last executing test programs: 1m1.866752407s ago: executing program 2 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000000b06010800000000000000000600000205000100070000001c0007800c00148008000140ac1414bb0c00018008000140640101000900020073797a31"], 0x44}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) 1m1.089694108s ago: executing program 2 (id=1893): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r4, 0x409, 0x7) 58.191110524s ago: executing program 2 (id=1897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './bus/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000ff7f0000000000e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x9, 0x2bc, 0x1, 0x4f46}}) 56.647561943s ago: executing program 2 (id=1906): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18}], 0x1, 0x40051) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 54.61063589s ago: executing program 2 (id=1910): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000003c0)) 54.134084581s ago: executing program 2 (id=1914): accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 49.699883295s ago: executing program 4 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) 49.111183429s ago: executing program 4 (id=1928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 47.66755682s ago: executing program 4 (id=1932): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) 45.397355836s ago: executing program 4 (id=1936): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) 43.766758282s ago: executing program 4 (id=1939): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000005c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008880}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90ba3c92b", 0x14}], 0x1}, 0x0) fstat(r0, &(0x7f0000000100)) 42.513456673s ago: executing program 4 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000202020"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') 30.977766948s ago: executing program 32 (id=1914): accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 26.499882398s ago: executing program 33 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000202020"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') 12.741560323s ago: executing program 0 (id=1984): chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 9.478831123s ago: executing program 0 (id=1992): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r2, 0x7}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='adfs\x00', 0x218800, 0x0) r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0xd0, 0x300, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private0, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 6.325547413s ago: executing program 0 (id=1994): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000003, 0x30, 0xffffffffffffffff, 0x776ab000) syz_usb_connect(0x0, 0x13e, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x41, 0xb4, 0x40, 0x10, 0x12d1, 0x1004, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12c, 0x1, 0x40, 0x1, 0x20, 0x9, [{{0x9, 0x4, 0x2a, 0x1, 0x9, 0x5a, 0xfa, 0x8a, 0x7, [], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x8, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2}, @generic={0x2, 0x6}]}}, {{0x9, 0x5, 0x5, 0x12, 0x3ff, 0x39, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0x9, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x0, 0xdc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x100}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x68, 0x1, 0x7, [@generic={0x2e, 0x17, "156c197bfb018d19035a5fba4826676ac318beeddc201ebcc89cf4268645ae37305a9f678831fdd94c8143b1"}, @generic={0x5, 0xb, '+[N'}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xf, 0x3, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xfc, 0x6, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x4, 0x8, 0x5, [@generic={0x2, 0x9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x5, 0x8, 0x4, [@generic={0x76, 0x10, "06ec7c7f5ca6ab8763c345b7de008309f2e2ba5bfb32e0ce61db0682bc723aa81bca3c9bb110bef5daadb0405b035a8c1669c94dfbe8f2dc95afaa339a5ef72f1c0aafc2edf1abfd133779a13bc54bc9d2de2baa99e55b84351349e0e2e4ddda6cab88010c7ff13973b8c953776c5aaf1f394793"}]}}]}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(0x0, 0x55c, 0x20100) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000800)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) close(0x3) 5.988602068s ago: executing program 1 (id=2000): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.92029334s ago: executing program 1 (id=2001): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x3, 0x1, 0x2, "ee4f6da8d2cf4011ac7b000000000000000000000000000000020000000800", 0x43353039}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x7fffec83, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.639487943s ago: executing program 1 (id=2003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1d) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "ae37a5fee7f817d0e7c80c5e531c83ef941fd0e94c6071d4265aeea524c7baf5", "0c7829aeda9446f0e8cf944fbac5a72f154a5c2529c572cceeee9c61aaded410", "0c65a946e6cd2bea44adc1d1ab71e142d0111c20cef28a73e647e119edbb66a3", "fec3f28745c3a8a5d6ddb195c8e8ca612bf943471cf9c6af9e075ad4d09d59ea", "a0f17d77c0d227f7ee532514c328d9b827496ff8f10f3356079dfa3457ecfb14", "fbf7d34f9695832c057dfaf6", 0xa4e, 0xffff, 0x0, 0xffffffff, 0xfffffffa}}) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38b7c4cc49e8324113e0c15b81d7daf9"]}]}, 0x38}], 0x1}, 0xcc000) setuid(r7) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @broadcast}, 0x10) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.652093955s ago: executing program 0 (id=2004): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f00000003c0)) 2.537781062s ago: executing program 3 (id=2005): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4f2a, 0x1, 0x10003, 0x8, 0x1000, 0xcc7, 0x8, 0x7, 0xa, 0x6, 0x2, 0x1, 0x6, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcae3, 0x0, 0x20001e58, 0xb, 0xe69, 0x3d, 0x8, 0x4088, 0x0, 0x9]}) 2.32731865s ago: executing program 1 (id=2006): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5869f401, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 2.21349817s ago: executing program 3 (id=2007): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x24004011) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.674750927s ago: executing program 1 (id=2008): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000180)="86"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 1.595407099s ago: executing program 3 (id=2009): socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_dev$dri(0x0, 0x1, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8000007, 'syz0\x00'}) 1.358904385s ago: executing program 0 (id=2010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x1, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) 1.273608046s ago: executing program 1 (id=2011): syz_usb_connect(0x5, 0x3d1, &(0x7f00000005c0)=ANY=[], 0x0) 413.810068ms ago: executing program 3 (id=2012): r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 181.956503ms ago: executing program 0 (id=2013): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x45, 0x9b, 0xc7, 0x40, 0x424, 0xcf18, 0xa045, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa4, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x0, 0x89, 0x45, 0xa7, 0x4}}]}}]}}, 0x0) 95.327116ms ago: executing program 3 (id=2014): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001340)={0x0, 0x0, 0x80000}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xf, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x6acef000) 0s ago: executing program 3 (id=2015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r2, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x81}, {{&(0x7f0000002a80)=@generic, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}], 0x3, 0x2020, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.2.601'. [ 322.408654][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.408781][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.491156][ T5812] usb 5-1: USB disconnect, device number 13 [ 329.207124][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 330.051581][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 330.186227][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.763027][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.555694][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.766116][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.766156][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 331.766168][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.929837][ T9] usb 1-1: config 0 descriptor?? [ 331.930245][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.930437][ T9] usb 1-1: can't set config #0, error -32 [ 331.963170][ T9] usb 1-1: USB disconnect, device number 12 [ 332.769428][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.066916][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 333.155983][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 333.191702][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.526816][ T31] usb 5-1: device descriptor read/64, error -71 [ 333.789194][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 333.956793][ T31] usb 5-1: device descriptor read/64, error -71 [ 334.067301][ T31] usb usb5-port1: attempt power cycle [ 335.056852][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 335.077634][ T31] usb 5-1: device descriptor read/8, error -71 [ 335.336943][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 335.357741][ T31] usb 5-1: device descriptor read/8, error -71 [ 335.467275][ T31] usb usb5-port1: unable to enumerate USB device [ 335.548579][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 335.698774][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 335.852915][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.852973][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 335.852997][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.011287][ T7922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.630'. [ 336.766936][ T9] usb 2-1: config 0 descriptor?? [ 336.784120][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 337.210949][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 337.213216][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 337.214379][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 337.316866][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 337.443580][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 337.444682][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 337.485924][ T10] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 337.485954][ T10] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 337.485979][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 337.486228][ T10] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 337.486252][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.562026][ T10] usb 1-1: config 0 descriptor?? [ 337.623076][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 337.647368][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 337.647897][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 337.648400][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 337.649002][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 337.649475][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 337.650029][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 337.650506][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 337.654352][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 337.656872][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 337.755127][ T9] pwc: Registered as video103. [ 337.785045][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 337.826310][ T9] usb 2-1: USB disconnect, device number 9 [ 338.365845][ T7935] random: crng reseeded on system resumption [ 340.016318][ T9] usb 1-1: USB disconnect, device number 13 [ 340.246831][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 340.376978][ T31] usb 5-1: device descriptor read/64, error -71 [ 340.626883][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 340.746142][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 340.776889][ T31] usb 5-1: device descriptor read/64, error -71 [ 340.887308][ T31] usb usb5-port1: attempt power cycle [ 341.396746][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 341.663610][ T31] usb 5-1: device descriptor read/8, error -71 [ 342.146931][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 342.516770][ T31] usb 5-1: device descriptor read/8, error -71 [ 342.666939][ T31] usb usb5-port1: unable to enumerate USB device [ 346.196790][ T5961] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 346.336833][ T5961] usb 2-1: device descriptor read/64, error -71 [ 346.421162][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'. [ 347.515260][ T5961] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 355.564776][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 356.234828][ T5809] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 357.610632][ T5793] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 358.296893][ T5793] usb 3-1: device descriptor read/64, error -71 [ 358.536814][ T5793] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 360.169692][ T5793] usb 3-1: device descriptor read/64, error -71 [ 360.239415][ T5809] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 360.614049][ T5793] usb usb3-port1: attempt power cycle [ 361.466808][ T5865] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 361.850528][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.850559][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.850995][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.853607][ T5865] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.853632][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.883702][ T5865] usb 1-1: config 0 descriptor?? [ 362.409970][ T5865] hid_parser_main: 1260 callbacks suppressed [ 362.409997][ T5865] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.410029][ T5865] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.410055][ T5865] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.410080][ T5865] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.410105][ T5865] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.519875][ T5865] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 363.879813][ T5120] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 364.691465][ T5793] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 366.230609][ T9] usb 1-1: USB disconnect, device number 14 [ 366.788446][ T5961] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 367.294490][ T5961] usb 2-1: device descriptor read/64, error -71 [ 370.158749][ T5961] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 370.286955][ T5961] usb 2-1: device descriptor read/64, error -71 [ 371.080805][ T5961] usb usb2-port1: attempt power cycle [ 374.658484][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 374.806957][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 374.809614][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.809645][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.809691][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 374.809714][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.815269][ T9] usb 5-1: config 0 descriptor?? [ 377.017952][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 377.018089][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 377.051885][ T9] usb 5-1: USB disconnect, device number 22 [ 377.178141][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 379.926644][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.904300][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.904373][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.178699][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 386.239887][ T8227] tipc: Started in network mode [ 386.239913][ T8227] tipc: Node identity 4, cluster identity 4711 [ 386.239925][ T8227] tipc: Node number set to 4 [ 386.391764][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 386.510694][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.730'. [ 390.010276][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 390.270318][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.942617][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.629186][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.921735][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.001664][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.423650][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.617718][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.976423][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.188518][ T5120] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 393.780845][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.564839][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.635073][ T8309] random: crng reseeded on system resumption [ 397.842060][ T5120] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 398.586888][ T5793] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 398.736874][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 398.739345][ T5793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.739369][ T5793] usb 1-1: config 0 has no interfaces? [ 398.739401][ T5793] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 398.739422][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.809270][ T5793] usb 1-1: config 0 descriptor?? [ 402.512336][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 402.937609][ T5961] usb 1-1: USB disconnect, device number 15 [ 405.228701][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 405.228764][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 405.527761][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 405.527822][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 405.554400][ T8371] fuse: Bad value for 'fd' [ 409.464746][ T8413] binder_alloc: 8412: binder_alloc_buf, no vma [ 409.464955][ T8413] binder: 8412:8413 ioctl c0306201 2000000002c0 returned -14 [ 409.793363][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 410.267333][ T5793] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 410.523788][ T5793] usb 2-1: Using ep0 maxpacket: 32 [ 410.547253][ T5793] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 410.547279][ T5793] usb 2-1: config 0 has no interface number 0 [ 410.547326][ T5793] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.578835][ T5793] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 410.583703][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.583726][ T5793] usb 2-1: Product: syz [ 410.583738][ T5793] usb 2-1: Manufacturer: syz [ 410.583750][ T5793] usb 2-1: SerialNumber: syz [ 410.684099][ T5793] usb 2-1: config 0 descriptor?? [ 410.690332][ T5793] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 411.911930][ T5793] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 411.912192][ T5793] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 412.111073][ T44] usb 2-1: USB disconnect, device number 15 [ 415.353780][ T5120] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 416.692314][ T8466] binder: 8465:8466 ioctl c0306201 0 returned -14 [ 416.774239][ T8470] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 417.367639][ T8474] veth5: entered promiscuous mode [ 417.396974][ T8474] bond1: (slave veth5): Enslaving as an active interface with an up link [ 419.303775][ T37] audit: type=1326 audit(1760800312.024:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.309356][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 419.346985][ T37] audit: type=1326 audit(1760800312.074:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.362011][ T37] audit: type=1326 audit(1760800312.074:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.362069][ T37] audit: type=1326 audit(1760800312.074:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.362110][ T37] audit: type=1326 audit(1760800312.074:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.362150][ T37] audit: type=1326 audit(1760800312.084:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.362190][ T37] audit: type=1326 audit(1760800312.084:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.362230][ T37] audit: type=1326 audit(1760800312.084:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.362269][ T37] audit: type=1326 audit(1760800312.084:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.362308][ T37] audit: type=1326 audit(1760800312.084:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8492 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 419.623091][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 419.743228][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 420.027558][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 420.317131][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 420.317158][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.317175][ T9] usb 2-1: config 0 has no interface number 0 [ 420.317612][ T9] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.656583][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 420.656602][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.656612][ T9] usb 2-1: Product: syz [ 420.656619][ T9] usb 2-1: Manufacturer: syz [ 420.656626][ T9] usb 2-1: SerialNumber: syz [ 420.663123][ T9] usb 2-1: config 0 descriptor?? [ 421.019124][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 421.206849][ T5793] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 421.233885][ T9] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 421.234133][ T9] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 422.396767][ T5793] usb 3-1: Using ep0 maxpacket: 16 [ 422.443793][ T5793] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 422.443820][ T5793] usb 3-1: config 0 has no interface number 0 [ 422.447474][ T5793] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 422.447502][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.447521][ T5793] usb 3-1: Product: syz [ 422.447542][ T5793] usb 3-1: Manufacturer: syz [ 422.447555][ T5793] usb 3-1: SerialNumber: syz [ 422.568984][ T5793] usb 3-1: config 0 descriptor?? [ 422.572435][ T5793] hub 3-1:0.145: bad descriptor, ignoring hub [ 422.572473][ T5793] hub 3-1:0.145: probe with driver hub failed with error -5 [ 422.635529][ T5961] usb 2-1: USB disconnect, device number 16 [ 422.832460][ T5793] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input12 [ 423.236785][ T5961] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 423.416113][ T5961] usb 2-1: config 8 has an invalid interface number: 59 but max is 0 [ 423.416140][ T5961] usb 2-1: config 8 has no interface number 0 [ 423.416202][ T5961] usb 2-1: config 8 interface 59 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 423.462379][ T5961] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=f6.ce [ 423.462401][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.462411][ T5961] usb 2-1: Product: syz [ 423.462418][ T5961] usb 2-1: Manufacturer: syz [ 423.462424][ T5961] usb 2-1: SerialNumber: syz [ 423.484551][ T5961] kvaser_usb 2-1:8.59: error -ENODEV: Cannot get usb endpoint(s) [ 423.681263][ T5961] usb 2-1: USB disconnect, device number 17 [ 424.216924][ T5156] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 424.223335][ T5156] usb 3-1: device reset changed ep0 maxpacket size! [ 424.243590][ T5957] usb 3-1: USB disconnect, device number 13 [ 424.393160][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.820'. [ 424.393223][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.820'. [ 424.540315][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.820'. [ 424.540392][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.820'. [ 425.022763][ T5957] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 425.796766][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 425.799205][ T5957] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 425.799237][ T5957] usb 3-1: config 0 has no interface number 0 [ 425.799284][ T5957] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 425.802310][ T5957] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 425.802336][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.802355][ T5957] usb 3-1: Product: syz [ 425.802369][ T5957] usb 3-1: Manufacturer: syz [ 425.802382][ T5957] usb 3-1: SerialNumber: syz [ 425.874232][ T5957] usb 3-1: config 0 descriptor?? [ 425.884176][ T5957] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 426.087895][ T5957] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 426.088147][ T5957] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 426.310192][ T5957] usb 3-1: USB disconnect, device number 14 [ 426.337608][ T8563] overlayfs: failed to resolve './file1': -2 [ 426.410127][ T8562] overlayfs: failed to clone lowerpath [ 426.753516][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 426.855704][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.836'. [ 427.456143][ T8581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 427.562680][ T8581] bond2: entered allmulticast mode [ 427.958383][ T8587] netlink: 'syz.0.841': attribute type 2 has an invalid length. [ 429.286754][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'. [ 432.264227][ T8614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.849'. [ 432.264472][ T8614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.849'. [ 432.386931][ T44] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 432.531148][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 432.536779][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 432.542376][ T44] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 432.542404][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.542423][ T44] usb 2-1: Product: syz [ 432.542436][ T44] usb 2-1: Manufacturer: syz [ 432.542448][ T44] usb 2-1: SerialNumber: syz [ 432.605825][ T44] usb 2-1: config 0 descriptor?? [ 433.901619][ T44] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 433.901650][ T44] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 433.901695][ T44] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 434.698244][ T44] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 434.744941][ T44] usb 2-1: USB disconnect, device number 18 [ 436.368248][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 436.369125][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 436.567504][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 436.720879][ T8658] veth7: entered promiscuous mode [ 437.165018][ T8669] tipc: Started in network mode [ 437.165040][ T8669] tipc: Node identity 4, cluster identity 4711 [ 437.165053][ T8669] tipc: Node number set to 4 [ 437.176879][ T5958] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 437.338356][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 437.340663][ T5958] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 437.340696][ T5958] usb 3-1: config 0 has no interface number 0 [ 437.340741][ T5958] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.346123][ T5958] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 437.346151][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.346170][ T5958] usb 3-1: Product: syz [ 437.346184][ T5958] usb 3-1: Manufacturer: syz [ 437.346197][ T5958] usb 3-1: SerialNumber: syz [ 437.439144][ T5958] usb 3-1: config 0 descriptor?? [ 437.444007][ T5958] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 437.652284][ T5958] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 437.652523][ T5958] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 438.050836][ T5958] usb 3-1: USB disconnect, device number 15 [ 439.748401][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 439.748418][ T37] audit: type=1326 audit(1760800332.464:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.748725][ T37] audit: type=1326 audit(1760800332.474:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.750221][ T37] audit: type=1326 audit(1760800332.474:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.750489][ T37] audit: type=1326 audit(1760800332.474:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.751006][ T37] audit: type=1326 audit(1760800332.474:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.751265][ T37] audit: type=1326 audit(1760800332.474:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.816814][ T37] audit: type=1326 audit(1760800332.534:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.816881][ T37] audit: type=1326 audit(1760800332.534:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.816923][ T37] audit: type=1326 audit(1760800332.534:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 439.816963][ T37] audit: type=1326 audit(1760800332.534:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 440.029009][ T8697] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 440.219049][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 440.516698][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 441.675474][ T8701] veth7: entered promiscuous mode [ 441.824785][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 443.488903][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 443.757719][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 443.776129][ T8749] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 444.146797][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 444.188926][ T31] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 444.188944][ T31] usb 5-1: config 0 has no interface number 0 [ 444.196346][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 444.196371][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.196380][ T31] usb 5-1: Product: syz [ 444.196388][ T31] usb 5-1: Manufacturer: syz [ 444.196394][ T31] usb 5-1: SerialNumber: syz [ 444.246135][ T31] usb 5-1: config 0 descriptor?? [ 444.268191][ T31] hub 5-1:0.145: bad descriptor, ignoring hub [ 444.268229][ T31] hub 5-1:0.145: probe with driver hub failed with error -5 [ 444.295139][ T31] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input13 [ 445.937697][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.937771][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.769745][ T8788] overlayfs: failed to resolve './file0': -2 [ 451.971653][ T8805] Can't find ip_set type hash:m [ 452.124290][ T9] usb 5-1: USB disconnect, device number 23 [ 453.586779][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 454.456785][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 454.464624][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 454.464654][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.510342][ T9] usb 5-1: config 0 descriptor?? [ 454.539733][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 454.826845][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 454.986828][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 455.298345][ T31] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 455.298374][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.298393][ T31] usb 1-1: Product: syz [ 455.298406][ T31] usb 1-1: Manufacturer: syz [ 455.298417][ T31] usb 1-1: SerialNumber: syz [ 455.304167][ T31] usb 1-1: config 0 descriptor?? [ 455.355584][ T31] gspca_main: sq905-2.14.0 probing 2770:9120 [ 455.623728][ T9] gspca_sunplus: reg_w_riv err -71 [ 455.623814][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 455.719744][ T9] usb 5-1: USB disconnect, device number 24 [ 456.207899][ T5865] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 456.414288][ T31] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 456.414783][ T31] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 456.715130][ T5865] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 456.715191][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.857750][ T31] usb 1-1: USB disconnect, device number 16 [ 456.885269][ T5865] usb 3-1: config 0 descriptor?? [ 458.119123][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 458.119141][ T37] audit: type=1326 audit(1760800350.834:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.119474][ T37] audit: type=1326 audit(1760800350.844:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.119737][ T37] audit: type=1326 audit(1760800350.844:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.119995][ T37] audit: type=1326 audit(1760800350.844:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.120481][ T37] audit: type=1326 audit(1760800350.844:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.599887][ T5865] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 458.606614][ T37] audit: type=1326 audit(1760800351.324:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.607068][ T37] audit: type=1326 audit(1760800351.334:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.607347][ T37] audit: type=1326 audit(1760800351.334:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.608240][ T37] audit: type=1326 audit(1760800351.334:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.608671][ T37] audit: type=1326 audit(1760800351.334:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.4.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 458.923119][ T5865] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 458.923144][ T5865] [drm] Initialized udl on minor 2 [ 459.232286][ T8846] ======================================================= [ 459.232286][ T8846] WARNING: The mand mount option has been deprecated and [ 459.232286][ T8846] and is ignored by this kernel. Remove the mand [ 459.232286][ T8846] option from the mount to silence this warning. [ 459.232286][ T8846] ======================================================= [ 459.323450][ T8846] /dev/nullb0: Can't open blockdev [ 459.462520][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 459.599441][ T5865] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 459.722711][ T5865] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 460.365508][ T5865] usb 3-1: USB disconnect, device number 16 [ 460.419195][ T31] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 464.117382][ T8889] overlayfs: failed to resolve './file0': -2 [ 465.331887][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 468.284349][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 468.718476][ T5120] Bluetooth: hci1: unexpected event for opcode 0x041b [ 470.267506][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 470.466790][ T5793] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 471.164266][ T8953] atomic_op ffff888026665218 conn xmit_atomic 0000000000000000 [ 471.246855][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 471.249585][ T5793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.253600][ T5793] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 471.253627][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.253646][ T5793] usb 1-1: Product: syz [ 471.253659][ T5793] usb 1-1: Manufacturer: syz [ 471.253672][ T5793] usb 1-1: SerialNumber: syz [ 471.318733][ T5793] usb 1-1: config 0 descriptor?? [ 474.046582][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 474.126930][ T5958] usb 1-1: USB disconnect, device number 17 [ 476.909639][ T9004] atomic_op ffff888048b93218 conn xmit_atomic 0000000000000000 [ 477.927000][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 477.996635][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 479.436973][ T5120] Bluetooth: hci2: unexpected event for opcode 0x041b [ 481.854134][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 482.007117][ T9048] bond2: entered allmulticast mode [ 482.115235][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 482.115253][ T37] audit: type=1326 audit(1760800374.764:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115305][ T37] audit: type=1326 audit(1760800374.764:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115347][ T37] audit: type=1326 audit(1760800374.774:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115384][ T37] audit: type=1326 audit(1760800374.774:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115423][ T37] audit: type=1326 audit(1760800374.774:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115464][ T37] audit: type=1326 audit(1760800374.774:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115503][ T37] audit: type=1326 audit(1760800374.774:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115541][ T37] audit: type=1326 audit(1760800374.784:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115581][ T37] audit: type=1326 audit(1760800374.784:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.115618][ T37] audit: type=1326 audit(1760800374.794:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 482.373505][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 483.887301][ T9068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'. [ 483.887719][ T9068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'. [ 485.260366][ T5120] Bluetooth: hci4: unexpected event for opcode 0x041b [ 488.001026][ T9102] ip6tnl2: entered promiscuous mode [ 488.001053][ T9102] ip6tnl2: entered allmulticast mode [ 489.231444][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 491.318006][ T9136] random: crng reseeded on system resumption [ 493.583737][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 494.050516][ T5120] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 495.150273][ T5120] Bluetooth: hci3: unexpected event for opcode 0x041b [ 497.445097][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1030'. [ 499.052106][ T5120] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 500.223987][ T5957] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 500.826910][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 500.847563][ T5957] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 500.847590][ T5957] usb 2-1: config 0 has no interface number 0 [ 500.882518][ T5957] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 500.882548][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.882567][ T5957] usb 2-1: Product: syz [ 500.882580][ T5957] usb 2-1: Manufacturer: syz [ 500.882594][ T5957] usb 2-1: SerialNumber: syz [ 500.945751][ T5957] usb 2-1: config 0 descriptor?? [ 500.974579][ T5957] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 501.338132][ T5957] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 501.403421][ T5957] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 501.719658][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 501.747193][ T5957] usb 2-1: USB disconnect, device number 19 [ 501.775035][ T5957] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 501.865440][ T5957] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 501.866432][ T5957] quatech2 2-1:0.51: device disconnected [ 504.230711][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 505.209212][ T9253] random: crng reseeded on system resumption [ 507.054628][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 507.070423][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.070492][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.186810][ T9] usb 2-1: device descriptor read/64, error -71 [ 507.446925][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 507.757498][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1057'. [ 507.796923][ T9] usb 2-1: device descriptor read/64, error -71 [ 507.946852][ T9] usb usb2-port1: attempt power cycle [ 508.316852][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 508.337666][ T9] usb 2-1: device descriptor read/8, error -71 [ 508.917847][ T9285] veth3: entered promiscuous mode [ 508.966810][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 508.987706][ T9] usb 2-1: device descriptor read/8, error -71 [ 509.097113][ T9] usb usb2-port1: unable to enumerate USB device [ 511.073977][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 511.219640][ T31] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 511.219670][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.313566][ T31] usb 2-1: config 0 descriptor?? [ 511.851793][ T31] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 512.173704][ T31] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 512.173720][ T31] [drm] Initialized udl on minor 2 [ 512.301199][ T9310] /dev/nullb0: Can't open blockdev [ 512.302624][ T31] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 512.302969][ T31] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 512.344093][ T31] usb 2-1: USB disconnect, device number 24 [ 512.346016][ T5887] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 512.348631][ T5887] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 513.455720][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 513.608451][ T31] usb 3-1: config 0 has no interfaces? [ 513.608476][ T31] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 513.608488][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.621338][ T31] usb 3-1: config 0 descriptor?? [ 513.957414][ T5957] usb 3-1: USB disconnect, device number 17 [ 514.006829][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 514.156824][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 514.302298][ T31] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 514.302324][ T31] usb 5-1: config 0 has no interface number 0 [ 514.305184][ T31] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 514.305212][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.305230][ T31] usb 5-1: Product: syz [ 514.305243][ T31] usb 5-1: Manufacturer: syz [ 514.305257][ T31] usb 5-1: SerialNumber: syz [ 514.887934][ T31] usb 5-1: config 0 descriptor?? [ 514.939088][ T31] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 515.207221][ T31] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 515.250657][ T31] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 515.388026][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 515.396969][ T5957] usb 5-1: USB disconnect, device number 25 [ 515.422426][ T5957] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 515.463550][ T5957] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 515.471871][ T5957] quatech2 5-1:0.51: device disconnected [ 515.726904][ T5958] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 515.876836][ T5958] usb 1-1: Using ep0 maxpacket: 16 [ 515.879733][ T5958] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 515.884451][ T5958] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 515.884478][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.884497][ T5958] usb 1-1: Product: syz [ 515.884511][ T5958] usb 1-1: Manufacturer: syz [ 515.884524][ T5958] usb 1-1: SerialNumber: syz [ 515.892322][ T5958] usb 1-1: config 0 descriptor?? [ 517.846803][ T5957] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 518.000853][ T5957] usb 3-1: config 0 has no interfaces? [ 518.000877][ T5957] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 518.000888][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.004594][ T5957] usb 3-1: config 0 descriptor?? [ 518.326766][ T5957] usb 3-1: USB disconnect, device number 18 [ 519.312279][ T5887] usb 1-1: USB disconnect, device number 18 [ 523.186867][ T5887] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 524.119939][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 524.137268][ T5887] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 524.137285][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.137295][ T5887] usb 1-1: Product: syz [ 524.137302][ T5887] usb 1-1: Manufacturer: syz [ 524.137309][ T5887] usb 1-1: SerialNumber: syz [ 524.142294][ T5887] usb 1-1: config 0 descriptor?? [ 524.203297][ T5887] gspca_main: sq905-2.14.0 probing 2770:9120 [ 525.089964][ T5887] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 525.090057][ T5887] sq905 1-1:0.0: probe with driver sq905 failed with error -32 [ 525.259501][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 525.854174][ T5887] usb 1-1: USB disconnect, device number 19 [ 526.408243][ T5958] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 526.556800][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 526.559676][ T5958] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 526.559702][ T5958] usb 5-1: config 0 has no interface number 0 [ 526.562878][ T5958] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 526.562905][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.562925][ T5958] usb 5-1: Product: syz [ 526.562938][ T5958] usb 5-1: Manufacturer: syz [ 526.562952][ T5958] usb 5-1: SerialNumber: syz [ 526.671993][ T5958] usb 5-1: config 0 descriptor?? [ 526.756027][ T5958] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 526.845999][ T9472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1109'. [ 526.846085][ T9472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1109'. [ 527.489256][ T5958] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 527.574460][ T9477] random: crng reseeded on system resumption [ 527.575275][ T5958] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 527.623913][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 527.697299][ T5958] usb 5-1: USB disconnect, device number 26 [ 527.720036][ T5958] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 527.743152][ T5958] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 527.759904][ T5958] quatech2 5-1:0.51: device disconnected [ 528.238801][ T9490] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1115'. [ 528.248568][ T9490] unsupported nlmsg_type 40 [ 530.314159][ T9494] overlayfs: missing 'lowerdir' [ 532.500680][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 532.512454][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'. [ 536.136198][ T5120] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 537.068551][ T44] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 538.407380][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 538.409954][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 538.409984][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 538.414309][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 538.414336][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.414354][ T44] usb 2-1: Product: syz [ 538.414367][ T44] usb 2-1: Manufacturer: syz [ 538.414379][ T44] usb 2-1: SerialNumber: syz [ 538.436856][ T44] usb 2-1: config 0 descriptor?? [ 538.442922][ T44] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 541.207629][ T5958] usb 2-1: USB disconnect, device number 25 [ 541.465906][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1141'. [ 541.465967][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1141'. [ 542.663497][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 542.696249][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 542.868944][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 547.788367][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 547.788384][ T37] audit: type=1326 audit(1760800440.514:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.788430][ T37] audit: type=1326 audit(1760800440.514:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.870608][ T37] audit: type=1326 audit(1760800440.594:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.870665][ T37] audit: type=1326 audit(1760800440.594:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.870704][ T37] audit: type=1326 audit(1760800440.594:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.870743][ T37] audit: type=1326 audit(1760800440.594:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.879595][ T37] audit: type=1326 audit(1760800440.604:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.879647][ T37] audit: type=1326 audit(1760800440.604:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.879686][ T37] audit: type=1326 audit(1760800440.604:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 547.879731][ T37] audit: type=1326 audit(1760800440.604:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9645 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 548.498912][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 549.619621][ T9659] random: crng reseeded on system resumption [ 549.790151][ T9664] autofs: Unknown parameter '0x0000000000000000' [ 552.127403][ T31] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 552.526971][ T31] usb 2-1: config 0 has no interfaces? [ 552.527009][ T31] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 552.527039][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.532081][ T31] usb 2-1: config 0 descriptor?? [ 554.828749][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 554.830473][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 555.326245][ T44] usb 2-1: USB disconnect, device number 26 [ 555.938826][ T44] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 556.127555][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 556.148413][ T44] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 556.148439][ T44] usb 2-1: config 0 has no interface number 0 [ 556.152049][ T44] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 556.152076][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.152094][ T44] usb 2-1: Product: syz [ 556.152109][ T44] usb 2-1: Manufacturer: syz [ 556.152122][ T44] usb 2-1: SerialNumber: syz [ 556.178930][ T44] usb 2-1: config 0 descriptor?? [ 556.270306][ T44] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 556.635263][ T44] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 556.669785][ T44] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 557.020390][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 557.021114][ T44] usb 2-1: USB disconnect, device number 27 [ 557.046442][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 557.069542][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 557.074565][ T44] quatech2 2-1:0.51: device disconnected [ 557.512580][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 558.283690][ T9727] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1183'. [ 559.039131][ T5120] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 559.188285][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 559.437009][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 561.198240][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 562.216471][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 563.243809][ T5120] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 566.110743][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 566.913982][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 568.020443][ T9843] binder: BINDER_SET_CONTEXT_MGR already set [ 568.020458][ T9843] binder: 9842:9843 ioctl 4018620d 200000000040 returned -16 [ 568.037482][ T9843] binder: 9842:9843 ioctl c0306201 200000000240 returned -11 [ 568.037749][ T9843] binder: 9842:9843 ioctl c0306201 2000000002c0 returned -14 [ 568.153259][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.153333][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.696809][ T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 569.909173][ T44] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 569.909192][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.913514][ T44] usb 2-1: config 0 descriptor?? [ 570.139519][ T44] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 570.373059][ T9853] zonefs (nullb0) ERROR: Not a zoned block device [ 570.476762][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 570.537739][ T9863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1217'. [ 571.024081][ T44] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 571.024106][ T44] [drm] Initialized udl on minor 2 [ 571.039869][ T44] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 571.040220][ T44] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 571.043138][ T5865] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 571.081380][ T5865] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 571.081562][ T5865] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 571.131832][ T44] usb 2-1: USB disconnect, device number 28 [ 571.673671][ T9879] overlayfs: missing 'lowerdir' [ 571.704163][ T9880] binder: 9878:9880 ioctl 4018620d 0 returned -22 [ 571.862130][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 574.456987][ T5887] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 574.550701][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 574.850370][ T5887] usb 3-1: config 0 has no interfaces? [ 574.850408][ T5887] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 574.850431][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.864562][ T5887] usb 3-1: config 0 descriptor?? [ 575.480613][ T9] usb 3-1: USB disconnect, device number 19 [ 577.874741][ T9934] syz.1.1241 (9934) used greatest stack depth: 15560 bytes left [ 578.588843][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 578.642215][ T9953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1246'. [ 579.465900][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'. [ 579.653171][ T9961] bond4: entered allmulticast mode [ 581.024461][ T9982] process 'syz.4.1254' launched './file0' with NULL argv: empty string added [ 581.236825][ T5958] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 581.389727][ T5958] usb 2-1: config 0 has no interfaces? [ 581.389765][ T5958] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 581.389787][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.402614][ T5958] usb 2-1: config 0 descriptor?? [ 581.811971][ T5887] usb 2-1: USB disconnect, device number 29 [ 581.844321][ T9995] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 582.367538][ T9995] veth3: entered promiscuous mode [ 582.387849][ T9995] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 584.760193][T10014] atomic_op ffff8880366e7a18 conn xmit_atomic 0000000000000000 [ 590.327782][ T44] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 590.479329][ T44] usb 2-1: config 0 has no interfaces? [ 590.479369][ T44] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 590.479392][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.521223][ T44] usb 2-1: config 0 descriptor?? [ 591.099141][ T5793] usb 2-1: USB disconnect, device number 30 [ 591.316764][ T44] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 591.390951][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 591.445843][T10073] bond4: entered allmulticast mode [ 591.499422][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 591.502279][ T44] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 591.502311][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 591.502336][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 591.502359][ T44] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.502400][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.502423][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.614719][T10076] binder: 10075:10076 ioctl c0306201 200000000240 returned -11 [ 591.615145][T10076] binder: 10075:10076 ioctl c0306201 2000000002c0 returned -14 [ 592.010406][ T44] usb 1-1: GET_CAPABILITIES returned 0 [ 592.010456][ T44] usbtmc 1-1:16.0: can't read capabilities [ 592.156825][ T5793] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 592.306889][ T5793] usb 5-1: Using ep0 maxpacket: 32 [ 592.309810][ T5793] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 592.309826][ T5793] usb 5-1: config 0 has no interface number 0 [ 592.312161][ T5793] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 592.312178][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.312188][ T5793] usb 5-1: Product: syz [ 592.312195][ T5793] usb 5-1: Manufacturer: syz [ 592.312202][ T5793] usb 5-1: SerialNumber: syz [ 592.339386][ T44] usb 1-1: USB disconnect, device number 20 [ 592.418034][ T5793] usb 5-1: config 0 descriptor?? [ 592.450089][ T5793] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 592.567994][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 592.568012][ T37] audit: type=1326 audit(1760800485.294:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.568501][ T37] audit: type=1326 audit(1760800485.294:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.569166][ T37] audit: type=1326 audit(1760800485.294:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.569946][ T37] audit: type=1326 audit(1760800485.294:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.570439][ T37] audit: type=1326 audit(1760800485.294:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.570779][ T37] audit: type=1326 audit(1760800485.294:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.572668][ T37] audit: type=1326 audit(1760800485.294:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.573315][ T37] audit: type=1326 audit(1760800485.294:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.573626][ T37] audit: type=1326 audit(1760800485.294:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.573677][ T37] audit: type=1326 audit(1760800485.294:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10092 comm="syz.2.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 592.868374][T10093] bridge_slave_0: left allmulticast mode [ 592.868394][T10093] bridge_slave_0: left promiscuous mode [ 592.874916][T10093] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.940579][ T5793] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 592.979220][ T5793] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 592.997124][T10093] bridge_slave_1: left allmulticast mode [ 592.997145][T10093] bridge_slave_1: left promiscuous mode [ 592.997324][T10093] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.155095][T10093] bond0: (slave bond_slave_0): Releasing backup interface [ 593.257614][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 593.259891][ T5887] usb 5-1: USB disconnect, device number 27 [ 593.329535][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 593.352138][T10093] bond0: (slave bond_slave_1): Releasing backup interface [ 593.356548][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 593.365880][ T5887] quatech2 5-1:0.51: device disconnected [ 593.490968][T10093] team0: Port device team_slave_0 removed [ 593.565752][T10093] team0: Port device team_slave_1 removed [ 593.568137][T10093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.568165][T10093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.216879][ T5809] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 594.331870][T10093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.331897][T10093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.396550][T10093] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 598.000929][ T5887] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 598.067048][ T44] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 598.491555][ T5887] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 598.491651][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.564482][ T5887] usb 3-1: config 0 descriptor?? [ 599.436796][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 599.442695][ T44] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 599.442713][ T44] usb 5-1: config 0 has no interface number 0 [ 599.442744][ T44] usb 5-1: config 0 interface 184 has no altsetting 0 [ 599.475736][ T44] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 599.475760][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.500687][ T44] usb 5-1: Product: syz [ 599.500708][ T44] usb 5-1: Manufacturer: syz [ 599.500721][ T44] usb 5-1: SerialNumber: syz [ 599.536341][ T44] usb 5-1: config 0 descriptor?? [ 599.599659][ T44] smsc75xx v1.0.0 [ 599.628021][T10144] zonefs (nullb0) ERROR: Not a zoned block device [ 599.631282][ T5887] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 599.632704][ T5887] [drm:udl_init] *ERROR* Selecting channel failed [ 599.677935][ T5887] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 599.677951][ T5887] [drm] Initialized udl on minor 2 [ 599.681122][ T5887] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 599.681700][ T5887] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 599.684080][ T5962] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 599.722186][ T5962] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 599.722789][ T5962] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 599.753246][ T5887] usb 3-1: USB disconnect, device number 20 [ 599.996898][ T5962] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 600.147589][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 600.153221][ T5962] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 600.153248][ T5962] usb 1-1: config 0 has no interface number 0 [ 600.196132][ T5962] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 600.196382][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.196569][ T5962] usb 1-1: Product: syz [ 600.196578][ T5962] usb 1-1: Manufacturer: syz [ 600.196586][ T5962] usb 1-1: SerialNumber: syz [ 600.238832][ T5962] usb 1-1: config 0 descriptor?? [ 600.266416][ T5962] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 600.412378][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 600.412408][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 600.437387][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 600.437406][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 600.437416][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 600.437802][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 600.438326][ T44] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 600.505026][ T44] usb 5-1: USB disconnect, device number 28 [ 600.571886][ T5962] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 600.601519][ T5962] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 601.052448][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 601.053789][ T5793] usb 1-1: USB disconnect, device number 21 [ 601.081083][ T5793] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 601.104033][ T5793] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 601.110851][ T5793] quatech2 1-1:0.51: device disconnected [ 601.384186][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 605.621336][T10203] random: crng reseeded on system resumption [ 606.105022][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 606.186004][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 612.390542][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 612.401202][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 612.628441][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 616.120988][T10277] random: crng reseeded on system resumption [ 619.857523][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 622.100814][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1360'. [ 622.328224][T10324] bond5: entered allmulticast mode [ 622.670879][T10327] random: crng reseeded on system resumption [ 626.467657][ T5809] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 626.754947][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 629.390173][T10366] fuse: Bad value for 'fd' [ 629.605676][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.605750][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.622511][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'. [ 634.129752][T10395] random: crng reseeded on system resumption [ 636.712379][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1381'. [ 639.852082][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 639.865923][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 640.764633][T10451] random: crng reseeded on system resumption [ 642.104168][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 642.115263][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 643.531691][ T5809] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 645.258499][T10475] overlayfs: failed to clone upperpath [ 645.735763][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 647.237163][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 649.528812][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'. [ 649.753484][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1413'. [ 650.272797][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 650.272816][ T37] audit: type=1326 audit(1760800542.994:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.273909][ T37] audit: type=1326 audit(1760800542.994:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.275149][ T37] audit: type=1326 audit(1760800542.994:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.275414][ T37] audit: type=1326 audit(1760800542.994:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.275676][ T37] audit: type=1326 audit(1760800542.994:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.276273][ T37] audit: type=1326 audit(1760800542.994:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.285109][ T37] audit: type=1326 audit(1760800543.004:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.285165][ T37] audit: type=1326 audit(1760800543.004:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.285210][ T37] audit: type=1326 audit(1760800543.004:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.285252][ T37] audit: type=1326 audit(1760800543.004:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.2.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 650.831854][T10540] random: crng reseeded on system resumption [ 656.244931][T10592] random: crng reseeded on system resumption [ 656.321142][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1436'. [ 656.494403][T10595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 659.159025][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 659.159043][ T37] audit: type=1326 audit(1760800551.884:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.197567][ T37] audit: type=1326 audit(1760800551.884:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.289847][ T37] audit: type=1326 audit(1760800551.984:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.290751][ T37] audit: type=1326 audit(1760800552.014:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.382587][ T37] audit: type=1326 audit(1760800552.064:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.419641][ T37] audit: type=1326 audit(1760800552.144:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.419693][ T37] audit: type=1326 audit(1760800552.144:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.419736][ T37] audit: type=1326 audit(1760800552.144:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.420481][ T37] audit: type=1326 audit(1760800552.144:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 659.439469][ T37] audit: type=1326 audit(1760800552.164:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10613 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd7d97efc9 code=0x7ffc0000 [ 660.689561][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 660.838659][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1443'. [ 665.515370][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 669.580702][T10670] random: crng reseeded on system resumption [ 671.484257][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 673.045872][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 673.060880][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 674.352039][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 674.358404][T10713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1469'. [ 676.178150][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 676.251921][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1473'. [ 679.016830][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 679.016848][ T37] audit: type=1326 audit(1760800571.734:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.016896][ T37] audit: type=1326 audit(1760800571.734:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.026640][T10744] random: crng reseeded on system resumption [ 679.133088][ T37] audit: type=1326 audit(1760800571.854:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.133142][ T37] audit: type=1326 audit(1760800571.854:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.133185][ T37] audit: type=1326 audit(1760800571.854:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.133674][ T37] audit: type=1326 audit(1760800571.854:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.226277][ T37] audit: type=1326 audit(1760800571.944:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.226313][ T37] audit: type=1326 audit(1760800571.944:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.347865][ T37] audit: type=1326 audit(1760800572.064:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.347917][ T37] audit: type=1326 audit(1760800572.064:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10747 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234dbfefc9 code=0x7ffc0000 [ 679.726824][ T5957] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 679.856782][ T5957] usb 1-1: device descriptor read/64, error -71 [ 679.936893][ T5809] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 680.306762][ T5957] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 680.436767][ T5957] usb 1-1: device descriptor read/64, error -71 [ 680.557158][ T5957] usb usb1-port1: attempt power cycle [ 681.111336][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 681.576813][ T5957] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 681.597719][ T5957] usb 1-1: device descriptor read/8, error -71 [ 681.906816][ T5879] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 681.977389][ T5957] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 682.596889][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 682.598206][ T5879] usb 2-1: no configurations [ 682.598222][ T5879] usb 2-1: can't read configurations, error -22 [ 682.699985][ T5957] usb 1-1: device descriptor read/8, error -71 [ 682.726835][ T5879] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 682.813664][ T5957] usb usb1-port1: unable to enumerate USB device [ 682.887180][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 682.888152][ T5879] usb 2-1: no configurations [ 682.888168][ T5879] usb 2-1: can't read configurations, error -22 [ 682.893100][ T5879] usb usb2-port1: attempt power cycle [ 683.326835][ T5879] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 683.866773][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 683.870617][ T5879] usb 2-1: no configurations [ 683.870635][ T5879] usb 2-1: can't read configurations, error -22 [ 684.201630][ T5879] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 684.406802][ T5879] usb 2-1: device not accepting address 34, error -71 [ 684.413044][ T5879] usb usb2-port1: unable to enumerate USB device [ 685.624829][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 686.341496][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 686.341515][ T37] audit: type=1326 audit(1760800579.034:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.341558][ T37] audit: type=1326 audit(1760800579.064:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.342291][ T37] audit: type=1326 audit(1760800579.064:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.342339][ T37] audit: type=1326 audit(1760800579.064:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.342382][ T37] audit: type=1326 audit(1760800579.064:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.366556][ T37] audit: type=1326 audit(1760800579.084:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.366591][ T37] audit: type=1326 audit(1760800579.084:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.366615][ T37] audit: type=1326 audit(1760800579.084:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.366638][ T37] audit: type=1326 audit(1760800579.084:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 686.366761][ T37] audit: type=1326 audit(1760800579.084:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c827efc9 code=0x7ffc0000 [ 688.026172][T10836] atomic_op ffff888061399218 conn xmit_atomic 0000000000000000 [ 688.764547][ T5879] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 689.200677][ T5958] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 689.361560][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 689.375111][ T5958] usb 3-1: no configurations [ 689.375129][ T5958] usb 3-1: can't read configurations, error -22 [ 689.506823][ T5958] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 689.666967][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 689.668016][ T5958] usb 3-1: no configurations [ 689.668031][ T5958] usb 3-1: can't read configurations, error -22 [ 689.671382][ T5958] usb usb3-port1: attempt power cycle [ 689.993854][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 690.069633][T10853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'. [ 690.556953][ T5958] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 690.587735][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 690.588688][ T5958] usb 3-1: no configurations [ 690.588703][ T5958] usb 3-1: can't read configurations, error -22 [ 690.718966][ T5958] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 690.737764][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 690.740427][ T5958] usb 3-1: no configurations [ 690.740458][ T5958] usb 3-1: can't read configurations, error -22 [ 690.741138][ T5958] usb usb3-port1: unable to enumerate USB device [ 691.034466][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.034508][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.083801][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 692.083819][ T37] audit: type=1326 audit(1760800584.804:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.084432][ T37] audit: type=1326 audit(1760800584.804:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.099516][ T37] audit: type=1326 audit(1760800584.804:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.099570][ T37] audit: type=1326 audit(1760800584.824:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.099618][ T37] audit: type=1326 audit(1760800584.824:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.099894][ T37] audit: type=1326 audit(1760800584.824:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.117121][ T37] audit: type=1326 audit(1760800584.844:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.117174][ T37] audit: type=1326 audit(1760800584.844:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.117724][ T37] audit: type=1326 audit(1760800584.844:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 692.119579][ T37] audit: type=1326 audit(1760800584.844:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 693.100120][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 693.110994][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 694.107775][T10890] atomic_op ffff888039405218 conn xmit_atomic 0000000000000000 [ 697.901104][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 698.843655][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 698.843673][ T37] audit: type=1326 audit(1760800591.564:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.845913][ T37] audit: type=1326 audit(1760800591.564:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.906822][ T37] audit: type=1326 audit(1760800591.624:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.907127][ T37] audit: type=1326 audit(1760800591.634:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.907650][ T37] audit: type=1326 audit(1760800591.634:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.907918][ T37] audit: type=1326 audit(1760800591.634:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.915472][ T37] audit: type=1326 audit(1760800591.634:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.915527][ T37] audit: type=1326 audit(1760800591.634:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.916245][ T37] audit: type=1326 audit(1760800591.634:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 698.916293][ T37] audit: type=1326 audit(1760800591.634:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.0.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7ffc0000 [ 700.197659][T10936] atomic_op ffff888033347a18 conn xmit_atomic 0000000000000000 [ 701.881683][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 701.882506][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 703.670488][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 705.287445][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 706.143623][T10990] atomic_op ffff8880238c4218 conn xmit_atomic 0000000000000000 [ 708.526835][ T5962] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 709.230513][ T5809] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 710.610949][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 710.619827][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 710.951130][ T5962] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 710.951160][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.989086][ T5962] usb 1-1: config 0 descriptor?? [ 711.061876][T11016] binder: BINDER_SET_CONTEXT_MGR already set [ 711.061891][T11016] binder: 11015:11016 ioctl 4018620d 200000000040 returned -16 [ 711.062407][T11016] binder: 11015:11016 ioctl c0306201 0 returned -14 [ 711.387313][ T5962] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 711.387793][ T5962] [drm:udl_init] *ERROR* Selecting channel failed [ 711.416564][ T5962] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 711.416589][ T5962] [drm] Initialized udl on minor 2 [ 711.467695][ T5962] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 711.468174][ T5962] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 711.496870][ T5962] usb 1-1: USB disconnect, device number 26 [ 711.498206][ T5887] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 711.498796][ T5887] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 711.853424][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 713.014299][T11035] atomic_op ffff88803c418218 conn xmit_atomic 0000000000000000 [ 713.810361][T11037] binder: 11036:11037 ioctl c0306201 0 returned -14 [ 713.811053][T11037] binder: 11036:11037 ioctl c0306201 200000000240 returned -11 [ 713.811320][T11037] binder: 11036:11037 ioctl c0306201 2000000002c0 returned -14 [ 714.423739][T11048] binder: BINDER_SET_CONTEXT_MGR already set [ 714.423752][T11048] binder: 11045:11048 ioctl 4018620d 200000000040 returned -16 [ 714.424122][T11048] binder: 11045:11048 ioctl c0306201 0 returned -14 [ 716.177598][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 716.185593][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 717.673875][T11079] binder: 11078:11079 ioctl c0306201 0 returned -14 [ 717.676422][T11079] binder: 11078:11079 ioctl c0306201 200000000240 returned -11 [ 717.676890][T11079] binder: 11078:11079 ioctl c0306201 2000000002c0 returned -14 [ 718.624001][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 719.849704][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 723.557548][ T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 723.729934][ T31] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 723.729960][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.729979][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 723.730007][ T31] usb 2-1: config 1 has no interface number 1 [ 723.730057][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 723.730097][ T31] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 723.997170][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 723.997200][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.997220][ T31] usb 2-1: Product: syz [ 723.997234][ T31] usb 2-1: Manufacturer: syz [ 723.997249][ T31] usb 2-1: SerialNumber: syz [ 726.015658][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 726.526490][ T31] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 726.526616][ T31] usb 2-1: MIDIStreaming interface descriptor not found [ 727.109380][ T31] usb 2-1: USB disconnect, device number 36 [ 727.374579][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1604'. [ 730.510140][T11227] udevd[11227]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.870460][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 732.291659][ T5809] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 733.378093][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 735.641409][T11278] atomic_op ffff8880316ea218 conn xmit_atomic 0000000000000000 [ 736.369823][T11264] random: crng reseeded on system resumption [ 737.235425][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 739.888243][T11314] atomic_op ffff88806124da18 conn xmit_atomic 0000000000000000 [ 740.388611][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 744.842646][T11356] random: crng reseeded on system resumption [ 747.315318][T11374] atomic_op ffff88804c021218 conn xmit_atomic 0000000000000000 [ 748.059260][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 748.067709][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 751.900989][T11420] atomic_op ffff888027a3ca18 conn xmit_atomic 0000000000000000 [ 752.741153][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.743016][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.600368][T11447] random: crng reseeded on system resumption [ 760.636830][ T5887] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 760.786815][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 760.789542][ T5887] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 760.795711][ T5887] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 760.795739][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.795758][ T5887] usb 2-1: Product: syz [ 760.795771][ T5887] usb 2-1: Manufacturer: syz [ 760.795784][ T5887] usb 2-1: SerialNumber: syz [ 760.849505][ T5887] usb 2-1: config 0 descriptor?? [ 762.040179][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 763.445711][ T31] usb 2-1: USB disconnect, device number 37 [ 763.994353][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 766.177817][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 766.936837][ T5793] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 767.086811][ T5793] usb 5-1: Using ep0 maxpacket: 32 [ 767.089434][ T5793] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 767.089462][ T5793] usb 5-1: config 0 has no interface number 0 [ 767.089511][ T5793] usb 5-1: config 0 interface 184 has no altsetting 0 [ 767.092816][ T5793] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 767.092844][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.092863][ T5793] usb 5-1: Product: syz [ 767.092876][ T5793] usb 5-1: Manufacturer: syz [ 767.092890][ T5793] usb 5-1: SerialNumber: syz [ 767.125861][ T5793] usb 5-1: config 0 descriptor?? [ 767.130707][ T5793] smsc75xx v1.0.0 [ 767.130725][ T5793] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 767.130979][ T5793] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 768.545403][ T5887] usb 5-1: USB disconnect, device number 29 [ 768.837457][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 768.933651][T11583] fuse: Bad value for 'fd' [ 769.199697][T11589] zonefs (nullb0) ERROR: Not a zoned block device [ 771.877443][T11613] atomic_op ffff888011378218 conn xmit_atomic 0000000000000000 [ 773.260327][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'. [ 773.334090][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 775.560345][T11630] fuse: Bad value for 'fd' [ 775.626791][ T5958] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 775.756824][ T5958] usb 5-1: device descriptor read/64, error -71 [ 776.006884][ T5958] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 776.136794][ T5958] usb 5-1: device descriptor read/64, error -71 [ 776.186838][ T5793] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 776.248314][ T5958] usb usb5-port1: attempt power cycle [ 776.336764][ T5793] usb 1-1: Using ep0 maxpacket: 8 [ 776.366963][ T5793] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 776.366994][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.367013][ T5793] usb 1-1: Product: syz [ 776.367027][ T5793] usb 1-1: Manufacturer: syz [ 776.367040][ T5793] usb 1-1: SerialNumber: syz [ 776.405899][ T5793] usb 1-1: config 0 descriptor?? [ 776.461427][ T5793] gspca_main: sq905-2.14.0 probing 2770:9120 [ 776.979812][T11652] Illegal XDP return value 4294967274 on prog (id 182) dev N/A, expect packet loss! [ 776.993031][ T5793] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 777.009752][ T5793] sq905 1-1:0.0: probe with driver sq905 failed with error -32 [ 777.097797][T11655] atomic_op ffff88805c336218 conn xmit_atomic 0000000000000000 [ 778.007580][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 778.280257][T11664] fuse: Bad value for 'fd' [ 780.033852][ T31] usb 1-1: USB disconnect, device number 27 [ 782.178570][T11701] atomic_op ffff88803779c218 conn xmit_atomic 0000000000000000 [ 783.736822][ T5958] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 784.019430][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 784.026505][ T5958] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 784.026533][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.026552][ T5958] usb 1-1: Product: syz [ 784.026566][ T5958] usb 1-1: Manufacturer: syz [ 784.026579][ T5958] usb 1-1: SerialNumber: syz [ 784.158139][ T5958] usb 1-1: config 0 descriptor?? [ 784.181251][ T5958] gspca_main: sq905-2.14.0 probing 2770:9120 [ 784.567389][ T5958] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 784.567484][ T5958] sq905 1-1:0.0: probe with driver sq905 failed with error -32 [ 784.767519][ T5809] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 785.326735][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 785.326752][ T37] audit: type=1326 audit(1760800678.044:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.326798][ T37] audit: type=1326 audit(1760800678.044:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.329882][ T37] audit: type=1326 audit(1760800678.054:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.334329][ T37] audit: type=1326 audit(1760800678.054:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.342501][ T37] audit: type=1326 audit(1760800678.054:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.342559][ T37] audit: type=1326 audit(1760800678.064:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.342600][ T37] audit: type=1326 audit(1760800678.064:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.342639][ T37] audit: type=1326 audit(1760800678.064:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.370099][ T37] audit: type=1326 audit(1760800678.094:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 785.370177][ T37] audit: type=1326 audit(1760800678.094:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11722 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f02ddefc9 code=0x7ffc0000 [ 786.198877][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 786.207014][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 786.859471][T11751] fuse: Bad value for 'fd' [ 787.030871][ T9] usb 1-1: USB disconnect, device number 28 [ 787.532860][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 787.543029][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 788.483186][ T5809] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 790.089590][T11782] binder_alloc: 11781: binder_alloc_buf, no vma [ 790.089717][T11782] binder: 11781:11782 ioctl c0306201 2000000002c0 returned -14 [ 793.492936][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'. [ 793.501585][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'. [ 795.541468][T11822] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1795'. [ 797.220289][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 797.902190][ T5958] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 798.065976][ T31] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 798.093372][ T31] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 798.216502][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 798.218959][ T5958] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 798.218987][ T5958] usb 5-1: config 0 has no interface number 0 [ 798.219034][ T5958] usb 5-1: config 0 interface 184 has no altsetting 0 [ 798.222236][ T5958] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 798.222262][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.222280][ T5958] usb 5-1: Product: syz [ 798.222294][ T5958] usb 5-1: Manufacturer: syz [ 798.222306][ T5958] usb 5-1: SerialNumber: syz [ 798.294348][ T5958] usb 5-1: config 0 descriptor?? [ 798.327781][ T5958] smsc75xx v1.0.0 [ 798.327794][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 798.328036][ T5958] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 798.400321][ T5809] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 798.925421][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1805'. [ 798.925466][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1805'. [ 799.848077][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 799.918149][T11876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1810'. [ 800.708780][ T5958] usb 5-1: USB disconnect, device number 33 [ 801.336767][ T5793] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 801.476915][ T5793] usb 1-1: device descriptor read/64, error -71 [ 801.762377][T11893] capability: warning: `syz.1.1815' uses 32-bit capabilities (legacy support in use) [ 802.646758][ T5793] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 802.776949][ T5793] usb 1-1: device descriptor read/64, error -71 [ 802.887207][ T5793] usb usb1-port1: attempt power cycle [ 803.238060][ T5793] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 803.410783][ T5793] usb 1-1: device descriptor read/8, error -71 [ 804.026787][ T5793] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 804.047137][ T5793] usb 1-1: device descriptor read/8, error -71 [ 804.157254][ T5793] usb usb1-port1: unable to enumerate USB device [ 805.338620][ T5958] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 805.453791][ T5809] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 805.486836][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 805.489428][ T5958] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 805.489453][ T5958] usb 2-1: config 0 has no interface number 0 [ 805.489500][ T5958] usb 2-1: config 0 interface 184 has no altsetting 0 [ 805.492713][ T5958] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 805.492738][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.492758][ T5958] usb 2-1: Product: syz [ 805.492771][ T5958] usb 2-1: Manufacturer: syz [ 805.492784][ T5958] usb 2-1: SerialNumber: syz [ 805.556634][ T5958] usb 2-1: config 0 descriptor?? [ 805.563458][ T5958] smsc75xx v1.0.0 [ 808.211948][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 808.211981][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 808.212000][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 808.212398][ T5958] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 808.846808][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 808.956903][ T5962] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 809.006801][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 809.011723][ T31] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.011758][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 809.011792][ T31] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 809.011814][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.031409][ T31] usb 3-1: config 0 descriptor?? [ 809.116832][ T5962] usb 5-1: Using ep0 maxpacket: 32 [ 809.131442][ T5962] usb 5-1: config 9 has an invalid interface number: 198 but max is 0 [ 809.131576][ T5962] usb 5-1: config 9 has no interface number 0 [ 809.135134][ T5962] usb 5-1: config 9 interface 198 altsetting 86 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 809.135175][ T5962] usb 5-1: config 9 interface 198 altsetting 86 has a duplicate endpoint with address 0xE, skipping [ 809.135197][ T5962] usb 5-1: config 9 interface 198 has no altsetting 0 [ 809.142378][ T5962] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=d9.29 [ 809.142460][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.142480][ T5962] usb 5-1: Product: syz [ 809.142494][ T5962] usb 5-1: Manufacturer: syz [ 809.142507][ T5962] usb 5-1: SerialNumber: syz [ 809.473546][ T5962] appletouch 5-1:9.198: Could not find int-in endpoint [ 809.473661][ T5962] appletouch 5-1:9.198: probe with driver appletouch failed with error -5 [ 809.544285][ T5887] usb 2-1: USB disconnect, device number 38 [ 809.557734][ T5962] usbhid 5-1:9.198: couldn't find an input interrupt endpoint [ 809.879431][ T5962] usb 5-1: USB disconnect, device number 34 [ 809.945777][ T31] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 809.949233][ T31] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 809.995197][ T31] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 809.995774][ T31] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 809.995929][ T31] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 810.557282][ T31] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 810.593673][T11955] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1833'. [ 810.702600][ T31] usb 3-1: USB disconnect, device number 25 [ 811.124129][T11956] fido_id[11956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 813.395440][ T5809] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 814.082969][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.083038][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.804690][T11991] netlink: 'syz.0.1846': attribute type 2 has an invalid length. [ 814.834748][ T5958] IPVS: starting estimator thread 0... [ 815.258508][T11993] IPVS: using max 7 ests per chain, 16800 per kthread [ 815.673736][T12004] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 815.673764][T12004] CIFS mount error: No usable UNC path provided in device string! [ 815.673764][T12004] [ 815.674028][T12004] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 816.168514][T12009] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1853'. [ 818.972853][T12024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.016030][T12024] team0: Port device bond0 added [ 819.102054][T12024] team0: Failed to send port change of device bond0 via netlink (err -105) [ 819.187375][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.190633][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.322697][T12024] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 819.324920][T12024] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 819.964114][T12039] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 821.460464][ T5809] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 822.345350][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'. [ 829.565498][T12123] netlink: 'syz.1.1885': attribute type 4 has an invalid length. [ 829.608459][T12123] netlink: 'syz.1.1885': attribute type 4 has an invalid length. [ 829.643251][T12124] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 829.712253][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 830.081193][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 830.088367][T12132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 830.216011][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 830.229740][T12130] veth5: entered promiscuous mode [ 830.244493][T12130] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 830.617160][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 831.360271][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 831.360299][ T31] usb 5-1: config 0 has no interface number 0 [ 831.360350][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 831.388261][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 831.388290][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.388310][ T31] usb 5-1: Product: syz [ 831.388324][ T31] usb 5-1: Manufacturer: syz [ 831.388337][ T31] usb 5-1: SerialNumber: syz [ 831.489314][ T31] usb 5-1: config 0 descriptor?? [ 831.504198][ T31] smsc75xx v1.0.0 [ 831.902434][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 831.902464][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 831.902481][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 831.902937][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 833.217160][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 834.413946][ T5958] usb 5-1: USB disconnect, device number 35 [ 834.786450][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 835.381679][T12184] fuse: Bad value for 'fd' [ 837.754794][T12203] capability: warning: `syz.1.1903' uses deprecated v2 capabilities in a way that may be insecure [ 838.593462][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 845.235735][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 845.244530][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 865.715066][T12363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 865.738310][T12363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 865.743490][T12363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 865.896709][T12363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 865.920794][T12363] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 868.155220][T12363] Bluetooth: hci5: command tx timeout [ 868.818782][T12377] binder: BINDER_SET_CONTEXT_MGR already set [ 868.818798][T12377] binder: 12376:12377 ioctl 4018620d 200000000040 returned -16 [ 868.819602][T12377] binder: 12376:12377 ioctl c0306201 200000000240 returned -11 [ 868.819861][T12377] binder: 12376:12377 ioctl c0306201 2000000002c0 returned -14 [ 870.236974][T12363] Bluetooth: hci5: command tx timeout [ 871.586946][ T5879] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 871.885915][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.885998][ T5879] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.886209][ T5879] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 871.886304][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.306792][T12363] Bluetooth: hci5: command tx timeout [ 872.338539][ T5879] usb 2-1: config 0 descriptor?? [ 872.399704][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 872.424629][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 872.426316][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 872.442007][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 872.442840][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 872.905805][T12358] chnl_net:caif_netlink_parms(): no params data found [ 874.274775][ T5887] usb 2-1: USB disconnect, device number 39 [ 874.387003][T12363] Bluetooth: hci5: command tx timeout [ 874.546915][T12363] Bluetooth: hci4: command tx timeout [ 875.449137][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.449804][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.703783][T12363] Bluetooth: hci4: command tx timeout [ 878.513731][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 878.521534][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 878.789832][T12363] Bluetooth: hci4: command tx timeout [ 880.572989][ T8937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.573025][ T8937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.434404][T12482] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 882.367990][T12363] Bluetooth: hci4: command tx timeout [ 882.442692][T12484] fuse: Bad value for 'fd' [ 883.113473][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 883.123553][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 885.074391][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 885.074412][ T37] audit: type=1326 audit(1760800777.794:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12497 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e39efc9 code=0x7fc00000 [ 886.366830][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 886.461651][ T8937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.461687][ T8937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.516851][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 886.519421][ T31] usb 1-1: config 64 has an invalid interface number: 42 but max is 0 [ 886.519448][ T31] usb 1-1: config 64 has an invalid interface association descriptor of length 5, skipping [ 886.519466][ T31] usb 1-1: config 64 has no interface number 0 [ 886.519511][ T31] usb 1-1: config 64 interface 42 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 886.519533][ T31] usb 1-1: config 64 interface 42 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 1023 [ 886.519558][ T31] usb 1-1: config 64 interface 42 altsetting 1 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 886.519607][ T31] usb 1-1: config 64 interface 42 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 886.519632][ T31] usb 1-1: config 64 interface 42 has no altsetting 0 [ 886.522130][ T31] usb 1-1: New USB device found, idVendor=12d1, idProduct=1004, bcdDevice= 0.00 [ 886.522155][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.522172][ T31] usb 1-1: Product: syz [ 886.522183][ T31] usb 1-1: Manufacturer: syz [ 886.522195][ T31] usb 1-1: SerialNumber: syz [ 886.875551][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'. [ 886.882593][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'. [ 888.187104][ C1] vkms_vblank_simulate: vblank timer overrun [ 888.421574][ C1] vkms_vblank_simulate: vblank timer overrun [ 888.435475][ T31] usb-storage 1-1:64.42: USB Mass Storage device detected [ 888.494382][ C1] vkms_vblank_simulate: vblank timer overrun [ 888.733755][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.249526][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.448855][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.711561][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.857377][ T31] usb 1-1: USB disconnect, device number 33 [ 890.075154][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.857041][T12558] binder: 12557:12558 ioctl c0306201 200000000280 returned -14 [ 891.064470][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.002102][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.054893][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.110482][ T8937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.110518][ T8937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.126781][ T31] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 892.140506][T12572] netlink: 'syz.3.2012': attribute type 4 has an invalid length. [ 892.179501][T12358] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.179724][T12358] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.179975][T12358] bridge_slave_0: entered allmulticast mode [ 892.182895][T12358] bridge_slave_0: entered promiscuous mode [ 892.191921][T12573] netlink: 'syz.3.2012': attribute type 4 has an invalid length. [ 892.245763][T12358] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.245899][T12358] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.246145][T12358] bridge_slave_1: entered allmulticast mode [ 892.269534][T12358] bridge_slave_1: entered promiscuous mode [ 892.276896][ T31] usb 2-1: device descriptor read/64, error -71 [ 892.592539][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.659427][ T31] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 892.659628][ T5962] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 892.752557][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.783457][ T8937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.783478][ T8937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.786876][ T31] usb 2-1: device descriptor read/64, error -71 [ 892.828075][T12358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.832613][ T5962] usb 1-1: config 164 has an invalid interface number: 33 but max is 0 [ 892.832639][ T5962] usb 1-1: config 164 has no interface number 0 [ 892.832686][ T5962] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=a0.45 [ 892.832708][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.854377][T12358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.897133][ T31] usb usb2-port1: attempt power cycle [ 893.093263][T12358] team0: Port device team_slave_0 added [ 893.119973][T12358] team0: Port device team_slave_1 added [ 893.123024][ T5962] usb 1-1: string descriptor 0 read error: -71 [ 893.204579][ T5962] usb 1-1: USB disconnect, device number 34 [ 893.217850][ T5962] ================================================================== [ 893.217868][ T5962] BUG: KASAN: use-after-free in hdm_disconnect+0x10d/0x1c0 [ 893.217895][ T5962] Read of size 8 at addr ffff88803c6760d0 by task kworker/1:7/5962 [ 893.217912][ T5962] [ 893.217935][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 893.217956][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 893.217970][ T5962] Workqueue: usb_hub_wq hub_event [ 893.218005][ T5962] Call Trace: [ 893.218016][ T5962] [ 893.218024][ T5962] dump_stack_lvl+0x189/0x250 [ 893.218050][ T5962] ? __kasan_check_byte+0x12/0x40 [ 893.218073][ T5962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.218095][ T5962] ? lock_release+0x4b/0x3e0 [ 893.218118][ T5962] ? __virt_addr_valid+0x4a5/0x5c0 [ 893.218142][ T5962] print_report+0xca/0x240 [ 893.218167][ T5962] ? hdm_disconnect+0x10d/0x1c0 [ 893.218183][ T5962] kasan_report+0x118/0x150 [ 893.218203][ T5962] ? hdm_disconnect+0x10d/0x1c0 [ 893.218226][ T5962] hdm_disconnect+0x10d/0x1c0 [ 893.218246][ T5962] usb_unbind_interface+0x26e/0x910 [ 893.218280][ T5962] ? __pfx_usb_unbind_interface+0x10/0x10 [ 893.218302][ T5962] device_release_driver_internal+0x4d9/0x800 [ 893.218331][ T5962] bus_remove_device+0x355/0x420 [ 893.218352][ T5962] device_del+0x515/0x8e0 [ 893.218377][ T5962] ? __pfx_device_del+0x10/0x10 [ 893.218399][ T5962] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 893.218426][ T5962] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 893.218454][ T5962] usb_disable_device+0x3e9/0x8a0 [ 893.218476][ T5962] usb_disconnect+0x316/0x940 [ 893.218504][ T5962] hub_event+0x1cf5/0x4a20 [ 893.218534][ T5962] ? do_raw_spin_lock+0x121/0x290 [ 893.218560][ T5962] ? register_lock_class+0x51/0x320 [ 893.218587][ T5962] ? __pfx_hub_event+0x10/0x10 [ 893.218604][ T5962] ? process_scheduled_works+0x9ef/0x17b0 [ 893.218632][ T5962] ? _raw_spin_unlock_irq+0x23/0x50 [ 893.218657][ T5962] ? process_scheduled_works+0x9ef/0x17b0 [ 893.218680][ T5962] ? process_scheduled_works+0x9ef/0x17b0 [ 893.218707][ T5962] process_scheduled_works+0xae1/0x17b0 [ 893.218743][ T5962] ? __pfx_process_scheduled_works+0x10/0x10 [ 893.218780][ T5962] worker_thread+0x8a0/0xda0 [ 893.218799][ T5962] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 893.218829][ T5962] ? __kthread_parkme+0x7b/0x200 [ 893.218852][ T5962] kthread+0x711/0x8a0 [ 893.218873][ T5962] ? __pfx_worker_thread+0x10/0x10 [ 893.218912][ T5962] ? __pfx_kthread+0x10/0x10 [ 893.218932][ T5962] ? rt_spin_unlock+0x150/0x200 [ 893.218955][ T5962] ? rt_spin_unlock+0x161/0x200 [ 893.218976][ T5962] ? __pfx_kthread+0x10/0x10 [ 893.218995][ T5962] ret_from_fork+0x4bc/0x870 [ 893.219021][ T5962] ? __pfx_ret_from_fork+0x10/0x10 [ 893.219050][ T5962] ? __switch_to_asm+0x39/0x70 [ 893.219072][ T5962] ? __switch_to_asm+0x33/0x70 [ 893.219093][ T5962] ? __pfx_kthread+0x10/0x10 [ 893.219113][ T5962] ret_from_fork_asm+0x1a/0x30 [ 893.219143][ T5962] [ 893.219150][ T5962] [ 893.219155][ T5962] The buggy address belongs to the physical page: [ 893.219175][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x3c676 [ 893.219195][ T5962] flags: 0x80000000000000(node=0|zone=1) [ 893.219221][ T5962] raw: 0080000000000000 0000000000000000 ffffea0000f19d90 0000000000000000 [ 893.219238][ T5962] raw: ffff888000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 893.219248][ T5962] page dumped because: kasan: bad access detected [ 893.219261][ T5962] page_owner tracks the page as freed [ 893.219273][ T5962] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5962, tgid 5962 (kworker/1:7), ts 893151093138, free_ts 893217694701 [ 893.219306][ T5962] post_alloc_hook+0x240/0x2a0 [ 893.219324][ T5962] get_page_from_freelist+0x28c0/0x2960 [ 893.219344][ T5962] __alloc_frozen_pages_noprof+0x181/0x370 [ 893.219364][ T5962] alloc_pages_mpol+0xd1/0x380 [ 893.219381][ T5962] ___kmalloc_large_node+0x5f/0x1b0 [ 893.219397][ T5962] __kmalloc_large_noprof+0x1a/0x90 [ 893.219412][ T5962] hdm_probe+0x71/0x13f0 [ 893.219427][ T5962] usb_probe_interface+0x668/0xc30 [ 893.219444][ T5962] really_probe+0x26d/0x9e0 [ 893.219465][ T5962] __driver_probe_device+0x18c/0x2f0 [ 893.219487][ T5962] driver_probe_device+0x4f/0x430 [ 893.219509][ T5962] __device_attach_driver+0x2ce/0x530 [ 893.219532][ T5962] bus_for_each_drv+0x254/0x2e0 [ 893.219548][ T5962] __device_attach+0x2bb/0x400 [ 893.219568][ T5962] bus_probe_device+0x188/0x260 [ 893.219583][ T5962] device_add+0x7b6/0xb50 [ 893.219601][ T5962] page last free pid 5962 tgid 5962 stack trace: [ 893.219612][ T5962] __free_frozen_pages+0xfb6/0x1140 [ 893.219629][ T5962] free_large_kmalloc+0x13a/0x1f0 [ 893.219647][ T5962] device_release+0x9c/0x1c0 [ 893.219669][ T5962] kobject_put+0x22b/0x480 [ 893.219685][ T5962] hdm_disconnect+0xf3/0x1c0 [ 893.219700][ T5962] usb_unbind_interface+0x26e/0x910 [ 893.219717][ T5962] device_release_driver_internal+0x4d9/0x800 [ 893.219738][ T5962] bus_remove_device+0x355/0x420 [ 893.219754][ T5962] device_del+0x515/0x8e0 [ 893.219773][ T5962] usb_disable_device+0x3e9/0x8a0 [ 893.219788][ T5962] usb_disconnect+0x316/0x940 [ 893.219810][ T5962] hub_event+0x1cf5/0x4a20 [ 893.219825][ T5962] process_scheduled_works+0xae1/0x17b0 [ 893.219848][ T5962] worker_thread+0x8a0/0xda0 [ 893.219860][ T5962] kthread+0x711/0x8a0 [ 893.219877][ T5962] ret_from_fork+0x4bc/0x870 [ 893.219899][ T5962] [ 893.219904][ T5962] Memory state around the buggy address: [ 893.219914][ T5962] ffff88803c675f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 893.219928][ T5962] ffff88803c676000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 893.219941][ T5962] >ffff88803c676080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 893.219956][ T5962] ^ [ 893.219968][ T5962] ffff88803c676100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 893.219981][ T5962] ffff88803c676180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 893.219991][ T5962] ================================================================== [ 893.220090][ T5962] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 893.220104][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 893.220126][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 893.220139][ T5962] Workqueue: usb_hub_wq hub_event [ 893.220158][ T5962] Call Trace: [ 893.220165][ T5962] [ 893.220173][ T5962] dump_stack_lvl+0x99/0x250 [ 893.220194][ T5962] ? __asan_memcpy+0x40/0x70 [ 893.220219][ T5962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.220241][ T5962] ? __pfx__printk+0x10/0x10 [ 893.220276][ T5962] vpanic+0x237/0x6d0 [ 893.220295][ T5962] ? __pfx_vpanic+0x10/0x10 [ 893.220312][ T5962] ? preempt_schedule+0xae/0xc0 [ 893.220338][ T5962] ? __pfx_preempt_schedule+0x10/0x10 [ 893.220369][ T5962] panic+0xb9/0xc0 [ 893.220386][ T5962] ? __pfx_panic+0x10/0x10 [ 893.220406][ T5962] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 893.220437][ T5962] ? hdm_disconnect+0x10d/0x1c0 [ 893.220454][ T5962] check_panic_on_warn+0x89/0xb0 [ 893.220478][ T5962] ? hdm_disconnect+0x10d/0x1c0 [ 893.220495][ T5962] end_report+0x78/0x160 [ 893.220515][ T5962] kasan_report+0x129/0x150 [ 893.220551][ T5962] ? hdm_disconnect+0x10d/0x1c0 [ 893.220574][ T5962] hdm_disconnect+0x10d/0x1c0 [ 893.220593][ T5962] usb_unbind_interface+0x26e/0x910 [ 893.220616][ T5962] ? __pfx_usb_unbind_interface+0x10/0x10 [ 893.220638][ T5962] device_release_driver_internal+0x4d9/0x800 [ 893.220666][ T5962] bus_remove_device+0x355/0x420 [ 893.220688][ T5962] device_del+0x515/0x8e0 [ 893.220712][ T5962] ? __pfx_device_del+0x10/0x10 [ 893.220733][ T5962] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 893.220759][ T5962] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 893.220788][ T5962] usb_disable_device+0x3e9/0x8a0 [ 893.220812][ T5962] usb_disconnect+0x316/0x940 [ 893.220840][ T5962] hub_event+0x1cf5/0x4a20 [ 893.220870][ T5962] ? do_raw_spin_lock+0x121/0x290 [ 893.220898][ T5962] ? register_lock_class+0x51/0x320 [ 893.220921][ T5962] ? __pfx_hub_event+0x10/0x10 [ 893.220939][ T5962] ? process_scheduled_works+0x9ef/0x17b0 [ 893.220969][ T5962] ? _raw_spin_unlock_irq+0x23/0x50 [ 893.220995][ T5962] ? process_scheduled_works+0x9ef/0x17b0 [ 893.221020][ T5962] ? process_scheduled_works+0x9ef/0x17b0 [ 893.221047][ T5962] process_scheduled_works+0xae1/0x17b0 [ 893.221091][ T5962] ? __pfx_process_scheduled_works+0x10/0x10 [ 893.221125][ T5962] worker_thread+0x8a0/0xda0 [ 893.221142][ T5962] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 893.221171][ T5962] ? __kthread_parkme+0x7b/0x200 [ 893.221192][ T5962] kthread+0x711/0x8a0 [ 893.221212][ T5962] ? __pfx_worker_thread+0x10/0x10 [ 893.221228][ T5962] ? __pfx_kthread+0x10/0x10 [ 893.221245][ T5962] ? rt_spin_unlock+0x150/0x200 [ 893.221274][ T5962] ? rt_spin_unlock+0x161/0x200 [ 893.221295][ T5962] ? __pfx_kthread+0x10/0x10 [ 893.221314][ T5962] ret_from_fork+0x4bc/0x870 [ 893.221342][ T5962] ? __pfx_ret_from_fork+0x10/0x10 [ 893.221367][ T5962] ? __switch_to_asm+0x39/0x70 [ 893.221388][ T5962] ? __switch_to_asm+0x33/0x70 [ 893.221410][ T5962] ? __pfx_kthread+0x10/0x10 [ 893.221431][ T5962] ret_from_fork_asm+0x1a/0x30 [ 893.221462][ T5962] [ 893.221731][ T5962] Kernel Offset: disabled