last executing test programs: 15.52422389s ago: executing program 2 (id=2044): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x536, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 12.643478022s ago: executing program 2 (id=2056): syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 11.440066049s ago: executing program 0 (id=2058): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.19188549s ago: executing program 2 (id=2061): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r1 = dup(r0) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) write$6lowpan_enable(r1, 0x0, 0x0) 9.19165807s ago: executing program 0 (id=2062): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000008c0)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x1c, &(0x7f00000001c0)={0x0, 0x7, 0x1, 'F'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.671218532s ago: executing program 3 (id=2064): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x536, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 7.851995588s ago: executing program 2 (id=2066): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x24000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x1e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) gettid() timer_create(0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) connect$pptp(r2, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6(0xa, 0x3, 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 6.645589575s ago: executing program 1 (id=2068): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1002) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x3) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = syz_open_dev$cec(0x0, 0x0, 0x2182) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x0, 0xfffffffc, 0x9, '&\x00', 0x0, 0x3, 0xcb, 0x0, 0x0, 0x0, 0xe}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(0x0) 6.635035016s ago: executing program 2 (id=2069): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 5.488093628s ago: executing program 0 (id=2070): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) 5.450083812s ago: executing program 1 (id=2071): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24003b84, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x5c, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x300}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r4, 0x0, 0x8000002b) 5.381538447s ago: executing program 3 (id=2072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xa, 0xaa, &(0x7f0000000140)=""/170, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x5000, 0x3, 0x2, 0x0, 0x0, [{0x5, 0x8, 0x6, '\x00', 0x9}, {0x3, 0x1, 0xd1, '\x00', 0x3}, {0xfe, 0x5, 0x3, '\x00', 0x69}, {0x0, 0x4, 0x19, '\x00', 0xff}, {0x1, 0xd, 0x2, '\x00', 0x7}, {0x1, 0x27, 0x3, '\x00', 0x7}, {0xc, 0x9, 0x2, '\x00', 0x4}, {0x85, 0x1, 0x6, '\x00', 0x7}, {0x9, 0x9, 0x1, '\x00', 0x6}, {0x8, 0x4, 0xd, '\x00', 0x5}, {0xff, 0xb6, 0x3, '\x00', 0x80}, {0x7, 0x0, 0x81, '\x00', 0x3}, {0x8, 0x1, 0x4, '\x00', 0x2}, {0x8, 0xfe, 0x60, '\x00', 0x1}, {0x7, 0x3, 0x3, '\x00', 0x10}, {0x9, 0x6, 0x4, '\x00', 0x2}, {0x8, 0x4, 0xec, '\x00', 0x5}, {0x8, 0x8}, {0x8, 0x8, 0x5, '\x00', 0x1}, {0x3, 0x8, 0x6, '\x00', 0x4}, {0x7, 0x3, 0xf, '\x00', 0x7}, {0x2, 0x0, 0xf1, '\x00', 0xcf}, {0x2, 0x9, 0x5, '\x00', 0x7}, {0x2, 0x0, 0x9, '\x00', 0x7}]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) getpeername$unix(r2, &(0x7f0000000300), &(0x7f0000000000)=0x6e) sendmsg$nl_route(r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r7, &(0x7f00000000c0), 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000042) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 3.399879667s ago: executing program 0 (id=2073): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x40051) r1 = syz_open_dev$radio(&(0x7f0000000580), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x1}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x454e, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r7, 0x0, 0x3, 0x1}}, 0x20) 3.255582538s ago: executing program 3 (id=2074): unshare(0x2c060000) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) 2.595037311s ago: executing program 1 (id=2075): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f00000022c0)="22cff580", 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) 2.496048799s ago: executing program 3 (id=2076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b00000000050005000200000005"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) 2.295487125s ago: executing program 3 (id=2077): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x24000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x36}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) gettid() timer_create(0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) connect$pptp(r2, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6(0xa, 0x3, 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 1.634848109s ago: executing program 1 (id=2078): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0xe9) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x4) getpid() 556.230296ms ago: executing program 3 (id=2079): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1002) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x3) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = syz_open_dev$cec(0x0, 0x0, 0x2182) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x0, 0xfffffffc, 0x9, '&\x00', 0x0, 0x3, 0xcb, 0x0, 0x0, 0x0, 0xe}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(0x0) 555.628156ms ago: executing program 0 (id=2080): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 323.766004ms ago: executing program 1 (id=2081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900013000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a080006400000000108000440"], 0x94}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 271.030489ms ago: executing program 0 (id=2082): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xa, 0xaa, &(0x7f0000000140)=""/170, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x5000, 0x3, 0x2, 0x0, 0x0, [{0x5, 0x8, 0x6, '\x00', 0x9}, {0x3, 0x1, 0xd1, '\x00', 0x3}, {0xfe, 0x5, 0x3, '\x00', 0x69}, {0x0, 0x4, 0x19, '\x00', 0xff}, {0x1, 0xd, 0x2, '\x00', 0x7}, {0x1, 0x27, 0x3, '\x00', 0x7}, {0xc, 0x9, 0x2, '\x00', 0x4}, {0x85, 0x1, 0x6, '\x00', 0x7}, {0x9, 0x9, 0x1, '\x00', 0x6}, {0x8, 0x4, 0xd, '\x00', 0x5}, {0xff, 0xb6, 0x3, '\x00', 0x80}, {0x7, 0x0, 0x81, '\x00', 0x3}, {0x8, 0x1, 0x4, '\x00', 0x2}, {0x8, 0xfe, 0x60, '\x00', 0x1}, {0x7, 0x3, 0x3, '\x00', 0x10}, {0x9, 0x6, 0x4, '\x00', 0x2}, {0x8, 0x4, 0xec, '\x00', 0x5}, {0x8, 0x8}, {0x8, 0x8, 0x5, '\x00', 0x1}, {0x3, 0x8, 0x6, '\x00', 0x4}, {0x7, 0x3, 0xf, '\x00', 0x7}, {0x2, 0x0, 0xf1, '\x00', 0xcf}, {0x2, 0x9, 0x5, '\x00', 0x7}, {0x2, 0x0, 0x9, '\x00', 0x7}]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) getpeername$unix(r2, &(0x7f0000000300), &(0x7f0000000000)=0x6e) sendmsg$nl_route(r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r7, &(0x7f00000000c0), 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000042) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 80.583094ms ago: executing program 1 (id=2083): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24003b84, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x5c, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x300}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r4, 0x0, 0x8000002b) 0s ago: executing program 2 (id=2084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) kernel console output (not intermixed with test programs): d_file:0 [ 163.866953][ T6811] unevictable:756 dirty:91 writeback:0 [ 163.866953][ T6811] slab_reclaimable:10289 slab_unreclaimable:92549 [ 163.866953][ T6811] mapped:27501 shmem:4307 pagetables:617 [ 163.866953][ T6811] sec_pagetables:0 bounce:0 [ 163.866953][ T6811] kernel_misc_reclaimable:0 [ 163.866953][ T6811] free:1366011 free_pcp:7441 free_cma:0 [ 163.913211][ T6811] Node 0 active_anon:32524kB inactive_anon:0kB active_file:3312kB inactive_file:161152kB unevictable:1488kB isolated(anon):0kB isolated(file):0kB mapped:98704kB dirty:364kB writeback:0kB shmem:14692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12108kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no [ 163.945857][ T6811] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 163.997151][ T6811] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.029535][ T6811] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 164.035776][ T6811] Node 0 DMA32 free:1552632kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21996kB inactive_anon:0kB active_file:3408kB inactive_file:159832kB unevictable:1536kB writepending:380kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:19812kB local_pcp:14620kB free_cma:0kB [ 164.066724][ T6811] lowmem_reserve[]: 0 0 1 1 1 [ 164.071612][ T6811] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.136283][ T6811] lowmem_reserve[]: 0 0 0 0 0 [ 164.141125][ T6811] Node 1 Normal free:3896040kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22468kB local_pcp:12032kB free_cma:0kB [ 164.176071][ T6811] lowmem_reserve[]: 0 0 0 0 0 [ 164.256787][ T6811] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.305304][ T6811] Node 0 DMA32: 218*4kB (UME) 368*8kB (UME) 329*16kB (UME) 394*32kB (UME) 181*64kB (UME) 66*128kB (UME) 46*256kB (UME) 24*512kB (UM) 8*1024kB (M) 8*2048kB (UME) 357*4096kB (UM) = 1552632kB [ 164.350826][ T6811] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 164.395079][ T6811] Node 1 Normal: 234*4kB (UM) 62*8kB (UME) 41*16kB (UME) 60*32kB (UME) 21*64kB (UME) 6*128kB (UE) 1*256kB (U) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896040kB [ 164.434707][ T6811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.455238][ T6811] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.493965][ T6811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.509245][ T6811] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.534713][ T6811] 42644 total pagecache pages [ 164.539490][ T6811] 0 pages in swap cache [ 164.543696][ T6811] Free swap = 124704kB [ 164.554762][ T6811] Total swap = 124996kB [ 164.559207][ T6811] 2097051 pages RAM [ 164.563083][ T6811] 0 pages HighMem/MovableOnly [ 164.586201][ T6811] 416139 pages reserved [ 164.590943][ T6811] 0 pages cma reserved [ 165.454134][ T6883] geneve2: entered promiscuous mode [ 165.479053][ T6883] geneve2: entered allmulticast mode [ 165.797850][ T28] audit: type=1326 audit(1756733150.081:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 165.817984][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 165.871826][ T28] audit: type=1326 audit(1756733150.081:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 165.895202][ T28] audit: type=1326 audit(1756733150.081:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 165.988364][ T28] audit: type=1326 audit(1756733150.081:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 166.041673][ T28] audit: type=1326 audit(1756733150.081:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 166.173663][ T28] audit: type=1326 audit(1756733150.121:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 166.268163][ T28] audit: type=1326 audit(1756733150.121:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 166.302589][ T28] audit: type=1326 audit(1756733150.121:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 166.331514][ T28] audit: type=1326 audit(1756733150.131:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 166.355316][ T28] audit: type=1326 audit(1756733150.131:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 166.705664][ T6604] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.771136][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 166.921157][ T6604] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.952161][ T6604] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.976423][ T6604] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.004191][ T6604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.022728][ T6604] usb 1-1: SerialNumber: syz [ 167.353377][ T6604] usb 1-1: 0:2 : does not exist [ 167.389902][ T6604] usb 1-1: USB disconnect, device number 6 [ 167.498248][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.299960][ T6999] mmap: syz.3.398 (6999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.342559][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 171.342577][ T28] audit: type=1326 audit(1756733155.581:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.3.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 171.381672][ T28] audit: type=1326 audit(1756733155.581:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.3.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 171.404733][ T28] audit: type=1326 audit(1756733155.581:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.3.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 171.497864][ T28] audit: type=1326 audit(1756733155.591:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.3.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 173.046784][ T6604] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.288685][ T6604] usb 1-1: Using ep0 maxpacket: 32 [ 174.320750][ T6604] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 174.338484][ T6604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.373778][ T6604] usb 1-1: config 0 has no interface number 0 [ 174.381857][ T6604] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 174.397935][ T6604] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 174.413323][ T6604] usb 1-1: config 0 interface 8 has no altsetting 0 [ 174.456647][ T6604] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 174.489941][ T6604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.503401][ T6604] usb 1-1: Product: syz [ 174.534889][ T6604] usb 1-1: Manufacturer: syz [ 174.559810][ T6604] usb 1-1: SerialNumber: syz [ 174.634735][ T6604] usb 1-1: config 0 descriptor?? [ 174.824939][ T6604] usb 1-1: can't set config #0, error -71 [ 175.636782][ T6604] usb 1-1: USB disconnect, device number 7 [ 177.214655][ T6616] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.528700][ T6616] usb 2-1: Using ep0 maxpacket: 32 [ 177.745670][ T6616] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 177.756483][ T6616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.647033][ T6616] usb 2-1: config 0 has no interface number 0 [ 178.653234][ T6616] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 178.890494][ T6616] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 179.034525][ T6616] usb 2-1: config 0 interface 8 has no altsetting 0 [ 179.109623][ T6616] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 179.136423][ T6616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.169528][ T6616] usb 2-1: Product: syz [ 179.173781][ T6616] usb 2-1: Manufacturer: syz [ 179.195392][ T6616] usb 2-1: SerialNumber: syz [ 179.207679][ T6616] usb 2-1: config 0 descriptor?? [ 179.424792][ T6619] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 179.462526][ T6616] ath6kl: Failed to submit usb control message: -71 [ 179.500743][ T6616] ath6kl: unable to send the bmi data to the device: -71 [ 179.521135][ T6616] ath6kl: Unable to send get target info: -71 [ 179.551145][ T6616] ath6kl: Failed to init ath6kl core: -71 [ 179.578303][ T6616] ath6kl_usb: probe of 2-1:0.8 failed with error -71 [ 179.618067][ T6616] usb 2-1: USB disconnect, device number 5 [ 179.629295][ T6619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.665815][ T6619] usb 1-1: config 0 has no interfaces? [ 179.690767][ T6619] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.730653][ T6619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.785824][ T6619] usb 1-1: config 0 descriptor?? [ 180.557071][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 180.603644][ T6610] usb 1-1: USB disconnect, device number 8 [ 182.145913][ T7121] kvm: pic: non byte write [ 182.267993][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 182.966216][ T7139] netlink: 120 bytes leftover after parsing attributes in process `syz.0.453'. [ 184.074302][ T7153] sp0: Synchronizing with TNC [ 184.124868][ T6609] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.225194][ T6610] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 184.762766][ T6609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.774522][ T6609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.777235][ T6610] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.817821][ T6609] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.832390][ T6610] usb 3-1: config 0 has no interface number 0 [ 184.838909][ T6610] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 184.848193][ T6609] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.857664][ T6610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.866222][ T6609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.879187][ T6609] usb 2-1: config 0 descriptor?? [ 184.885971][ T6610] usb 3-1: config 0 descriptor?? [ 184.908739][ T6610] usb 3-1: selecting invalid altsetting 1 [ 184.928961][ T6610] dvb_ttusb_budget: ttusb_init_controller: error [ 184.955611][ T6610] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 185.676203][ T6609] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 185.810079][ T6609] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 185.840427][ T6610] DVB: Unable to find symbol cx22700_attach() [ 185.974507][ T6610] DVB: Unable to find symbol tda10046_attach() [ 185.989262][ T6610] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 186.029058][ T6610] usb 3-1: USB disconnect, device number 5 [ 188.342254][ T6609] usb 2-1: USB disconnect, device number 6 [ 193.727042][ T7267] syz.0.498[7267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.727192][ T7267] syz.0.498[7267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.846584][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.866125][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.324776][ T7320] ceph: No mds server is up or the cluster is laggy [ 197.332202][ T6616] libceph: connect (1)[c::]:6789 error -101 [ 197.353593][ T6616] libceph: mon0 (1)[c::]:6789 connect error [ 198.107304][ T7343] netlink: 6160 bytes leftover after parsing attributes in process `syz.2.526'. [ 199.229971][ T7349] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 199.732833][ T7359] smb3: Unknown parameter 'rdma3ۣ#989?\?mGiXR~Eڟ[_r/Wnn޸qOPML{2/D#DkLL~8@<T4lݬo\ŵX1q)+T_^dZiV/T>Vz;ղc˿' [ 199.732877][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 199.811216][ T7362] team0: Port device batadv1 added [ 202.777644][ T6604] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.034942][ T6604] usb 2-1: Using ep0 maxpacket: 8 [ 203.595505][ T6604] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 203.610928][ T6604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.620054][ T6604] usb 2-1: Product: syz [ 203.624311][ T6604] usb 2-1: Manufacturer: syz [ 203.629475][ T6604] usb 2-1: SerialNumber: syz [ 203.637081][ T6604] usb 2-1: config 0 descriptor?? [ 203.657220][ T6604] gspca_main: sq905-2.14.0 probing 2770:9120 [ 204.772257][ T6604] gspca_sq905: bulk read fail (-22) len 0/4 [ 204.779644][ T6604] sq905: probe of 2-1:0.0 failed with error -5 [ 205.078336][ T6609] usb 2-1: USB disconnect, device number 7 [ 205.112458][ T6604] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 205.479714][ T6604] usb 3-1: Using ep0 maxpacket: 32 [ 205.519923][ T6604] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 205.560723][ T6604] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.611234][ T6604] usb 3-1: config 0 has no interface number 0 [ 205.638073][ T6604] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 205.662884][ T6604] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 205.686834][ T6604] usb 3-1: config 0 interface 8 has no altsetting 0 [ 205.714140][ T6604] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 205.744043][ T6604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.765186][ T6604] usb 3-1: Product: syz [ 205.769534][ T6604] usb 3-1: Manufacturer: syz [ 205.774250][ T6604] usb 3-1: SerialNumber: syz [ 205.850327][ T6604] usb 3-1: config 0 descriptor?? [ 206.076842][ T7427] overlayfs: failed to resolve './file0': -2 [ 206.154736][ T6604] ath6kl: Failed to submit usb control message: -71 [ 206.161465][ T6604] ath6kl: unable to send the bmi data to the device: -71 [ 206.213489][ T6604] ath6kl: Unable to send get target info: -71 [ 206.245824][ T6604] ath6kl: Failed to init ath6kl core: -71 [ 206.278616][ T6604] ath6kl_usb: probe of 3-1:0.8 failed with error -71 [ 206.352662][ T6604] usb 3-1: USB disconnect, device number 6 [ 206.909468][ T7451] overlayfs: failed to resolve './file0': -2 [ 207.160478][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 207.160646][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 207.160852][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 207.960455][ T7462] Zero length message leads to an empty skb [ 208.191044][ T28] audit: type=1326 audit(1756733192.461:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.252971][ T28] audit: type=1326 audit(1756733192.461:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.334772][ T28] audit: type=1326 audit(1756733192.511:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.367159][ T28] audit: type=1326 audit(1756733192.531:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.419307][ T28] audit: type=1326 audit(1756733192.531:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.464682][ T28] audit: type=1326 audit(1756733192.571:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27cf5c14a5 code=0x7ffc0000 [ 208.525973][ T28] audit: type=1326 audit(1756733192.601:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.548359][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.644712][ T28] audit: type=1326 audit(1756733192.601:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.737556][ T28] audit: type=1326 audit(1756733192.601:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.808464][ T28] audit: type=1326 audit(1756733192.601:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 208.831607][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.024954][ T5799] Bluetooth: hci4: command 0x1003 tx timeout [ 210.035069][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 210.468590][ T7516] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 212.990771][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 213.900699][ T6616] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.539957][ T6616] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.564644][ T6616] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.594716][ T6616] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 214.604254][ T6616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.652262][ T7559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.697095][ T6616] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 214.917622][ T6616] usb 1-1: USB disconnect, device number 9 [ 215.847892][ T7595] overlayfs: failed to clone upperpath [ 216.628471][ T7615] netlink: 224 bytes leftover after parsing attributes in process `syz.0.636'. [ 219.432766][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 219.460576][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 219.460594][ T28] audit: type=1326 audit(1756733203.741:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 219.542614][ T28] audit: type=1326 audit(1756733203.741:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 219.618544][ T28] audit: type=1326 audit(1756733203.741:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 219.693344][ T28] audit: type=1326 audit(1756733203.741:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 219.769003][ T28] audit: type=1326 audit(1756733203.741:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 219.830614][ T28] audit: type=1326 audit(1756733203.741:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 219.870281][ T28] audit: type=1326 audit(1756733203.741:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 219.902489][ T28] audit: type=1326 audit(1756733203.741:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 219.926114][ T28] audit: type=1326 audit(1756733203.741:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 220.363864][ T28] audit: type=1326 audit(1756733203.781:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 221.104351][ T7684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.395685][ T5799] Bluetooth: hci4: command 0x1003 tx timeout [ 221.395943][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 222.388424][ T7686] overlayfs: failed to resolve './file0': -2 [ 222.862541][ T7700] veth0_to_team: entered promiscuous mode [ 222.882242][ T7700] veth0_to_team: entered allmulticast mode [ 224.149764][ T6616] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 224.234900][ T6604] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 224.336952][ T6616] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 224.354616][ T6616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.375779][ T6616] usb 3-1: config 0 descriptor?? [ 224.434895][ T6604] usb 1-1: Using ep0 maxpacket: 32 [ 224.456817][ T6604] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.477329][ T6604] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 224.501616][ T6604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.513207][ T6604] usb 1-1: Product: syz [ 224.521004][ T6604] usb 1-1: Manufacturer: syz [ 224.529299][ T6604] usb 1-1: SerialNumber: syz [ 224.549183][ T6604] usb 1-1: config 0 descriptor?? [ 224.602980][ T6616] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 224.776301][ T7721] overlayfs: failed to resolve './file0': -2 [ 224.986794][ T6604] gs_usb 1-1:0.0: Configuring for 155 interfaces [ 224.993338][ T6604] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 225.044679][ T6604] gs_usb: probe of 1-1:0.0 failed with error -22 [ 225.207222][ T6604] usb 1-1: USB disconnect, device number 10 [ 225.984238][ T7748] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 226.222548][ T6616] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 226.250879][ T6616] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 226.283833][ T6616] asix: probe of 3-1:0.0 failed with error -71 [ 226.335903][ T6616] usb 3-1: USB disconnect, device number 7 [ 227.085705][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 227.085718][ T28] audit: type=1326 audit(1756733211.371:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 227.148441][ T28] audit: type=1326 audit(1756733211.371:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 227.181378][ T28] audit: type=1326 audit(1756733211.391:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 227.234630][ T28] audit: type=1326 audit(1756733211.391:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 227.295066][ T28] audit: type=1326 audit(1756733211.391:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 227.963836][ T7792] tipc: Enabling of bearer rejected, failed to enable media [ 229.794758][ T6616] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 229.974636][ T6616] usb 3-1: Using ep0 maxpacket: 32 [ 229.978710][ T6616] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 229.978732][ T6616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.978745][ T6616] usb 3-1: config 0 has no interface number 0 [ 229.978777][ T6616] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 229.978796][ T6616] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 229.978815][ T6616] usb 3-1: config 0 interface 8 has no altsetting 0 [ 229.981672][ T6616] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 229.981695][ T6616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.981732][ T6616] usb 3-1: Product: syz [ 229.981742][ T6616] usb 3-1: Manufacturer: syz [ 229.981753][ T6616] usb 3-1: SerialNumber: syz [ 229.990086][ T6616] usb 3-1: config 0 descriptor?? [ 230.293472][ T6616] ath6kl: Failed to submit usb control message: -71 [ 230.353102][ T6616] ath6kl: unable to send the bmi data to the device: -71 [ 230.429351][ T6616] ath6kl: Unable to send get target info: -71 [ 230.497865][ T6616] ath6kl: Failed to init ath6kl core: -71 [ 230.517685][ T6616] ath6kl_usb: probe of 3-1:0.8 failed with error -71 [ 230.541889][ T6616] usb 3-1: USB disconnect, device number 8 [ 232.586655][ T5793] Bluetooth: hci0: link tx timeout [ 232.593883][ T5793] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.364698][ T6610] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 233.574506][ T6610] usb 3-1: Using ep0 maxpacket: 32 [ 233.582507][ T6610] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 233.605678][ T6610] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.625388][ T6610] usb 3-1: config 0 has no interface number 0 [ 233.631596][ T6610] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 233.646696][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 233.680024][ T6610] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 233.700276][ T6610] usb 3-1: config 0 interface 8 has no altsetting 0 [ 233.727352][ T6610] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 233.742287][ T6610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.759949][ T6610] usb 3-1: Product: syz [ 233.779935][ T6610] usb 3-1: Manufacturer: syz [ 233.785081][ T6610] usb 3-1: SerialNumber: syz [ 233.804270][ T6610] usb 3-1: config 0 descriptor?? [ 234.173538][ T6610] ath6kl: Failed to submit usb control message: -71 [ 234.181543][ T6610] ath6kl: unable to send the bmi data to the device: -71 [ 234.194714][ T6610] ath6kl: Unable to send get target info: -71 [ 234.207506][ T6610] ath6kl: Failed to init ath6kl core: -71 [ 234.215147][ T6610] ath6kl_usb: probe of 3-1:0.8 failed with error -71 [ 234.310141][ T6610] usb 3-1: USB disconnect, device number 9 [ 234.679695][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 237.615037][ T28] audit: type=1326 audit(1756733221.891:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 237.746630][ T28] audit: type=1326 audit(1756733221.891:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 238.654666][ T6616] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.904627][ T6616] usb 1-1: Using ep0 maxpacket: 8 [ 239.347232][ T28] audit: type=1326 audit(1756733223.631:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 239.381792][ T6616] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 239.407319][ T6616] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.433806][ T6616] usb 1-1: config 0 has no interfaces? [ 239.441797][ T6616] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 239.460098][ T6616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.471146][ T28] audit: type=1326 audit(1756733223.631:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 239.516546][ T6616] usb 1-1: config 0 descriptor?? [ 239.554910][ T28] audit: type=1326 audit(1756733223.711:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 239.628770][ T28] audit: type=1326 audit(1756733223.721:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 239.705476][ T28] audit: type=1326 audit(1756733223.721:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 239.756637][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 239.767005][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 239.782985][ T7956] ip6gretap0: entered promiscuous mode [ 239.827609][ T7956] syz_tun: entered promiscuous mode [ 240.748630][ T7970] overlayfs: failed to resolve './file0': -2 [ 241.314877][ T6616] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 241.474870][ T6617] usb 1-1: USB disconnect, device number 11 [ 241.514645][ T6616] usb 2-1: Using ep0 maxpacket: 32 [ 241.558695][ T6616] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 241.576871][ T6616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.610519][ T6616] usb 2-1: config 0 has no interface number 0 [ 241.618510][ T6616] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 241.629865][ T6616] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 241.643598][ T6616] usb 2-1: config 0 interface 8 has no altsetting 0 [ 241.660872][ T6616] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 241.675678][ T6616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.684602][ T6616] usb 2-1: Product: syz [ 241.688821][ T6616] usb 2-1: Manufacturer: syz [ 241.693464][ T6616] usb 2-1: SerialNumber: syz [ 241.731428][ T6616] usb 2-1: config 0 descriptor?? [ 242.079368][ T6616] ath6kl: Failed to submit usb control message: -71 [ 242.104872][ T6616] ath6kl: unable to send the bmi data to the device: -71 [ 242.149320][ T6616] ath6kl: Unable to send get target info: -71 [ 242.193333][ T6616] ath6kl: Failed to init ath6kl core: -71 [ 242.218451][ T6616] ath6kl_usb: probe of 2-1:0.8 failed with error -71 [ 242.240929][ T6616] usb 2-1: USB disconnect, device number 8 [ 243.955349][ T8023] overlayfs: failed to resolve './file0': -2 [ 245.312217][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 245.314912][ T5793] Bluetooth: hci4: command 0x1003 tx timeout [ 245.795950][ T8061] ALSA: mixer_oss: invalid OSS volume '' [ 246.209618][ T5793] Bluetooth: hci4: sending frame failed (-49) [ 246.218834][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 247.219003][ T8080] syz.0.830 uses old SIOCAX25GETINFO [ 247.618367][ T8090] ALSA: mixer_oss: invalid OSS volume '*\' [ 248.707858][ T8115] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.058768][ T6617] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 249.281400][ T6617] usb 2-1: Using ep0 maxpacket: 8 [ 249.301926][ T6617] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 249.342565][ T6617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.421245][ T6617] usb 2-1: Product: syz [ 249.445719][ T6617] usb 2-1: Manufacturer: syz [ 249.484810][ T6617] usb 2-1: SerialNumber: syz [ 249.514372][ T6617] usb 2-1: config 0 descriptor?? [ 249.725522][ T6605] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.758599][ T6617] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 249.924771][ T6605] usb 3-1: Using ep0 maxpacket: 16 [ 249.936716][ T6605] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 249.953405][ T6605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.970141][ T6605] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.999636][ T6605] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 250.015319][ T6605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.044913][ T6605] usb 3-1: config 0 descriptor?? [ 250.062161][ T6605] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 250.118571][ T6617] usb write operation failed. (-71) [ 250.154488][ T6617] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 250.175178][ T6617] dvbdev: DVB: registering new adapter (Terratec H7) [ 250.182046][ T6617] usb 2-1: media controller created [ 250.215633][ T6617] usb read operation failed. (-71) [ 250.224229][ T6617] usb write operation failed. (-71) [ 250.236021][ T6617] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 250.252816][ T6617] usb 2-1: USB disconnect, device number 9 [ 250.295792][ T6609] usb 3-1: USB disconnect, device number 10 [ 252.014661][ T6605] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.224782][ T6605] usb 3-1: Using ep0 maxpacket: 16 [ 252.247649][ T6605] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 252.265393][ T6605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.281267][ T6605] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.316548][ T6605] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 252.329305][ T6605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.355082][ T6605] usb 3-1: config 0 descriptor?? [ 252.370562][ T6605] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 252.612913][ T6617] usb 3-1: USB disconnect, device number 11 [ 252.664650][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 252.666134][ T5793] Bluetooth: hci4: command 0x1003 tx timeout [ 253.297207][ T8216] /dev/loop0: Can't open blockdev [ 253.554731][ T5852] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 254.154679][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 254.166733][ T5852] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 254.192927][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.240325][ T5852] usb 2-1: config 0 has no interface number 0 [ 254.265289][ T5852] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 254.284708][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 254.298805][ T8232] bridge_slave_1: left allmulticast mode [ 254.300236][ T5852] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 254.308594][ T8232] bridge_slave_1: left promiscuous mode [ 254.324489][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.334677][ T5852] usb 2-1: config 0 interface 8 has no altsetting 0 [ 254.343909][ T8232] bridge_slave_0: left allmulticast mode [ 254.345956][ T5852] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 254.356073][ T8232] bridge_slave_0: left promiscuous mode [ 254.369083][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.372320][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.384580][ T5852] usb 2-1: Product: syz [ 254.384603][ T5852] usb 2-1: Manufacturer: syz [ 254.397967][ T5852] usb 2-1: SerialNumber: syz [ 254.415133][ T5852] usb 2-1: config 0 descriptor?? [ 254.419169][ T8218] overlayfs: missing 'lowerdir' [ 254.663643][ T5852] ath6kl: Failed to submit usb control message: -71 [ 254.674391][ T5852] ath6kl: unable to send the bmi data to the device: -71 [ 254.692393][ T5852] ath6kl: Unable to send get target info: -71 [ 254.714134][ T5852] ath6kl: Failed to init ath6kl core: -71 [ 254.740574][ T5852] ath6kl_usb: probe of 2-1:0.8 failed with error -71 [ 254.779286][ T5852] usb 2-1: USB disconnect, device number 10 [ 255.824664][ T6605] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 256.042383][ T6605] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 256.065920][ T6605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.093170][ T6605] usb 3-1: config 0 descriptor?? [ 256.119702][ T8253] overlayfs: missing 'lowerdir' [ 256.184845][ T5793] Bluetooth: hci4: command 0x1003 tx timeout [ 256.185010][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 256.269580][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.279091][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.778396][ T6605] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 257.815388][ T6605] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 257.843990][ T6605] asix: probe of 3-1:0.0 failed with error -71 [ 257.866917][ T6605] usb 3-1: USB disconnect, device number 12 [ 258.266742][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.278366][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.484730][ T8311] netlink: 'syz.1.926': attribute type 16 has an invalid length. [ 258.507135][ T8311] netlink: 'syz.1.926': attribute type 17 has an invalid length. [ 258.623872][ T8311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.651267][ T8306] tipc: Enabling of bearer rejected, failed to enable media [ 260.128723][ T6605] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.334776][ T6605] usb 3-1: Using ep0 maxpacket: 32 [ 260.358134][ T6605] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 260.385107][ T6605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.408682][ T6605] usb 3-1: config 0 has no interface number 0 [ 260.428702][ T6605] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 260.444294][ T6605] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 260.458729][ T6605] usb 3-1: config 0 interface 8 has no altsetting 0 [ 260.468796][ T6605] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 260.494140][ T6605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.511342][ T6605] usb 3-1: Product: syz [ 260.524629][ T6605] usb 3-1: Manufacturer: syz [ 260.531099][ T6605] usb 3-1: SerialNumber: syz [ 260.557158][ T6605] usb 3-1: config 0 descriptor?? [ 260.797989][ T6605] ath6kl: Failed to submit usb control message: -71 [ 260.809573][ T6605] ath6kl: unable to send the bmi data to the device: -71 [ 260.818811][ T6605] ath6kl: Unable to send get target info: -71 [ 260.841489][ T6605] ath6kl: Failed to init ath6kl core: -71 [ 260.869854][ T6605] ath6kl_usb: probe of 3-1:0.8 failed with error -71 [ 260.895552][ T6605] usb 3-1: USB disconnect, device number 13 [ 263.340725][ T8414] netlink: 'syz.3.971': attribute type 16 has an invalid length. [ 263.371444][ T8414] netlink: 'syz.3.971': attribute type 17 has an invalid length. [ 263.646020][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.656212][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.670920][ T8414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.757773][ T8418] bridge0: port 3(gretap0) entered disabled state [ 263.821417][ T8417] netlink: 'syz.2.972': attribute type 16 has an invalid length. [ 263.839693][ T8417] netlink: 'syz.2.972': attribute type 17 has an invalid length. [ 263.867987][ T8417] bridge0: port 3(gretap0) entered blocking state [ 263.874713][ T8417] bridge0: port 3(gretap0) entered forwarding state [ 263.926748][ T8417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.005014][ T8424] netlink: 'syz.3.974': attribute type 16 has an invalid length. [ 264.019864][ T8424] netlink: 'syz.3.974': attribute type 17 has an invalid length. [ 264.059715][ T8424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.154739][ T5852] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 264.344714][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 264.359940][ T5852] usb 2-1: config 1 interface 0 has no altsetting 0 [ 264.375203][ T5852] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40 [ 264.389093][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.398987][ T5852] usb 2-1: Product: syz [ 264.403271][ T5852] usb 2-1: Manufacturer: syz [ 264.413952][ T5852] usb 2-1: SerialNumber: syz [ 264.653717][ T5852] usbhid 2-1:1.0: can't add hid device: -71 [ 264.673870][ T5852] usbhid: probe of 2-1:1.0 failed with error -71 [ 264.697956][ T5852] usb 2-1: USB disconnect, device number 11 [ 264.958886][ T8450] netlink: 'syz.3.987': attribute type 16 has an invalid length. [ 264.967283][ T8450] netlink: 'syz.3.987': attribute type 17 has an invalid length. [ 264.993020][ T8450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.714701][ T6604] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 266.945033][ T6604] usb 2-1: Using ep0 maxpacket: 16 [ 266.973950][ T6604] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 267.021519][ T6604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.094583][ T6604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.153208][ T6604] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.231179][ T6604] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 267.260209][ T8475] netlink: 'syz.3.997': attribute type 16 has an invalid length. [ 267.276973][ T6604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.296242][ T8475] netlink: 'syz.3.997': attribute type 17 has an invalid length. [ 267.336654][ T6604] usb 2-1: config 0 descriptor?? [ 267.396388][ T6604] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 267.437399][ T8475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.485505][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 267.536267][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 267.622914][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 267.710098][ T8466] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 267.751273][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 267.768985][ T6604] usb 2-1: USB disconnect, device number 12 [ 267.817188][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 268.234532][ C0] sched: RT throttling activated [ 268.805791][ T8488] netlink: 'syz.3.1003': attribute type 39 has an invalid length. [ 269.684637][ T6604] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 269.963121][ T8510] program syz.1.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.356957][ T6604] usb 3-1: Using ep0 maxpacket: 32 [ 270.441083][ T6604] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 270.634667][ T6604] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.669318][ T6604] usb 3-1: config 0 has no interface number 0 [ 270.699976][ T6604] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 270.776525][ T6604] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 270.836283][ T6604] usb 3-1: config 0 interface 8 has no altsetting 0 [ 270.857296][ T6604] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 270.873848][ T6604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.886656][ T6604] usb 3-1: Product: syz [ 270.891300][ T6604] usb 3-1: Manufacturer: syz [ 270.897105][ T6604] usb 3-1: SerialNumber: syz [ 270.918000][ T6604] usb 3-1: config 0 descriptor?? [ 271.177900][ T6604] ath6kl: Failed to submit usb control message: -71 [ 271.194896][ T6604] ath6kl: unable to send the bmi data to the device: -71 [ 271.203480][ T6604] ath6kl: Unable to send get target info: -71 [ 271.235468][ T6604] ath6kl: Failed to init ath6kl core: -71 [ 271.242613][ T6604] ath6kl_usb: probe of 3-1:0.8 failed with error -71 [ 271.290517][ T6604] usb 3-1: USB disconnect, device number 14 [ 272.085525][ T8540] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1025'. [ 272.381365][ T8551] netlink: 'syz.3.1030': attribute type 39 has an invalid length. [ 273.751950][ T6616] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 273.964637][ T6616] usb 3-1: Using ep0 maxpacket: 16 [ 274.014981][ T6616] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 274.023188][ T6616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.081530][ T6616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.131138][ T6616] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.174745][ T6616] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 274.183973][ T6616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.216222][ T6616] usb 3-1: config 0 descriptor?? [ 274.229453][ T6616] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 274.277977][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 274.310011][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 274.346133][ T7583] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 274.365118][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 274.375742][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 274.403383][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 274.421329][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 274.453556][ T8573] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 274.502414][ T5852] usb 3-1: USB disconnect, device number 15 [ 274.512036][ T28] audit: type=1326 audit(1756733258.791:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 274.553020][ T28] audit: type=1326 audit(1756733258.791:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 274.584423][ T28] audit: type=1326 audit(1756733258.801:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 274.631379][ T28] audit: type=1326 audit(1756733258.801:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 274.653859][ T28] audit: type=1326 audit(1756733258.801:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 277.027316][ T8634] netlink: 'syz.3.1066': attribute type 39 has an invalid length. [ 278.299015][ T8648] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.384567][ T8648] tipc: Enabled bearer , priority 10 [ 278.435579][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.704750][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.899085][ T8664] warning: `syz.1.1079' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 279.202162][ T8675] program syz.0.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.234744][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.339259][ T8676] netlink: 'syz.1.1083': attribute type 16 has an invalid length. [ 279.375184][ T8676] netlink: 'syz.1.1083': attribute type 17 has an invalid length. [ 279.457883][ T8676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.264816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.004660][ T6616] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 281.304878][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.414923][ T6616] usb 3-1: Using ep0 maxpacket: 32 [ 281.476036][ T6616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.515798][ T6616] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.537876][ T8707] netlink: 'syz.1.1097': attribute type 16 has an invalid length. [ 281.540514][ T6616] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.546130][ T8707] netlink: 'syz.1.1097': attribute type 17 has an invalid length. [ 281.718268][ T8707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.809071][ T6616] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 281.828353][ T6616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 281.841574][ T6616] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 282.164213][ T6616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.221903][ T6616] usb 3-1: config 0 descriptor?? [ 282.344707][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.664657][ T6616] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 282.713437][ T6616] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 282.734815][ T6616] hid-thrustmaster 0003:044F:B65D.0004: item fetching failed at offset 2/5 [ 282.784146][ T6616] hid-thrustmaster 0003:044F:B65D.0004: parse failed with error -22 [ 282.812573][ T6616] hid-thrustmaster: probe of 0003:044F:B65D.0004 failed with error -22 [ 283.375564][ T6616] usb 3-1: USB disconnect, device number 16 [ 283.384713][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.424704][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.463380][ T6619] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 284.674729][ T6619] usb 1-1: Using ep0 maxpacket: 8 [ 284.698945][ T6619] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 284.710791][ T6619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.721484][ T6619] usb 1-1: Product: syz [ 284.726638][ T6619] usb 1-1: Manufacturer: syz [ 284.731569][ T6619] usb 1-1: SerialNumber: syz [ 284.744751][ T6619] usb 1-1: config 0 descriptor?? [ 284.780738][ T6619] gspca_main: se401-2.14.0 probing 047d:5003 [ 285.170042][ T6619] gspca_se401: ExtraFeatures: 148 [ 285.180460][ T6619] gspca_se401: Too many frame sizes [ 285.408258][ T6619] usb 1-1: USB disconnect, device number 12 [ 285.464888][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.753087][ T8749] ksmbd: Unknown IPC event: 6, ignore. [ 285.794706][ T6616] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 285.964609][ T6616] usb 3-1: device descriptor read/64, error -71 [ 286.075287][ T8753] netlink: 'syz.0.1114': attribute type 39 has an invalid length. [ 286.146373][ T8753] syz_tun (unregistering): left allmulticast mode [ 286.264762][ T6616] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 286.434794][ T6616] usb 3-1: device descriptor read/64, error -71 [ 286.504680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.584833][ T6616] usb usb3-port1: attempt power cycle [ 287.014822][ T6616] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 287.073668][ T6616] usb 3-1: device descriptor read/8, error -71 [ 287.354698][ T6616] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 287.388611][ T6616] usb 3-1: device descriptor read/8, error -71 [ 287.544788][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.552483][ T6616] usb usb3-port1: unable to enumerate USB device [ 287.942861][ T8790] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 288.494755][ T6616] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 288.584796][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.702653][ T6616] usb 2-1: config 0 has no interfaces? [ 288.728556][ T6616] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 288.764606][ T6616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.794755][ T6616] usb 2-1: Product: syz [ 288.800442][ T6616] usb 2-1: Manufacturer: syz [ 288.824642][ T6616] usb 2-1: SerialNumber: syz [ 288.846621][ T6616] usb 2-1: config 0 descriptor?? [ 289.255315][ T5852] usb 2-1: USB disconnect, device number 13 [ 289.624710][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.744726][ T6616] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.909393][ T6616] usb 1-1: device descriptor read/64, error -71 [ 290.204658][ T6616] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 290.369798][ T6616] usb 1-1: device descriptor read/64, error -71 [ 290.530954][ T6616] usb usb1-port1: attempt power cycle [ 290.664711][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.964778][ T6616] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 291.025476][ T6616] usb 1-1: device descriptor read/8, error -71 [ 291.296706][ T28] audit: type=1800 audit(1756733275.571:90): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1153" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 291.334757][ T6616] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 291.378002][ T6616] usb 1-1: device descriptor read/8, error -71 [ 291.537269][ T6616] usb usb1-port1: unable to enumerate USB device [ 291.704685][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.241558][ T8859] program syz.1.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.745151][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.784999][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.479618][ T8884] program syz.0.1171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.824674][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.880741][ T8895] netlink: 'syz.0.1176': attribute type 39 has an invalid length. [ 295.697158][ T8906] program syz.2.1181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.864713][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.056918][ T8919] netlink: 'syz.2.1186': attribute type 39 has an invalid length. [ 296.240711][ T8919] syz_tun (unregistering): left promiscuous mode [ 296.904784][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.127128][ T8939] netlink: 'syz.0.1191': attribute type 39 has an invalid length. [ 297.510903][ T8952] bridge0: port 3(gretap0) entered disabled state [ 297.944777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.984717][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.024719][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.094972][ T9018] netlink: 'syz.2.1216': attribute type 39 has an invalid length. [ 300.982998][ T9036] tipc: Enabled bearer , priority 0 [ 301.020451][ T9036] syzkaller0: entered promiscuous mode [ 301.040205][ T9036] syzkaller0: entered allmulticast mode [ 301.064754][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.104056][ T9036] tipc: Resetting bearer [ 301.136154][ T9035] tipc: Resetting bearer [ 301.293194][ T9035] tipc: Disabling bearer [ 301.321861][ T9047] netlink: 'syz.3.1228': attribute type 39 has an invalid length. [ 302.104895][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.144691][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.184693][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.868434][ T6616] libceph: connect (1)[c::]:6789 error -101 [ 304.896500][ T6616] libceph: mon0 (1)[c::]:6789 connect error [ 304.930490][ T9106] ceph: No mds server is up or the cluster is laggy [ 305.224753][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.401061][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 306.274656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 306.693272][ T9151] netlink: 'syz.2.1270': attribute type 39 has an invalid length. [ 307.273469][ T9157] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 307.295196][ T9157] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 307.304845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.344689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.386006][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.425077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.586985][ T9173] overlayfs: failed to resolve './file0': -2 [ 310.864867][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'. [ 310.895158][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'. [ 310.923849][ T9192] gretap0: entered promiscuous mode [ 310.949472][ T9192] batadv_slave_1: entered promiscuous mode [ 310.976077][ T9192] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 311.002792][ T9192] Cannot create hsr debugfs directory [ 311.023230][ T9192] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 311.044562][ T9192] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.431541][ T9200] netlink: 'syz.3.1292': attribute type 39 has an invalid length. [ 311.464685][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.260346][ T9216] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 312.267558][ T9216] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 312.300347][ T9216] vhci_hcd vhci_hcd.0: Device attached [ 312.352850][ T9217] vhci_hcd: connection closed [ 312.365238][ T3421] vhci_hcd: stop threads [ 312.396340][ T3421] vhci_hcd: release socket [ 312.400922][ T3421] vhci_hcd: disconnect device [ 312.504724][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.545957][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.584679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.624821][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.975320][ T9285] PKCS7: Unknown OID: [5] (bad) [ 315.980711][ T9285] PKCS7: Only support pkcs7_signedData type [ 316.664710][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.711414][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.281153][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.290661][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.744677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.980526][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.017433][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.210161][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 319.784863][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.001683][ T9324] (null): rxe_set_mtu: Set mtu to 4096 [ 320.037787][ T9324] lo speed is unknown, defaulting to 1000 [ 320.108841][ T9324] lo speed is unknown, defaulting to 1000 [ 320.152161][ T9324] lo speed is unknown, defaulting to 1000 [ 320.527369][ T9337] ptrace attach of "./syz-executor exec"[5790] was attempted by "./syz-executor exec"[9337] [ 320.579681][ T9324] infiniband syz2: set active [ 320.586896][ T6604] lo speed is unknown, defaulting to 1000 [ 320.605208][ T9324] infiniband syz2: added lo [ 320.825297][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.922440][ T9324] RDS/IB: syz2: added [ 320.965764][ T9324] smc: adding ib device syz2 with port count 1 [ 320.975557][ T9324] smc: ib device syz2 port 1 has pnetid [ 321.000865][ T6604] lo speed is unknown, defaulting to 1000 [ 321.022054][ T9324] lo speed is unknown, defaulting to 1000 [ 321.648417][ T9324] lo speed is unknown, defaulting to 1000 [ 321.864706][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.249284][ T9324] lo speed is unknown, defaulting to 1000 [ 322.712577][ T9324] lo speed is unknown, defaulting to 1000 [ 322.817808][ T9363] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 322.904689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.185324][ T9324] lo speed is unknown, defaulting to 1000 [ 323.944684][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.984720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.264870][ T6616] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 325.618974][ T6616] usb 3-1: Using ep0 maxpacket: 16 [ 325.627399][ T6616] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 325.636711][ T6616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.647527][ T6616] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.661352][ T6616] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 325.671421][ T6616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.024705][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.446396][ T6616] usb 3-1: config 0 descriptor?? [ 326.455153][ T6616] pxrc 3-1:0.0: Could not find endpoint [ 326.461685][ T6616] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 327.064840][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.114689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.198993][ T6605] usb 3-1: USB disconnect, device number 21 [ 328.940328][ T9420] netlink: 'syz.1.1371': attribute type 16 has an invalid length. [ 328.966054][ T9420] netlink: 'syz.1.1371': attribute type 17 has an invalid length. [ 328.989969][ T9420] infiniband syz2: set active [ 329.003291][ T9420] infiniband syz2: set active [ 329.047576][ T9420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.073963][ T6616] lo speed is unknown, defaulting to 1000 [ 329.090290][ T6619] lo speed is unknown, defaulting to 1000 [ 329.144795][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.943878][ T28] audit: type=1326 audit(1756733314.221:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 330.030238][ T28] audit: type=1326 audit(1756733314.301:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 330.124674][ T28] audit: type=1326 audit(1756733314.381:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 330.184670][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.190022][ T28] audit: type=1326 audit(1756733314.381:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf58ebe9 code=0x7ffc0000 [ 331.224651][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.514991][ T6604] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 331.724797][ T6604] usb 2-1: Using ep0 maxpacket: 16 [ 331.768217][ T6604] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 331.784889][ T6604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.796024][ T6604] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 331.809642][ T6604] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 331.819064][ T6604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.857718][ T6604] usb 2-1: config 0 descriptor?? [ 331.897600][ T6604] pxrc 2-1:0.0: Could not find endpoint [ 331.911830][ T6604] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 332.097189][ T6616] usb 2-1: USB disconnect, device number 14 [ 332.264663][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.336658][ T9449] netlink: 'syz.0.1381': attribute type 16 has an invalid length. [ 332.344963][ T9449] netlink: 'syz.0.1381': attribute type 17 has an invalid length. [ 332.973714][ T9449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.304656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.907983][ T9470] binder: 9466:9470 unknown command 1074553619 [ 333.914462][ T9470] binder: 9466:9470 ioctl c0306201 200000000540 returned -22 [ 334.344694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.239798][ T9481] binder: 9475:9481 ioctl c0306201 0 returned -14 [ 335.384653][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.424712][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.626691][ T9495] infiniband syz2: set active [ 336.642335][ T9495] infiniband syz2: set active [ 336.741318][ T6616] lo speed is unknown, defaulting to 1000 [ 336.750953][ T6619] lo speed is unknown, defaulting to 1000 [ 336.756895][ T9497] netlink: 'syz.1.1394': attribute type 16 has an invalid length. [ 336.774726][ T9497] netlink: 'syz.1.1394': attribute type 17 has an invalid length. [ 336.790579][ T9497] infiniband syz2: set active [ 336.803162][ T9497] infiniband syz2: set active [ 337.464687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.851332][ T9497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.938823][ T6619] lo speed is unknown, defaulting to 1000 [ 337.954713][ T6616] lo speed is unknown, defaulting to 1000 [ 338.504734][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.544720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.764695][ T6616] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 339.834752][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1404'. [ 339.974730][ T6616] usb 3-1: Using ep0 maxpacket: 16 [ 339.994346][ T6616] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 340.023319][ T6616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.056703][ T6616] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 340.118119][ T6616] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 340.504761][ T6616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.525945][ T6616] usb 3-1: config 0 descriptor?? [ 340.551029][ T6616] pxrc 3-1:0.0: Could not find endpoint [ 340.558817][ T9538] netem: change failed [ 340.575472][ T6616] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 340.594672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.619078][ T9539] netlink: 'syz.3.1406': attribute type 16 has an invalid length. [ 340.629380][ T9539] netlink: 'syz.3.1406': attribute type 17 has an invalid length. [ 340.655350][ T9539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.799079][ T6604] usb 3-1: USB disconnect, device number 22 [ 340.878583][ T9542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1407'. [ 341.264663][ T6605] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 341.473191][ T6605] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 341.482734][ T6605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.491055][ T6605] usb 1-1: Product: syz [ 341.495370][ T6605] usb 1-1: Manufacturer: syz [ 341.500096][ T6605] usb 1-1: SerialNumber: syz [ 341.624723][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.762826][ T6605] rtl8150 1-1:1.0: couldn't reset the device [ 341.769733][ T6605] rtl8150: probe of 1-1:1.0 failed with error -5 [ 341.786552][ T6605] usb 1-1: USB disconnect, device number 17 [ 342.454733][ T9567] netlink: 'syz.2.1416': attribute type 16 has an invalid length. [ 342.473299][ T9567] netlink: 'syz.2.1416': attribute type 17 has an invalid length. [ 342.487968][ T9567] bridge0: port 3(gretap0) entered blocking state [ 342.494788][ T9567] bridge0: port 3(gretap0) entered forwarding state [ 342.553411][ T9567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.664783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.064725][ T6616] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 343.263903][ T9585] fuse: Bad value for 'fd' [ 343.274685][ T6616] usb 3-1: Using ep0 maxpacket: 16 [ 343.291163][ T6616] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 343.319028][ T6616] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 343.360147][ T6616] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 343.391785][ T6616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.445970][ T6616] usb 3-1: config 0 descriptor?? [ 343.470833][ T6616] pxrc 3-1:0.0: Could not find endpoint [ 343.491219][ T6616] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 343.692764][ T6605] usb 3-1: USB disconnect, device number 23 [ 343.704668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.744682][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.784780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.802367][ T9610] netlink: 'syz.3.1428': attribute type 16 has an invalid length. [ 345.866054][ T9610] netlink: 'syz.3.1428': attribute type 17 has an invalid length. [ 345.907943][ T9610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.961405][ T9614] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 345.977851][ T9614] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 346.619147][ T6604] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 346.619201][ T6605] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 346.824664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.575116][ T6604] usb 2-1: Using ep0 maxpacket: 16 [ 347.611028][ T6605] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.627367][ T6604] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 347.661060][ T6605] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 347.685303][ T6604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.752334][ T6605] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 347.790971][ T6604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.832180][ T6605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.841595][ T9636] PKCS7: Unknown OID: [5] (bad) [ 347.846793][ T9636] PKCS7: Only support pkcs7_signedData type [ 347.864664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.871910][ T6604] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.894086][ T6605] usb 1-1: config 0 descriptor?? [ 347.967317][ T6604] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 348.012607][ T6605] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 348.200655][ T6604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.904687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.086346][ T6605] dvb-usb: bulk message failed: -22 (3/0) [ 349.098729][ T6604] usb 2-1: config 0 descriptor?? [ 349.145423][ T6605] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 349.167059][ T6604] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 349.198860][ T6605] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 349.226283][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 349.234698][ T6605] usb 1-1: media controller created [ 349.253352][ T6605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.273522][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 349.335098][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 349.346262][ T6605] dvb-usb: bulk message failed: -22 (6/0) [ 349.372532][ T5144] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 349.375166][ T6605] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 349.470908][ T6604] usb 2-1: USB disconnect, device number 15 [ 349.505976][ T6605] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 349.512842][ T7583] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 349.560627][ T6605] dvb-usb: schedule remote query interval to 150 msecs. [ 349.597513][ T6605] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 349.611831][ T9649] bridge0: port 3(gretap0) entered disabled state [ 349.681386][ T9649] netlink: 'syz.2.1441': attribute type 16 has an invalid length. [ 349.725017][ T9649] netlink: 'syz.2.1441': attribute type 17 has an invalid length. [ 349.757249][ T6609] dvb-usb: bulk message failed: -22 (1/0) [ 349.761468][ T9649] bridge0: port 3(gretap0) entered blocking state [ 349.770194][ T9649] bridge0: port 3(gretap0) entered forwarding state [ 349.785070][ T6609] dvb-usb: error while querying for an remote control event. [ 349.795422][ T9649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.944890][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.040102][ T6604] dvb-usb: bulk message failed: -22 (1/0) [ 350.046641][ T6604] dvb-usb: error while querying for an remote control event. [ 350.861425][ T6604] dvb-usb: bulk message failed: -22 (1/0) [ 350.867335][ T6604] dvb-usb: error while querying for an remote control event. [ 350.904724][ T6616] IPVS: starting estimator thread 0... [ 350.984728][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.986453][ T6609] usb 1-1: USB disconnect, device number 18 [ 351.004789][ T9659] IPVS: using max 17 ests per chain, 40800 per kthread [ 351.156568][ T6609] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 351.254616][ T6604] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 351.632862][ T6604] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 351.936252][ T6604] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 351.948399][ T6604] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 351.959970][ T6604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 351.971747][ T6604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 352.016804][ T6604] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 352.024716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.214981][ T6604] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 352.223241][ T6604] usb 3-1: Product: syz [ 352.237576][ T6604] usb 3-1: Manufacturer: syz [ 352.294077][ T6604] cdc_wdm 3-1:1.0: skipping garbage [ 352.365699][ T6604] cdc_wdm 3-1:1.0: skipping garbage [ 353.064638][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.779575][ T6604] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 353.788468][ T6604] cdc_wdm 3-1:1.0: Unknown control protocol [ 353.797459][ T6604] usb 3-1: USB disconnect, device number 24 [ 354.104678][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.144686][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.122680][ T9708] PKCS7: Unknown OID: [5] (bad) [ 356.154977][ T9708] PKCS7: Only support pkcs7_signedData type [ 356.184677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.205301][ T9716] fuse: Bad value for 'fd' [ 357.224689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.416579][ T9725] netlink: 'syz.2.1466': attribute type 39 has an invalid length. [ 357.543057][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1465'. [ 358.264660][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.850718][ T9747] fuse: Bad value for 'fd' [ 359.304644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.344742][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.384748][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.424699][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.685004][ T9779] fuse: Bad value for 'fd' [ 363.464679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.504664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.845990][ T9806] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1492'. [ 365.544659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.784752][ T5852] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 366.003985][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 366.011797][ T5852] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 366.061567][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.090938][ T5852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.091746][ T9829] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1501'. [ 366.132640][ T5852] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 366.156713][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.238284][ T5852] usb 2-1: config 0 descriptor?? [ 366.255121][ T5852] pxrc 2-1:0.0: Could not find endpoint [ 366.261546][ T5852] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 366.547196][ T5852] usb 2-1: USB disconnect, device number 16 [ 366.584704][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.624680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.664665][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.704660][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.538019][ T5852] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 370.627326][ T6619] IPVS: starting estimator thread 0... [ 370.754642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.819938][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 370.826212][ T9873] IPVS: using max 20 ests per chain, 48000 per kthread [ 370.833574][ T5852] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 370.843064][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 370.882085][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.922736][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.014689][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.044743][ T5852] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 371.074776][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.131777][ T5852] usb 3-1: config 0 descriptor?? [ 371.151576][ T9884] netem: change failed [ 371.178094][ T5852] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 371.209104][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 371.258898][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 371.352633][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 371.387348][ T5144] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 371.436667][ T6610] usb 3-1: USB disconnect, device number 25 [ 371.454869][ T5801] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 371.521240][ T5801] udevd[5801]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 371.552305][ T5801] udevd[5801]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 371.794703][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.824637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.724750][ T6604] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 373.864666][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.721235][ T6604] usb 3-1: Using ep0 maxpacket: 16 [ 374.745460][ T6604] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 374.770079][ T6604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.804590][ T6604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.832521][ T6604] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.869191][ T6604] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 374.883347][ T6604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.904657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.944682][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.435732][ T6604] usb 3-1: config 0 descriptor?? [ 376.755505][ T6604] usb 3-1: can't set config #0, error -71 [ 376.774910][ T6604] usb 3-1: USB disconnect, device number 26 [ 376.994649][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.485928][ T9944] Process accounting resumed [ 378.024690][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.665042][ T28] audit: type=1326 audit(1756733362.921:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.2.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7fc00000 [ 379.074669][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.253325][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.278125][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.104677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.144680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.184634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.234642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.265100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.304696][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.344652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.384699][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.659014][T10052] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1570'. [ 388.424664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.464668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.504657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.544671][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.690203][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'. [ 392.562653][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'. [ 392.584626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.626875][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.664668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.704674][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.744681][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.784646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.834648][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.815002][T10167] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1608'. [ 399.874668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.904777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.827677][T10200] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1617'. [ 401.944646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.984668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.481295][T10222] smc: net device bond0 applied user defined pnetid SYZ0 [ 404.024690][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.411881][T10226] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 404.438417][T10226] CIFS mount error: No usable UNC path provided in device string! [ 404.438417][T10226] [ 404.448945][T10226] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 405.033053][T10232] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1628'. [ 405.064626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.824990][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'. [ 406.104635][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.144648][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.184610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.184803][ T28] audit: type=1326 audit(1756733393.312:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 409.224752][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.278960][T10267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1638'. [ 409.706305][ T28] audit: type=1326 audit(1756733393.312:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 409.933787][ T28] audit: type=1326 audit(1756733393.312:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 409.972849][ T28] audit: type=1326 audit(1756733393.312:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 410.008393][ T28] audit: type=1326 audit(1756733393.312:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 410.032280][ T28] audit: type=1326 audit(1756733393.312:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 410.056430][ T28] audit: type=1326 audit(1756733393.312:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 410.080599][ T28] audit: type=1326 audit(1756733393.312:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 410.264642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.304651][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.591595][ T28] audit: type=1326 audit(1756733393.312:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 411.705847][ T28] audit: type=1326 audit(1756733393.312:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06d8ebe9 code=0x7ffc0000 [ 412.344632][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.384741][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.424755][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.464691][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.504643][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.544662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.584639][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.624621][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.664652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.413058][T10373] overlayfs: failed to clone upperpath [ 421.430035][ T6616] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 421.694716][ T6616] usb 2-1: Using ep0 maxpacket: 32 [ 421.704684][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.035303][ T6616] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 422.059197][ T6616] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 422.068489][ T6616] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 422.100243][ T6616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.177085][ T6616] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 422.207087][ T6616] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 422.220529][ T6616] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 422.229856][ T6616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.416890][ T6616] usb 2-1: config 0 descriptor?? [ 422.744925][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.918594][ T6616] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 422.982436][ T6616] usb 2-1: USB disconnect, device number 17 [ 423.606036][ T6616] usblp0: removed [ 423.784796][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.004636][ T6616] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 424.824637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.864777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.904618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.736556][T10415] fuse: Bad value for 'fd' [ 427.944655][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.984714][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.636295][T10433] overlayfs: failed to clone upperpath [ 430.024623][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.771047][T10449] fuse: Bad value for 'fd' [ 431.064653][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.104700][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.869963][T10463] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 433.144653][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.184664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.224627][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.725013][T10481] fuse: Bad value for 'user_id' [ 436.264638][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.304676][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.344663][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.985178][T10506] overlayfs: failed to resolve './file0': -2 [ 439.384680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.146373][T10517] fuse: Bad value for 'user_id' [ 440.434652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.590065][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.653605][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.464642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.704851][ T5852] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 442.504725][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.854549][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 442.888865][ T5852] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 442.903905][ T5852] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.937433][ T5852] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.961690][ T5852] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.982504][T10554] fuse: Bad value for 'fd' [ 443.007350][ T5852] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.054590][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.285311][ T5852] usb 2-1: GET_CAPABILITIES returned 0 [ 443.291236][ T5852] usbtmc 2-1:16.0: can't read capabilities [ 443.544661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.563195][ T5852] usb 2-1: USB disconnect, device number 19 [ 444.584696][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.624668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.771096][T10582] netlink: 'syz.2.1738': attribute type 39 has an invalid length. [ 446.067257][T10587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.095376][T10587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.664830][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.153187][T10604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1745'. [ 447.702319][T10611] netlink: 'syz.1.1748': attribute type 39 has an invalid length. [ 447.714635][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.744860][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.784627][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.824739][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.630377][T10648] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.864733][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.279846][T10650] netlink: 'syz.2.1759': attribute type 39 has an invalid length. [ 452.904617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.944627][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.355499][T10680] netlink: 'syz.0.1770': attribute type 39 has an invalid length. [ 454.496709][T10684] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1768'. [ 454.984691][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.024656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.064629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.104601][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.144750][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.312655][T10727] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1783'. [ 460.184715][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.224659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.824265][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'. [ 461.855753][T10757] netlink: 'syz.3.1793': attribute type 39 has an invalid length. [ 462.264615][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.304687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.344597][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.662773][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'. [ 464.689721][T10793] netlink: 'syz.0.1804': attribute type 39 has an invalid length. [ 465.384630][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.424657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.474645][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.591521][T10816] netlink: 'syz.3.1812': attribute type 10 has an invalid length. [ 468.196780][T10816] team0: Port device dummy0 added [ 468.218776][T10820] netlink: 'syz.3.1812': attribute type 10 has an invalid length. [ 468.254005][T10820] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 468.340743][T10820] team0: Failed to send options change via netlink (err -105) [ 468.365117][T10820] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 468.390874][T10820] team0: Port device dummy0 removed [ 468.471574][T10820] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 468.504637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.664252][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 468.709826][T10826] netlink: 'syz.1.1814': attribute type 39 has an invalid length. [ 469.031776][T10835] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1815'. [ 469.544594][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.584610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.624617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.674611][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.704813][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.754616][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.457538][T10892] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1835'. [ 475.517508][T10893] fuse: Bad value for 'fd' [ 475.784668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.824629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.864803][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.904637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.944654][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.302250][T10930] infiniband syz2: set active [ 480.317183][T10930] infiniband syz2: set active [ 480.491292][ T5852] lo speed is unknown, defaulting to 1000 [ 480.531638][T10931] netlink: 'syz.1.1843': attribute type 16 has an invalid length. [ 480.549063][T10931] netlink: 'syz.1.1843': attribute type 17 has an invalid length. [ 480.584331][T10931] infiniband syz2: set active [ 480.612105][T10931] infiniband syz2: set active [ 480.660953][T10931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.679549][ T6616] lo speed is unknown, defaulting to 1000 [ 480.686389][T10869] Set syz1 is full, maxelem 65536 reached [ 480.749527][ T6604] lo speed is unknown, defaulting to 1000 [ 480.770306][ T6610] lo speed is unknown, defaulting to 1000 [ 480.984606][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.024623][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.064593][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.104697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.144629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.239997][T11000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1856'. [ 485.284060][T11002] binder: BINDER_SET_CONTEXT_MGR already set [ 485.316168][T11002] binder: 11001:11002 ioctl 4018620d 200000000040 returned -16 [ 486.184587][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.032641][T11028] input: syz1 as /devices/virtual/input/input13 [ 487.224685][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.744978][T11025] CIFS mount error: No usable UNC path provided in device string! [ 487.744978][T11025] [ 487.768579][T11025] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 488.235469][T11041] IPVS: length: 24 != 600 [ 488.264655][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.304606][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.811389][T11055] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1871'. [ 490.344616][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.611072][T11063] netlink: 'syz.1.1874': attribute type 39 has an invalid length. [ 491.384791][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.424798][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.464661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.914513][T11098] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1882'. [ 494.352441][T11104] netlink: 'syz.1.1884': attribute type 39 has an invalid length. [ 494.504757][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.544629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.585192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.004825][T11162] netlink: 'syz.0.1897': attribute type 16 has an invalid length. [ 499.080423][T11162] netlink: 'syz.0.1897': attribute type 17 has an invalid length. [ 499.117761][ T5852] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 499.222781][T11162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.366818][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.388318][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.434570][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.478365][ T5852] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.515692][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.537798][ T5852] usb 3-1: config 0 descriptor?? [ 499.973262][ T5852] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 500.018970][ T5852] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 500.405149][ T6610] usb 3-1: USB disconnect, device number 27 [ 500.998552][T11174] fido_id[11174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 502.030050][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.054294][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.272310][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 502.272326][ T28] audit: type=1326 audit(1756733486.552:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 502.376606][ T28] audit: type=1326 audit(1756733486.552:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 502.399274][ T28] audit: type=1326 audit(1756733486.602:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 502.423164][ T28] audit: type=1326 audit(1756733486.602:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 502.505859][ T28] audit: type=1326 audit(1756733486.602:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 502.777924][ T28] audit: type=1326 audit(1756733486.602:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 502.823112][ T28] audit: type=1326 audit(1756733486.602:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 505.639024][ T28] audit: type=1326 audit(1756733489.922:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 505.704617][ T28] audit: type=1326 audit(1756733489.942:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 505.843977][ T28] audit: type=1326 audit(1756733489.962:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3aad8ebe9 code=0x7ffc0000 [ 507.696845][T11239] netlink: 'syz.3.1922': attribute type 39 has an invalid length. [ 509.560220][T11249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1924'. [ 510.337316][T11272] fuse: Unknown parameter '0x0000000000000003' [ 511.575220][T11278] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 512.109668][T11292] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1942'. [ 513.010106][T11302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1945'. [ 513.402411][T11304] fuse: Unknown parameter '0x0000000000000003' [ 515.155231][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1951'. [ 516.512746][T11336] fuse: Unknown parameter '0x0000000000000003' [ 516.526606][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1958'. [ 516.724563][ T6604] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 517.074636][ T6604] usb 3-1: device descriptor read/64, error -71 [ 517.490377][ T6604] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 518.144981][ T6604] usb 3-1: device descriptor read/64, error -71 [ 518.285927][ T6604] usb usb3-port1: attempt power cycle [ 518.338622][T11350] lo speed is unknown, defaulting to 1000 [ 518.415358][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.430998][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.447396][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.469157][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.479022][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 518.494639][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 518.531403][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.568723][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.578958][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.607734][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.627331][ T5799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 518.636067][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 518.724750][ T6604] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 518.823185][ T6604] usb 3-1: device descriptor read/8, error -71 [ 519.017306][T11353] lo speed is unknown, defaulting to 1000 [ 519.035197][ T5852] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 519.094673][ T6604] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 519.137342][ T6604] usb 3-1: device descriptor read/8, error -71 [ 519.239463][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.264990][ T5852] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 519.275316][ T6604] usb usb3-port1: unable to enumerate USB device [ 519.295254][ T5852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 519.347043][ T5852] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 519.360663][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 519.370187][ T5852] usb 2-1: Product: syz [ 519.392496][ T5852] usb 2-1: Manufacturer: syz [ 519.399636][ T5852] usb 2-1: SerialNumber: syz [ 519.432812][ T5852] usb 2-1: config 0 descriptor?? [ 519.453051][ T5852] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 519.483672][ T5852] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 519.494914][ T5852] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 519.983999][T11373] fuse: Unknown parameter '0x0000000000000003' [ 520.571887][T11353] chnl_net:caif_netlink_parms(): no params data found [ 520.744897][ T5799] Bluetooth: hci4: command tx timeout [ 520.944563][T11395] binder: 11394:11395 ioctl 4018620d 0 returned -22 [ 521.185105][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.192390][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.200321][T11353] bridge_slave_0: entered allmulticast mode [ 521.208391][T11353] bridge_slave_0: entered promiscuous mode [ 521.219622][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.234776][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.242136][T11353] bridge_slave_1: entered allmulticast mode [ 521.271716][T11353] bridge_slave_1: entered promiscuous mode [ 521.463303][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.518466][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.764357][T11353] team0: Port device team_slave_0 added [ 521.884579][ T2927] hsr_slave_0: left promiscuous mode [ 521.908363][ T5852] usb 2-1: USB disconnect, device number 20 [ 521.931894][ T2927] hsr_slave_1: left promiscuous mode [ 521.979209][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.037213][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.115050][T11422] fuse: Unknown parameter '0x0000000000000003' [ 522.334638][ T2927] team0 (unregistering): Port device batadv1 removed [ 522.650774][T11434] binder: 11432:11434 ioctl 4018620d 0 returned -22 [ 522.844758][ T5799] Bluetooth: hci4: command tx timeout [ 524.068520][T11453] fuse: Unknown parameter '0x0000000000000003' [ 524.440848][T11461] binder: BINDER_SET_CONTEXT_MGR already set [ 524.471422][T11461] binder: 11460:11461 ioctl 4018620d 200000000040 returned -16 [ 524.930118][ T5799] Bluetooth: hci4: command tx timeout [ 525.351780][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 525.436452][ T2927] team0 (unregistering): Port device team_slave_0 removed [ 525.539880][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.733992][ T2927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.948351][T11473] fuse: Bad value for 'rootmode' [ 526.123441][T11479] fuse: Unknown parameter 'fd0x0000000000000003' [ 526.312741][T11483] binder: BINDER_SET_CONTEXT_MGR already set [ 526.319106][T11483] binder: 11480:11483 ioctl 4018620d 200000000040 returned -16 [ 526.688667][ T2927] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 526.994649][ T5799] Bluetooth: hci4: command tx timeout [ 527.492405][T11496] fuse: Bad value for 'rootmode' [ 527.638597][T11499] fuse: Unknown parameter 'fd0x0000000000000003' [ 527.678519][ T2927] bond0 (unregistering): Released all slaves [ 527.775944][T11353] team0: Port device team_slave_1 added [ 527.958069][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.988351][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.075966][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.152517][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.167757][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.248706][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.182855][T11353] hsr_slave_0: entered promiscuous mode [ 530.198254][T11353] hsr_slave_1: entered promiscuous mode [ 530.237260][T11353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.258871][T11353] Cannot create hsr debugfs directory [ 530.373506][T11519] fuse: Unknown parameter 'use00000000000000000000' [ 530.786346][ T2927] IPVS: stop unused estimator thread 0... [ 530.994123][T11529] fuse: Unknown parameter 'fd0x0000000000000003' [ 531.990141][T11550] overlayfs: failed to resolve './file1': -2 [ 533.282357][T11353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 533.303394][T11353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 533.321312][T11353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 533.382869][T11353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.707874][T11353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.752145][T11353] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.826661][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.833899][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.871062][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.878343][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.766986][T11353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.718752][T11600] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2027'. [ 536.759421][T11353] veth0_vlan: entered promiscuous mode [ 536.822577][T11353] veth1_vlan: entered promiscuous mode [ 537.036267][T11353] veth0_macvtap: entered promiscuous mode [ 537.066918][T11353] veth1_macvtap: entered promiscuous mode [ 537.180997][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.225279][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.254029][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.291729][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.318968][T11353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.349874][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.381986][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.417865][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.446344][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.472370][T11353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.534093][T11353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.555787][T11353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.596774][T11353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.611478][T11353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.908708][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.934172][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.045786][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.068043][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.261707][T11683] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2044'. [ 543.644305][ T6604] IPVS: starting estimator thread 0... [ 543.758688][T11700] IPVS: using max 15 ests per chain, 36000 per kthread [ 545.009174][ T6604] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 545.389731][T11730] loop3: detected capacity change from 0 to 256 [ 545.429241][ T6604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.471092][T11730] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 545.503242][ T6604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.559457][T11730] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 545.616295][ T6604] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 545.648634][ T6604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.855428][ T6604] usb 3-1: config 0 descriptor?? [ 546.050335][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 546.260019][ T6604] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 546.297452][ T6604] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 546.348239][ T6604] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 546.450699][ T6604] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 546.515145][ T6604] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 546.879624][ T6604] arvo: probe of 0003:1E7D:30D4.0006 failed with error -71 [ 547.380914][ T6604] usb 3-1: USB disconnect, device number 32 [ 547.951337][T11749] fido_id[11749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 548.463876][ T6604] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 548.669190][ T6604] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 548.687801][ T6604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.723837][ T6604] usb 1-1: Product: syz [ 548.742518][ T6604] usb 1-1: Manufacturer: syz [ 548.747457][ T6604] usb 1-1: SerialNumber: syz [ 548.937147][T11773] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2064'. [ 549.515113][ T6604] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 549.682801][ T6604] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 549.696890][ T6604] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 549.773237][ T6604] lan78xx: probe of 1-1:1.0 failed with error -32 [ 551.584787][T11616] usb 1-1: USB disconnect, device number 19 [ 556.525642][T11821] sp0: Synchronizing with TNC [ 556.570453][T11822] sp0: Found TNC [ 556.736315][T11824] binder: 11823:11824 ioctl c0306201 0 returned -14 [ 558.838037][ C0] ------------[ cut here ]------------ [ 558.844256][ C0] WARNING: CPU: 0 PID: 1089 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 558.854476][ C0] Modules linked in: [ 558.858717][ C0] CPU: 0 PID: 1089 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 558.867138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.877493][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 558.884767][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 558.891553][ C0] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 558.911840][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 558.918039][ C0] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff888023a01e00 [ 558.926313][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.934404][ C0] RBP: 0000000000000000 R08: ffff888023a01e00 R09: 0000000000000003 [ 558.942750][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88804d56a3c0 [ 558.950880][ C0] R13: dffffc0000000000 R14: ffff88804d56a8b0 R15: ffff888030bae024 [ 558.958924][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 558.967944][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.974830][ C0] CR2: 000000110c2c9b9d CR3: 00000000627ed000 CR4: 00000000003506f0 [ 558.982917][ C0] Call Trace: [ 558.985229][ T48] ------------[ cut here ]------------ [ 558.986308][ C0] [ 558.986344][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 558.986392][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 558.992282][ T48] WARNING: CPU: 1 PID: 48 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 558.995185][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 559.000951][ T48] Modules linked in: [ 559.006409][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 559.017531][ T48] [ 559.024329][ C0] __iterate_interfaces+0x243/0x500 [ 559.028497][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 559.033928][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 559.036351][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.041520][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 559.049000][ T48] Workqueue: phy25 ieee80211_csa_finalize_work [ 559.055354][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 559.055386][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 559.055417][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 559.065544][ T48] [ 559.072743][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 559.079064][ T48] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 559.085443][ C0] ? hw_scan_work+0xf40/0xf40 [ 559.092521][ T48] Code: 48 89 df e8 1a 06 ea f7 e9 dc fc ff ff e8 f0 bf 92 f7 eb 24 e8 e9 bf 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 bf 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca bf 92 f7 48 8b 7c 24 08 4c 8b 7c [ 559.097773][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 559.097801][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 559.100228][ T48] RSP: 0018:ffffc90000b8f9c0 EFLAGS: 00010293 [ 559.105575][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 559.113121][ T48] RAX: ffffffff89f2cbce RBX: 0000000000000001 RCX: ffff88801ce69e00 [ 559.117839][ C0] handle_softirqs+0x280/0x820 [ 559.137860][ T48] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 559.143087][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 559.149178][ T48] RBP: dffffc0000000000 R08: ffff88804d5695af R09: 1ffff11009aad2b5 [ 559.155381][ C0] ? do_softirq+0x180/0x180 [ 559.155412][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 559.160655][ T48] R10: dffffc0000000000 R11: ffffed1009aad2b6 R12: 0000000000000001 [ 559.168723][ C0] __irq_exit_rcu+0xc7/0x190 [ 559.173647][ T48] R13: ffff88804d56a5d9 R14: ffff88807cb9ac70 R15: ffff88807cb9ace8 [ 559.181643][ C0] ? irq_exit_rcu+0x20/0x20 [ 559.186445][ T48] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 559.194477][ C0] irq_exit_rcu+0x9/0x20 [ 559.194503][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 559.199232][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.204424][ C0] [ 559.212458][ T48] CR2: 000000110c41052d CR3: 000000007e153000 CR4: 00000000003506e0 [ 559.217154][ C0] [ 559.225236][ T48] Call Trace: [ 559.225250][ T48] [ 559.230114][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 559.230153][ C0] RIP: 0010:unwind_next_frame+0x1c64/0x2970 [ 559.239328][ T48] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 559.243564][ C0] Code: 24 8c 00 00 00 44 89 f6 e8 19 d2 4a 00 44 39 f5 0f 85 a1 00 00 00 48 8b 44 24 68 42 80 3c 28 00 74 08 48 89 df e8 bc 16 a2 00 <4d> 8b 74 24 38 49 8d 7c 24 08 48 89 f8 48 c1 e8 03 42 80 3c 28 00 [ 559.249270][ T48] ieee80211_csa_finalize+0x59a/0xf00 [ 559.255952][ C0] RSP: 0018:ffffc9000480f598 EFLAGS: 00000246 [ 559.255978][ C0] RAX: 1ffff92000901ed4 RBX: ffffc9000480f6a0 RCX: 0000000000000000 [ 559.255998][ C0] RDX: ffff888023a01e00 RSI: 0000000000000001 RDI: 0000000000000001 [ 559.258947][ T48] ? mutex_lock_nested+0x20/0x20 [ 559.267000][ C0] RBP: 0000000000000001 R08: ffff888023a01e00 R09: 0000000000000003 [ 559.267025][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000480f668 [ 559.270039][ T48] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 559.273354][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff8ed9407a [ 559.276414][ T48] ? ieee80211_csa_finalize_work+0x140/0x140 [ 559.282595][ C0] ? unwind_next_frame+0x1c47/0x2970 [ 559.288570][ T48] ? read_lock_is_recursive+0x20/0x20 [ 559.295171][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 559.314883][ T48] ieee80211_csa_finalize_work+0xf6/0x140 [ 559.320272][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 559.326386][ T48] ? process_scheduled_works+0x957/0x15b0 [ 559.334471][ C0] ? stack_trace_save+0xe0/0xe0 [ 559.334516][ C0] arch_stack_walk+0x144/0x190 [ 559.342944][ T48] process_scheduled_works+0xa45/0x15b0 [ 559.348224][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 559.356479][ T48] ? assign_work+0x400/0x400 [ 559.364445][ C0] stack_trace_save+0x9c/0xe0 [ 559.370481][ T48] ? assign_work+0x39e/0x400 [ 559.378463][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 559.384508][ T48] worker_thread+0xa55/0xfc0 [ 559.389832][ C0] ? skb_release_data+0x634/0x800 [ 559.395222][ T48] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 559.400638][ C0] ? worker_thread+0xa55/0xfc0 [ 559.406608][ T48] kthread+0x2fa/0x390 [ 559.412016][ C0] ? kthread+0x2fa/0x390 [ 559.412037][ C0] ? ret_from_fork+0x48/0x80 [ 559.412063][ C0] ? ret_from_fork_asm+0x11/0x20 [ 559.417912][ T48] ? pr_cont_work+0x560/0x560 [ 559.422763][ C0] kasan_set_track+0x4e/0x70 [ 559.427619][ T48] ? kthread_blkcg+0xd0/0xd0 [ 559.433169][ C0] ? kasan_set_track+0x4e/0x70 [ 559.438831][ T48] ret_from_fork+0x48/0x80 [ 559.443520][ C0] ? kasan_save_free_info+0x2e/0x50 [ 559.448331][ T48] ? kthread_blkcg+0xd0/0xd0 [ 559.452815][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 559.458411][ T48] ret_from_fork_asm+0x11/0x20 [ 559.462716][ C0] ? kmem_cache_free+0xf8/0x280 [ 559.468000][ T48] [ 559.473865][ C0] kasan_save_free_info+0x2e/0x50 [ 559.478690][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 559.478703][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 559.478723][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.478737][ T48] Workqueue: phy25 ieee80211_csa_finalize_work [ 559.478790][ T48] Call Trace: [ 559.478801][ T48] [ 559.478810][ T48] dump_stack_lvl+0x16c/0x230 [ 559.478844][ T48] ? show_regs_print_info+0x20/0x20 [ 559.478874][ T48] ? load_image+0x3b0/0x3b0 [ 559.478914][ T48] panic+0x2c0/0x710 [ 559.478956][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 559.479003][ T48] ? ret_from_fork_asm+0x11/0x20 [ 559.479041][ T48] __warn+0x2e0/0x470 [ 559.479072][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 559.479109][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 559.479144][ T48] report_bug+0x2be/0x4f0 [ 559.479172][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 559.479208][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 559.479242][ T48] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 559.479275][ T48] handle_bug+0xcf/0x120 [ 559.479303][ T48] exc_invalid_op+0x1a/0x50 [ 559.479331][ T48] asm_exc_invalid_op+0x1a/0x20 [ 559.479366][ T48] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 559.479402][ T48] Code: 48 89 df e8 1a 06 ea f7 e9 dc fc ff ff e8 f0 bf 92 f7 eb 24 e8 e9 bf 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 bf 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca bf 92 f7 48 8b 7c 24 08 4c 8b 7c [ 559.479422][ T48] RSP: 0018:ffffc90000b8f9c0 EFLAGS: 00010293 [ 559.479441][ T48] RAX: ffffffff89f2cbce RBX: 0000000000000001 RCX: ffff88801ce69e00 [ 559.479458][ T48] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 559.479472][ T48] RBP: dffffc0000000000 R08: ffff88804d5695af R09: 1ffff11009aad2b5 [ 559.479488][ T48] R10: dffffc0000000000 R11: ffffed1009aad2b6 R12: 0000000000000001 [ 559.479504][ T48] R13: ffff88804d56a5d9 R14: ffff88807cb9ac70 R15: ffff88807cb9ace8 [ 559.479531][ T48] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 559.479591][ T48] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 559.479635][ T48] ieee80211_csa_finalize+0x59a/0xf00 [ 559.479672][ T48] ? mutex_lock_nested+0x20/0x20 [ 559.479705][ T48] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 559.479732][ T48] ? ieee80211_csa_finalize_work+0x140/0x140 [ 559.479781][ T48] ? read_lock_is_recursive+0x20/0x20 [ 559.479818][ T48] ieee80211_csa_finalize_work+0xf6/0x140 [ 559.479856][ T48] ? process_scheduled_works+0x957/0x15b0 [ 559.479884][ T48] process_scheduled_works+0xa45/0x15b0 [ 559.479948][ T48] ? assign_work+0x400/0x400 [ 559.479985][ T48] ? assign_work+0x39e/0x400 [ 559.480019][ T48] worker_thread+0xa55/0xfc0 [ 559.480049][ T48] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 559.480115][ T48] kthread+0x2fa/0x390 [ 559.480137][ T48] ? pr_cont_work+0x560/0x560 [ 559.480165][ T48] ? kthread_blkcg+0xd0/0xd0 [ 559.480186][ T48] ret_from_fork+0x48/0x80 [ 559.480213][ T48] ? kthread_blkcg+0xd0/0xd0 [ 559.480234][ T48] ret_from_fork_asm+0x11/0x20 [ 559.480285][ T48] [ 559.483352][ T48] Kernel Offset: disabled