x5d3186ca, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(0x0, 0x41) stat(&(0x7f00000005c0)='./file0/file0\x00', 0x0) 260.979577ms ago: executing program 2 (id=5135): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x25d, 0xdd7fcced10e30d14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x203}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48041}, 0x40040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 232.248µs ago: executing program 3 (id=5136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x201, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xa}, {0xfffa, 0xfff1}, {0x7, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004002}, 0x404d080) 0s ago: executing program 4 (id=5137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000001780)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x19b, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x2e}, @dstopts={0x6, 0x3, '\x00', [@ra={0x5, 0x2, 0xc8f3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x6c, 0xe, 0x4, 0x7, 0x80, 0x40, 0x7, [@mcast1, @private1, @empty, @private1, @loopback, @mcast1, @mcast1]}, @hopopts={0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x2f, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x64}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77cd2c7005b05917ca99319130bdb6c271112b"}}}}, 0x1c3) kernel console output (not intermixed with test programs): ci_hcd: stop threads [ 1032.609467][ T50] vhci_hcd: release socket [ 1032.661689][ T50] vhci_hcd: disconnect device [ 1032.677545][T17693] udevd[17693]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.694316][ T30] audit: type=1326 audit(1760339468.943:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1032.752198][ T30] audit: type=1326 audit(1760339468.943:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1032.834069][ T30] audit: type=1326 audit(1760339468.943:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1032.874144][ T30] audit: type=1326 audit(1760339468.943:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1032.901390][ T30] audit: type=1326 audit(1760339468.943:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1032.990869][ T30] audit: type=1326 audit(1760339468.963:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1033.077756][ T30] audit: type=1326 audit(1760339468.963:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1033.148784][ T30] audit: type=1326 audit(1760339468.963:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1033.254865][ T30] audit: type=1326 audit(1760339468.963:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1033.331803][ T30] audit: type=1326 audit(1760339468.963:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1033.666400][ T5828] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1033.821921][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 1033.835306][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.856908][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.898851][ T5828] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1033.921399][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.944509][ T5828] usb 1-1: config 0 descriptor?? [ 1034.314508][T17718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1034.450116][ T5828] ft260 0003:0403:6030.0013: unknown main item tag 0x7 [ 1034.645434][ T5828] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 1034.844896][ T5828] ft260 0003:0403:6030.0013: failed to retrieve system status [ 1034.864568][ T5828] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -5 [ 1035.069227][ T9802] usb 1-1: USB disconnect, device number 111 [ 1036.965308][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3677'. [ 1037.413874][ T5934] vhci_hcd: vhci_device speed not set [ 1037.839730][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1037.839753][ T30] audit: type=1326 audit(1760339474.633:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.4.3681" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1038.184722][T17772] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1038.191317][T17772] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1038.200172][T17772] vhci_hcd vhci_hcd.0: Device attached [ 1038.543765][ T5934] usb 41-1: new high-speed USB device number 12 using vhci_hcd [ 1038.663130][T17773] vhci_hcd: connection reset by peer [ 1038.672378][ T13] vhci_hcd: stop threads [ 1038.686926][ T13] vhci_hcd: release socket [ 1038.691724][ T13] vhci_hcd: disconnect device [ 1040.003881][T17804] binder: 17796:17804 ioctl c0306201 0 returned -14 [ 1041.363947][T17820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1042.045933][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1042.065691][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1043.651602][ T5934] vhci_hcd: vhci_device speed not set [ 1047.688129][ T5839] IPVS: starting estimator thread 0... [ 1047.815646][T17930] IPVS: using max 22 ests per chain, 52800 per kthread [ 1048.611467][ T5828] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1048.781686][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 1048.799443][ T5828] usb 4-1: no configurations [ 1048.811047][ T5828] usb 4-1: can't read configurations, error -22 [ 1048.891645][ T5839] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1048.951505][ T5828] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1049.105061][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 1049.128938][ T5839] usb 1-1: config index 0 descriptor too short (expected 44, got 36) [ 1049.145442][ T5839] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 1049.153954][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 1049.161426][ T5828] usb 4-1: no configurations [ 1049.171417][ T5828] usb 4-1: can't read configurations, error -22 [ 1049.189841][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.211742][ T5828] usb usb4-port1: attempt power cycle [ 1049.231195][ T5839] usb 1-1: config 0 has no interface number 0 [ 1049.255454][ T5839] usb 1-1: config 0 interface 126 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1049.291338][ T5839] usb 1-1: config 0 interface 126 has no altsetting 0 [ 1049.312276][ T5839] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1049.331962][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.360660][ T5839] usb 1-1: Product: syz [ 1049.375536][ T5839] usb 1-1: Manufacturer: syz [ 1049.390526][ T5839] usb 1-1: SerialNumber: syz [ 1049.424994][ T5839] usb 1-1: config 0 descriptor?? [ 1049.571468][ T5828] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1049.650929][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 1049.711533][ T5828] usb 4-1: no configurations [ 1049.730082][ T5839] ir_usb 1-1:0.126: required endpoints missing [ 1049.739586][ T5828] usb 4-1: can't read configurations, error -22 [ 1049.762550][ T5839] usb 1-1: USB disconnect, device number 112 [ 1049.904075][ T5828] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1049.942106][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 1049.951076][ T5828] usb 4-1: no configurations [ 1049.961310][ T5828] usb 4-1: can't read configurations, error -22 [ 1049.988395][ T5828] usb usb4-port1: unable to enumerate USB device [ 1051.001527][ T5828] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1051.185362][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 1051.207027][ T5828] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1051.244714][ T5828] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1051.281124][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.334885][ T5828] usb 1-1: Product: syz [ 1051.395536][ T5828] usb 1-1: Manufacturer: syz [ 1051.473811][ T5828] usb 1-1: SerialNumber: syz [ 1051.592909][T10336] Bluetooth: hci2: command 0x0406 tx timeout [ 1051.593665][ T5828] usb 1-1: config 0 descriptor?? [ 1051.684199][T17974] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1051.690789][T17974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1051.700555][T17974] vhci_hcd vhci_hcd.0: Device attached [ 1051.710644][T17975] vhci_hcd: cannot find the pending unlink 9 [ 1051.717084][T17975] vhci_hcd: connection closed [ 1051.719148][ T1166] vhci_hcd: stop threads [ 1051.760811][ T5828] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1051.771335][ T1166] vhci_hcd: release socket [ 1051.775899][ T1166] vhci_hcd: disconnect device [ 1051.780821][ T5828] usb 1-1: setting power ON [ 1051.795812][ T5828] dvb-usb: bulk message failed: -22 (2/0) [ 1051.812989][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1051.833052][ T5828] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1051.862399][ T5828] usb 1-1: media controller created [ 1051.951830][T17969] dvb-usb: bulk message failed: -22 (3/0) [ 1051.964703][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1051.981388][T17969] dvb-usb: bulk message failed: -22 (3/0) [ 1051.989568][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3758'. [ 1052.063900][ T5828] usb 1-1: selecting invalid altsetting 6 [ 1052.084351][ T5828] usb 1-1: digital interface selection failed (-22) [ 1052.101396][ T5828] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1052.123858][ T5828] usb 1-1: setting power OFF [ 1052.128947][ T5828] dvb-usb: bulk message failed: -22 (2/0) [ 1052.176479][ T5828] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1052.214801][ T5828] (NULL device *): no alternate interface [ 1052.320929][ T5828] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1052.380589][ T5828] usb 1-1: USB disconnect, device number 113 [ 1053.552974][T18010] input: syz1 as /devices/virtual/input/input155 [ 1054.627003][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.640013][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.634186][T18034] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1055.677946][T18034] netlink: 'syz.1.3777': attribute type 1 has an invalid length. [ 1055.810261][T18034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1055.981784][T14919] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1056.187401][T14919] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1056.211367][T14919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1056.278105][T14919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1056.289957][T14919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.298594][T14919] usb 2-1: Product: syz [ 1056.303045][T14919] usb 2-1: Manufacturer: syz [ 1056.307754][T14919] usb 2-1: SerialNumber: syz [ 1056.332662][T14919] usb 2-1: config 0 descriptor?? [ 1056.353964][T14919] usb 2-1: selecting invalid altsetting 0 [ 1056.999175][ T5934] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1057.221385][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 1057.259470][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1057.276920][ T5934] usb 4-1: too many configurations: 48, using maximum allowed: 8 [ 1057.305047][ T5934] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1057.316158][ T5934] usb 4-1: can't read configurations, error -71 [ 1058.060218][T18063] loop2: detected capacity change from 0 to 7 [ 1058.071731][T17903] Dev loop2: unable to read RDB block 7 [ 1058.079941][T17903] loop2: unable to read partition table [ 1058.086090][T17903] loop2: partition table beyond EOD, truncated [ 1058.098131][T18063] Dev loop2: unable to read RDB block 7 [ 1058.107061][T18063] loop2: unable to read partition table [ 1058.114117][T18063] loop2: partition table beyond EOD, truncated [ 1058.120584][T18063] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1058.157060][ T5196] Dev loop2: unable to read RDB block 7 [ 1058.168509][ T5196] loop2: unable to read partition table [ 1058.174663][ T5196] loop2: partition table beyond EOD, truncated [ 1058.366668][ T5828] usb 2-1: USB disconnect, device number 88 [ 1058.637309][T18079] loop8: detected capacity change from 0 to 8 [ 1058.644561][T18079] Dev loop8: unable to read RDB block 8 [ 1058.651558][T18079] loop8: unable to read partition table [ 1058.661720][T18079] loop8: partition table beyond EOD, truncated [ 1058.668087][T18079] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1060.438054][T14919] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1060.612513][T14919] usb 4-1: Using ep0 maxpacket: 32 [ 1060.641534][T14919] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.671364][T14919] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 1060.691421][T14919] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.719349][T14919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1060.741661][T14919] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 1060.761698][T14919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.845068][T14919] usb 4-1: config 0 descriptor?? [ 1060.855713][T18098] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1060.899241][T14919] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input156 [ 1061.276874][ T5181] bcm5974 4-1:0.0: could not write to device [ 1061.331158][T14919] usb 4-1: USB disconnect, device number 107 [ 1061.335356][T17903] bcm5974 4-1:0.0: could not read from device [ 1061.714016][T17903] udevd[17903]: Error opening device "/dev/input/event4": No such file or directory [ 1061.767468][T17903] udevd[17903]: Unable to EVIOCGABS device "/dev/input/event4" [ 1062.065103][T17903] udevd[17903]: Unable to EVIOCGABS device "/dev/input/event4" [ 1062.073393][T17903] udevd[17903]: Unable to EVIOCGABS device "/dev/input/event4" [ 1062.087343][T17903] udevd[17903]: Unable to EVIOCGABS device "/dev/input/event4" [ 1063.914911][T18145] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 1064.125855][T18148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3819'. [ 1064.822154][T18149] bond3: (slave wlan1): Releasing backup interface [ 1065.117280][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1065.246258][T18171] loop6: detected capacity change from 0 to 524287999 [ 1065.621765][ T5934] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 1065.789685][ T5934] usb 2-1: config 1 interface 0 altsetting 102 endpoint 0x1 is Bulk; changing to Interrupt [ 1065.819346][ T5934] usb 2-1: config 1 interface 0 altsetting 102 endpoint 0x82 is Bulk; changing to Interrupt [ 1065.843576][ T5934] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1065.860152][ T5934] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1065.897266][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.926183][ T5934] usb 2-1: Product: 绌㿙ࡎ舘襜﹚ᗃ졙큵긣턍詚ꂏﳴ龿㜶㟩㭓ᬀ鬣惟咖킧⌳ꏞ쁑殌䩁ᰀ嗇튿񂒙牊舵皦᳗ꁱ蘧మ걔ƚ꾠哠㈆寂湉ꇣ攳措꜒霆욥罯臿髽昴ṉᔨ筭㡡쯱좌熚ᇶཱུ髡ḓ냤뱎湦렪蠄맢횝뱰㥛隸ퟣ乘Გ෹ᮡ驝뜝ⱔ曝ݠ蕸ꙅ縠뾌쿾橌ᜅ襱킯✜ཧ⥅呙俨쏰飍 [ 1065.959018][ C1] vkms_vblank_simulate: vblank timer overrun [ 1066.116573][T18177] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1066.193809][T18177] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1066.443868][T18195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3835'. [ 1066.547010][T18171] program syz.1.3827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.608298][ T5934] usb 2-1: USB disconnect, device number 89 [ 1066.680004][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 1067.240709][ T5146] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1067.533240][T18213] tipc: Started in network mode [ 1067.559247][T18213] tipc: Node identity cae51b7e4fb2, cluster identity 4711 [ 1067.567495][T18213] tipc: Enabled bearer , priority 0 [ 1067.578608][T18213] syzkaller0: entered promiscuous mode [ 1067.584772][T18213] syzkaller0: entered allmulticast mode [ 1067.603299][T18213] tipc: Resetting bearer [ 1067.641644][T18211] tipc: Resetting bearer [ 1067.773005][T18211] tipc: Disabling bearer [ 1067.807549][T18225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1067.861625][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1068.197558][ T5146] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1068.305436][T18241] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1068.388882][T18244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1068.989460][T18259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1069.114423][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1070.326601][ T5146] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1071.396830][T18284] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1071.412800][T18284] bridge0: port 3(bond3) entered blocking state [ 1071.419719][T18284] bridge0: port 3(bond3) entered disabled state [ 1071.426957][T18284] bond3: entered allmulticast mode [ 1071.436465][T18284] bond3: entered promiscuous mode [ 1071.443403][T18284] bridge0: port 3(bond3) entered blocking state [ 1071.450361][T18284] bridge0: port 3(bond3) entered forwarding state [ 1071.474509][ T7482] bridge0: port 3(bond3) entered disabled state [ 1071.491142][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1071.507654][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1071.731391][T18292] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1072.527450][ T5146] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1072.716377][ T30] audit: type=1326 audit(1760339509.513:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1072.765163][T18315] tipc: Enabled bearer , priority 0 [ 1072.783088][T18315] syzkaller0: entered promiscuous mode [ 1072.798782][T18315] syzkaller0: entered allmulticast mode [ 1072.804767][ T30] audit: type=1326 audit(1760339509.513:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1072.836920][T18315] tipc: Resetting bearer [ 1072.853045][ T30] audit: type=1326 audit(1760339509.553:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1072.875192][ T30] audit: type=1326 audit(1760339509.553:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1072.903403][T18313] tipc: Resetting bearer [ 1072.910455][ T30] audit: type=1326 audit(1760339509.553:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1072.938888][ T30] audit: type=1326 audit(1760339509.573:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1072.964001][ T30] audit: type=1326 audit(1760339509.573:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1072.987713][ T30] audit: type=1326 audit(1760339509.573:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1073.023058][ T30] audit: type=1326 audit(1760339509.573:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1073.045644][ T30] audit: type=1326 audit(1760339509.573:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1073.069426][T18313] tipc: Disabling bearer [ 1074.066812][T18338] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1074.205170][T18349] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1074.211844][T18349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1074.245336][T18349] vhci_hcd vhci_hcd.0: Device attached [ 1074.264979][T18350] vhci_hcd: connection closed [ 1074.265897][ T1166] vhci_hcd: stop threads [ 1074.298559][ T1166] vhci_hcd: release socket [ 1074.309368][ T1166] vhci_hcd: disconnect device [ 1075.173890][ T857] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1075.293516][ T857] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1075.581580][ T857] usb 3-1: USB disconnect, device number 85 [ 1076.147373][T18379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1077.401410][ T9808] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1077.566682][ T9808] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1077.610692][ T9808] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1077.650316][ T9808] usb 3-1: Product: syz [ 1077.665012][ T9808] usb 3-1: SerialNumber: syz [ 1077.726677][ T9808] usb 3-1: config 0 descriptor?? [ 1077.974396][ T9808] usb 3-1: USB disconnect, device number 86 [ 1078.291037][T18424] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1078.785384][ T5146] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 1079.265628][ T5934] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1079.489871][T18447] tipc: Enabled bearer , priority 0 [ 1079.497963][T18447] syzkaller0: entered promiscuous mode [ 1079.502406][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.511293][T18447] syzkaller0: entered allmulticast mode [ 1079.548882][T18447] tipc: Resetting bearer [ 1079.561525][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1079.582517][T18446] tipc: Resetting bearer [ 1079.607976][ T5934] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1079.627887][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.648156][ T5934] usb 1-1: Product: syz [ 1079.658317][ T5934] usb 1-1: Manufacturer: syz [ 1079.683422][ T5934] usb 1-1: SerialNumber: syz [ 1079.704327][ T5934] usb 1-1: config 0 descriptor?? [ 1079.754279][T18446] tipc: Disabling bearer [ 1079.764801][T18451] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1079.771701][ T5934] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1079.848507][T17903] udevd[17903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1079.978768][ T5934] usb 1-1: USB disconnect, device number 114 [ 1080.169114][T18458] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1080.210358][T18458] netlink: 'syz.3.3934': attribute type 1 has an invalid length. [ 1080.392392][T18458] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1080.521458][ T5934] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1080.723175][ T5934] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1080.886786][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1080.938492][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1080.950699][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.979789][ T5934] usb 4-1: Product: syz [ 1080.993378][ T5934] usb 4-1: Manufacturer: syz [ 1081.011415][ T5934] usb 4-1: SerialNumber: syz [ 1081.022741][ T5934] usb 4-1: config 0 descriptor?? [ 1081.036688][ T5934] usb 4-1: selecting invalid altsetting 0 [ 1081.221463][ T9808] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1081.535980][ T9808] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1081.565723][ T9808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.587837][ T9808] usb 2-1: Product: syz [ 1081.602270][ T9808] usb 2-1: Manufacturer: syz [ 1081.628910][ T9808] usb 2-1: SerialNumber: syz [ 1081.670516][ T9808] usb 2-1: config 0 descriptor?? [ 1081.696659][ T9808] hso 2-1:0.0: Not our interface [ 1081.709931][ T9808] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1082.567404][ T5146] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1083.975310][ T9808] usb 4-1: USB disconnect, device number 108 [ 1084.034428][ T5934] usb 2-1: USB disconnect, device number 90 [ 1085.871704][T14919] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1086.031305][T14919] usb 1-1: Using ep0 maxpacket: 32 [ 1086.053610][T14919] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.096946][T14919] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 1086.139691][T14919] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.165583][T14919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1086.184401][T14919] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 1086.201307][T14919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.232332][T14919] usb 1-1: config 0 descriptor?? [ 1086.251886][T18534] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1086.267904][T14919] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input160 [ 1086.730512][ T5934] usb 1-1: USB disconnect, device number 115 [ 1086.737256][ T5181] bcm5974 1-1:0.0: could not write to device [ 1086.801525][T17988] bcm5974 1-1:0.0: could not read from device [ 1086.925181][T17988] udevd[17988]: Error opening device "/dev/input/event4": No such file or directory [ 1086.991544][T17988] udevd[17988]: Unable to EVIOCGABS device "/dev/input/event4" [ 1086.999321][T17988] udevd[17988]: Unable to EVIOCGABS device "/dev/input/event4" [ 1087.027281][T18546] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1087.051838][T17988] udevd[17988]: Unable to EVIOCGABS device "/dev/input/event4" [ 1087.059701][T17988] udevd[17988]: Unable to EVIOCGABS device "/dev/input/event4" [ 1087.103189][T18546] netlink: 'syz.1.3963': attribute type 1 has an invalid length. [ 1087.288411][T18546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1087.421982][T14919] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1087.594935][T14919] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1087.611073][T14919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1087.632038][T14919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1087.649165][T14919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.667527][T14919] usb 2-1: Product: syz [ 1087.676376][T14919] usb 2-1: Manufacturer: syz [ 1087.687257][T14919] usb 2-1: SerialNumber: syz [ 1087.704718][T14919] usb 2-1: config 0 descriptor?? [ 1087.730260][T14919] usb 2-1: selecting invalid altsetting 0 [ 1089.134810][T18567] tipc: Enabled bearer , priority 0 [ 1089.163327][T18567] syzkaller0: entered promiscuous mode [ 1089.178726][T18567] syzkaller0: entered allmulticast mode [ 1089.226705][T18567] tipc: Resetting bearer [ 1089.281680][T18565] tipc: Resetting bearer [ 1089.422381][T18565] tipc: Disabling bearer [ 1090.004546][T14919] usb 2-1: USB disconnect, device number 91 [ 1090.493022][ T9805] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1090.665423][ T9805] usb 1-1: Using ep0 maxpacket: 32 [ 1090.695501][ T9805] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.740636][ T9805] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 1090.768565][ T9805] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1090.815867][ T9805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1090.840797][ T9805] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 1090.871058][ T9805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.912829][ T9805] usb 1-1: config 0 descriptor?? [ 1090.919893][T18590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1090.980732][ T9805] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input161 [ 1091.394553][ T5181] bcm5974 1-1:0.0: could not write to device [ 1091.495489][ T9805] usb 1-1: USB disconnect, device number 116 [ 1091.540998][ T5181] bcm5974 1-1:0.0: could not read from device [ 1091.656866][T17903] udevd[17903]: Error opening device "/dev/input/event4": No such file or directory [ 1091.697464][T17903] udevd[17903]: Unable to EVIOCGABS device "/dev/input/event4" [ 1091.714190][T17903] udevd[17903]: Unable to EVIOCGABS device "/dev/input/event4" [ 1091.771521][T17903] udevd[17903]: Unable to EVIOCGABS device "/dev/input/event4" [ 1091.802928][T17903] udevd[17903]: Unable to EVIOCGABS device "/dev/input/event4" [ 1092.647399][T18637] binder: 18616:18637 ioctl c0306201 80000540 returned -14 [ 1093.744485][T18651] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.4004'. [ 1093.771303][T18651] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1094.034824][T18657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1096.471488][ T5934] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1096.731370][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 1096.753530][ T5934] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 1096.767194][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.797646][ T5934] usb 3-1: config 0 has no interface number 0 [ 1096.819985][ T5934] usb 3-1: config 0 interface 24 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1096.898677][ T5934] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1096.908625][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.919846][ T5934] usb 3-1: config 0 descriptor?? [ 1096.927779][ T5934] usbhid 3-1:0.24: couldn't find an input interrupt endpoint [ 1097.379954][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1097.414952][T18694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.556543][T18716] netlink: 'syz.1.4028': attribute type 1 has an invalid length. [ 1098.714009][T18716] bond7: entered promiscuous mode [ 1098.720998][T18716] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1098.884725][T18719] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1098.973577][T18719] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 1098.995817][T18719] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1099.007819][T18719] bond7: (slave gre1): making interface the new active one [ 1099.015718][T18719] gre1: entered promiscuous mode [ 1099.023034][T18719] bond7: (slave gre1): Enslaving as an active interface with an up link [ 1099.121934][T18722] tipc: Enabled bearer , priority 0 [ 1099.130384][T18722] syzkaller0: entered promiscuous mode [ 1099.138011][T18722] syzkaller0: entered allmulticast mode [ 1099.244829][T18725] tipc: Resetting bearer [ 1099.262635][T14919] usb 3-1: USB disconnect, device number 87 [ 1099.291596][T18721] tipc: Resetting bearer [ 1099.425826][T18721] tipc: Disabling bearer [ 1099.941421][ T5934] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1100.142086][ T5934] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1100.171331][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.182006][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1100.182036][ T30] audit: type=1326 audit(1760339536.983:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18740 comm="syz.3.4037" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0 [ 1100.190413][ T5934] usb 1-1: Product: syz [ 1100.279652][T18743] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1100.286313][T18743] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1100.298053][ T5934] usb 1-1: Manufacturer: syz [ 1100.308628][ T5934] usb 1-1: SerialNumber: syz [ 1100.325545][T18743] vhci_hcd vhci_hcd.0: Device attached [ 1100.338815][ T5934] usb 1-1: config 0 descriptor?? [ 1100.363144][ T5934] hso 1-1:0.0: Not our interface [ 1100.371921][ T5934] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1100.561619][T14919] usb 39-1: new high-speed USB device number 11 using vhci_hcd [ 1100.888961][T18744] vhci_hcd: connection reset by peer [ 1100.922298][ T60] vhci_hcd: stop threads [ 1100.933428][ T60] vhci_hcd: release socket [ 1100.945885][ T60] vhci_hcd: disconnect device [ 1102.719902][ T9808] usb 1-1: USB disconnect, device number 117 [ 1102.795693][T18771] tipc: Enabled bearer , priority 0 [ 1102.873851][T18775] syzkaller0: entered promiscuous mode [ 1102.879390][T18775] syzkaller0: entered allmulticast mode [ 1102.951527][ T5839] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1102.961552][T18776] netlink: 'syz.0.4046': attribute type 1 has an invalid length. [ 1103.036283][T18775] tipc: Resetting bearer [ 1103.138430][T18776] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1103.155611][ T5839] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1103.166427][ T5839] usb 2-1: config 0 has no interface number 0 [ 1103.192502][ T5839] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1103.212727][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.246221][ T5839] usb 2-1: config 0 descriptor?? [ 1103.301480][T18770] tipc: Resetting bearer [ 1103.353106][ T5839] usb 2-1: selecting invalid altsetting 1 [ 1103.383880][ T5839] dvb_ttusb_budget: ttusb_init_controller: error [ 1103.415971][ T5839] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1103.462301][T18770] tipc: Disabling bearer [ 1103.532937][ T5839] DVB: Unable to find symbol cx22700_attach() [ 1103.596747][T18781] bond6: (slave wlan1): Enslaving as an active interface with a down link [ 1103.706706][ T5839] DVB: Unable to find symbol tda10046_attach() [ 1103.721132][ T5839] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1103.760393][ T5839] usb 2-1: USB disconnect, device number 92 [ 1105.008542][T18822] tipc: Enabled bearer , priority 0 [ 1105.026182][T18822] syzkaller0: entered promiscuous mode [ 1105.032094][T18822] syzkaller0: entered allmulticast mode [ 1105.153203][T18824] tipc: Resetting bearer [ 1105.225458][T18821] tipc: Resetting bearer [ 1105.404930][T18821] tipc: Disabling bearer [ 1105.531403][ T5839] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1105.651484][T14919] vhci_hcd: vhci_device speed not set [ 1105.694247][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 1105.720415][ T5839] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1105.758483][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.812468][ T5839] usb 1-1: config 0 descriptor?? [ 1105.852820][ T5839] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1106.885333][ T5839] gspca_nw80x: reg_w err -71 [ 1106.890747][ T5839] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 1106.924707][ T5839] usb 1-1: USB disconnect, device number 118 [ 1107.111492][ T857] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1107.292968][ T857] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1107.323993][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.393575][ T857] pwc: Logitech/Cisco VT Camera webcam detected. [ 1107.525772][T18867] netlink: 'syz.2.4076': attribute type 1 has an invalid length. [ 1107.582531][T18867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1107.782230][T18867] bond2: (slave wlan1): Releasing backup interface [ 1107.793410][ T857] pwc: send_video_command error -71 [ 1107.829970][T18867] bond4: (slave wlan1): Enslaving as an active interface with a down link [ 1107.831366][ T857] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1107.943158][ T857] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 1107.985011][ T857] usb 4-1: USB disconnect, device number 109 [ 1108.518452][T18881] tipc: Enabled bearer , priority 0 [ 1108.540584][T18881] syzkaller0: entered promiscuous mode [ 1108.547132][T18881] syzkaller0: entered allmulticast mode [ 1108.647842][T18886] tipc: Resetting bearer [ 1108.733608][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4083'. [ 1108.981602][T18880] tipc: Resetting bearer [ 1109.056504][ T5146] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1109.233430][T18880] tipc: Disabling bearer [ 1109.403535][T18895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.426517][T18895] batadv_slave_0: entered promiscuous mode [ 1112.245624][T18930] tipc: Enabled bearer , priority 0 [ 1112.254219][T18930] syzkaller0: entered promiscuous mode [ 1112.260001][T18930] syzkaller0: entered allmulticast mode [ 1112.353864][T18931] tipc: Resetting bearer [ 1112.413015][T18929] tipc: Resetting bearer [ 1112.552418][T18929] tipc: Disabling bearer [ 1113.052065][T18942] netlink: 'syz.0.4099': attribute type 1 has an invalid length. [ 1113.144044][T18942] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1113.381616][ T5839] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1113.601528][ T5839] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1113.651424][ T5839] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1113.681971][ T5839] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1113.713082][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.743056][ T5839] usb 1-1: Product: syz [ 1113.771639][ T5839] usb 1-1: Manufacturer: syz [ 1113.790798][ T5839] usb 1-1: SerialNumber: syz [ 1113.837602][ T5839] usb 1-1: config 0 descriptor?? [ 1113.883682][ T5839] usb 1-1: selecting invalid altsetting 0 [ 1114.289950][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4106'. [ 1114.918208][ T857] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1115.206478][ T857] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 1115.232911][ T857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.266760][ T857] usb 4-1: config 0 has no interface number 0 [ 1115.280847][ T857] usb 4-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1115.308764][ T857] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1115.342611][ T857] usb 4-1: config 0 interface 156 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1115.370590][ T857] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1115.398958][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.447983][ T857] usb 4-1: config 0 descriptor?? [ 1115.471631][ T857] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1115.683256][ T857] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 1115.701126][ T857] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1115.728669][ T857] usb 4-1: MIDIStreaming interface descriptor not found [ 1115.934978][T18970] syz.2.4109 (18970): drop_caches: 2 [ 1115.943692][ T857] usb 4-1: USB disconnect, device number 110 [ 1116.039644][T14919] usb 1-1: USB disconnect, device number 119 [ 1116.066019][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.074191][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.158926][T17946] udevd[17946]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1117.071369][ T9808] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1117.180920][ T9805] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1117.431319][ T9808] usb 4-1: Using ep0 maxpacket: 8 [ 1117.437794][ T9808] usb 4-1: too many configurations: 188, using maximum allowed: 8 [ 1117.462332][ T9808] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1117.481457][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.501083][ T9805] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1117.511536][ T9805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.541603][ T9808] usb 4-1: config 0 has no interface number 0 [ 1117.547796][ T9805] usb 1-1: Product: syz [ 1117.552268][ T9808] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1117.567939][ T9805] usb 1-1: Manufacturer: syz [ 1117.574019][ T9805] usb 1-1: SerialNumber: syz [ 1117.581959][ T9808] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1117.600207][ T9808] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1117.616976][ T9808] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1117.641418][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.659503][ T9808] usb 4-1: config 0 has no interface number 0 [ 1117.666538][ T9808] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1117.681846][ T9808] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1117.699683][ T9808] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1117.712067][ T9808] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1117.721406][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.732021][ T9808] usb 4-1: config 0 has no interface number 0 [ 1117.738380][ T9808] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1117.750484][ T9808] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1117.765619][ T9808] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1117.780787][ T9808] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1117.790510][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.818581][ T9808] usb 4-1: config 0 has no interface number 0 [ 1117.825319][ T9808] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1117.837491][ T9808] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1117.852411][ T9808] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1118.002487][ T9808] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1118.013845][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.024444][ T9808] usb 4-1: config 0 has no interface number 0 [ 1118.031353][ T9808] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1118.049959][ T9808] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1118.091293][ T9808] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1118.110441][T19003] netlink: 'syz.1.4121': attribute type 1 has an invalid length. [ 1118.121705][ T9808] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1118.138837][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.163436][ T9808] usb 4-1: config 0 has no interface number 0 [ 1118.169900][ T9808] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1118.183197][ T9808] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1118.197694][ T9808] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1118.209825][T19003] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1118.288442][ T9808] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1118.323787][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.353293][ T9805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1118.403432][ T9808] usb 4-1: config 0 has no interface number 0 [ 1118.420350][ T9805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1118.441364][ T9808] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1118.463623][ T9805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1118.482658][ T9808] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1118.520154][ T9808] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1118.530668][ T9805] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1118.531509][T14919] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1118.550136][ T9808] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1118.577959][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.590101][ T9805] usb 1-1: USB disconnect, device number 120 [ 1118.630099][ T9808] usb 4-1: config 0 has no interface number 0 [ 1118.649378][ T9808] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1118.693091][ T9808] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1118.737748][ T9808] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1118.770413][ T9808] usb 4-1: New USB device found, idVendor=0e9c, idProduct=1b90, bcdDevice=83.00 [ 1118.800511][ T9808] usb 4-1: New USB device strings: Mfr=211, Product=192, SerialNumber=233 [ 1118.832159][ T9808] usb 4-1: Product: syz [ 1118.837014][T14919] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1118.845254][ T9808] usb 4-1: Manufacturer: syz [ 1118.863927][T14919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1118.890251][ T9808] usb 4-1: SerialNumber: syz [ 1118.930936][ T9808] usb 4-1: config 0 descriptor?? [ 1118.943125][T14919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1118.987485][T19020] netlink: 'syz.0.4127': attribute type 12 has an invalid length. [ 1119.001582][T14919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.033324][T14919] usb 2-1: Product: syz [ 1119.037651][T14919] usb 2-1: Manufacturer: syz [ 1119.048834][T14919] usb 2-1: SerialNumber: syz [ 1119.074236][T14919] usb 2-1: config 0 descriptor?? [ 1119.279330][T14919] usb 2-1: selecting invalid altsetting 0 [ 1119.331792][ T5839] usb 4-1: USB disconnect, device number 111 [ 1121.127461][T14919] usb 2-1: USB disconnect, device number 93 [ 1121.698260][ T5839] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1121.791384][ T9808] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1121.973332][ T5839] usb 1-1: config 0 has no interfaces? [ 1121.979586][ T5839] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1121.994820][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.023263][ T5839] usb 1-1: config 0 descriptor?? [ 1122.271348][ T9808] usb 3-1: Using ep0 maxpacket: 32 [ 1122.283607][ T9808] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.341606][ T9805] usb 1-1: USB disconnect, device number 121 [ 1122.356543][ T9808] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1122.409534][ T9808] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1122.455789][ T9808] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1122.539142][ T9808] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1122.555645][ T9808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.644965][ T9808] usb 3-1: Product: syz [ 1122.657642][ T9808] usb 3-1: Manufacturer: syz [ 1122.672730][ T9808] usb 3-1: SerialNumber: syz [ 1122.691696][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1122.703812][ T9808] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input162 [ 1122.911772][ T9808] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1122.920340][ T9808] (id 0x00) [ 1122.971576][ T9808] rc_core: IR keymap rc-imon-pad not found [ 1122.978019][ T9808] Registered IR keymap rc-empty [ 1122.984209][ T9808] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1123.013470][ T9808] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1123.122232][ T9808] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1123.143460][ T9808] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input163 [ 1123.160216][ T9808] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:88> initialized [ 1123.318637][T19053] imon:vfd_write: invalid payload size [ 1123.345768][ T9808] usb 3-1: USB disconnect, device number 88 [ 1123.962234][T19072] geneve2: entered allmulticast mode [ 1123.975160][T19072] bridge0: port 3(geneve2) entered blocking state [ 1123.992906][T19072] bridge0: port 3(geneve2) entered disabled state [ 1124.015826][T19072] geneve2: entered promiscuous mode [ 1124.025717][T19072] bridge0: port 3(geneve2) entered blocking state [ 1124.032658][T19072] bridge0: port 3(geneve2) entered forwarding state [ 1124.158316][T19080] bridge0: port 4(syz_tun) entered blocking state [ 1124.182620][T19080] bridge0: port 4(syz_tun) entered disabled state [ 1124.210090][T19080] syz_tun: entered allmulticast mode [ 1124.220505][T19080] syz_tun: left allmulticast mode [ 1124.471539][ T5934] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1124.648206][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 1124.659898][ T5934] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.696554][ T5934] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1124.712104][ T5934] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1124.741373][ T9802] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1124.749997][ T5934] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1124.830035][ T5934] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1124.839745][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.848282][ T5934] usb 2-1: Product: syz [ 1124.852622][ T5934] usb 2-1: Manufacturer: syz [ 1124.865055][ T5934] usb 2-1: SerialNumber: syz [ 1124.886970][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1124.896093][ T5934] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input164 [ 1124.961313][ T9802] usb 1-1: Using ep0 maxpacket: 32 [ 1124.987768][ T9802] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.005687][ T9802] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 1125.030714][ T9802] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1125.044063][ T9802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1125.051171][ T9802] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 1125.061098][ T9802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.073835][ T9802] usb 1-1: config 0 descriptor?? [ 1125.080404][T19097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1125.096513][ T9802] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input166 [ 1125.121349][ T5934] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1125.131340][ T5934] (id 0x00) [ 1125.181316][ T5934] rc_core: IR keymap rc-imon-pad not found [ 1125.187636][ T5934] Registered IR keymap rc-empty [ 1125.197145][ T5934] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1125.224562][ T5934] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1125.321879][ T9808] usb 1-1: USB disconnect, device number 122 [ 1125.329199][T17955] bcm5974 1-1:0.0: could not read from device [ 1125.337766][ T5934] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1125.368161][ T5934] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input165 [ 1125.408581][ T5934] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:94> initialized [ 1125.707274][T17955] udevd[17955]: Error opening device "/dev/input/event5": No such file or directory [ 1125.730945][T19111] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 1125.869254][T17955] udevd[17955]: Unable to EVIOCGABS device "/dev/input/event5" [ 1125.922051][T17955] udevd[17955]: Unable to EVIOCGABS device "/dev/input/event5" [ 1125.932053][T17955] udevd[17955]: Unable to EVIOCGABS device "/dev/input/event5" [ 1125.940622][T17955] udevd[17955]: Unable to EVIOCGABS device "/dev/input/event5" [ 1126.294434][T19111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1126.359264][T19113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1126.382140][T19113] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 1126.405744][T19113] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1126.494998][T19113] bond5: (slave vcan1): making interface the new active one [ 1126.504407][T19113] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 1126.985113][T14919] usb 2-1: USB disconnect, device number 94 [ 1127.613093][T14919] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1127.699067][T19143] netlink: 'syz.3.4169': attribute type 1 has an invalid length. [ 1127.811167][T19143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1127.829947][T14919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1127.858731][T14919] usb 2-1: no configurations [ 1127.868300][T14919] usb 2-1: can't read configurations, error -22 [ 1128.031489][ T9808] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1128.072147][T19148] netlink: 'syz.0.4171': attribute type 6 has an invalid length. [ 1128.205065][ T9808] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1128.230563][ T9808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1128.249558][ T9808] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1128.270182][ T9808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.291439][ T9808] usb 4-1: Product: syz [ 1128.301443][ T9808] usb 4-1: Manufacturer: syz [ 1128.320065][ T9808] usb 4-1: SerialNumber: syz [ 1128.342057][ T9808] usb 4-1: config 0 descriptor?? [ 1128.364853][ T9808] usb 4-1: selecting invalid altsetting 0 [ 1129.079089][ T5146] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1129.585132][T19181] bridge0: port 3(syz_tun) entered blocking state [ 1129.592666][T19181] bridge0: port 3(syz_tun) entered disabled state [ 1129.602965][T19181] syz_tun: entered allmulticast mode [ 1129.611801][T19181] syz_tun: entered promiscuous mode [ 1129.617969][T19181] bridge0: port 3(syz_tun) entered blocking state [ 1129.625720][T19181] bridge0: port 3(syz_tun) entered forwarding state [ 1129.769121][ T30] audit: type=1326 audit(1760339566.533:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19178 comm="syz.0.4184" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa1539 code=0x0 [ 1129.910783][T19189] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1129.917464][T19189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1129.935012][T19189] vhci_hcd vhci_hcd.0: Device attached [ 1130.231622][ T5839] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 1130.363907][T19190] vhci_hcd: connection reset by peer [ 1130.389715][T15763] vhci_hcd: stop threads [ 1130.398101][T15763] vhci_hcd: release socket [ 1130.404924][T15763] vhci_hcd: disconnect device [ 1130.716117][ T5934] usb 4-1: USB disconnect, device number 112 [ 1130.947963][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4194'. [ 1131.403172][T19223] random: crng reseeded on system resumption [ 1131.748734][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1131.841113][T19238] netlink: 'syz.1.4204': attribute type 1 has an invalid length. [ 1132.014382][ T30] audit: type=1326 audit(1760339568.813:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19241 comm="syz.4.4205" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1132.171381][ T5828] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1132.208905][T19247] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1132.215651][T19247] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1132.257703][T19247] vhci_hcd vhci_hcd.0: Device attached [ 1132.334703][T19238] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1132.481332][ T9808] usb 41-1: new high-speed USB device number 13 using vhci_hcd [ 1132.495457][ T5828] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1132.528942][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1132.578225][ T5828] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1132.627854][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.669708][ T5828] usb 2-1: Product: syz [ 1132.686875][ T5828] usb 2-1: Manufacturer: syz [ 1132.827194][T19249] vhci_hcd: connection reset by peer [ 1132.835624][ T60] vhci_hcd: stop threads [ 1132.840670][ T60] vhci_hcd: release socket [ 1132.852124][ T60] vhci_hcd: disconnect device [ 1133.041314][ T5828] usb 2-1: SerialNumber: syz [ 1133.055639][ T5828] usb 2-1: config 0 descriptor?? [ 1133.094984][ T5828] usb 2-1: selecting invalid altsetting 0 [ 1133.990214][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1134.821613][T19294] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1134.908537][ T5828] usb 2-1: USB disconnect, device number 97 [ 1134.994301][T19294] kvm: pic: non byte read [ 1135.053916][T19294] kvm: pic: non byte read [ 1135.065765][T19294] kvm: pic: non byte read [ 1135.082712][T19294] kvm: pic: non byte read [ 1135.198323][T19294] kvm: pic: non byte read [ 1135.625710][ T5839] vhci_hcd: vhci_device speed not set [ 1136.253748][T19318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4228'. [ 1136.888612][T19331] netlink: 'syz.1.4235': attribute type 1 has an invalid length. [ 1136.961783][ T9802] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1136.976511][T19337] netlink: 'syz.3.4234': attribute type 1 has an invalid length. [ 1137.042508][T19337] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1137.091714][T19331] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1137.112461][T19331] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1137.207867][ T9802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.211682][ T5839] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1137.238113][ T9802] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1137.251028][ T9802] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1137.291690][ T9802] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1137.311316][ T5828] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1137.327883][ T9802] usb 1-1: Product: syz [ 1137.338344][T19335] bond10: (slave gretap1): making interface the new active one [ 1137.357228][ T9802] usb 1-1: SerialNumber: syz [ 1137.370441][T19335] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 1137.383164][ T9802] usb 1-1: config 0 descriptor?? [ 1137.420797][T19342] macvlan3: entered promiscuous mode [ 1137.430879][T19342] macvlan3: entered allmulticast mode [ 1137.439939][T19342] bond10: entered promiscuous mode [ 1137.452097][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 1137.465006][ T5839] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.478607][T19342] gretap1: entered promiscuous mode [ 1137.490896][ T5839] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1137.520253][T19342] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1137.530281][ T5828] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1137.554431][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1137.562501][ T5839] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1137.574497][ T5839] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1137.591481][ T5828] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1137.601649][T19342] bond10: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1137.614226][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.625423][ T5839] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1137.635932][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.644414][ T5828] usb 4-1: Product: syz [ 1137.650031][ T5828] usb 4-1: Manufacturer: syz [ 1137.651759][ T9808] vhci_hcd: vhci_device speed not set [ 1137.656904][ T5839] usb 3-1: Product: syz [ 1137.664419][ T5828] usb 4-1: SerialNumber: syz [ 1137.671487][T19342] bond10: left promiscuous mode [ 1137.680226][ T5839] usb 3-1: Manufacturer: syz [ 1137.685184][T19342] gretap1: left promiscuous mode [ 1137.690667][ T5839] usb 3-1: SerialNumber: syz [ 1137.698029][ T5828] usb 4-1: config 0 descriptor?? [ 1137.714818][ T5828] usb 4-1: selecting invalid altsetting 0 [ 1137.730781][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1137.750543][ T5839] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input167 [ 1137.962417][ T5839] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1137.981803][ T5839] (id 0x00) [ 1138.063263][ T5839] rc_core: IR keymap rc-imon-pad not found [ 1138.069432][ T5839] Registered IR keymap rc-empty [ 1138.077410][ T5839] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1138.091375][ T5839] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1138.162736][ T5839] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1138.193883][ T5839] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input168 [ 1138.216525][ T5839] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:89> initialized [ 1138.570809][T19342] syz.1.4235 (19342) used greatest stack depth: 17488 bytes left [ 1139.159822][T19361] netlink: 'syz.1.4243': attribute type 1 has an invalid length. [ 1139.214606][T19363] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1139.394668][T19357] imon:send_packet: packet tx failed (-71) [ 1139.402689][ T9808] usb 3-1: USB disconnect, device number 89 [ 1139.421782][T19357] imon:vfd_write: send packet #3 failed [ 1139.821600][T16726] usb 1-1: USB disconnect, device number 123 [ 1139.921976][ T5914] usb 4-1: USB disconnect, device number 113 [ 1140.331359][T16726] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1140.513542][T16726] usb 1-1: Using ep0 maxpacket: 8 [ 1140.549411][T16726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.567986][T16726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.578664][T16726] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1140.592809][T16726] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1140.623691][T16726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.662237][T16726] usb 1-1: config 0 descriptor?? [ 1141.041527][ T5914] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1141.095462][T16726] nzxt-kraken2 0003:1E71:170E.0014: item fetching failed at offset 3/5 [ 1141.130305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.139103][T16726] nzxt-kraken2 0003:1E71:170E.0014: hid parse failed with -22 [ 1141.147618][T16726] nzxt-kraken2 0003:1E71:170E.0014: probe with driver nzxt-kraken2 failed with error -22 [ 1141.192217][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 1141.200214][ T5914] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1141.212497][ T5914] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1141.222177][ T5914] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1141.231738][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.239824][ T5914] usb 2-1: Product: syz [ 1141.244098][ T5914] usb 2-1: Manufacturer: syz [ 1141.248875][ T5914] usb 2-1: SerialNumber: syz [ 1141.258946][T19397] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1141.296253][T16726] usb 1-1: USB disconnect, device number 124 [ 1141.482343][ T5914] usb 2-1: USB disconnect, device number 98 [ 1142.001959][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 1142.235678][T19418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4265'. [ 1142.851376][ T9802] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1143.081620][ T9802] usb 2-1: Using ep0 maxpacket: 32 [ 1143.098071][ T9802] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1143.149990][ T9802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.198692][ T9802] usb 2-1: config 0 descriptor?? [ 1143.515910][ T9802] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1143.600277][T19449] netlink: 'syz.2.4275': attribute type 1 has an invalid length. [ 1143.630678][T19449] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1143.650948][ T9802] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1143.681258][ T9802] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1143.860494][T19451] bond6: (slave veth7): Enslaving as an active interface with a down link [ 1143.937067][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1143.989773][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1144.801362][T16726] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1144.992245][T16726] usb 1-1: Using ep0 maxpacket: 16 [ 1145.020606][T16726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.071358][T16726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.097874][T16726] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.115157][T16726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.133236][T16726] usb 1-1: Product: syz [ 1145.150258][T16726] usb 1-1: Manufacturer: syz [ 1145.165832][T16726] usb 1-1: SerialNumber: syz [ 1145.443258][T16726] usb 1-1: 0:2 : does not exist [ 1145.461915][T16726] usb 1-1: unit 9 not found! [ 1145.510495][T16726] usb 1-1: USB disconnect, device number 125 [ 1145.677976][T19485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4289'. [ 1145.687497][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4289'. [ 1146.101345][T16726] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1146.271298][T16726] usb 4-1: Using ep0 maxpacket: 32 [ 1146.290741][T16726] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1146.312908][T16726] usb 4-1: config 0 has no interface number 0 [ 1146.319270][T16726] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1146.382689][T16726] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1146.417471][T16726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.453167][T16726] usb 4-1: Product: syz [ 1146.461566][T19509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4300'. [ 1146.472318][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4300'. [ 1146.472318][T16726] usb 4-1: Manufacturer: syz [ 1146.521375][T16726] usb 4-1: SerialNumber: syz [ 1146.555879][T16726] usb 4-1: config 0 descriptor?? [ 1146.634046][T16726] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1146.841807][ T5828] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1147.011677][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 1147.051529][ T5828] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1147.101620][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.180905][ T5828] usb 3-1: config 0 descriptor?? [ 1147.423766][ T5828] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1147.502382][T16726] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input169 [ 1147.746268][ T5914] usb 4-1: USB disconnect, device number 114 [ 1148.716789][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4313'. [ 1148.737250][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4313'. [ 1150.140440][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 1150.150106][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4325'. [ 1151.410658][T19604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4336'. [ 1151.468667][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'. [ 1151.481034][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4337'. [ 1151.695134][T19615] netlink: 'syz.4.4341': attribute type 1 has an invalid length. [ 1151.821080][T19620] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1151.871321][ T9808] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1151.911137][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1152.031515][ T9808] usb 4-1: Using ep0 maxpacket: 32 [ 1152.039480][ T9808] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1152.050112][ T9808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.066309][ T9808] usb 4-1: config 0 descriptor?? [ 1152.398652][ T9808] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1153.464326][T19645] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 1156.199633][T19679] netlink: 'syz.0.4366': attribute type 1 has an invalid length. [ 1157.158225][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1158.611618][T19710] netlink: 'syz.3.4378': attribute type 1 has an invalid length. [ 1160.051446][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1160.734507][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1161.171869][T16726] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1161.200646][T19764] netlink: 'syz.1.4400': attribute type 1 has an invalid length. [ 1161.361361][T16726] usb 1-1: Using ep0 maxpacket: 32 [ 1161.375436][T16726] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1161.405629][T16726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.436453][T16726] usb 1-1: config 0 descriptor?? [ 1161.696248][T16726] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1161.735765][ T5146] Bluetooth: Frame is too long (len 133, expected len 4) [ 1162.084895][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1163.210832][ T5146] Bluetooth: Frame is too long (len 133, expected len 4) [ 1163.491709][T19805] netlink: 'syz.1.4416': attribute type 12 has an invalid length. [ 1163.585238][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 1163.649296][T19813] netlink: 'syz.3.4420': attribute type 1 has an invalid length. [ 1163.696745][T19813] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1163.788680][T19813] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1163.957134][T19822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1164.073213][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4425'. [ 1164.402060][ T5146] Bluetooth: Frame is too long (len 133, expected len 4) [ 1164.537665][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4431'. [ 1164.612394][T19846] netlink: 'syz.0.4433': attribute type 1 has an invalid length. [ 1164.795537][T19854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4436'. [ 1164.880086][T19846] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1165.003157][T19848] bond9: (slave veth7): Enslaving as an active interface with a down link [ 1165.097013][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4440'. [ 1165.172486][T19860] netlink: 'syz.4.4437': attribute type 12 has an invalid length. [ 1165.565773][T19882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4447'. [ 1165.704372][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4449'. [ 1165.714115][T19890] netlink: 'syz.3.4450': attribute type 1 has an invalid length. [ 1165.821035][T19892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1166.385706][T19915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1168.412001][T19973] netlink: 'syz.4.4487': attribute type 1 has an invalid length. [ 1168.485840][T19975] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1169.684275][T20011] netlink: 'syz.1.4502': attribute type 1 has an invalid length. [ 1173.423265][T20056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4520'. [ 1175.857759][T20082] netlink: 'syz.0.4530': attribute type 12 has an invalid length. [ 1177.505805][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.512294][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.213413][T20114] netlink: 'syz.1.4542': attribute type 12 has an invalid length. [ 1178.648971][T20124] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4546'. [ 1178.922994][T20133] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1179.769462][ T30] audit: type=1326 audit(1760339616.563:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20142 comm="syz.4.4554" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1179.828966][T20145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1179.835951][T20145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1179.844631][T20145] vhci_hcd vhci_hcd.0: Device attached [ 1180.091377][ T5839] usb 41-1: new high-speed USB device number 14 using vhci_hcd [ 1180.580365][T20146] vhci_hcd: connection reset by peer [ 1180.586244][ T1166] vhci_hcd: stop threads [ 1180.590736][ T1166] vhci_hcd: release socket [ 1180.595541][ T1166] vhci_hcd: disconnect device [ 1181.757765][T20173] netlink: 'syz.0.4563': attribute type 12 has an invalid length. [ 1183.521309][ T30] audit: type=1326 audit(1760339620.313:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20195 comm="syz.4.4571" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1183.522155][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4572'. [ 1183.623573][T20200] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1183.630241][T20200] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1183.657170][T20200] vhci_hcd vhci_hcd.0: Device attached [ 1184.311343][T20216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4577'. [ 1184.321903][T20201] vhci_hcd: connection closed [ 1184.322228][ T60] vhci_hcd: stop threads [ 1184.344011][ T60] vhci_hcd: release socket [ 1184.371655][ T60] vhci_hcd: disconnect device [ 1185.252020][ T5839] vhci_hcd: vhci_device speed not set [ 1185.456346][T20231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4582'. [ 1186.397824][T20244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4588'. [ 1186.739473][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4593'. [ 1187.153559][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4595'. [ 1187.766907][T20272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4599'. [ 1188.903560][T20289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4606'. [ 1189.240704][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4608'. [ 1189.462164][T20300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4610'. [ 1190.500940][T20319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1191.575677][T20327] netlink: 'syz.2.4620': attribute type 1 has an invalid length. [ 1191.758623][T20331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4622'. [ 1192.777533][T20348] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4628'. [ 1193.075140][ T30] audit: type=1326 audit(1760339629.873:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.0.4631" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa1539 code=0x0 [ 1193.096929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1193.164567][T20357] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1193.171400][T20357] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1193.191671][T20357] vhci_hcd vhci_hcd.0: Device attached [ 1193.431304][ T5914] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 1193.866845][T20359] vhci_hcd: connection reset by peer [ 1193.882434][ T752] vhci_hcd: stop threads [ 1193.909910][ T752] vhci_hcd: release socket [ 1193.929136][ T752] vhci_hcd: disconnect device [ 1193.975469][T20364] netlink: 'syz.4.4632': attribute type 12 has an invalid length. [ 1194.007400][T20366] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4633'. [ 1194.080884][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4634'. [ 1194.479859][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4639'. [ 1194.545761][T20381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4640'. [ 1194.878576][T20391] netlink: 'syz.4.4644': attribute type 1 has an invalid length. [ 1195.365936][T20399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1195.567072][ T30] audit: type=1326 audit(1760339632.363:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20402 comm="syz.0.4649" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa1539 code=0x0 [ 1195.636781][T20405] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1195.643585][T20405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1195.652428][T20405] vhci_hcd vhci_hcd.0: Device attached [ 1195.687146][T20409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4650'. [ 1196.366037][T20406] vhci_hcd: connection closed [ 1196.366551][ T7482] vhci_hcd: stop threads [ 1196.376624][ T7482] vhci_hcd: release socket [ 1196.381144][ T7482] vhci_hcd: disconnect device [ 1197.893032][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4662'. [ 1198.483022][ T30] audit: type=1326 audit(1760339635.283:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20440 comm="syz.4.4665" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1198.531490][ T5914] vhci_hcd: vhci_device speed not set [ 1198.564731][T20443] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1198.571389][T20443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1198.582920][T20443] vhci_hcd vhci_hcd.0: Device attached [ 1198.821386][ T9805] usb 41-1: new high-speed USB device number 15 using vhci_hcd [ 1199.279054][T20444] vhci_hcd: connection reset by peer [ 1199.291570][ T1166] vhci_hcd: stop threads [ 1199.296135][ T1166] vhci_hcd: release socket [ 1199.301461][ T1166] vhci_hcd: disconnect device [ 1200.501962][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4676'. [ 1200.942467][ T30] audit: type=1326 audit(1760339637.733:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20490 comm="syz.0.4682" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa1539 code=0x0 [ 1201.001104][T20493] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1201.007846][T20493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1201.018533][T20493] vhci_hcd vhci_hcd.0: Device attached [ 1201.261845][T20032] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 1201.756179][T20494] vhci_hcd: connection reset by peer [ 1201.772672][ T1166] vhci_hcd: stop threads [ 1201.783158][ T1166] vhci_hcd: release socket [ 1201.787900][ T1166] vhci_hcd: disconnect device [ 1202.645799][ T5146] Bluetooth: hci2: unexpected event for opcode 0x200c [ 1203.112355][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1203.257263][T20532] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1203.973646][ T9805] vhci_hcd: vhci_device speed not set [ 1204.095895][T20544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 1205.383563][T20565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4709'. [ 1205.699524][T20580] bond_slave_0: entered promiscuous mode [ 1205.705900][T20580] bond_slave_1: entered promiscuous mode [ 1205.714418][T20580] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1205.726676][T20580] bond8: (slave macvlan3): making interface the new active one [ 1205.738553][T20580] bond8: (slave macvlan3): Enslaving as an active interface with an up link [ 1206.371389][T20032] vhci_hcd: vhci_device speed not set [ 1206.741996][T20611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4730'. [ 1207.467852][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4739'. [ 1207.670552][T20637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4742'. [ 1208.232122][T16726] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1208.247665][ T9808] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1208.249365][ T5828] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1208.271957][ T9802] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1208.303907][T16726] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1208.314544][ T9808] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1208.334114][ T9802] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1208.345512][T16726] usb 1-1: USB disconnect, device number 126 [ 1208.354883][ T9808] usb 4-1: USB disconnect, device number 115 [ 1208.359162][ T5828] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1208.370772][ T9802] usb 2-1: USB disconnect, device number 99 [ 1208.424672][ T5828] usb 3-1: USB disconnect, device number 90 [ 1208.671332][T16726] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1208.681292][ T9808] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1208.751286][ T5828] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1208.844342][T16726] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1208.866381][ T9808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.881439][T16726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.895469][ T9808] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1208.911418][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 1208.918092][T16726] usb 1-1: config 0 descriptor?? [ 1208.929057][ T9808] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1208.931951][ T5828] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1208.974352][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.974375][T16726] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1208.994647][ T9808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.024516][ T5828] usb 3-1: config 0 descriptor?? [ 1209.024535][ T9808] usb 4-1: config 0 descriptor?? [ 1209.167790][T16726] gspca_spca508: reg_read err -32 [ 1209.246454][ T857] usb 4-1: USB disconnect, device number 116 [ 1209.308114][ T5828] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1209.324243][ T5828] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1209.334706][ T5828] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1209.348243][T20655] bond_slave_0: entered promiscuous mode [ 1209.354338][T20655] bond_slave_1: entered promiscuous mode [ 1209.361103][T20655] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1209.372074][T20655] bond11: (slave macvlan3): making interface the new active one [ 1209.376222][T16726] gspca_spca508: reg_read err -32 [ 1209.380527][T20655] bond11: (slave macvlan3): Enslaving as an active interface with an up link [ 1209.399196][T16726] gspca_spca508: reg_read err -32 [ 1209.406141][T16726] gspca_spca508: reg_read err -71 [ 1209.419120][T16726] gspca_spca508: reg write: error -71 [ 1209.425492][T16726] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 1209.455838][T16726] usb 1-1: USB disconnect, device number 127 [ 1209.609845][T20662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4753'. [ 1210.037469][T20668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1210.602230][T20685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4761'. [ 1211.311435][ T5839] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1211.494972][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.513215][ T5839] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1211.541700][ T5839] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1211.563465][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.590849][ T5839] usb 2-1: config 0 descriptor?? [ 1211.836045][ T5839] usb 2-1: USB disconnect, device number 100 [ 1212.339319][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4777'. [ 1212.580837][ T30] audit: type=1326 audit(1760339649.373:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20725 comm="syz.3.4779" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0 [ 1212.695987][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4783'. [ 1212.881484][ T9808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1213.051683][ T9808] usb 1-1: Using ep0 maxpacket: 32 [ 1213.059656][ T9808] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1213.093657][ T9808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.124122][ T9808] usb 1-1: config 0 descriptor?? [ 1213.142706][T20740] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1213.149466][T20740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1213.157728][T20740] vhci_hcd vhci_hcd.0: Device attached [ 1213.383391][ T9808] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1213.392828][T20744] vhci_hcd: connection closed [ 1213.397429][ T1166] vhci_hcd: stop threads [ 1213.506287][ T1166] vhci_hcd: release socket [ 1213.516600][ T1166] vhci_hcd: disconnect device [ 1213.561367][ T5839] vhci_hcd: vhci_device speed not set [ 1213.635236][T20750] netlink: 'syz.4.4786': attribute type 12 has an invalid length. [ 1215.360053][T20779] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1215.376130][T20779] netlink: 'syz.1.4794': attribute type 1 has an invalid length. [ 1215.551291][ T9802] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1215.641355][ T5914] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1215.701630][ T9802] usb 4-1: device descriptor read/64, error -71 [ 1215.794106][ T5914] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1215.804362][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1215.814586][ T5914] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1215.824294][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.832830][ T5914] usb 2-1: Product: syz [ 1215.837026][ T5914] usb 2-1: Manufacturer: syz [ 1215.841789][ T5914] usb 2-1: SerialNumber: syz [ 1215.850114][ T5914] usb 2-1: config 0 descriptor?? [ 1215.859191][ T5914] usb 2-1: selecting invalid altsetting 0 [ 1215.941698][ T9802] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1216.073567][ T9802] usb 4-1: device descriptor read/64, error -71 [ 1216.192298][ T9802] usb usb4-port1: attempt power cycle [ 1216.531380][ T9802] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1216.552277][ T9802] usb 4-1: device descriptor read/8, error -71 [ 1216.582556][ T30] audit: type=1326 audit(1760339653.383:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.2.4798" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d539 code=0x0 [ 1216.744853][T20790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1216.751625][T20790] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1216.760534][T20790] vhci_hcd vhci_hcd.0: Device attached [ 1217.130680][ T9802] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1217.424471][ T9802] usb 4-1: device descriptor read/8, error -71 [ 1217.467944][T20791] vhci_hcd: connection closed [ 1217.472264][ T60] vhci_hcd: stop threads [ 1217.484273][ T60] vhci_hcd: release socket [ 1217.489151][ T60] vhci_hcd: disconnect device [ 1217.533286][ T9802] usb usb4-port1: unable to enumerate USB device [ 1217.540882][T16726] usb 37-1: new high-speed USB device number 13 using vhci_hcd [ 1217.550215][T16726] usb 37-1: enqueue for inactive port 0 [ 1217.621535][T16726] vhci_hcd: vhci_device speed not set [ 1218.297145][ T5839] usb 2-1: USB disconnect, device number 101 [ 1218.612470][T20816] trusted_key: syz.1.4807 sent an empty control message without MSG_MORE. [ 1219.632179][ T30] audit: type=1326 audit(1760339656.433:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20833 comm="syz.4.4815" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1219.937904][T20840] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1219.944919][T20840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1219.956584][T20840] vhci_hcd vhci_hcd.0: Device attached [ 1220.341449][T16726] usb 41-1: new high-speed USB device number 16 using vhci_hcd [ 1220.478840][T20842] vhci_hcd: connection reset by peer [ 1220.485523][T12492] vhci_hcd: stop threads [ 1220.489870][T12492] vhci_hcd: release socket [ 1220.496636][T12492] vhci_hcd: disconnect device [ 1220.979096][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4823'. [ 1221.951312][ T9802] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1222.033764][T20886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4834'. [ 1222.133281][ T9802] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1222.161392][ T9802] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1222.162934][ T30] audit: type=1326 audit(1760339658.963:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.4.4835" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1222.168067][ T9802] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1222.168097][ T9802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.189829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.304538][ T9802] usb 2-1: config 0 descriptor?? [ 1222.614681][T20890] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1222.621430][T20890] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1222.635349][T20890] vhci_hcd vhci_hcd.0: Device attached [ 1222.710552][T20898] netlink: 'syz.2.4837': attribute type 6 has an invalid length. [ 1222.957611][T20894] vhci_hcd: connection closed [ 1222.968295][T20905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.984000][T12492] vhci_hcd: stop threads [ 1222.989452][T20905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.998665][T12492] vhci_hcd: release socket [ 1223.004645][T12492] vhci_hcd: disconnect device [ 1223.012955][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4831'. [ 1225.147241][ T9802] usbhid 2-1:0.0: can't add hid device: -71 [ 1225.183431][T20927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4846'. [ 1225.187106][ T9802] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1225.297890][ T9802] usb 2-1: USB disconnect, device number 102 [ 1225.464942][T20933] netlink: 'syz.0.4849': attribute type 6 has an invalid length. [ 1225.493477][T16726] vhci_hcd: vhci_device speed not set [ 1225.527509][T20934] netlink: 'syz.4.4848': attribute type 12 has an invalid length. [ 1225.671536][ T9802] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1225.843639][ T9802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.871308][ T9802] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1225.880699][ T9802] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1225.911299][ T9802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.934712][ T9802] usb 2-1: config 0 descriptor?? [ 1226.007837][ T30] audit: type=1326 audit(1760339662.803:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20940 comm="syz.3.4852" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0 [ 1226.262468][T20948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1226.269141][T20948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1226.298676][T20948] vhci_hcd vhci_hcd.0: Device attached [ 1226.302378][T20501] usb 2-1: USB disconnect, device number 103 [ 1226.571271][ T5914] usb 39-1: new high-speed USB device number 13 using vhci_hcd [ 1226.755352][T20949] vhci_hcd: connection reset by peer [ 1226.771734][T12492] vhci_hcd: stop threads [ 1226.790834][T12492] vhci_hcd: release socket [ 1226.811907][T12492] vhci_hcd: disconnect device [ 1226.823815][T20957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1227.474960][T20963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4859'. [ 1229.213436][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1229.282386][T20985] netlink: 'syz.3.4865': attribute type 12 has an invalid length. [ 1229.364108][T20987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4867'. [ 1229.532955][ T30] audit: type=1326 audit(1760339666.333:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20992 comm="syz.0.4869" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa1539 code=0x0 [ 1229.753299][T20999] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1229.759962][T20999] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1229.788727][T20999] vhci_hcd vhci_hcd.0: Device attached [ 1230.022064][ T9805] usb 33-1: new high-speed USB device number 9 using vhci_hcd [ 1230.208803][T21004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1230.333851][T21000] vhci_hcd: connection reset by peer [ 1230.339632][T12492] vhci_hcd: stop threads [ 1230.351241][T12492] vhci_hcd: release socket [ 1230.355992][T12492] vhci_hcd: disconnect device [ 1231.276571][T21024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4878'. [ 1231.536474][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1231.731692][ T5914] vhci_hcd: vhci_device speed not set [ 1231.744259][T21032] netlink: 'syz.1.4881': attribute type 12 has an invalid length. [ 1231.955771][T21037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4882'. [ 1232.480880][T21045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.584029][T21045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1233.889467][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4894'. [ 1235.175442][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4903'. [ 1235.185490][ T9805] vhci_hcd: vhci_device speed not set [ 1236.417935][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4910'. [ 1237.391314][ T857] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1237.582754][ T857] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1237.611234][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.639611][ T857] pwc: Logitech/Cisco VT Camera webcam detected. [ 1238.051108][ T857] pwc: send_video_command error -71 [ 1238.071923][ T857] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1238.079750][ T857] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 1238.120636][ T857] usb 4-1: USB disconnect, device number 121 [ 1238.419672][T21142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4923'. [ 1238.946771][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.953205][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.218942][T21157] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1239.471652][ T5839] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1239.679975][ T5839] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1239.696842][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1239.720573][ T5839] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1239.747997][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.795427][T21167] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4932'. [ 1239.867835][ T5839] usb 2-1: Product: syz [ 1239.872798][ T5839] usb 2-1: Manufacturer: syz [ 1239.878270][ T5839] usb 2-1: SerialNumber: syz [ 1239.891139][ T5839] usb 2-1: config 0 descriptor?? [ 1239.910940][ T5839] usb 2-1: selecting invalid altsetting 0 [ 1241.558197][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1242.104828][ T5914] usb 2-1: USB disconnect, device number 104 [ 1242.741300][ T5839] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1242.881302][ T5839] usb 4-1: device descriptor read/64, error -71 [ 1243.131378][ T5839] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1243.261341][ T5839] usb 4-1: device descriptor read/64, error -71 [ 1243.391694][ T5839] usb usb4-port1: attempt power cycle [ 1243.771283][ T5839] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1243.781635][T21239] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1243.794736][ T5839] usb 4-1: device descriptor read/8, error -71 [ 1244.041359][ T5839] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1244.049615][ T857] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1244.072099][ T5839] usb 4-1: device descriptor read/8, error -71 [ 1244.182278][ T5839] usb usb4-port1: unable to enumerate USB device [ 1244.203385][ T857] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1244.213797][ T857] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.223746][ T857] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1244.233112][ T857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.241129][ T857] usb 2-1: Product: syz [ 1244.246342][ T857] usb 2-1: Manufacturer: syz [ 1244.251110][ T857] usb 2-1: SerialNumber: syz [ 1244.259304][ T857] usb 2-1: config 0 descriptor?? [ 1244.269966][ T857] usb 2-1: selecting invalid altsetting 0 [ 1244.902842][ T30] audit: type=1326 audit(1760339681.703:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.4963" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1245.183088][T21246] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1245.189752][T21246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1245.198604][T21246] vhci_hcd vhci_hcd.0: Device attached [ 1245.631606][ T5839] usb 41-1: new high-speed USB device number 17 using vhci_hcd [ 1245.705124][T21247] vhci_hcd: connection reset by peer [ 1245.717416][T15763] vhci_hcd: stop threads [ 1245.723938][T15763] vhci_hcd: release socket [ 1245.728824][T15763] vhci_hcd: disconnect device [ 1246.737358][ T5914] usb 2-1: USB disconnect, device number 105 [ 1247.551596][T20501] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1247.601614][ T5914] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1247.733708][T20501] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1247.741404][ T5914] usb 4-1: device descriptor read/64, error -71 [ 1247.742533][T20501] usb 2-1: config 0 has no interface number 0 [ 1247.756537][T20501] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1247.767466][T20501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.779778][T20501] usb 2-1: config 0 descriptor?? [ 1247.800909][T20501] usb 2-1: selecting invalid altsetting 1 [ 1247.809163][T20501] dvb_ttusb_budget: ttusb_init_controller: error [ 1247.830365][T20501] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1247.930487][T20501] DVB: Unable to find symbol cx22700_attach() [ 1247.980836][T20501] DVB: Unable to find symbol tda10046_attach() [ 1247.981402][ T5914] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1247.991752][T20501] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1248.056468][T20501] usb 2-1: USB disconnect, device number 106 [ 1248.141344][ T5914] usb 4-1: device descriptor read/64, error -71 [ 1248.252400][ T5914] usb usb4-port1: attempt power cycle [ 1248.611331][ T5914] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1248.652106][ T5914] usb 4-1: device descriptor read/8, error -71 [ 1248.835421][T21301] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1248.941872][ T5914] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1248.982002][ T5914] usb 4-1: device descriptor read/8, error -71 [ 1249.101449][ T5914] usb usb4-port1: unable to enumerate USB device [ 1249.151835][T14919] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1249.343882][T14919] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1249.354281][T14919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1249.368955][T14919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1249.378665][T14919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.387819][T14919] usb 2-1: Product: syz [ 1249.392660][T14919] usb 2-1: Manufacturer: syz [ 1249.397647][T14919] usb 2-1: SerialNumber: syz [ 1249.415407][T14919] usb 2-1: config 0 descriptor?? [ 1249.433534][T14919] usb 2-1: selecting invalid altsetting 0 [ 1250.771352][ T5839] vhci_hcd: vhci_device speed not set [ 1251.816469][T14919] usb 2-1: USB disconnect, device number 107 [ 1252.401363][T14919] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1252.573877][T14919] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1252.582465][T14919] usb 2-1: config 0 has no interface number 0 [ 1252.588994][T14919] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1252.599265][T14919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.613709][T14919] usb 2-1: config 0 descriptor?? [ 1252.640917][T14919] usb 2-1: selecting invalid altsetting 1 [ 1252.652098][T14919] dvb_ttusb_budget: ttusb_init_controller: error [ 1252.658967][T14919] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1252.751748][T14919] DVB: Unable to find symbol cx22700_attach() [ 1252.799938][T14919] DVB: Unable to find symbol tda10046_attach() [ 1252.807129][T14919] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1252.844734][T14919] usb 2-1: USB disconnect, device number 108 [ 1253.442974][T21358] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1253.733733][ T9805] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1253.963779][ T9805] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1253.997022][ T9805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1254.014975][ T9805] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1254.031535][ T9805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.053073][ T9805] usb 4-1: Product: syz [ 1254.057482][ T9805] usb 4-1: Manufacturer: syz [ 1254.072472][ T9805] usb 4-1: SerialNumber: syz [ 1254.087086][ T9805] usb 4-1: config 0 descriptor?? [ 1254.107911][ T9805] usb 4-1: selecting invalid altsetting 0 [ 1255.423013][T21392] netlink: 'syz.2.5016': attribute type 1 has an invalid length. [ 1255.531378][ T9805] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1255.717031][ T9805] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1255.726700][ T9805] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1255.738408][ T9805] usb 2-1: Product: syz [ 1255.747796][ T9805] usb 2-1: SerialNumber: syz [ 1255.758861][ T9805] usb 2-1: config 0 descriptor?? [ 1255.769579][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5019'. [ 1256.178250][ T9805] usb 2-1: USB disconnect, device number 109 [ 1256.348664][T20501] usb 4-1: USB disconnect, device number 4 [ 1256.954224][T21415] netlink: 'syz.1.5027': attribute type 1 has an invalid length. [ 1257.199774][T21423] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1257.461453][ T9805] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1257.633742][ T9805] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1257.644238][ T9805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1257.655151][ T9805] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1257.664408][ T9805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.672566][ T9805] usb 2-1: Product: syz [ 1257.676760][ T9805] usb 2-1: Manufacturer: syz [ 1257.682268][ T9805] usb 2-1: SerialNumber: syz [ 1257.689287][ T9805] usb 2-1: config 0 descriptor?? [ 1257.698780][ T9805] usb 2-1: selecting invalid altsetting 0 [ 1258.685474][T21440] netlink: 'syz.0.5038': attribute type 1 has an invalid length. [ 1258.727203][T21440] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1260.117517][T20501] usb 2-1: USB disconnect, device number 110 [ 1260.428870][T21472] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 1260.561760][T20501] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1260.570399][T21473] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1260.773151][T20501] usb 2-1: Using ep0 maxpacket: 8 [ 1260.785045][T20501] usb 2-1: config 162 has an invalid interface number: 3 but max is 0 [ 1260.803052][T20501] usb 2-1: config 162 has no interface number 0 [ 1260.819093][T20501] usb 2-1: config 162 interface 3 has no altsetting 0 [ 1260.839661][T20501] usb 2-1: New USB device found, idVendor=0489, idProduct=e0db, bcdDevice= c.27 [ 1260.857242][T20501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.869278][T20501] usb 2-1: Product: syz [ 1260.873581][T20501] usb 2-1: Manufacturer: syz [ 1260.878224][T20501] usb 2-1: SerialNumber: syz [ 1261.179823][T20501] usb 2-1: USB disconnect, device number 111 [ 1261.508708][T21490] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1261.762309][T20501] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1261.793976][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1261.923708][T20501] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1261.933893][T20501] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1261.943034][T20501] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1261.952685][T20501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.960822][T20501] usb 4-1: Product: syz [ 1261.965077][T20501] usb 4-1: Manufacturer: syz [ 1261.970253][T20501] usb 4-1: SerialNumber: syz [ 1261.977641][T20501] usb 4-1: config 0 descriptor?? [ 1261.994080][T20501] usb 4-1: selecting invalid altsetting 0 [ 1262.364790][T21498] netlink: 'syz.2.5062': attribute type 1 has an invalid length. [ 1264.413582][T20501] usb 4-1: USB disconnect, device number 5 [ 1264.539837][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1265.892016][T16726] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1265.956837][T21582] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1266.091811][T16726] usb 2-1: Using ep0 maxpacket: 32 [ 1266.112881][T16726] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.171398][T16726] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 1266.222925][ T9805] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1266.269889][T16726] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.354591][T16726] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1266.355918][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5085'. [ 1266.392537][T16726] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 1266.434811][T16726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.443660][ T9805] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1266.481359][ T9805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1266.512480][T16726] usb 2-1: config 0 descriptor?? [ 1266.518485][T21578] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1266.533914][ T9805] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1266.594421][ T9805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.630635][T16726] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input170 [ 1266.650628][ T9805] usb 4-1: Product: syz [ 1266.681054][ T9805] usb 4-1: Manufacturer: syz [ 1266.693321][ T9805] usb 4-1: SerialNumber: syz [ 1266.744658][ T9805] usb 4-1: config 0 descriptor?? [ 1266.751464][ T5146] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1266.764857][ T9805] usb 4-1: selecting invalid altsetting 0 [ 1266.791110][ T5181] bcm5974 2-1:0.0: could not read from device [ 1266.881577][T16726] usb 2-1: USB disconnect, device number 112 [ 1267.008571][T20780] udevd[20780]: Error opening device "/dev/input/event4": No such file or directory [ 1267.047779][T20780] udevd[20780]: Unable to EVIOCGABS device "/dev/input/event4" [ 1267.070088][T20780] udevd[20780]: Unable to EVIOCGABS device "/dev/input/event4" [ 1267.097252][T20780] udevd[20780]: Unable to EVIOCGABS device "/dev/input/event4" [ 1267.119346][T20780] udevd[20780]: Unable to EVIOCGABS device "/dev/input/event4" [ 1268.871288][ T9805] usb 4-1: USB disconnect, device number 6 [ 1269.431563][ T9805] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1269.594165][ T9805] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1269.611245][ T9805] usb 4-1: config 0 has no interface number 0 [ 1269.617424][ T9805] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1269.641271][ T9805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.665008][ T9808] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1269.668429][ T5828] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1269.696385][ T9808] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1269.706831][ T9805] usb 4-1: config 0 descriptor?? [ 1269.717420][ T9805] usb 4-1: selecting invalid altsetting 1 [ 1269.728165][ T5828] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1269.741673][ T9805] dvb_ttusb_budget: ttusb_init_controller: error [ 1269.769780][ T9805] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1269.776366][ T5828] usb 3-1: USB disconnect, device number 91 [ 1269.798268][ T9808] usb 1-1: USB disconnect, device number 2 [ 1269.992334][ T9805] DVB: Unable to find symbol cx22700_attach() [ 1270.078878][ T9805] DVB: Unable to find symbol tda10046_attach() [ 1270.089701][ T9805] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1270.106484][ T9805] usb 4-1: USB disconnect, device number 7 [ 1270.131641][ T9808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1270.306910][ T9808] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1270.327306][ T9808] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1270.347279][ T9808] usb 1-1: Product: syz [ 1270.357445][ T9808] usb 1-1: SerialNumber: syz [ 1270.378893][ T9808] usb 1-1: config 0 descriptor?? [ 1270.771453][ T9805] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1270.801311][T20501] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1270.813903][ T9808] usb 1-1: USB disconnect, device number 3 [ 1270.922971][ T9805] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1270.932350][ T9805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.941769][ T5839] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1270.951612][ T9805] usb 3-1: config 0 descriptor?? [ 1270.961626][T20501] usb 4-1: Using ep0 maxpacket: 32 [ 1270.972030][T20501] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1270.980265][T20501] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.992523][T20501] usb 4-1: config 0 has no interface number 0 [ 1271.001607][T20501] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1271.010996][T20501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.019167][T20501] usb 4-1: Product: syz [ 1271.024691][T20501] usb 4-1: Manufacturer: syz [ 1271.029398][T20501] usb 4-1: SerialNumber: syz [ 1271.037329][T20501] usb 4-1: config 0 descriptor?? [ 1271.045804][T20501] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1271.121311][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 1271.138247][ T5839] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.154215][ T5839] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 1271.165868][ T5839] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1271.186558][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1271.193633][ T5839] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 1271.226004][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.241337][ T5839] usb 2-1: config 0 descriptor?? [ 1271.248662][T21631] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1271.278978][ T5839] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input171 [ 1271.483305][ T5181] bcm5974 2-1:0.0: could not read from device [ 1271.529381][ T5839] usb 2-1: USB disconnect, device number 113 [ 1271.546378][T20780] bcm5974 2-1:0.0: could not read from device [ 1271.614645][ T5181] bcm5974 2-1:0.0: could not read from device [ 1271.698008][T20780] udevd[20780]: Error opening device "/dev/input/event4": No such device [ 1271.723449][T20780] udevd[20780]: Unable to EVIOCGABS device "/dev/input/event4" [ 1271.753575][T20780] udevd[20780]: Unable to EVIOCGABS device "/dev/input/event4" [ 1271.771990][T20780] udevd[20780]: Unable to EVIOCGABS device "/dev/input/event4" [ 1271.790321][T20780] udevd[20780]: Unable to EVIOCGABS device "/dev/input/event4" [ 1271.883622][T20501] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input172 [ 1271.993116][ T9805] usb 3-1: Cannot set autoneg [ 1272.005389][ T9805] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1272.080080][ T5839] usb 4-1: USB disconnect, device number 8 [ 1272.210706][ T9805] usb 3-1: USB disconnect, device number 92 [ 1272.891437][ T30] audit: type=1326 audit(1760339709.683:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21651 comm="syz.3.5110" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0 [ 1273.069678][T21657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1273.076352][T21657] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1273.126146][T21657] vhci_hcd vhci_hcd.0: Device attached [ 1273.451392][ T9805] usb 39-1: new high-speed USB device number 14 using vhci_hcd [ 1273.471342][ T5839] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1273.619088][T21658] vhci_hcd: connection reset by peer [ 1273.626853][T15763] vhci_hcd: stop threads [ 1273.632048][T15763] vhci_hcd: release socket [ 1273.638178][T15763] vhci_hcd: disconnect device [ 1273.644048][ T5839] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1273.657767][ T5839] usb 3-1: config 0 has no interface number 0 [ 1273.666611][ T5839] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1273.678472][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.724917][ T5839] usb 3-1: config 0 descriptor?? [ 1273.754685][ T5839] usb 3-1: selecting invalid altsetting 1 [ 1273.774847][ T5839] dvb_ttusb_budget: ttusb_init_controller: error [ 1273.791723][ T5839] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1273.996638][ T5839] DVB: Unable to find symbol cx22700_attach() [ 1274.095398][ T5839] DVB: Unable to find symbol tda10046_attach() [ 1274.111352][ T5839] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1274.140852][ T5839] usb 3-1: USB disconnect, device number 93 [ 1274.301506][T14919] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1274.475662][T14919] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1274.495875][T14919] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1274.514741][T14919] usb 2-1: Product: syz [ 1274.524883][T14919] usb 2-1: SerialNumber: syz [ 1274.552247][T14919] usb 2-1: config 0 descriptor?? [ 1274.951283][T21266] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1274.986910][T14919] usb 2-1: USB disconnect, device number 114 [ 1275.111566][T21266] usb 3-1: Using ep0 maxpacket: 32 [ 1275.123167][T21266] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 1275.141851][T21266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.162829][T21266] usb 3-1: config 0 has no interface number 0 [ 1275.184663][T21266] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1275.197249][T21266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.230347][T21266] usb 3-1: Product: syz [ 1275.234996][T21266] usb 3-1: Manufacturer: syz [ 1275.239712][T21266] usb 3-1: SerialNumber: syz [ 1275.262594][T21266] usb 3-1: config 0 descriptor?? [ 1275.279916][T21266] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1275.967794][ T30] audit: type=1326 audit(1760339712.763:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.1.5128" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 1276.091995][T21266] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input173 [ 1276.194762][T21702] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1276.201338][T21702] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1276.231607][T21702] vhci_hcd vhci_hcd.0: Device attached [ 1276.341704][T21266] usb 3-1: USB disconnect, device number 94 [ 1276.451331][T20501] usb 35-1: new high-speed USB device number 13 using vhci_hcd [ 1276.766457][T21703] vhci_hcd: connection reset by peer [ 1276.775237][ T752] vhci_hcd: stop threads [ 1276.779545][ T752] vhci_hcd: release socket [ 1276.785992][ T752] vhci_hcd: disconnect device [ 1276.882944][ T9802] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1277.063697][ T9802] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1277.074651][ T9802] usb 4-1: config 0 has no interface number 0 [ 1277.080888][ T9802] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1277.095346][ T9802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.112364][ T9802] usb 4-1: config 0 descriptor?? [ 1277.137173][ T9802] usb 4-1: selecting invalid altsetting 1 [ 1277.143654][ T9802] dvb_ttusb_budget: ttusb_init_controller: error [ 1277.150099][ T9802] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1277.251073][ T9802] DVB: Unable to find symbol cx22700_attach() [ 1277.323885][ T9802] DVB: Unable to find symbol tda10046_attach() [ 1277.348988][ T9802] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1277.381879][ T9802] usb 4-1: USB disconnect, device number 9 [ 1278.366591][T21726] ================================================================== [ 1278.374799][T21726] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 1278.383525][T21726] Read of size 8 at addr ffff888046dd8408 by task syz.2.5135/21726 [ 1278.391679][T21726] [ 1278.394139][T21726] CPU: 1 UID: 0 PID: 21726 Comm: syz.2.5135 Not tainted syzkaller #0 PREEMPT(full) [ 1278.394156][T21726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1278.394164][T21726] Call Trace: [ 1278.394172][T21726] [ 1278.394178][T21726] dump_stack_lvl+0x189/0x250 [ 1278.394195][T21726] ? __kasan_check_byte+0x12/0x40 [ 1278.394211][T21726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1278.394224][T21726] ? lock_release+0x4b/0x3e0 [ 1278.394242][T21726] ? __virt_addr_valid+0x4a5/0x5c0 [ 1278.394256][T21726] print_report+0xca/0x240 [ 1278.394272][T21726] ? change_page_attr_set_clr+0x625/0xfc0 [ 1278.394288][T21726] kasan_report+0x118/0x150 [ 1278.394303][T21726] ? change_page_attr_set_clr+0x625/0xfc0 [ 1278.394321][T21726] change_page_attr_set_clr+0x625/0xfc0 [ 1278.394339][T21726] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1278.394354][T21726] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1278.394368][T21726] ? memtype_reserve+0x874/0xb30 [ 1278.394394][T21726] _set_pages_array+0x145/0x270 [ 1278.394425][T21726] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1278.394445][T21726] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1278.394466][T21726] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1278.394483][T21726] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1278.394502][T21726] ? ww_mutex_lock+0x3f/0x1c0 [ 1278.394516][T21726] drm_gem_map_attach+0x19c/0x1f0 [ 1278.394529][T21726] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1278.394545][T21726] ? __fget_files+0x3a0/0x420 [ 1278.394561][T21726] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1278.394574][T21726] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1278.394586][T21726] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1278.394605][T21726] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1278.394618][T21726] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1278.394637][T21726] drm_ioctl_kernel+0x2cf/0x390 [ 1278.394653][T21726] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1278.394671][T21726] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1278.394689][T21726] drm_ioctl+0x67f/0xb10 [ 1278.394703][T21726] ? __lock_acquire+0xab9/0xd20 [ 1278.394718][T21726] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1278.394736][T21726] ? __pfx_drm_ioctl+0x10/0x10 [ 1278.394755][T21726] ? __fget_files+0x3a0/0x420 [ 1278.394768][T21726] ? __fget_files+0x2a/0x420 [ 1278.394782][T21726] ? drm_compat_ioctl+0x112/0x330 [ 1278.394799][T21726] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1278.394817][T21726] __ia32_compat_sys_ioctl+0x543/0x840 [ 1278.394830][T21726] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1278.394844][T21726] ? irqentry_exit+0x74/0x90 [ 1278.394855][T21726] ? lockdep_hardirqs_on+0x9c/0x150 [ 1278.394915][T21726] ? syscall_enter_from_user_mode_prepare+0x91/0x110 [ 1278.394930][T21726] __do_fast_syscall_32+0xb6/0x2b0 [ 1278.394948][T21726] do_fast_syscall_32+0x34/0x80 [ 1278.394962][T21726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.394977][T21726] RIP: 0023:0xf709d539 [ 1278.394990][T21726] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1278.395002][T21726] RSP: 002b:00000000f546c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1278.395017][T21726] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c00c642e [ 1278.395026][T21726] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1278.395034][T21726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.395042][T21726] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1278.395049][T21726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.395061][T21726] [ 1278.395066][T21726] [ 1278.755826][T21726] Allocated by task 21726: [ 1278.760433][T21726] kasan_save_track+0x3e/0x80 [ 1278.765136][T21726] __kasan_kmalloc+0x93/0xb0 [ 1278.769743][T21726] __kvmalloc_node_noprof+0x5cd/0x910 [ 1278.775477][T21726] drm_gem_get_pages+0x166/0xa20 [ 1278.780475][T21726] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 1278.786646][T21726] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1278.792389][T21726] drm_gem_map_attach+0x19c/0x1f0 [ 1278.797430][T21726] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1278.803404][T21726] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1278.809769][T21726] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1278.815504][T21726] drm_ioctl_kernel+0x2cf/0x390 [ 1278.820461][T21726] drm_ioctl+0x67f/0xb10 [ 1278.824801][T21726] __ia32_compat_sys_ioctl+0x543/0x840 [ 1278.830279][T21726] __do_fast_syscall_32+0xb6/0x2b0 [ 1278.835404][T21726] do_fast_syscall_32+0x34/0x80 [ 1278.840346][T21726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.846683][T21726] [ 1278.849009][T21726] The buggy address belongs to the object at ffff888046dd8000 [ 1278.849009][T21726] which belongs to the cache kmalloc-2k of size 2048 [ 1278.863586][T21726] The buggy address is located 0 bytes to the right of [ 1278.863586][T21726] allocated 1032-byte region [ffff888046dd8000, ffff888046dd8408) [ 1278.878201][T21726] [ 1278.880532][T21726] The buggy address belongs to the physical page: [ 1278.887114][T21726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46dd8 [ 1278.896227][T21726] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1278.904726][T21726] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1278.912533][T21726] page_type: f5(slab) [ 1278.916520][T21726] raw: 00fff00000000040 ffff88813ffa7000 dead000000000100 dead000000000122 [ 1278.925209][T21726] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1278.933871][T21726] head: 00fff00000000040 ffff88813ffa7000 dead000000000100 dead000000000122 [ 1278.942670][T21726] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1278.951497][T21726] head: 00fff00000000003 ffffea00011b7601 00000000ffffffff 00000000ffffffff [ 1278.960361][T21726] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1278.969077][T21726] page dumped because: kasan: bad access detected [ 1278.975508][T21726] page_owner tracks the page as allocated [ 1278.981289][T21726] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15262, tgid 15250 (syz.2.2985), ts 871304625761, free_ts 870117159572 [ 1279.002483][T21726] post_alloc_hook+0x240/0x2a0 [ 1279.007361][T21726] get_page_from_freelist+0x2365/0x2440 [ 1279.013127][T21726] __alloc_frozen_pages_noprof+0x181/0x370 [ 1279.019149][T21726] alloc_pages_mpol+0x232/0x4a0 [ 1279.024266][T21726] allocate_slab+0x96/0x3a0 [ 1279.028878][T21726] ___slab_alloc+0xe94/0x18a0 [ 1279.033652][T21726] __slab_alloc+0x65/0x100 [ 1279.038248][T21726] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 1279.045176][T21726] kmalloc_reserve+0x136/0x290 [ 1279.049948][T21726] __alloc_skb+0x142/0x2d0 [ 1279.054374][T21726] sctp_packet_transmit+0xf4c/0x2bb0 [ 1279.059813][T21726] sctp_outq_flush+0xecb/0x3140 [ 1279.064674][T21726] sctp_do_sm+0x5332/0x5a20 [ 1279.069192][T21726] sctp_assoc_bh_rcv+0x3f2/0x630 [ 1279.074150][T21726] sctp_backlog_rcv+0x167/0x3f0 [ 1279.079270][T21726] __release_sock+0x297/0x3a0 [ 1279.084038][T21726] page last free pid 9806 tgid 9806 stack trace: [ 1279.090633][T21726] __free_frozen_pages+0xbc4/0xd30 [ 1279.095845][T21726] __put_partials+0x146/0x170 [ 1279.100632][T21726] put_cpu_partial+0x1f2/0x2e0 [ 1279.105505][T21726] __slab_free+0x2b9/0x390 [ 1279.110281][T21726] qlist_free_all+0x97/0x140 [ 1279.114879][T21726] kasan_quarantine_reduce+0x148/0x160 [ 1279.120527][T21726] __kasan_slab_alloc+0x22/0x80 [ 1279.125393][T21726] __kmalloc_cache_noprof+0x36f/0x6f0 [ 1279.130779][T21726] nsim_fib_event+0x4dc/0x8a30 [ 1279.135554][T21726] nsim_fib_event_work+0x249/0x3b0 [ 1279.140966][T21726] process_scheduled_works+0xae1/0x17b0 [ 1279.146692][T21726] worker_thread+0x8a0/0xda0 [ 1279.151294][T21726] kthread+0x711/0x8a0 [ 1279.155368][T21726] ret_from_fork+0x4bc/0x870 [ 1279.160066][T21726] ret_from_fork_asm+0x1a/0x30 [ 1279.164847][T21726] [ 1279.167175][T21726] Memory state around the buggy address: [ 1279.172803][T21726] ffff888046dd8300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1279.180961][T21726] ffff888046dd8380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1279.189210][T21726] >ffff888046dd8400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1279.197615][T21726] ^ [ 1279.201944][T21726] ffff888046dd8480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1279.210016][T21726] ffff888046dd8500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1279.218429][T21726] ================================================================== [ 1279.247186][T21726] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1279.254934][T21726] CPU: 0 UID: 0 PID: 21726 Comm: syz.2.5135 Not tainted syzkaller #0 PREEMPT(full) [ 1279.264874][T21726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1279.275027][T21726] Call Trace: [ 1279.278406][T21726] [ 1279.281342][T21726] dump_stack_lvl+0x99/0x250 [ 1279.286053][T21726] ? __asan_memcpy+0x40/0x70 [ 1279.290750][T21726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1279.295974][T21726] ? __pfx__printk+0x10/0x10 [ 1279.300573][T21726] vpanic+0x237/0x6d0 [ 1279.304645][T21726] ? __pfx_vpanic+0x10/0x10 [ 1279.309186][T21726] ? preempt_schedule+0xae/0xc0 [ 1279.314052][T21726] ? __pfx_preempt_schedule+0x10/0x10 [ 1279.319612][T21726] panic+0xb9/0xc0 [ 1279.323359][T21726] ? __pfx_panic+0x10/0x10 [ 1279.327904][T21726] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1279.333821][T21726] ? change_page_attr_set_clr+0x625/0xfc0 [ 1279.339644][T21726] check_panic_on_warn+0x89/0xb0 [ 1279.344763][T21726] ? change_page_attr_set_clr+0x625/0xfc0 [ 1279.350501][T21726] end_report+0x78/0x160 [ 1279.354771][T21726] kasan_report+0x129/0x150 [ 1279.359470][T21726] ? change_page_attr_set_clr+0x625/0xfc0 [ 1279.365202][T21726] change_page_attr_set_clr+0x625/0xfc0 [ 1279.370763][T21726] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1279.377194][T21726] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1279.383451][T21726] ? memtype_reserve+0x874/0xb30 [ 1279.388574][T21726] _set_pages_array+0x145/0x270 [ 1279.393467][T21726] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1279.399560][T21726] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1279.406425][T21726] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1279.412337][T21726] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1279.418685][T21726] ? ww_mutex_lock+0x3f/0x1c0 [ 1279.423466][T21726] drm_gem_map_attach+0x19c/0x1f0 [ 1279.428607][T21726] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1279.434110][T21726] ? __fget_files+0x3a0/0x420 [ 1279.438814][T21726] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1279.445691][T21726] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1279.451949][T21726] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1279.457856][T21726] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1279.464712][T21726] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1279.470712][T21726] drm_ioctl_kernel+0x2cf/0x390 [ 1279.475574][T21726] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1279.482001][T21726] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1279.487484][T21726] drm_ioctl+0x67f/0xb10 [ 1279.491736][T21726] ? __lock_acquire+0xab9/0xd20 [ 1279.496826][T21726] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1279.503450][T21726] ? __pfx_drm_ioctl+0x10/0x10 [ 1279.508322][T21726] ? __fget_files+0x3a0/0x420 [ 1279.513007][T21726] ? __fget_files+0x2a/0x420 [ 1279.517602][T21726] ? drm_compat_ioctl+0x112/0x330 [ 1279.522636][T21726] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1279.528380][T21726] __ia32_compat_sys_ioctl+0x543/0x840 [ 1279.533946][T21726] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1279.540027][T21726] ? irqentry_exit+0x74/0x90 [ 1279.544658][T21726] ? lockdep_hardirqs_on+0x9c/0x150 [ 1279.550215][T21726] ? syscall_enter_from_user_mode_prepare+0x91/0x110 [ 1279.557161][T21726] __do_fast_syscall_32+0xb6/0x2b0 [ 1279.562570][T21726] do_fast_syscall_32+0x34/0x80 [ 1279.567621][T21726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1279.574776][T21726] RIP: 0023:0xf709d539 [ 1279.579118][T21726] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1279.599174][T21726] RSP: 002b:00000000f546c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1279.607690][T21726] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c00c642e [ 1279.615930][T21726] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1279.623959][T21726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1279.632110][T21726] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1279.640257][T21726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1279.648373][T21726] [ 1279.651643][T21726] Kernel Offset: disabled [ 1279.656050][T21726] Rebooting in 86400 seconds..