last executing test programs: 51.151122541s ago: executing program 0 (id=2054): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = fsopen(&(0x7f0000000480)='incremental-fs\x00', 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xac}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000020000000000000000000114000400fc00000000000000000000000000000108000740000000012c00068014000500fe800000000000000000000400000031140004"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) 48.461784303s ago: executing program 0 (id=2067): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000007c0)={0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 46.543886286s ago: executing program 0 (id=2074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) fdatasync(r1) 46.363268103s ago: executing program 3 (id=2077): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 46.329279649s ago: executing program 0 (id=2078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400), &(0x7f0000000200)) ioprio_set$pid(0x2, 0x0, 0x0) io_uring_enter(r2, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 46.18922409s ago: executing program 0 (id=2083): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5a8874", 0x9c, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1102a8887a2c9305895b8cb59331cdffdf8e04142a112e9e8a24dbc3ec49d3a4", "2db6a193bcc7961b3d7ffdd654edbf06b88768a543517e85683cba3eacfc34c915f14e6909b49f9237345255b67d8e45", "381da35b3b5c874ffc044f7e6bdb47fd7e6379a64c0cc354322238af", {"a263753d250cfb21bd9221645c29f7d3", "432c3aac2290feba17bfa3643cdcbbfd"}}}}}}}}, 0x0) 45.61135604s ago: executing program 0 (id=2087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, r1, 0x1, 0x70bd29, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x4000004) 45.611078952s ago: executing program 3 (id=2088): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) fdatasync(r0) 45.007901713s ago: executing program 3 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 44.904003033s ago: executing program 1 (id=2094): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x3, 0x12) 44.593557903s ago: executing program 3 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r2, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 44.002343043s ago: executing program 3 (id=2097): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x20008440}, 0x804) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x11, 0x0, 0xa33, 0x0, 0x0, 0x0, 0x0, 0x1}) r10 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000002700)={0x53, 0x0, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000002680)="94cea1791a1a", 0x0, 0x1000, 0x0, 0x1, 0x0}) socketpair(0x28, 0x1, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$vimc2(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000007c0)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r9, r7, r8}}}, @rights={{0x18, 0x1, 0x1, [r3, r10, r5]}}, @rights={{0x24, 0x1, 0x1, [r5, r1, r11, r6, r12, r10]}}, @rights={{0x10, 0x1, 0x1, [r5]}}, @rights={{0x10, 0x1, 0x1, [r5]}}, @rights={{0x18, 0x1, 0x1, [r1, r1, r10]}}], 0x8c, 0x200488c0}, 0x20040010) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e"], 0xf) 40.78586048s ago: executing program 1 (id=2102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 40.62533036s ago: executing program 3 (id=2103): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) fdatasync(r0) 39.539087842s ago: executing program 1 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) 39.286099778s ago: executing program 1 (id=2107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r2, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 29.907898965s ago: executing program 1 (id=2111): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22401) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 28.754189939s ago: executing program 4 (id=2113): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x8000004, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1, 0x2}, 0x50) r6 = socket$inet(0x2, 0x2, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000035c0), 0x168003, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r7, 0x80083314, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 28.220586463s ago: executing program 1 (id=2115): socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) socket(0xa, 0x1, 0x0) 21.981708871s ago: executing program 4 (id=2122): r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') 21.981201661s ago: executing program 4 (id=2123): socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 21.771927666s ago: executing program 4 (id=2124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 19.971714712s ago: executing program 4 (id=2126): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000080)=@can={0x1d, r1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0xc, 0x101, 0x6}, {0xf4, 0x10e, 0xfffffffc, "407ecd89216b64cecd79aeba503f17938b4a7f4d473d465967be062e0cd765af83bd758cee839d3ccc7510860fd91b431972cc3a83a1b4a149a9aa3456b9c57c9d2e2ae1faa8948d9e89e63d7f277e9c60f1866482709288668132a82e78cb570ed552f66e353573f9f6ab7532df0814aa94e684ff38ef1f8900378fb27ea137a5c872eaa547d7ffc67fd52804449aeae024c0499d83f643edf7a1729caeb2635bb1e595a16bfddc23f61467106505489b4708f71bac501a30b86dbe8659f41ebbd9cdedd6e93fb4a80d64a79e4c46516805a7ad2f53426e0998661cab20f8124d5ee4d4f5"}, {0x10c, 0x29, 0xf, "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"}], 0x20c}}], 0x1, 0xc800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b01) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f00000000c0)={{@local, 0xfffffffa}, 0x9, 0xfffffffffffffffa, 0x8, 0x1, 0x1, 0x800, 0x2, 0x3}) open_by_handle_at(r2, 0x0, 0x400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 16.547885817s ago: executing program 2 (id=2127): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) open(&(0x7f0000000380)='./file0\x00', 0x4100, 0x5) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(&(0x7f0000000180)='./file0\x00', 0x1008, 0x8000) acct(&(0x7f0000000140)='./file0\x00') 16.252188737s ago: executing program 4 (id=2128): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) unshare(0x6a040000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000580)={'das16m1\x00', [0x6, 0x7f, 0x10000, 0xff, 0x5, 0x805, 0x5, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x4, 0x101, 0x1, 0x7f, 0x20002, 0x40000003, 0x89, 0xcaa3, 0x3, 0x4, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffffd]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x701f, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 12.048978817s ago: executing program 2 (id=2129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 11.644819789s ago: executing program 2 (id=2130): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) 11.038737429s ago: executing program 2 (id=2131): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') lseek(r4, 0x6be5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x1004eb) 7.372732096s ago: executing program 2 (id=2132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00?'], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x2404c095) r7 = open(&(0x7f0000000240)='./file0\x00', 0x699ca911a6aa00f6, 0x42) landlock_restrict_self(r7, 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2504000000080004000200000008000500", @ANYRES32=0x0, @ANYBLOB="752b81f85495bcb9145da155a8f58138a5dc2167a8a06ebfa2b35f3c7b1850046fea02e32b423125a437abab51158a0efac15892e54b6ab633532444660540749994940ca8e6f8c83f3f8596b177e2009bca8372c482cd664bb093199ed8f84b769a0f364017d0c8e394fe5106bd0771024c7ee9"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) socket$rxrpc(0x21, 0x2, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) socket$nl_generic(0x10, 0x3, 0x10) 2.595462831s ago: executing program 2 (id=2133): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001940)={{0x12, 0x1, 0x250, 0xd3, 0x39, 0x1b, 0x10, 0x5e0, 0x2004, 0xa330, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1d, 0x4, 0x20, 0x3, [{{0x9, 0x4, 0xbb, 0x5, 0x0, 0xd9, 0xf3, 0x9f, 0xbd}}]}}]}}, 0x0) shutdown(r0, 0x2) 0s ago: executing program 32 (id=2128): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) unshare(0x6a040000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000580)={'das16m1\x00', [0x6, 0x7f, 0x10000, 0xff, 0x5, 0x805, 0x5, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x4, 0x101, 0x1, 0x7f, 0x20002, 0x40000003, 0x89, 0xcaa3, 0x3, 0x4, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffffd]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x701f, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): , defaulting to 1000 [ 521.792726][T12050] wg2 speed is unknown, defaulting to 1000 [ 522.079600][ T5913] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 522.493581][ T5913] usb 3-1: config 0 has no interfaces? [ 522.512754][ T5913] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 522.531672][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.684703][ T975] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 522.750496][ T5913] usb 3-1: Product: syz [ 523.212686][ T5913] usb 3-1: Manufacturer: syz [ 523.236579][ T5913] usb 3-1: SerialNumber: syz [ 523.261796][ T5913] usb 3-1: config 0 descriptor?? [ 523.316189][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.733862][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 523.773925][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 523.773943][ T30] audit: type=1326 audit(1755938124.803:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 523.777073][ T975] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.877916][ T30] audit: type=1326 audit(1755938124.813:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 523.923654][ T30] audit: type=1326 audit(1755938124.853:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 523.946939][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.010294][ T975] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 524.034299][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.067795][ T30] audit: type=1326 audit(1755938124.853:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 524.091182][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.097646][ T975] usb 5-1: Product: syz [ 524.109572][ T975] usb 5-1: Manufacturer: syz [ 524.123492][ T975] usb 5-1: SerialNumber: syz [ 524.159647][ T975] usb 5-1: config 0 descriptor?? [ 524.374034][ T975] usb 5-1: ucan: probing device on interface #0 [ 524.382000][ T30] audit: type=1326 audit(1755938124.853:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 524.415096][ T975] usb 5-1: ucan: invalid EP count (1) [ 524.420563][ T975] usb 5-1: ucan: probe failed; try to update the device firmware [ 524.482010][ T30] audit: type=1326 audit(1755938124.853:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 524.553899][ T30] audit: type=1326 audit(1755938124.853:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 524.677840][ T30] audit: type=1326 audit(1755938124.853:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 524.767318][ T30] audit: type=1326 audit(1755938124.853:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 524.852041][ T30] audit: type=1326 audit(1755938124.863:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89018ebe9 code=0x7ffc0000 [ 525.192758][ T5899] usb 3-1: USB disconnect, device number 53 [ 525.337885][T12093] vim2m vim2m.0: vidioc_s_fmt queue busy [ 526.334290][ T5899] usb 5-1: USB disconnect, device number 41 [ 526.579229][T12111] fuse: Unknown parameter 'use00000000000000000000' [ 527.265009][ T5899] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 527.463839][ T5899] usb 3-1: config 0 has no interfaces? [ 527.473131][T12118] block nbd1: shutting down sockets [ 527.504542][ T5899] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 527.513735][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.585259][ T5899] usb 3-1: Product: syz [ 527.598224][ T5899] usb 3-1: Manufacturer: syz [ 527.602836][ T5899] usb 3-1: SerialNumber: syz [ 527.610424][ T5899] usb 3-1: config 0 descriptor?? [ 529.339480][T12140] wlan0 speed is unknown, defaulting to 1000 [ 529.363163][T12140] wg2 speed is unknown, defaulting to 1000 [ 529.539740][ T5906] usb 3-1: USB disconnect, device number 54 [ 529.584666][ T975] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 529.764668][ T5967] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 529.845689][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 529.852213][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.894851][ T5913] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 529.914933][ T975] usb 5-1: config 0 has no interfaces? [ 529.924650][ T5967] usb 4-1: Using ep0 maxpacket: 8 [ 529.931318][ T5967] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 529.947596][ T975] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 529.954969][ T5906] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 529.956837][ T5967] usb 4-1: config 179 has no interface number 0 [ 529.970546][ T975] usb 5-1: New USB device strings: Mfr=247, Product=1, SerialNumber=3 [ 529.984632][ T975] usb 5-1: Product: syz [ 529.995444][ T975] usb 5-1: Manufacturer: syz [ 530.000067][ T975] usb 5-1: SerialNumber: syz [ 530.004971][ T5967] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 530.018406][ T5967] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 530.030436][ T975] usb 5-1: config 0 descriptor?? [ 530.040018][ T5967] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 530.069876][ T5967] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 530.081696][ T5967] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 530.103079][ T5967] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 530.113108][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.128353][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.141871][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 530.153372][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.172766][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.194762][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.212318][ T5906] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 530.226002][ T5913] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 530.235318][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.248175][ T5913] usb 2-1: Product: syz [ 530.266413][ T975] usb 5-1: USB disconnect, device number 42 [ 530.281021][T12145] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 530.282547][ T5913] usb 2-1: Manufacturer: syz [ 530.377680][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.393298][ T5913] usb 2-1: SerialNumber: syz [ 530.396875][ T5906] usb 3-1: config 0 descriptor?? [ 530.417277][ T5913] usb 2-1: config 0 descriptor?? [ 530.467117][ T5913] usb 2-1: ucan: probing device on interface #0 [ 530.484451][ T5913] usb 2-1: ucan: invalid EP count (1) [ 530.490698][ T5913] usb 2-1: ucan: probe failed; try to update the device firmware [ 530.920875][ T5906] hid_parser_main: 4 callbacks suppressed [ 530.920893][ T5906] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 530.974741][ T5906] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 530.989329][ T5906] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 531.054293][ T5906] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 531.068204][ T5906] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 531.077257][ T5906] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 531.084283][ T5906] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 531.100395][ T5906] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 531.122958][T12161] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1628'. [ 531.235261][ T5906] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00 [ 531.414267][ T5906] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 531.436362][ T5906] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -5 [ 531.846551][ T5906] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 531.946860][T12178] netlink: 'syz.4.1634': attribute type 10 has an invalid length. [ 532.004719][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 532.012500][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.054339][ T5906] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 532.063608][ T5906] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 532.074383][ T5906] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 532.084703][ T5906] usb 1-1: config 128 has no interface number 0 [ 532.091083][ T5906] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 532.102633][ T5906] usb 1-1: config 128 interface 127 has no altsetting 0 [ 532.118179][ T5906] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 532.127556][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.135753][ T5906] usb 1-1: Product: syz [ 532.139988][ T5906] usb 1-1: Manufacturer: syz [ 532.144642][ T5906] usb 1-1: SerialNumber: syz [ 532.153465][T12172] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 532.332883][ T5899] usb 2-1: USB disconnect, device number 51 [ 532.398133][ T24] usb 4-1: USB disconnect, device number 51 [ 532.398149][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 532.414638][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 532.454995][ T5906] usb 1-1: USB disconnect, device number 43 [ 532.518373][T11263] udevd[11263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.874793][ T5899] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 533.058452][ T24] usb 3-1: USB disconnect, device number 55 [ 533.115722][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 533.128985][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 533.139116][ T5899] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 533.153762][ T5899] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 533.300831][ T5899] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 533.349321][T12200] vim2m vim2m.0: vidioc_s_fmt queue busy [ 533.732590][ T5899] usb 2-1: config 128 has no interface number 0 [ 533.745115][ T5899] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 533.811814][ T5899] usb 2-1: config 128 interface 127 has no altsetting 0 [ 533.827939][ T5899] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 533.837373][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.845399][ T5899] usb 2-1: Product: syz [ 533.849870][ T5899] usb 2-1: Manufacturer: syz [ 533.854452][ T5899] usb 2-1: SerialNumber: syz [ 533.871847][T12187] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 534.133640][ T5899] usb 2-1: USB disconnect, device number 52 [ 534.144754][ T5961] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 534.202925][T11263] udevd[11263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.353533][ T5961] usb 1-1: config 0 has no interfaces? [ 534.360849][ T5961] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 534.381709][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.393289][ T5961] usb 1-1: Product: syz [ 534.397951][ T5961] usb 1-1: Manufacturer: syz [ 534.402553][ T5961] usb 1-1: SerialNumber: syz [ 534.415851][ T5961] usb 1-1: config 0 descriptor?? [ 534.707500][T12223] vim2m vim2m.0: vidioc_s_fmt queue busy [ 535.594677][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 535.806223][T12235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1650'. [ 535.916813][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.935057][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.974071][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 535.988421][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.003374][ T24] usb 5-1: config 0 descriptor?? [ 536.355159][ T5899] usb 1-1: USB disconnect, device number 44 [ 536.423800][ T24] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 536.492681][ T975] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 536.524224][ T24] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 536.623084][ T24] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 536.703803][ T975] usb 2-1: config 0 has no interfaces? [ 536.723609][ T975] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 536.724651][ T24] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 536.732855][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.750607][ T975] usb 2-1: Product: syz [ 536.756245][ T975] usb 2-1: Manufacturer: syz [ 536.760948][ T975] usb 2-1: SerialNumber: syz [ 536.770543][ T975] usb 2-1: config 0 descriptor?? [ 536.821067][ T24] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 536.844163][ T24] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 536.878586][ T24] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 536.922674][ T24] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 537.005396][ T24] cp2112 0003:10C4:EA90.0015: Part Number: 0x00 Device Version: 0x00 [ 537.027508][ T24] cp2112 0003:10C4:EA90.0015: error requesting SMBus config [ 537.039607][ T24] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -32 [ 538.034459][T12259] wlan0 speed is unknown, defaulting to 1000 [ 538.126694][T12259] wg2 speed is unknown, defaulting to 1000 [ 538.471118][ T5899] usb 5-1: USB disconnect, device number 43 [ 539.650943][T12282] netlink: 'syz.3.1661': attribute type 10 has an invalid length. [ 539.740557][ T5961] usb 2-1: USB disconnect, device number 53 [ 540.217380][ T5961] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 540.388265][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.411669][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.431706][ T5961] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 540.456481][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.473779][ T5961] usb 2-1: config 0 descriptor?? [ 540.565559][ T5899] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 540.724755][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 540.752013][ T5899] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 540.762960][ T5899] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 540.771982][ T5899] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 540.786049][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 540.797103][ T5899] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 540.809343][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.819571][ T5899] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 540.829871][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 540.844377][ T5899] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 540.870460][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.892300][ T5899] usb 5-1: config 0 descriptor?? [ 540.894457][ T5961] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 540.931166][ T5961] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 540.939782][ T5961] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 540.966544][ T5961] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 541.110809][ T5961] cp2112 0003:10C4:EA90.0016: Part Number: 0x00 Device Version: 0x00 [ 541.321341][T12318] vim2m vim2m.0: vidioc_s_fmt queue busy [ 541.663215][ T5961] cp2112 0003:10C4:EA90.0016: error requesting SMBus config [ 541.701402][ T5961] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -32 [ 541.711001][ T5899] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 542.359393][T12305] tipc: Enabled bearer , priority 0 [ 542.366948][T12306] syzkaller0: entered promiscuous mode [ 542.372502][T12306] syzkaller0: entered allmulticast mode [ 542.386556][T12309] tipc: Resetting bearer [ 542.394532][T12303] tipc: Resetting bearer [ 542.410428][T12303] tipc: Disabling bearer [ 542.774845][ T5899] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 542.843763][T12333] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1676'. [ 542.935267][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 542.941661][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.952402][ T5899] usb 3-1: config 0 has no interfaces? [ 542.963015][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 543.051076][ T5899] usb 3-1: New USB device strings: Mfr=247, Product=1, SerialNumber=3 [ 543.067515][ T5899] usb 3-1: Product: syz [ 543.073373][ T5899] usb 3-1: Manufacturer: syz [ 543.113330][ T5899] usb 3-1: SerialNumber: syz [ 543.148153][ T24] usb 2-1: USB disconnect, device number 54 [ 543.169987][ T5899] usb 3-1: config 0 descriptor?? [ 543.504426][ T5913] usb 5-1: USB disconnect, device number 44 [ 543.514663][ T5961] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 543.526618][ T5913] usblp0: removed [ 543.541921][ T5899] usb 3-1: USB disconnect, device number 56 [ 543.786887][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.860664][ T5961] usb 4-1: config 0 has no interfaces? [ 543.894514][ T5961] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 543.954675][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.054520][ T5961] usb 4-1: config 0 descriptor?? [ 544.136839][T12357] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1682'. [ 544.404672][ T5961] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 544.634715][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.644912][ T5961] usb 1-1: config 0 has no interfaces? [ 544.685394][ T5961] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 544.709595][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.739143][ T5961] usb 1-1: config 0 descriptor?? [ 544.750570][T12367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1684'. [ 545.990761][T12369] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 546.126941][ T5961] usb 4-1: USB disconnect, device number 52 [ 546.948983][ T5961] usb 1-1: USB disconnect, device number 45 [ 547.916757][ T5913] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 548.207494][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 548.222878][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 548.242768][ T5913] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 548.262596][T12397] vim2m vim2m.0: vidioc_s_fmt queue busy [ 548.343925][ T5913] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 548.364638][ T5913] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 548.424813][ T5913] usb 5-1: config 128 has no interface number 0 [ 548.447092][ T5913] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 548.543901][ T5913] usb 5-1: config 128 interface 127 has no altsetting 0 [ 548.569694][ T5913] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 548.592282][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.666364][ T5913] usb 5-1: Product: syz [ 548.670566][ T5913] usb 5-1: Manufacturer: syz [ 548.676300][T12402] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1693'. [ 548.684990][ T5913] usb 5-1: SerialNumber: syz [ 548.704521][T12386] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 549.454110][ T5913] usb 5-1: USB disconnect, device number 45 [ 549.520530][T11263] udevd[11263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.204549][T12424] netlink: 'syz.2.1697': attribute type 10 has an invalid length. [ 550.415755][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 550.588419][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.598656][ T24] usb 5-1: config 0 has no interfaces? [ 550.604159][ T24] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 550.620286][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.673221][ T24] usb 5-1: config 0 descriptor?? [ 552.425688][ T5899] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 552.513531][T12445] fuse: Unknown parameter 'grou00000000000000000000' [ 552.634742][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 552.641309][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 552.658044][ T5899] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 552.823125][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.833344][ T5899] usb 4-1: Product: syz [ 552.838162][ T5899] usb 4-1: Manufacturer: syz [ 552.857779][ T5899] usb 4-1: SerialNumber: syz [ 552.882662][ T5899] usb 4-1: config 0 descriptor?? [ 552.894386][ T5899] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 552.907637][ T5899] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 552.999669][ T5967] usb 5-1: USB disconnect, device number 46 [ 553.645568][ T5899] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 553.821827][T12478] fuse: Unknown parameter 'group_i00000000000000000000' [ 554.277910][ T5899] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 554.363661][ T5899] em28xx 4-1:0.0: board has no eeprom [ 554.484749][ T5899] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 554.493249][ T5899] em28xx 4-1:0.0: dvb set to bulk mode. [ 554.523663][ T24] em28xx 4-1:0.0: Binding DVB extension [ 554.554104][ T5899] usb 4-1: USB disconnect, device number 53 [ 554.676419][ T5899] em28xx 4-1:0.0: Disconnecting em28xx [ 554.707596][ T24] em28xx 4-1:0.0: Registering input extension [ 554.713895][ T5899] em28xx 4-1:0.0: Closing input extension [ 554.781987][ T5899] em28xx 4-1:0.0: Freeing device [ 555.678864][T12491] fuse: Unknown parameter 'group_i00000000000000000000' [ 555.732206][T12492] wlan0 speed is unknown, defaulting to 1000 [ 555.756690][T12492] wg2 speed is unknown, defaulting to 1000 [ 555.890974][T12500] tipc: Started in network mode [ 555.897188][T12500] tipc: Node identity 0eb170dcba19, cluster identity 4711 [ 555.907076][T12500] tipc: Enabled bearer , priority 0 [ 555.933355][T12494] tipc: Resetting bearer [ 556.264698][ T5961] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 556.426103][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.458629][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 556.483890][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 556.527263][ T5961] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 556.545468][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.559643][ T5961] usb 4-1: Product: syz [ 556.568428][ T5961] usb 4-1: Manufacturer: syz [ 556.573046][ T5961] usb 4-1: SerialNumber: syz [ 556.577727][ T5913] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 556.611755][ T5961] usb 4-1: config 0 descriptor?? [ 556.624414][ T5961] usb 4-1: ucan: probing device on interface #0 [ 556.633246][ T5961] usb 4-1: ucan: invalid EP count (1) [ 556.639330][ T5961] usb 4-1: ucan: probe failed; try to update the device firmware [ 556.750881][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.776066][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.787379][ T5913] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 556.816739][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.865193][ T5913] usb 3-1: config 0 descriptor?? [ 556.959026][ T5961] tipc: Node number set to 3030937820 [ 557.298851][ T5913] hid_parser_main: 4 callbacks suppressed [ 557.298865][ T5913] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 557.312700][ T5913] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 557.320012][ T5913] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 557.327311][ T5913] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 557.341176][ T5913] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 557.358912][ T5913] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 557.378449][ T5913] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 557.395472][ T5913] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 557.524515][ T5913] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00 [ 557.884743][ T5961] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 557.903409][T12522] fuse: Unknown parameter 'group_i00000000000000000000' [ 558.044882][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 558.057005][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.073113][ T5961] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.082856][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.103707][ T5961] usb 2-1: Product: syz [ 558.108294][ T5961] usb 2-1: Manufacturer: syz [ 558.128991][ T5961] usb 2-1: SerialNumber: syz [ 558.141415][ T5961] usb 2-1: config 0 descriptor?? [ 558.153583][ T5913] cp2112 0003:10C4:EA90.0017: error reading lock byte: -71 [ 558.197129][T12494] tipc: Disabling bearer [ 558.205623][ T5913] usb 3-1: USB disconnect, device number 57 [ 558.217892][ T5961] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 558.244874][ T5961] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 558.834623][ T5961] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 558.899032][ T24] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 559.084471][ T24] usb 5-1: config 0 has no interfaces? [ 559.105562][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 559.114863][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.122896][ T24] usb 5-1: Product: syz [ 559.127454][ T24] usb 5-1: Manufacturer: syz [ 559.132093][ T24] usb 5-1: SerialNumber: syz [ 559.141968][ T24] usb 5-1: config 0 descriptor?? [ 559.225685][T12533] fuse: Unknown parameter 'group_i00000000000000000000' [ 559.347536][T12531] wlan0 speed is unknown, defaulting to 1000 [ 559.400924][T12531] wg2 speed is unknown, defaulting to 1000 [ 559.503673][ T5961] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 559.514353][ T5961] em28xx 2-1:0.0: board has no eeprom [ 559.542610][ T5906] usb 4-1: USB disconnect, device number 54 [ 560.096533][ T5961] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 560.132681][ T5961] em28xx 2-1:0.0: dvb set to bulk mode. [ 560.228992][ T5913] em28xx 2-1:0.0: Binding DVB extension [ 560.265687][ T5961] usb 2-1: USB disconnect, device number 55 [ 560.272569][ T5961] em28xx 2-1:0.0: Disconnecting em28xx [ 560.422232][T12542] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1730'. [ 560.466001][ T5913] em28xx 2-1:0.0: Registering input extension [ 560.490493][ T5961] em28xx 2-1:0.0: Closing input extension [ 560.504946][ T5906] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 560.570211][ T5961] em28xx 2-1:0.0: Freeing device [ 560.654837][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 560.661997][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.673607][ T5906] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 560.682475][ T5906] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 560.693077][ T5906] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 560.702441][ T5906] usb 1-1: config 128 has no interface number 0 [ 560.715163][ T5906] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 560.727203][ T5906] usb 1-1: config 128 interface 127 has no altsetting 0 [ 560.738156][ T5906] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 560.747900][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.756274][ T5906] usb 1-1: Product: syz [ 560.760646][ T5906] usb 1-1: Manufacturer: syz [ 560.765666][ T5906] usb 1-1: SerialNumber: syz [ 561.208191][ T5906] usb 1-1: USB disconnect, device number 46 [ 561.236770][T11263] udevd[11263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.473825][ T5906] usb 5-1: USB disconnect, device number 47 [ 561.523181][T12558] vim2m vim2m.0: vidioc_s_fmt queue busy [ 561.812070][T12562] tipc: Enabled bearer , priority 0 [ 561.835646][T12566] fuse: Unknown parameter 'group_i00000000000000000000' [ 561.973659][T12572] fuse: Unknown parameter 'group_i00000000000000000000' [ 562.015004][T12559] tipc: Resetting bearer [ 562.244706][ T975] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 562.578306][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.586308][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.732110][ T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.751117][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 562.785601][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.830930][ T975] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 562.840683][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.863463][ T975] usb 2-1: Product: syz [ 562.874983][ T975] usb 2-1: Manufacturer: syz [ 562.887059][ T975] usb 2-1: SerialNumber: syz [ 562.915340][ T975] usb 2-1: config 0 descriptor?? [ 562.933824][ T975] usb 2-1: ucan: probing device on interface #0 [ 562.960427][ T975] usb 2-1: ucan: invalid EP count (1) [ 563.011813][ T975] usb 2-1: ucan: probe failed; try to update the device firmware [ 563.404760][ T975] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 563.770430][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.782963][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 563.819389][ T975] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.872549][ T975] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 563.881811][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.899089][ T975] usb 3-1: Product: syz [ 563.940813][ T975] usb 3-1: Manufacturer: syz [ 563.950588][ T975] usb 3-1: SerialNumber: syz [ 563.996639][ T975] usb 3-1: config 0 descriptor?? [ 564.015648][ T975] usb 3-1: ucan: probing device on interface #0 [ 564.022594][ T975] usb 3-1: ucan: invalid EP count (1) [ 564.030406][ T975] usb 3-1: ucan: probe failed; try to update the device firmware [ 565.660541][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 565.660564][ T30] audit: type=1326 audit(1755938166.683:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 565.768150][T12559] tipc: Disabling bearer [ 565.830397][T12564] wlan0 speed is unknown, defaulting to 1000 [ 565.853154][ T30] audit: type=1326 audit(1755938166.683:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 565.866860][T12564] wg2 speed is unknown, defaulting to 1000 [ 566.023699][ T30] audit: type=1326 audit(1755938166.693:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 566.401877][ T30] audit: type=1326 audit(1755938166.693:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 566.426110][ T30] audit: type=1326 audit(1755938166.693:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 566.451159][ T30] audit: type=1326 audit(1755938166.693:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 566.483097][ T30] audit: type=1326 audit(1755938166.693:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 566.510796][ T30] audit: type=1326 audit(1755938166.693:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 566.545487][T12580] wlan0 speed is unknown, defaulting to 1000 [ 566.551996][ T30] audit: type=1326 audit(1755938166.693:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 566.576922][T12580] wg2 speed is unknown, defaulting to 1000 [ 567.441927][T12190] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 567.508559][ T5913] usb 2-1: USB disconnect, device number 56 [ 567.741926][T12190] usb 5-1: config 0 has no interfaces? [ 567.779625][T12190] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 567.794782][T12190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.813589][T12190] usb 5-1: Product: syz [ 567.826738][ T5961] usb 3-1: USB disconnect, device number 58 [ 567.871147][T12190] usb 5-1: Manufacturer: syz [ 567.892572][T12190] usb 5-1: SerialNumber: syz [ 567.906954][T12621] fuse: Unknown parameter 'group_id00000000000000000000' [ 567.943217][T12190] usb 5-1: config 0 descriptor?? [ 567.997580][ T5913] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 568.164679][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 568.173490][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 568.183837][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 568.195936][ T5913] usb 2-1: can't read configurations, error -71 [ 568.857422][ T30] audit: type=1326 audit(1755938169.883:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05be98ebe9 code=0x7ffc0000 [ 569.314731][ T5961] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 569.472130][T12638] wlan0 speed is unknown, defaulting to 1000 [ 569.482033][ T5961] usb 3-1: config 0 has no interfaces? [ 569.500995][T12638] wg2 speed is unknown, defaulting to 1000 [ 569.515197][ T5961] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 569.546981][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.593356][ T5961] usb 3-1: Product: syz [ 569.608799][ T5961] usb 3-1: Manufacturer: syz [ 569.641377][ T5961] usb 3-1: SerialNumber: syz [ 569.659490][ T5961] usb 3-1: config 0 descriptor?? [ 569.735213][ T975] usb 5-1: USB disconnect, device number 48 [ 569.901172][ T5913] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 569.956226][T12644] wlan0 speed is unknown, defaulting to 1000 [ 570.084524][T12644] wg2 speed is unknown, defaulting to 1000 [ 570.197653][ T5906] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 570.206265][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.219529][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 570.230604][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 570.386514][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.396823][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 570.400332][ T5913] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 570.418296][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 570.693556][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.702846][ T5913] usb 4-1: Product: syz [ 570.780548][ T5913] usb 4-1: Manufacturer: syz [ 570.787953][ T5906] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 570.814145][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.833383][ T5906] usb 1-1: Product: syz [ 570.841789][ T5906] usb 1-1: Manufacturer: syz [ 570.852940][ T5906] usb 1-1: SerialNumber: syz [ 570.892813][ T5906] usb 1-1: config 0 descriptor?? [ 570.904728][ T5913] usb 4-1: SerialNumber: syz [ 570.920386][ T5913] usb 4-1: config 0 descriptor?? [ 570.928676][ T5913] usb 4-1: ucan: probing device on interface #0 [ 570.935260][ T5913] usb 4-1: ucan: invalid EP count (1) [ 570.946694][ T5913] usb 4-1: ucan: probe failed; try to update the device firmware [ 570.979763][ T5906] usb 1-1: ucan: probing device on interface #0 [ 570.992685][ T5906] usb 1-1: ucan: invalid EP count (1) [ 571.003650][ T5906] usb 1-1: ucan: probe failed; try to update the device firmware [ 571.641889][ T975] usb 1-1: USB disconnect, device number 47 [ 571.671190][T12662] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 571.725743][ T5913] usb 4-1: USB disconnect, device number 55 [ 571.733311][T12662] netlink: 'syz.1.1759': attribute type 10 has an invalid length. [ 572.040827][ T5913] usb 3-1: USB disconnect, device number 59 [ 574.415405][ T5906] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 574.564843][ T5913] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 574.614665][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 574.651532][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 574.662122][ T5906] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 574.719641][ T5906] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 574.720925][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.741756][ T5913] usb 5-1: config 0 has no interfaces? [ 574.767865][ T5913] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 574.823683][ T5906] usb 1-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 575.003397][ T5906] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 575.015813][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.019622][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.023825][ T5906] usb 1-1: Product: syz [ 575.023843][ T5906] usb 1-1: Manufacturer: syz [ 575.044275][ T5906] usb 1-1: SerialNumber: syz [ 575.108428][ T5913] usb 5-1: config 0 descriptor?? [ 575.181017][T12719] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1772'. [ 575.571813][ T5906] cdc_ncm 1-1:128.0: skipping garbage [ 575.580286][ T5906] cdc_ncm 1-1:128.0: CDC Union missing and no IAD found [ 575.594455][ T5906] cdc_ncm 1-1:128.0: bind() failure [ 575.611501][ T5906] usb 1-1: USB disconnect, device number 48 [ 575.630837][T12721] wlan0 speed is unknown, defaulting to 1000 [ 575.666065][T12721] wg2 speed is unknown, defaulting to 1000 [ 576.742928][ T24] usb 5-1: USB disconnect, device number 49 [ 577.444862][ T5913] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 577.867565][ T5913] usb 1-1: config 0 has no interfaces? [ 577.903794][ T5913] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 577.968251][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.104489][ T5913] usb 1-1: Product: syz [ 578.201472][ T5913] usb 1-1: Manufacturer: syz [ 578.220007][ T5913] usb 1-1: SerialNumber: syz [ 578.590988][ T5913] usb 1-1: config 0 descriptor?? [ 579.334626][T12778] wlan0 speed is unknown, defaulting to 1000 [ 579.347626][T12778] wg2 speed is unknown, defaulting to 1000 [ 579.454732][ T5906] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 579.864608][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 579.871656][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 579.884747][ T5906] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 579.893905][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.903416][ T5906] usb 3-1: Product: syz [ 579.919799][ T5906] usb 3-1: Manufacturer: syz [ 579.930068][ T5906] usb 3-1: SerialNumber: syz [ 579.958314][ T5906] usb 3-1: config 0 descriptor?? [ 579.983146][ T5906] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 580.005626][ T5906] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 580.154649][ T5961] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 580.348058][ T5913] usb 1-1: USB disconnect, device number 49 [ 580.385426][ T5961] usb 4-1: config 0 has no interfaces? [ 580.523138][ T5961] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 580.551854][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.579296][ T5961] usb 4-1: Product: syz [ 580.589182][ T5961] usb 4-1: Manufacturer: syz [ 580.589193][ T5906] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 580.612406][ T5961] usb 4-1: SerialNumber: syz [ 580.628172][ T5961] usb 4-1: config 0 descriptor?? [ 580.953806][T12791] wlan0 speed is unknown, defaulting to 1000 [ 580.973114][T12791] wg2 speed is unknown, defaulting to 1000 [ 581.040201][ T5906] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 581.070990][ T5906] em28xx 3-1:0.0: board has no eeprom [ 581.245334][ T5906] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 581.259728][ T5906] em28xx 3-1:0.0: dvb set to bulk mode. [ 581.273103][ T5899] em28xx 3-1:0.0: Binding DVB extension [ 581.295240][ T5906] usb 3-1: USB disconnect, device number 60 [ 581.337251][ T5906] em28xx 3-1:0.0: Disconnecting em28xx [ 581.361230][ T5899] em28xx 3-1:0.0: Registering input extension [ 581.376167][ T5906] em28xx 3-1:0.0: Closing input extension [ 581.477648][ T5906] em28xx 3-1:0.0: Freeing device [ 582.230297][ T5906] usb 4-1: USB disconnect, device number 56 [ 583.744758][ T5961] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 583.879973][T12825] wlan0 speed is unknown, defaulting to 1000 [ 584.058954][T12825] wg2 speed is unknown, defaulting to 1000 [ 584.059296][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 584.264887][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 584.395371][ T5961] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 584.404497][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.413129][ T5961] usb 1-1: Product: syz [ 584.417731][ T5961] usb 1-1: Manufacturer: syz [ 584.426278][ T5961] usb 1-1: SerialNumber: syz [ 584.539773][ T5913] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 584.711515][ T5961] usb 1-1: config 0 descriptor?? [ 584.725495][ T5961] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 584.736372][ T5961] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 584.797725][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.808000][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 584.817738][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 584.843061][ T5913] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 584.852444][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.860791][ T5913] usb 3-1: Product: syz [ 584.865399][ T5913] usb 3-1: Manufacturer: syz [ 584.870017][ T5913] usb 3-1: SerialNumber: syz [ 584.884487][ T5913] usb 3-1: config 0 descriptor?? [ 584.917197][ T5913] usb 3-1: ucan: probing device on interface #0 [ 584.924018][ T5913] usb 3-1: ucan: invalid EP count (1) [ 584.933420][ T5913] usb 3-1: ucan: probe failed; try to update the device firmware [ 585.028114][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 585.028125][ T30] audit: type=1326 audit(1755938186.063:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 585.334736][ T30] audit: type=1326 audit(1755938186.063:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 585.405308][ T30] audit: type=1326 audit(1755938186.063:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 585.470256][ T5961] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 585.768865][ T30] audit: type=1326 audit(1755938186.063:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 585.937447][ T30] audit: type=1326 audit(1755938186.063:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 586.085028][ T5961] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 586.103251][T12838] Bluetooth: hci3: command 0x0405 tx timeout [ 586.113810][ T5961] em28xx 1-1:0.0: board has no eeprom [ 586.122154][ T30] audit: type=1326 audit(1755938186.063:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 586.146300][ T30] audit: type=1326 audit(1755938186.063:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 586.215906][ T5961] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 586.230336][ T5961] em28xx 1-1:0.0: dvb set to bulk mode. [ 586.271443][ T975] em28xx 1-1:0.0: Binding DVB extension [ 586.285315][ T30] audit: type=1326 audit(1755938186.063:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 586.312126][ T5961] usb 1-1: USB disconnect, device number 50 [ 586.318654][ T5961] em28xx 1-1:0.0: Disconnecting em28xx [ 586.324763][ T30] audit: type=1326 audit(1755938186.063:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 586.774849][ T975] em28xx 1-1:0.0: Registering input extension [ 586.781005][ T30] audit: type=1326 audit(1755938186.063:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f8ebe9 code=0x7ffc0000 [ 586.841192][ T5961] em28xx 1-1:0.0: Closing input extension [ 586.863188][ T5961] em28xx 1-1:0.0: Freeing device [ 587.640746][ T5961] usb 3-1: USB disconnect, device number 61 [ 588.374796][ T5906] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 588.406455][T12886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1811'. [ 588.597142][ T5906] usb 3-1: config 0 has no interfaces? [ 588.605637][ T5906] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 588.636027][T12897] vim2m vim2m.0: vidioc_s_fmt queue busy [ 588.853858][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.879808][ T5906] usb 3-1: Product: syz [ 588.884036][ T5906] usb 3-1: Manufacturer: syz [ 588.888827][ T5906] usb 3-1: SerialNumber: syz [ 588.898537][ T5906] usb 3-1: config 0 descriptor?? [ 589.007298][T12899] wlan0 speed is unknown, defaulting to 1000 [ 589.102114][T12899] wg2 speed is unknown, defaulting to 1000 [ 590.819497][ T5961] usb 3-1: USB disconnect, device number 62 [ 591.045271][T12923] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 591.055188][T12923] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 591.432642][ T5961] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 591.809213][T12935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1822'. [ 592.217571][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.244289][ T5961] usb 3-1: config 0 has no interfaces? [ 592.250632][ T5961] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 592.264627][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.282058][ T5961] usb 3-1: config 0 descriptor?? [ 592.434746][T12190] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 592.639472][T12190] usb 1-1: Using ep0 maxpacket: 8 [ 592.686671][T12190] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 592.748811][T12190] usb 1-1: config 179 has no interface number 0 [ 593.142865][T12190] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 593.239048][ T5961] usb 3-1: USB disconnect, device number 63 [ 593.284893][T12190] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 593.635541][T12959] tipc: Enabling of bearer rejected, failed to enable media [ 593.677797][T12190] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 593.810860][T12190] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 593.852004][T12190] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 594.002199][T12190] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 594.098463][T12190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.150214][T12940] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 594.514759][ T5961] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 595.081934][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.399001][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 595.439254][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 595.751402][ T5961] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 595.943684][ T5899] usb 1-1: USB disconnect, device number 51 [ 595.949717][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 595.949743][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 595.971190][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.043161][ T5961] usb 5-1: Product: syz [ 596.091334][ T5961] usb 5-1: Manufacturer: syz [ 596.106684][ T5961] usb 5-1: SerialNumber: syz [ 596.120509][ T5961] usb 5-1: config 0 descriptor?? [ 596.138853][ T5961] usb 5-1: ucan: probing device on interface #0 [ 596.166024][ T5961] usb 5-1: ucan: invalid EP count (1) [ 596.171686][ T5961] usb 5-1: ucan: probe failed; try to update the device firmware [ 597.008828][ T5961] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 597.262557][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.291775][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 597.314723][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 597.376425][ T5961] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 597.423834][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.453487][ T5961] usb 1-1: Product: syz [ 597.468284][ T5961] usb 1-1: Manufacturer: syz [ 597.479210][ T5961] usb 1-1: SerialNumber: syz [ 597.528052][ T5961] usb 1-1: config 0 descriptor?? [ 597.629690][ T5961] usb 1-1: ucan: probing device on interface #0 [ 597.636264][ T5961] usb 1-1: ucan: invalid EP count (1) [ 597.641673][ T5961] usb 1-1: ucan: probe failed; try to update the device firmware [ 598.347666][T12982] wlan0 speed is unknown, defaulting to 1000 [ 598.358809][T12963] wlan0 speed is unknown, defaulting to 1000 [ 598.366278][T12982] wg2 speed is unknown, defaulting to 1000 [ 599.320608][T12963] wg2 speed is unknown, defaulting to 1000 [ 600.521221][ T5961] usb 1-1: USB disconnect, device number 52 [ 601.224360][ T24] usb 5-1: USB disconnect, device number 50 [ 601.889560][T13043] fuse: Bad value for 'fd' [ 602.394763][ T5967] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 602.637206][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.647425][ T5967] usb 3-1: config 0 has no interfaces? [ 602.652891][ T5967] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 602.667372][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.700364][ T5967] usb 3-1: config 0 descriptor?? [ 604.544626][ T5961] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 604.735335][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 604.744458][ T5961] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 604.752914][ T5961] usb 5-1: config 179 has no interface number 0 [ 604.759537][ T5961] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 604.771824][ T5961] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 604.819698][T12190] usb 3-1: USB disconnect, device number 64 [ 604.877333][ T5961] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 605.116582][ T5961] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 605.229272][ T5961] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 605.275180][ T5961] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 605.292046][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.313907][T13079] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 605.700212][ T5961] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 605.864904][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 605.871895][ T5961] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 605.880498][ T5961] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 605.889292][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.979973][T12190] usb 5-1: USB disconnect, device number 51 [ 605.980092][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 605.994992][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 606.049103][T13101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1860'. [ 606.067812][ T5961] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 606.083851][ T5961] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 606.099064][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.162943][ T5961] usb 3-1: config 0 descriptor?? [ 606.656744][T13111] fuse: Bad value for 'fd' [ 607.785398][T13122] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1865'. [ 608.774723][ T5967] usb 3-1: USB disconnect, device number 65 [ 608.904631][ T5961] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 609.129892][ T5961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.141018][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 609.160245][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.187946][ T5961] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 609.200768][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.209096][ T5961] usb 2-1: Product: syz [ 609.213287][ T5961] usb 2-1: Manufacturer: syz [ 609.241828][ T5961] usb 2-1: SerialNumber: syz [ 609.263129][ T5961] usb 2-1: config 0 descriptor?? [ 609.284125][ T5961] usb 2-1: ucan: probing device on interface #0 [ 609.292856][ T5961] usb 2-1: ucan: invalid EP count (1) [ 609.299855][ T5961] usb 2-1: ucan: probe failed; try to update the device firmware [ 609.496904][T13146] wlan0 speed is unknown, defaulting to 1000 [ 609.506414][T13146] wg2 speed is unknown, defaulting to 1000 [ 609.644668][ T5961] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 609.970980][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.096709][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 610.142483][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 610.186800][ T5961] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 610.197707][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.233340][ T5961] usb 5-1: Product: syz [ 610.553944][ T5961] usb 5-1: Manufacturer: syz [ 610.573781][ T5961] usb 5-1: SerialNumber: syz [ 610.633530][ T5961] usb 5-1: config 0 descriptor?? [ 610.660135][ T5961] usb 5-1: ucan: probing device on interface #0 [ 610.667622][ T5961] usb 5-1: ucan: invalid EP count (1) [ 610.673100][ T5961] usb 5-1: ucan: probe failed; try to update the device firmware [ 610.820114][T13156] wlan0 speed is unknown, defaulting to 1000 [ 610.827022][T13156] wg2 speed is unknown, defaulting to 1000 [ 611.188693][T12190] usb 5-1: USB disconnect, device number 52 [ 611.371422][T13173] fuse: Bad value for 'fd' [ 611.781668][ T5961] usb 2-1: USB disconnect, device number 59 [ 614.903317][T13216] wlan0 speed is unknown, defaulting to 1000 [ 614.955946][T13216] wg2 speed is unknown, defaulting to 1000 [ 615.215238][ T5899] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 615.413719][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.675568][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 615.731797][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 615.844021][ T5899] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 615.884630][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.912690][ T5899] usb 4-1: Product: syz [ 615.956574][ T5899] usb 4-1: Manufacturer: syz [ 615.971607][ T5899] usb 4-1: SerialNumber: syz [ 616.010052][ T5899] usb 4-1: config 0 descriptor?? [ 616.035665][ T5899] usb 4-1: ucan: probing device on interface #0 [ 616.059928][ T5899] usb 4-1: ucan: invalid EP count (1) [ 616.092438][ T5899] usb 4-1: ucan: probe failed; try to update the device firmware [ 616.135354][ T5961] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 616.287536][ T5961] usb 3-1: config 0 has no interfaces? [ 616.359793][ T5961] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 616.370297][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.382700][ T5961] usb 3-1: Product: syz [ 616.389844][ T5961] usb 3-1: Manufacturer: syz [ 616.394504][ T5961] usb 3-1: SerialNumber: syz [ 616.402836][ T5961] usb 3-1: config 0 descriptor?? [ 616.683804][ T5961] usb 4-1: USB disconnect, device number 57 [ 616.724966][ T5967] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 616.914281][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.977441][ T5967] usb 1-1: config 0 has no interfaces? [ 616.998951][ T5967] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 617.042864][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.310226][ T5967] usb 1-1: config 0 descriptor?? [ 617.533464][T13254] fuse: Bad value for 'fd' [ 618.592200][ T5967] usb 3-1: USB disconnect, device number 66 [ 619.845079][ T5899] usb 1-1: USB disconnect, device number 53 [ 620.768127][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 620.938718][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 620.996165][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 621.097824][T13309] binder: 13299:13309 ioctl 4018620d 0 returned -22 [ 621.155081][ T24] usb 4-1: config 179 has no interface number 0 [ 621.174700][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 621.214507][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 621.292018][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 621.373906][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 621.466625][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 621.576735][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 621.643614][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.679626][T13285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 622.258684][T13328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1910'. [ 622.952520][T13331] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 623.193640][ T5967] usb 4-1: USB disconnect, device number 58 [ 623.193681][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 623.207814][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 623.271874][T13331] bridge0: port 3(team0) entered disabled state [ 623.518816][T13337] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 623.898221][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.905469][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.053127][T13331] team0: left allmulticast mode [ 624.125729][T13337] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1909'. [ 624.136603][T13331] team_slave_0: left allmulticast mode [ 624.142118][T13331] team_slave_1: left allmulticast mode [ 624.162457][T13331] team0: left promiscuous mode [ 624.178983][T13331] team_slave_0: left promiscuous mode [ 624.187341][T13331] team_slave_1: left promiscuous mode [ 624.196892][T13331] bridge0: port 3(team0) entered disabled state [ 624.316565][T13331] batman_adv: batadv0: Adding interface: team0 [ 624.328230][T13331] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.462614][T13352] fuse: Bad value for 'group_id' [ 624.467758][T13352] fuse: Bad value for 'group_id' [ 624.748865][T13331] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 624.926525][T13337] team0: entered promiscuous mode [ 624.944700][T13337] team_slave_0: entered promiscuous mode [ 624.958420][T13337] team_slave_1: entered promiscuous mode [ 624.976221][T13337] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.992239][T13337] batman_adv: batadv0: Interface activated: team0 [ 625.095523][ T5967] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 625.201954][T13337] batadv0: mtu less than device minimum [ 625.215325][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.226940][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.238282][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.249609][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.260934][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.272260][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.283566][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.294903][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.306234][T13337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 625.375504][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.399302][T13337] batman_adv: batadv0: Interface deactivated: team0 [ 625.454696][ T5967] usb 1-1: config 0 has no interfaces? [ 625.474752][ T5967] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 625.496532][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.518947][T13376] vim2m vim2m.0: vidioc_s_fmt queue busy [ 625.811263][T13337] batman_adv: batadv0: Removing interface: team0 [ 625.855991][ T5967] usb 1-1: config 0 descriptor?? [ 625.866114][T13337] bridge0: port 3(team0) entered blocking state [ 625.872601][T13337] bridge0: port 3(team0) entered disabled state [ 625.886056][T13337] team0: entered allmulticast mode [ 625.892315][T13337] team_slave_0: entered allmulticast mode [ 625.912074][T13337] team_slave_1: entered allmulticast mode [ 625.928499][T13337] bridge0: port 3(team0) entered blocking state [ 625.934966][T13337] bridge0: port 3(team0) entered forwarding state [ 626.691342][T13381] netlink: 'syz.1.1918': attribute type 10 has an invalid length. [ 626.797561][T13382] netlink: 'syz.1.1918': attribute type 10 has an invalid length. [ 626.807255][T13382] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1918'. [ 627.083622][T13381] batman_adv: batadv0: Adding interface: team0 [ 627.093736][T13381] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 627.371529][T13382] team0: entered promiscuous mode [ 627.379516][T13382] team_slave_0: entered promiscuous mode [ 627.404097][T13382] team_slave_1: entered promiscuous mode [ 627.508902][T13382] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.594932][T13389] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 627.609962][T13382] batman_adv: batadv0: Interface activated: team0 [ 627.637847][T13382] batman_adv: batadv0: Interface deactivated: team0 [ 627.669971][T13382] batman_adv: batadv0: Removing interface: team0 [ 627.753838][T13382] bridge0: port 3(team0) entered blocking state [ 627.768886][T13390] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 627.788963][T13390] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1919'. [ 627.832827][T13382] bridge0: port 3(team0) entered disabled state [ 627.854130][T13382] team0: entered allmulticast mode [ 628.269857][T13382] team_slave_0: entered allmulticast mode [ 628.325148][ T5906] usb 1-1: USB disconnect, device number 54 [ 628.377477][T13382] team_slave_1: entered allmulticast mode [ 628.441336][T13382] bridge0: port 3(team0) entered blocking state [ 628.447641][T13382] bridge0: port 3(team0) entered forwarding state [ 628.892853][T13389] batman_adv: batadv0: Adding interface: team0 [ 628.933647][T13389] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.060090][T13389] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 629.124526][T13390] team0: entered promiscuous mode [ 629.153977][T13390] team_slave_0: entered promiscuous mode [ 629.251120][T13390] team_slave_1: entered promiscuous mode [ 629.343026][T13409] vim2m vim2m.0: vidioc_s_fmt queue busy [ 629.602567][T13390] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.616150][T13390] batman_adv: batadv0: Interface activated: team0 [ 629.704606][T13390] batman_adv: batadv0: Interface deactivated: team0 [ 629.776985][T13390] batman_adv: batadv0: Removing interface: team0 [ 629.785855][T13390] bridge0: port 3(team0) entered blocking state [ 629.793250][T13390] bridge0: port 3(team0) entered disabled state [ 629.802083][T13390] team0: entered allmulticast mode [ 629.809553][T13390] team_slave_0: entered allmulticast mode [ 629.816118][T13390] team_slave_1: entered allmulticast mode [ 629.824580][T13390] bridge0: port 3(team0) entered blocking state [ 629.830913][T13390] bridge0: port 3(team0) entered forwarding state [ 630.939826][T13434] fuse: Bad value for 'group_id' [ 630.957289][T13434] fuse: Bad value for 'group_id' [ 632.868530][T13472] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1934'. [ 632.916534][T12190] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 633.228652][T12190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.239853][T12190] usb 4-1: config 0 has no interfaces? [ 633.248366][T12190] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 633.360707][T12190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.377091][T12190] usb 4-1: config 0 descriptor?? [ 634.410681][T13490] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 634.452617][T13490] netlink: 'syz.0.1937': attribute type 10 has an invalid length. [ 634.613467][T13496] net_ratelimit: 70 callbacks suppressed [ 634.613473][T13496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.620602][T13498] netlink: 'syz.1.1940': attribute type 1 has an invalid length. [ 634.648562][T13498] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1940'. [ 634.878257][T13506] block nbd1: NBD_DISCONNECT [ 635.364705][T12190] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 635.562426][ T5899] usb 4-1: USB disconnect, device number 59 [ 635.635017][T13516] 9pnet_virtio: no channels available for device syz [ 635.805134][T12190] usb 5-1: Using ep0 maxpacket: 16 [ 635.813590][T12190] usb 5-1: config 0 has no interfaces? [ 635.821424][T12190] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 635.830862][T12190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.839324][T12190] usb 5-1: Product: syz [ 635.843719][T12190] usb 5-1: Manufacturer: syz [ 635.848497][T12190] usb 5-1: SerialNumber: syz [ 635.868613][T12190] usb 5-1: config 0 descriptor?? [ 635.946972][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 635.946987][ T30] audit: type=1400 audit(1755938236.983:1023): avc: denied { ioctl } for pid=13519 comm="syz.3.1946" path="socket:[46645]" dev="sockfs" ino=46645 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 635.978188][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.118379][T12190] usb 5-1: USB disconnect, device number 53 [ 636.215038][T13531] lo speed is unknown, defaulting to 1000 [ 636.221156][T13531] lo speed is unknown, defaulting to 1000 [ 636.231710][T13531] lo speed is unknown, defaulting to 1000 [ 636.293773][T13531] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 636.627982][T13531] lo speed is unknown, defaulting to 1000 [ 636.634428][T13531] lo speed is unknown, defaulting to 1000 [ 636.641026][T13531] lo speed is unknown, defaulting to 1000 [ 636.647526][T13531] lo speed is unknown, defaulting to 1000 [ 636.653887][T13531] lo speed is unknown, defaulting to 1000 [ 636.666067][ T30] audit: type=1400 audit(1755938237.243:1024): avc: denied { setopt } for pid=13526 comm="syz.2.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 638.037042][ T30] audit: type=1400 audit(1755938239.073:1025): avc: denied { map } for pid=13545 comm="syz.1.1955" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 638.404734][T12190] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 638.554729][T12190] usb 2-1: Using ep0 maxpacket: 8 [ 638.571614][T12190] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.670414][T13554] overlayfs: overlapping lowerdir path [ 638.704620][T12190] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.771634][T12190] usb 2-1: config 0 interface 0 has no altsetting 0 [ 638.790448][ T30] audit: type=1400 audit(1755938239.813:1026): avc: denied { write } for pid=13555 comm="syz.2.1958" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 638.897967][T12190] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 638.923458][T12190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.976770][T12190] usb 2-1: config 0 descriptor?? [ 639.066769][T13563] process 'syz.4.1959' launched '/dev/fd/9' with NULL argv: empty string added [ 639.196022][ T30] audit: type=1400 audit(1755938240.213:1027): avc: denied { execute_no_trans } for pid=13557 comm="syz.4.1959" path=2F6D656D66643A5B0BDB58AE5B1AADD16D64C8854858A9250C1A2CE29CB4D7BCF1B386E22F4F70D0A2821E623B28B5E16AC80CE58917EE7C4A903D35EDCFD3AED20711A9A55EFFF595D271258ADA05202864656C6574656429 dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 639.276533][T13565] wlan0 speed is unknown, defaulting to 1000 [ 639.284726][T13565] wg2 speed is unknown, defaulting to 1000 [ 639.482406][T12190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 639.554448][T12190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 639.564782][T12190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 639.589210][T13568] fuse: Unknown parameter 'group_id00000000000000000000' [ 639.596467][T12190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 639.603512][T12190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 639.630578][T12190] mcp2221 0003:04D8:00DD.0018: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 639.721682][ T30] audit: type=1400 audit(1755938240.753:1028): avc: denied { ioctl } for pid=13570 comm="syz.2.1961" path="socket:[46706]" dev="sockfs" ino=46706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.747582][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.788679][T12190] usb 2-1: USB disconnect, device number 60 [ 639.945657][T13578] cgroup: fork rejected by pids controller in /syz2 [ 640.005022][ T5899] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 640.240358][ T5899] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 640.253604][ T5899] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 640.295158][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 640.309947][T13565] lo speed is unknown, defaulting to 1000 [ 640.335125][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.357411][T13568] lo speed is unknown, defaulting to 1000 [ 640.409652][T13568] lo speed is unknown, defaulting to 1000 [ 640.435386][T13568] lo speed is unknown, defaulting to 1000 [ 640.934205][ T30] audit: type=1400 audit(1755938241.583:1029): avc: denied { create } for pid=13585 comm="syz.1.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 641.871973][ T5899] usb 1-1: USB disconnect, device number 55 [ 642.377870][ T30] audit: type=1400 audit(1755938243.393:1030): avc: denied { create } for pid=13591 comm="syz.4.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 642.401105][ T30] audit: type=1400 audit(1755938243.403:1031): avc: denied { shutdown } for pid=13591 comm="syz.4.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 642.477018][ T30] audit: type=1400 audit(1755938243.403:1032): avc: denied { read } for pid=13591 comm="syz.4.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 642.484453][T13568] infiniband sz1: set active [ 642.496626][ T30] audit: type=1400 audit(1755938243.403:1033): avc: denied { append } for pid=13593 comm="syz.1.1967" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 642.501254][ T24] lo speed is unknown, defaulting to 1000 [ 642.524031][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.537984][T13568] infiniband sz1: added lo [ 642.561220][T13568] RDS/IB: sz1: added [ 642.565310][T13568] smc: adding ib device sz1 with port count 1 [ 642.571480][T13568] smc: ib device sz1 port 1 has pnetid [ 642.620807][ T5847] syz_tun (unregistering): left allmulticast mode [ 642.656988][ T30] audit: type=1400 audit(1755938243.693:1034): avc: denied { read } for pid=13597 comm="syz.1.1968" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 643.619256][ T30] audit: type=1400 audit(1755938243.713:1035): avc: denied { open } for pid=13597 comm="syz.1.1968" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 643.654830][ T30] audit: type=1400 audit(1755938243.743:1036): avc: denied { ioctl } for pid=13597 comm="syz.1.1968" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 643.746065][T13568] lo speed is unknown, defaulting to 1000 [ 643.752951][ T24] lo speed is unknown, defaulting to 1000 [ 644.689087][T12838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 644.698866][T12838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 644.708914][T12838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 644.719833][T12838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 644.729192][T12838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 644.816311][ T30] audit: type=1400 audit(1755938245.783:1037): avc: denied { mounton } for pid=13608 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 645.070256][T13568] lo speed is unknown, defaulting to 1000 [ 645.159074][ T30] audit: type=1400 audit(1755938246.193:1038): avc: denied { connect } for pid=13613 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 645.251029][ T30] audit: type=1400 audit(1755938246.213:1039): avc: denied { setopt } for pid=13613 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 645.274801][T13615] wireguard0: entered promiscuous mode [ 645.280316][T13615] wireguard0: entered allmulticast mode [ 645.741701][T13568] lo speed is unknown, defaulting to 1000 [ 646.678284][T13634] syz.1.1979 uses obsolete (PF_INET,SOCK_PACKET) [ 646.710604][T13568] lo speed is unknown, defaulting to 1000 [ 646.747237][T13634] veth0_to_hsr: entered promiscuous mode [ 646.753163][T13634] veth0_to_hsr: left promiscuous mode [ 646.775017][T12838] Bluetooth: hci4: command tx timeout [ 646.894624][ T5967] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 646.918176][T13638] random: crng reseeded on system resumption [ 646.963986][T13638] overlay: filesystem on ./bus not supported [ 647.002927][T13568] lo speed is unknown, defaulting to 1000 [ 647.046687][ T5967] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 647.064667][ T5967] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 647.082337][ T5967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 647.123916][ T5967] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 647.137477][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 647.145998][ T5967] usb 5-1: Product: syz [ 647.150818][ T5967] usb 5-1: Manufacturer: syz [ 647.163388][ T5967] usb 5-1: SerialNumber: syz [ 647.185800][ T5967] usb 5-1: config 0 descriptor?? [ 647.201064][ T5967] hub 5-1:0.0: bad descriptor, ignoring hub [ 647.202194][T13568] lo speed is unknown, defaulting to 1000 [ 647.207859][ T5967] hub 5-1:0.0: probe with driver hub failed with error -5 [ 647.240156][ T5967] usb 5-1: selecting invalid altsetting 0 [ 647.941045][T13650] ceph: No mds server is up or the cluster is laggy [ 647.948622][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 647.955648][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 647.982886][ T5899] usb 5-1: USB disconnect, device number 54 [ 648.028798][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 648.028813][ T30] audit: type=1400 audit(1755938249.063:1053): avc: denied { ioctl } for pid=13655 comm="syz.3.1986" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 648.060244][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.854781][T12838] Bluetooth: hci4: command tx timeout [ 648.937613][T13657] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 649.084710][ T5899] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 649.130088][T13568] lo speed is unknown, defaulting to 1000 [ 649.239131][ T5899] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 649.258363][ T5899] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 649.285985][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 649.306970][ T5899] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 649.325432][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 649.353848][ T5899] usb 5-1: Product: syz [ 649.377384][ T5899] usb 5-1: Manufacturer: syz [ 649.384630][ T5899] usb 5-1: SerialNumber: syz [ 649.408139][ T5899] usb 5-1: config 0 descriptor?? [ 649.434337][ T5899] hub 5-1:0.0: bad descriptor, ignoring hub [ 649.450909][ T5899] hub 5-1:0.0: probe with driver hub failed with error -5 [ 649.464645][ T5906] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 649.475048][T13608] wlan0 speed is unknown, defaulting to 1000 [ 649.476817][ T5899] usb 5-1: selecting invalid altsetting 0 [ 649.482228][T13608] wg2 speed is unknown, defaulting to 1000 [ 649.615915][ T5906] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 649.623352][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 649.669538][ T30] audit: type=1400 audit(1755938250.703:1054): avc: denied { bind } for pid=13631 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 649.690037][T13632] Bluetooth: MGMT ver 1.23 [ 649.694612][ T5906] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.721342][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 649.742790][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 649.754004][ T30] audit: type=1400 audit(1755938250.723:1055): avc: denied { write } for pid=13631 comm="syz.4.1978" path="socket:[46982]" dev="sockfs" ino=46982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 649.802599][ T5906] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 649.806109][ T30] audit: type=1400 audit(1755938250.833:1056): avc: denied { watch watch_reads } for pid=13677 comm="syz.0.1994" path="/406/file0" dev="tmpfs" ino=2116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 649.810745][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 649.840098][ T975] usb 5-1: USB disconnect, device number 55 [ 649.903755][ T5906] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.078362][T11180] udevd[11180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.124614][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 650.277645][T13654] ip6tnl1: entered promiscuous mode [ 650.958976][T12838] Bluetooth: hci4: command tx timeout [ 650.969661][T13654] ip6tnl1: entered allmulticast mode [ 650.981982][T13654] team0: Device ip6tnl1 is of different type [ 650.991137][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 651.003797][ T5906] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 651.011263][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 651.022357][ T5906] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.034362][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 651.050168][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 651.070170][ T5906] usb 4-1: string descriptor 0 read error: -22 [ 651.076725][ T5906] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 651.088907][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.129580][ T5906] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 651.323406][T13608] lo speed is unknown, defaulting to 1000 [ 651.615005][ T24] usb 4-1: USB disconnect, device number 60 [ 651.848318][ T30] audit: type=1326 audit(1755938252.853:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13705 comm="syz.0.1999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe7df8ebe9 code=0x0 [ 651.976281][T13608] chnl_net:caif_netlink_parms(): no params data found [ 652.061640][ T30] audit: type=1400 audit(1755938252.953:1058): avc: denied { read } for pid=13705 comm="syz.0.1999" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 652.125999][ T30] audit: type=1400 audit(1755938252.953:1059): avc: denied { open } for pid=13705 comm="syz.0.1999" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 652.508502][T13608] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.524873][T13608] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.532087][T13608] bridge_slave_0: entered allmulticast mode [ 652.546009][T13608] bridge_slave_0: entered promiscuous mode [ 652.555843][T13608] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.563327][T13608] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.570651][T13608] bridge_slave_1: entered allmulticast mode [ 652.578644][T13608] bridge_slave_1: entered promiscuous mode [ 652.746106][T13608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.760149][T13608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.015972][T12838] Bluetooth: hci4: command tx timeout [ 653.269594][T13608] team0: Port device team_slave_0 added [ 653.280143][T13608] team0: Port device team_slave_1 added [ 653.343520][T13608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.474761][T13608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.517215][T13608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.529845][T13608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.540997][T13608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.690702][T13608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.848411][T13734] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 653.854950][T13734] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 653.989113][T13734] vhci_hcd vhci_hcd.0: Device attached [ 654.106447][ T30] audit: type=1400 audit(1755938255.123:1060): avc: denied { create } for pid=13732 comm="syz.4.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 654.288408][ T5967] usb 42-1: SetAddress Request (2) to port 0 [ 654.376662][ T5967] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 654.445035][ T30] audit: type=1326 audit(1755938255.223:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7df8ebe9 code=0x7fc00000 [ 654.520198][ T30] audit: type=1326 audit(1755938255.223:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe7df8ebe9 code=0x7fc00000 [ 654.546090][ T30] audit: type=1326 audit(1755938255.223:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7df8ebe9 code=0x7fc00000 [ 654.570325][ T30] audit: type=1326 audit(1755938255.223:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7df8ebe9 code=0x7fc00000 [ 654.594171][ T30] audit: type=1326 audit(1755938255.223:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7df8ebe9 code=0x7fc00000 [ 654.645960][T13608] hsr_slave_0: entered promiscuous mode [ 654.652421][T13608] hsr_slave_1: entered promiscuous mode [ 654.668302][T13608] debugfs: 'hsr0' already exists in 'hsr' [ 654.674410][T13608] Cannot create hsr debugfs directory [ 654.794955][ T5961] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 654.868150][T13608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.949277][T13608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.959661][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 654.964822][ T5913] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 654.983329][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.066553][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.109257][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 655.125246][ T5961] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 655.134340][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.144322][ T5913] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 655.164049][ T5961] usb 5-1: config 0 descriptor?? [ 655.190383][ T5913] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 655.235564][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 655.244204][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 655.253984][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 655.266898][ T5913] usb 2-1: Product: syz [ 655.272513][ T5913] usb 2-1: Manufacturer: syz [ 655.282091][T13608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.303054][ T5913] usb 2-1: SerialNumber: syz [ 655.307852][T13758] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 655.379766][ T30] audit: type=1400 audit(1755938256.403:1066): avc: denied { ioctl } for pid=13752 comm="syz.0.2015" path="socket:[47533]" dev="sockfs" ino=47533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 655.393752][ T5913] usb 2-1: config 0 descriptor?? [ 655.422038][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 655.448476][ T5913] hub 2-1:0.0: bad descriptor, ignoring hub [ 655.479182][ T5913] hub 2-1:0.0: probe with driver hub failed with error -5 [ 655.506540][ T5913] usb 2-1: selecting invalid altsetting 0 [ 655.804743][ T5961] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 655.876731][ T5913] usb 2-1: USB disconnect, device number 61 [ 655.885108][ T5961] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 655.896007][ T5961] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 655.902998][ T5961] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 655.912340][ T5961] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 655.941815][ T5961] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 655.991913][T13734] random: crng reseeded on system resumption [ 656.001171][ T5961] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 656.009373][ T30] audit: type=1400 audit(1755938257.023:1067): avc: denied { read write } for pid=13732 comm="syz.4.2008" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 656.045777][ T5961] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 656.108752][T13735] vhci_hcd: connection reset by peer [ 656.116755][ T12] vhci_hcd: stop threads [ 656.119795][ T10] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 656.121211][ T12] vhci_hcd: release socket [ 656.132717][ T5961] usb 5-1: USB disconnect, device number 56 [ 656.147931][ T10] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 656.233862][ T10] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 656.234660][ T12] vhci_hcd: disconnect device [ 656.257619][ T10] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 656.469163][T13608] bond0: (slave netdevsim0): Releasing backup interface [ 656.501028][T13608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.545417][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 656.679196][T13608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 656.696544][T13608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 656.717156][T13608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 656.733811][ T10] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 656.744382][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 656.756512][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 656.768460][T13608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 656.777854][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 656.780136][T13768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2018'. [ 656.787451][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 656.805952][ T10] usb 2-1: Product: syz [ 656.810501][ T10] usb 2-1: Manufacturer: syz [ 656.816435][ T10] usb 2-1: SerialNumber: syz [ 656.825292][ T10] usb 2-1: config 0 descriptor?? [ 656.835529][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 656.858758][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 656.884221][ T10] usb 2-1: selecting invalid altsetting 0 [ 656.942674][T13608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.981284][T13608] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.026285][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.033433][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.050140][ T30] audit: type=1400 audit(1755938258.083:1068): avc: denied { mount } for pid=13775 comm="syz.0.2019" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 657.095315][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.103480][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.208170][T13781] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 657.230769][ T5899] usb 2-1: USB disconnect, device number 62 [ 657.563930][T13608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.258499][T13744] ip6tnl1: entered promiscuous mode [ 658.281169][T13744] ip6tnl1: entered allmulticast mode [ 658.299083][T13744] team0: Device ip6tnl1 is of different type [ 658.334083][T13784] netlink: 'syz.3.2022': attribute type 4 has an invalid length. [ 658.341974][T13784] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2022'. [ 658.371614][ T30] audit: type=1400 audit(1755938259.403:1069): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 658.755021][T13799] netlink: 'syz.4.2025': attribute type 10 has an invalid length. [ 659.210720][T13608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.274697][T13608] veth0_vlan: entered promiscuous mode [ 659.291005][T13608] veth1_vlan: entered promiscuous mode [ 659.343989][T13608] veth0_macvtap: entered promiscuous mode [ 659.367548][T13608] veth1_macvtap: entered promiscuous mode [ 659.411401][T13608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.443214][T13608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.478126][ T7591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.528056][ T7591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.548048][ T7591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.574884][ T5967] usb 42-1: device descriptor read/8, error -110 [ 659.592788][ T7591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.726342][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.740811][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.375452][ T30] audit: type=1400 audit(1755938261.393:1070): avc: denied { write } for pid=13814 comm="syz.1.2033" path="socket:[47818]" dev="sockfs" ino=47818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 660.407270][T13815] QAT: Invalid ioctl 21531 [ 660.425408][ T5967] usb usb42-port1: attempt power cycle [ 660.457948][T13816] wireguard0: entered promiscuous mode [ 660.473695][T13816] wireguard0: entered allmulticast mode [ 660.867981][ T30] audit: type=1400 audit(1755938261.893:1071): avc: denied { create } for pid=13826 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 660.963074][T13829] 9pnet_virtio: no channels available for device syz [ 661.339310][ T5967] usb usb42-port1: unable to enumerate USB device [ 661.362625][ T30] audit: type=1400 audit(1755938261.933:1072): avc: denied { write } for pid=13826 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 661.604407][ T30] audit: type=1400 audit(1755938262.173:1073): avc: denied { read } for pid=13824 comm="syz.3.2036" laddr=::ffff:172.20.20.170 lport=20000 faddr=::ffff:172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 661.630561][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.653998][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.686734][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.743060][T13838] capability: warning: `syz.1.2038' uses deprecated v2 capabilities in a way that may be insecure [ 661.938572][ T30] audit: type=1400 audit(1755938262.953:1074): avc: denied { ioctl } for pid=13826 comm="syz.4.2037" path="socket:[47945]" dev="sockfs" ino=47945 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 661.963571][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.160803][T13852] 9pnet_virtio: no channels available for device syz [ 663.731183][T13881] input: syz0 as /devices/virtual/input/input24 [ 664.629104][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 664.858714][T13879] vlan0: entered promiscuous mode [ 664.864025][T13879] vlan0: entered allmulticast mode [ 664.870547][T13879] hsr_slave_1: entered allmulticast mode [ 666.940901][ T30] audit: type=1400 audit(1755938267.973:1075): avc: denied { write } for pid=13877 comm="syz.1.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 666.983319][ T30] audit: type=1400 audit(1755938267.983:1076): avc: denied { bind } for pid=13877 comm="syz.1.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 667.399796][T13909] 9pnet_virtio: no channels available for device syz [ 668.478047][T13925] nbd2: detected capacity change from 0 to 1024 [ 668.487135][T13921] block nbd2: NBD_DISCONNECT [ 668.490068][T11263] block nbd2: Send control failed (result -89) [ 668.505564][T11263] block nbd2: Request send failed, requeueing [ 668.516487][T11263] block nbd2: Disconnected due to user request. [ 668.526459][T13921] block nbd2: Send disconnect failed -89 [ 668.533541][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.543779][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 668.552118][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.570377][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 668.583001][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.668295][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 668.774671][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.796840][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 668.819823][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.838941][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 668.856029][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.874154][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 668.889735][T13935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2058'. [ 668.903726][T13935] random: crng reseeded on system resumption [ 669.177038][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.187298][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 669.195184][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.204247][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 669.215314][T11263] ldm_validate_partition_table(): Disk read failed. [ 669.230116][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.509775][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 669.540162][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.605574][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 669.623828][T11263] Dev nbd2: unable to read RDB block 0 [ 669.642304][T11263] nbd2: unable to read partition table [ 669.652680][T13924] ldm_validate_partition_table(): Disk read failed. [ 669.691651][T13924] Dev nbd2: unable to read RDB block 0 [ 669.720460][T13924] nbd2: unable to read partition table [ 669.747910][ T5217] ldm_validate_partition_table(): Disk read failed. [ 669.755022][ T5217] Dev nbd2: unable to read RDB block 0 [ 669.763244][ T5217] nbd2: unable to read partition table [ 669.786329][T11263] ldm_validate_partition_table(): Disk read failed. [ 670.815860][T11263] Dev nbd2: unable to read RDB block 0 [ 670.849417][T11263] nbd2: unable to read partition table [ 671.544884][ T30] audit: type=1400 audit(1755938272.263:1077): avc: denied { read } for pid=13953 comm="syz.3.2070" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 671.632032][ T30] audit: type=1400 audit(1755938272.263:1078): avc: denied { open } for pid=13953 comm="syz.3.2070" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 671.661284][ T30] audit: type=1400 audit(1755938272.283:1079): avc: denied { setattr } for pid=13953 comm="syz.3.2070" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 671.709368][T13961] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 672.011946][ T5840] cgroup: fork rejected by pids controller in /syz0 [ 672.168003][ T30] audit: type=1400 audit(1755938273.193:1080): avc: denied { bind } for pid=13972 comm="syz.3.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 672.188407][ T5840] syz_tun (unregistering): left allmulticast mode [ 672.657304][T14002] GUP no longer grows the stack in syz.4.2089 (14002): 200000006000-20000000a000 (200000005000) [ 672.668194][ T30] audit: type=1400 audit(1755938273.693:1081): avc: denied { map } for pid=14001 comm="syz.4.2089" path="socket:[50196]" dev="sockfs" ino=50196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 672.707920][T14002] CPU: 1 UID: 0 PID: 14002 Comm: syz.4.2089 Not tainted syzkaller #0 PREEMPT(full) [ 672.707948][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 672.707960][T14002] Call Trace: [ 672.707966][T14002] [ 672.707975][T14002] dump_stack_lvl+0x16c/0x1f0 [ 672.708002][T14002] gup_vma_lookup+0x1d2/0x220 [ 672.708029][T14002] __get_user_pages+0x243/0x34a0 [ 672.708070][T14002] ? down_read_killable+0x220/0x4b0 [ 672.708094][T14002] ? __lock_acquire+0x62e/0x1ce0 [ 672.708120][T14002] ? __pfx___get_user_pages+0x10/0x10 [ 672.708152][T14002] __gup_longterm_locked+0xa92/0x17e0 [ 672.708184][T14002] ? try_get_folio+0x1d2/0x730 [ 672.708206][T14002] ? __pfx___gup_longterm_locked+0x10/0x10 [ 672.708233][T14002] ? try_get_folio+0x255/0x730 [ 672.708254][T14002] ? find_held_lock+0x2b/0x80 [ 672.708284][T14002] gup_fast_fallback+0xf78/0x23f0 [ 672.708325][T14002] ? __pfx_gup_fast_fallback+0x10/0x10 [ 672.708353][T14002] ? __lock_acquire+0xb97/0x1ce0 [ 672.708383][T14002] get_user_pages_fast+0xa7/0xf0 [ 672.708409][T14002] ? __pfx_get_user_pages_fast+0x10/0x10 [ 672.708433][T14002] ? __mutex_trylock_common+0xe9/0x250 [ 672.708462][T14002] ? __pfx___mutex_trylock_common+0x10/0x10 [ 672.708494][T14002] __iov_iter_get_pages_alloc+0x818/0x20a0 [ 672.708523][T14002] ? trace_contention_end+0xdd/0x130 [ 672.708541][T14002] ? __mutex_lock+0x1c5/0x1060 [ 672.708560][T14002] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 672.708585][T14002] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 672.708614][T14002] ? __pfx___mutex_lock+0x10/0x10 [ 672.708633][T14002] ? import_ubuf+0x1b6/0x220 [ 672.708662][T14002] iov_iter_get_pages2+0xa3/0x100 [ 672.708686][T14002] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 672.708710][T14002] ? wait_for_space+0x232/0x2e0 [ 672.708735][T14002] __do_sys_vmsplice+0xa47/0x11a0 [ 672.708764][T14002] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 672.708785][T14002] ? futex_private_hash_put+0x18a/0x300 [ 672.708811][T14002] ? futex_hash_put+0x3e/0x50 [ 672.708889][T14002] ? do_syscall_64+0xcd/0x4c0 [ 672.708908][T14002] do_syscall_64+0xcd/0x4c0 [ 672.708930][T14002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.708949][T14002] RIP: 0033:0x7f31b0f8ebe9 [ 672.708965][T14002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.708983][T14002] RSP: 002b:00007f31b1e9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 672.709001][T14002] RAX: ffffffffffffffda RBX: 00007f31b11b5fa0 RCX: 00007f31b0f8ebe9 [ 672.709013][T14002] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 672.709023][T14002] RBP: 00007f31b1011e19 R08: 0000000000000000 R09: 0000000000000000 [ 672.709034][T14002] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 672.709044][T14002] R13: 00007f31b11b6038 R14: 00007f31b11b5fa0 R15: 00007ffde59269d8 [ 672.709082][T14002] [ 673.504815][ T30] audit: type=1400 audit(1755938274.453:1082): avc: denied { append } for pid=14006 comm="syz.4.2093" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 673.620571][ T30] audit: type=1400 audit(1755938274.453:1083): avc: denied { kexec_image_load } for pid=14006 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 673.861803][T14019] cgroup: fork rejected by pids controller in /syz3 [ 674.505043][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 675.872339][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.908924][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.925035][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.935871][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.943208][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.282213][T14037] syz_tun: entered allmulticast mode [ 676.350976][T14034] wlan0 speed is unknown, defaulting to 1000 [ 676.381176][T14034] wg2 speed is unknown, defaulting to 1000 [ 676.625178][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 677.308120][T14038] syz_tun (unregistering): left allmulticast mode [ 677.919246][T14034] lo speed is unknown, defaulting to 1000 [ 677.975697][ T5842] Bluetooth: hci0: command tx timeout [ 678.433116][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.484151][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.632165][T14034] lo speed is unknown, defaulting to 1000 [ 679.453669][T14060] cgroup: fork rejected by pids controller in /syz1 [ 683.171983][ T5842] Bluetooth: hci0: command tx timeout [ 684.460633][ T23] sched: DL replenish lagged too much [ 684.861491][ T30] audit: type=1400 audit(1755938285.883:1084): avc: denied { setopt } for pid=14066 comm="syz.2.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 685.935560][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.978196][ T5842] Bluetooth: hci0: command tx timeout [ 686.224716][ T30] audit: type=1400 audit(1755938285.933:1085): avc: denied { open } for pid=14068 comm="syz.4.2109" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 687.624651][ T30] audit: type=1400 audit(1755938287.163:1086): avc: denied { mount } for pid=14066 comm="syz.2.2108" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 687.753343][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.854624][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.874635][ T30] audit: type=1400 audit(1755938288.693:1087): avc: denied { unmount } for pid=13608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 687.914623][ T30] audit: type=1400 audit(1755938288.813:1088): avc: denied { bind } for pid=14068 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 688.077318][T12838] Bluetooth: hci0: command tx timeout [ 688.130178][ T30] audit: type=1400 audit(1755938288.833:1089): avc: denied { setopt } for pid=14068 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 688.424091][T12838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 688.434444][T12838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 688.444199][T14081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 688.455323][T14081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 688.463046][T14081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 688.576281][T14072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.697009][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 688.890397][T14076] wlan0 speed is unknown, defaulting to 1000 [ 689.349478][ T5845] syz_tun (unregistering): left allmulticast mode [ 689.945940][T14076] wg2 speed is unknown, defaulting to 1000 [ 690.150667][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.192023][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.329492][T14034] chnl_net:caif_netlink_parms(): no params data found [ 690.778282][ T5842] Bluetooth: hci1: command tx timeout [ 691.144501][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 691.176950][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.213776][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.295909][T14076] lo speed is unknown, defaulting to 1000 [ 691.378170][T14076] lo speed is unknown, defaulting to 1000 [ 691.652522][T14081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 691.663451][T14081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 691.675911][T14081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 691.696270][T14081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 691.703881][T14081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 691.890162][T14034] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.909726][T14034] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.931460][T14034] bridge_slave_0: entered allmulticast mode [ 691.951507][T14034] bridge_slave_0: entered promiscuous mode [ 691.986321][T14034] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.011689][T14034] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.023525][T14034] bridge_slave_1: entered allmulticast mode [ 692.031936][T14034] bridge_slave_1: entered promiscuous mode [ 692.098607][T14105] wlan0 speed is unknown, defaulting to 1000 [ 692.189955][T14105] wg2 speed is unknown, defaulting to 1000 [ 692.209920][T14034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.242510][T14034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.579881][T14034] team0: Port device team_slave_0 added [ 692.609834][T14034] team0: Port device team_slave_1 added [ 692.854693][T14081] Bluetooth: hci1: command tx timeout [ 692.874829][T14094] random: crng reseeded on system resumption [ 693.257481][ T12] team0: left allmulticast mode [ 693.270875][ T12] team_slave_0: left allmulticast mode [ 693.285381][ T12] team_slave_1: left allmulticast mode [ 693.301120][ T12] team0: left promiscuous mode [ 693.321389][ T12] team_slave_0: left promiscuous mode [ 693.339558][ T12] team_slave_1: left promiscuous mode [ 693.359290][ T12] bridge0: port 3(team0) entered disabled state [ 693.799152][ T12] bridge_slave_1: left allmulticast mode [ 693.840497][T14081] Bluetooth: hci2: command tx timeout [ 693.879869][ T12] bridge_slave_1: left promiscuous mode [ 693.892217][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.935350][ T12] bridge_slave_0: left allmulticast mode [ 694.998976][T14081] Bluetooth: hci1: command tx timeout [ 696.054710][ T5842] Bluetooth: hci2: command tx timeout [ 696.064597][ T12] bridge_slave_0: left promiscuous mode [ 696.070372][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.020529][ T5842] Bluetooth: hci1: command tx timeout [ 697.749145][ T30] audit: type=1400 audit(1755938298.783:1090): avc: denied { read } for pid=14138 comm="syz.2.2125" path="socket:[50900]" dev="sockfs" ino=50900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 698.156141][ T5842] Bluetooth: hci2: command tx timeout [ 700.286063][ T5842] Bluetooth: hci2: command tx timeout [ 700.551394][T14146] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 701.741151][ T30] audit: type=1400 audit(1755938302.773:1091): avc: denied { unlink } for pid=14147 comm="syz.2.2127" name="#3" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 701.770672][ T30] audit: type=1400 audit(1755938302.783:1092): avc: denied { mount } for pid=14147 comm="syz.2.2127" name="/" dev="overlay" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 702.038751][T14152] comedi comedi3: das16m1: I/O port conflict (0x6,16) [ 702.093018][ T30] audit: type=1400 audit(1755938303.123:1093): avc: denied { mount } for pid=14150 comm="syz.4.2128" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 702.115772][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.153410][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.178545][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 702.201530][ T12] bond0 (unregistering): Released all slaves [ 702.221930][T14105] lo speed is unknown, defaulting to 1000 [ 702.260105][T14034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.272004][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.306366][T14034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.362311][T14151] wlan0 speed is unknown, defaulting to 1000 [ 702.369566][T14105] lo speed is unknown, defaulting to 1000 [ 702.392899][T14034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.779528][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.203054][T14034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.308920][T14151] wg2 speed is unknown, defaulting to 1000 [ 706.762758][ T12] tipc: Left network mode [ 707.290224][T14034] hsr_slave_0: entered promiscuous mode [ 710.775418][T14034] hsr_slave_1: entered promiscuous mode [ 710.781625][T14034] debugfs: 'hsr0' already exists in 'hsr' [ 710.824613][T14034] Cannot create hsr debugfs directory [ 710.838206][T14076] chnl_net:caif_netlink_parms(): no params data found [ 712.272720][T14151] lo speed is unknown, defaulting to 1000 [ 712.347897][T14151] lo speed is unknown, defaulting to 1000 [ 746.898902][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.330917][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 847.034478][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 847.041453][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5217/1:b..l P5846/1:b..l [ 847.050823][ C0] rcu: (detected by 0, t=10503 jiffies, g=73541, q=500343 ncpus=2) [ 847.058796][ C0] task:syz-executor state:R running task stack:23144 pid:5846 tgid:5846 ppid:1 task_flags:0x40054c flags:0x00004004 [ 847.073376][ C0] Call Trace: [ 847.076659][ C0] [ 847.079594][ C0] __schedule+0x1190/0x5de0 [ 847.084105][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 847.089051][ C0] ? __pfx___schedule+0x10/0x10 [ 847.093903][ C0] ? lock_acquire+0x179/0x350 [ 847.098604][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 847.103979][ C0] preempt_schedule_common+0x44/0xc0 [ 847.109258][ C0] preempt_schedule_thunk+0x16/0x30 [ 847.114464][ C0] _raw_spin_unlock+0x3e/0x50 [ 847.119141][ C0] unmap_page_range+0xf77/0x42c0 [ 847.124113][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 847.131567][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 847.136513][ C0] ? uprobe_munmap+0x20/0x5c0 [ 847.141195][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 847.147100][ C0] unmap_vmas+0x218/0x470 [ 847.151457][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 847.156329][ C0] exit_mmap+0x1b9/0xb90 [ 847.160581][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 847.165375][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 847.170339][ C0] __mmput+0x12a/0x410 [ 847.174410][ C0] mmput+0x62/0x70 [ 847.178120][ C0] do_exit+0x7c7/0x2bf0 [ 847.182275][ C0] ? find_held_lock+0x2b/0x80 [ 847.186952][ C0] ? __pfx_do_exit+0x10/0x10 [ 847.191557][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 847.196597][ C0] ? find_held_lock+0x2b/0x80 [ 847.201288][ C0] do_group_exit+0xd3/0x2a0 [ 847.205800][ C0] get_signal+0x2673/0x26d0 [ 847.210313][ C0] ? __pfx_get_signal+0x10/0x10 [ 847.215164][ C0] ? __do_sys_wait4+0xd1/0x170 [ 847.219923][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 847.225475][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 847.231635][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 847.236920][ C0] ? dnotify_flush+0xa9/0x4c0 [ 847.241612][ C0] exit_to_user_mode_loop+0x84/0x110 [ 847.246892][ C0] do_syscall_64+0x3f6/0x4c0 [ 847.251483][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.257377][ C0] RIP: 0033:0x7f31b0f84e57 [ 847.261799][ C0] RSP: 002b:00007ffde5926d30 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 847.270232][ C0] RAX: fffffffffffffe00 RBX: 000000000000062d RCX: 00007f31b0f84e57 [ 847.278196][ C0] RDX: 0000000040000000 RSI: 00007ffde5926d9c RDI: 00000000ffffffff [ 847.286168][ C0] RBP: 00007ffde5926d9c R08: 0000000000000000 R09: 0000000000000000 [ 847.294131][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001b4 [ 847.302084][ C0] R13: 0000555589941590 R14: 00000000000ab933 R15: 00007ffde5926df0 [ 847.310072][ C0] [ 847.313083][ C0] task:udevd state:R running task stack:24712 pid:5217 tgid:5217 ppid:1 task_flags:0x400140 flags:0x00004002 [ 847.326536][ C0] Call Trace: [ 847.329811][ C0] [ 847.332734][ C0] __schedule+0x1190/0x5de0 [ 847.337236][ C0] ? __pfx___schedule+0x10/0x10 [ 847.342078][ C0] ? unwind_get_return_address+0x59/0xa0 [ 847.347706][ C0] ? arch_stack_walk+0x88/0x100 [ 847.352560][ C0] ? mark_held_locks+0x49/0x80 [ 847.357331][ C0] preempt_schedule_irq+0x51/0x90 [ 847.362361][ C0] irqentry_exit+0x36/0x90 [ 847.366777][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 847.372757][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 847.378909][ C0] Code: 8b 05 29 b4 1a 12 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 3c 16 00 00 85 c0 74 2b <8b> 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 [ 847.398526][ C0] RSP: 0018:ffffc9000427f6f8 EFLAGS: 00000246 [ 847.404598][ C0] RAX: 0000000080000000 RBX: 000000000004398f RCX: ffffffff822d8ca1 [ 847.412571][ C0] RDX: ffff8880611d4880 RSI: ffffffff822d8ce3 RDI: 0000000000000006 [ 847.420536][ C0] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000001000 [ 847.428504][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 847.436470][ C0] R13: ffff88823ffef400 R14: 0000000000000000 R15: dffffc0000000000 [ 847.444443][ C0] ? lookup_page_ext+0x61/0x1d0 [ 847.449290][ C0] ? lookup_page_ext+0xa3/0x1d0 [ 847.454134][ C0] lookup_page_ext+0xa3/0x1d0 [ 847.458792][ C0] __page_table_check_zero+0x1a4/0x5d0 [ 847.464258][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 847.470238][ C0] ? __reset_page_owner+0x137/0x1a0 [ 847.475431][ C0] __free_frozen_pages+0x7b7/0x10f0 [ 847.480642][ C0] __put_partials+0x165/0x1c0 [ 847.485334][ C0] qlist_free_all+0x4d/0x120 [ 847.489916][ C0] ? tomoyo_encode2+0x100/0x3e0 [ 847.494772][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 847.500249][ C0] __kasan_kmalloc+0x8a/0xb0 [ 847.504835][ C0] __kmalloc_noprof+0x223/0x510 [ 847.509679][ C0] ? d_absolute_path+0x136/0x1a0 [ 847.514622][ C0] tomoyo_encode2+0x100/0x3e0 [ 847.519314][ C0] tomoyo_encode+0x29/0x50 [ 847.523731][ C0] tomoyo_realpath_from_path+0x18f/0x6e0 [ 847.529372][ C0] tomoyo_path_perm+0x274/0x460 [ 847.534224][ C0] ? tomoyo_path_perm+0x260/0x460 [ 847.539235][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 847.544639][ C0] ? find_held_lock+0x2b/0x80 [ 847.549311][ C0] ? __might_fault+0xe3/0x190 [ 847.553974][ C0] ? __might_fault+0xe3/0x190 [ 847.558625][ C0] ? __might_fault+0x13b/0x190 [ 847.563388][ C0] security_inode_getattr+0x116/0x290 [ 847.568762][ C0] vfs_statx+0x121/0x3f0 [ 847.573005][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 847.577758][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 847.583135][ C0] vfs_fstatat+0x7b/0xf0 [ 847.587382][ C0] __do_sys_newfstatat+0x97/0x120 [ 847.592405][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 847.598050][ C0] ? xfd_validate_state+0x61/0x180 [ 847.603172][ C0] do_syscall_64+0xcd/0x4c0 [ 847.607679][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.613561][ C0] RIP: 0033:0x7f5103311b0a [ 847.617954][ C0] RSP: 002b:00007ffd8e98d9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 847.626362][ C0] RAX: ffffffffffffffda RBX: 00005614e33b1418 RCX: 00007f5103311b0a [ 847.634325][ C0] RDX: 00007ffd8e98d9c0 RSI: 00005614e339fef3 RDI: 00000000ffffff9c [ 847.642276][ C0] RBP: 0000561517fbc668 R08: 00063d041628da3f R09: 00007f5103b73000 [ 847.650242][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.658212][ C0] R13: 00007ffd8e98d9c0 R14: 0000000000000000 R15: 00063d041628da3f [ 847.666205][ C0] [ 847.669222][ C0] rcu: rcu_preempt kthread starved for 6944 jiffies! g73541 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 847.680329][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 847.690292][ C0] rcu: RCU grace-period kthread stack dump: [ 847.696172][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 847.709667][ C0] Call Trace: [ 847.712938][ C0] [ 847.715863][ C0] __schedule+0x1190/0x5de0 [ 847.720381][ C0] ? __pfx___schedule+0x10/0x10 [ 847.725228][ C0] ? find_held_lock+0x2b/0x80 [ 847.729903][ C0] ? schedule+0x2d7/0x3a0 [ 847.734226][ C0] schedule+0xe7/0x3a0 [ 847.738287][ C0] schedule_timeout+0x123/0x290 [ 847.743150][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 847.748507][ C0] ? __pfx_process_timeout+0x10/0x10 [ 847.753796][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 847.759595][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 847.765062][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 847.769823][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 847.775103][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 847.780296][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 847.785225][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 847.790075][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 847.795879][ C0] rcu_gp_kthread+0x270/0x380 [ 847.800551][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 847.805739][ C0] ? rcu_is_watching+0x12/0xc0 [ 847.810501][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 847.815697][ C0] ? __kthread_parkme+0x19e/0x250 [ 847.820722][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 847.825915][ C0] kthread+0x3c2/0x780 [ 847.829977][ C0] ? __pfx_kthread+0x10/0x10 [ 847.834560][ C0] ? rcu_is_watching+0x12/0xc0 [ 847.839322][ C0] ? __pfx_kthread+0x10/0x10 [ 847.843900][ C0] ret_from_fork+0x5d7/0x6f0 [ 847.848469][ C0] ? __pfx_kthread+0x10/0x10 [ 847.853054][ C0] ret_from_fork_asm+0x1a/0x30 [ 847.857825][ C0] [ 847.860835][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 847.867140][ C0] Sending NMI from CPU 0 to CPUs 1: [ 847.872338][ C1] NMI backtrace for cpu 1 [ 847.872350][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 847.872367][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 847.872375][ C1] RIP: 0010:rcu_is_watching+0x60/0xc0 [ 847.872397][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed 60 ee f5 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 <48> 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 [ 847.872411][ C1] RSP: 0018:ffffc90000a082e8 EFLAGS: 00000806 [ 847.872423][ C1] RAX: dffffc0000000000 RBX: ffff8880b85332a8 RCX: ffffffff819810fc [ 847.872432][ C1] RDX: 0000000000000000 RSI: ffffffff8c162880 RDI: ffffffff8df5ee68 [ 847.872441][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff5200014105a [ 847.872450][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff84eb0a0f [ 847.872459][ C1] R13: 0000000000000056 R14: 0000000000000056 R15: ffff8881c79349c0 [ 847.872468][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 847.872482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.872492][ C1] CR2: 0000561517fb6be0 CR3: 000000000e380000 CR4: 00000000003526f0 [ 847.872501][ C1] Call Trace: [ 847.872507][ C1] [ 847.872514][ C1] lock_release+0x201/0x2f0 [ 847.872535][ C1] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 847.872551][ C1] debug_check_no_obj_freed+0x31f/0x600 [ 847.872572][ C1] ? net_rx_action+0xa9f/0xfe0 [ 847.872592][ C1] ? __irq_exit_rcu+0x109/0x170 [ 847.872611][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 847.872636][ C1] kmem_cache_free+0x2ac/0x4d0 [ 847.872650][ C1] ? skb_free_head+0x1b7/0x210 [ 847.872672][ C1] skb_free_head+0x1b7/0x210 [ 847.872690][ C1] ? percpu_counter_add_batch+0xb8/0x1f0 [ 847.872705][ C1] skb_release_data+0x795/0x9e0 [ 847.872719][ C1] ? dst_release+0x266/0x340 [ 847.872740][ C1] consume_skb+0xbf/0x100 [ 847.872755][ C1] nft_synproxy_do_eval+0xa6b/0xd80 [ 847.872775][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 847.872795][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 847.872811][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 847.872829][ C1] nft_do_chain+0x2e6/0x1920 [ 847.872850][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 847.872865][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 847.872880][ C1] ? do_xdp_generic+0xa01/0x1320 [ 847.872901][ C1] ? rcu_is_watching+0x12/0xc0 [ 847.872921][ C1] ? nf_conntrack_in+0x8b0/0x1930 [ 847.872947][ C1] nft_do_chain_inet+0x18a/0x340 [ 847.872964][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 847.872981][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 847.873001][ C1] ? lock_acquire+0x179/0x350 [ 847.873023][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 847.873038][ C1] nf_hook_slow+0xbe/0x200 [ 847.873053][ C1] nf_hook.constprop.0+0x422/0x750 [ 847.873066][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 847.873081][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 847.873093][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 847.873107][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 847.873125][ C1] ip_local_deliver+0x169/0x1f0 [ 847.873139][ C1] ip_rcv+0x2e0/0x600 [ 847.873151][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 847.873163][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 847.873184][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 847.873205][ C1] ? lock_acquire+0x179/0x350 [ 847.873228][ C1] ? process_backlog+0x3f0/0x15e0 [ 847.873247][ C1] __netif_receive_skb+0x1d/0x160 [ 847.873267][ C1] process_backlog+0x442/0x15e0 [ 847.873290][ C1] __napi_poll.constprop.0+0xba/0x550 [ 847.873310][ C1] ? rcu_is_watching+0x12/0xc0 [ 847.873327][ C1] net_rx_action+0xa9f/0xfe0 [ 847.873353][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 847.873373][ C1] ? rcu_is_watching+0x12/0xc0 [ 847.873389][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 847.873403][ C1] ? tmigr_handle_remote+0x132/0x380 [ 847.873425][ C1] ? run_timer_base+0x121/0x190 [ 847.873445][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 847.873467][ C1] handle_softirqs+0x216/0x8e0 [ 847.873486][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 847.873505][ C1] __irq_exit_rcu+0x109/0x170 [ 847.873521][ C1] irq_exit_rcu+0x9/0x30 [ 847.873537][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 847.873550][ C1] [ 847.873554][ C1] [ 847.873560][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 847.873575][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 847.873589][ C1] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 847.873602][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 847.873613][ C1] RAX: 0000000001f0663d RBX: 0000000000000001 RCX: ffffffff8b93bc29 [ 847.873622][ C1] RDX: 0000000000000000 RSI: ffffffff8de4fd50 RDI: ffffffff8c162900 [ 847.873631][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 847.873640][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 847.873648][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab4390 R15: 0000000000000000 [ 847.873661][ C1] ? ct_kernel_exit+0x139/0x190 [ 847.873678][ C1] default_idle+0x13/0x20 [ 847.873694][ C1] default_idle_call+0x6d/0xb0 [ 847.873709][ C1] do_idle+0x391/0x510 [ 847.873726][ C1] ? __pfx_do_idle+0x10/0x10 [ 847.873743][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 847.873761][ C1] cpu_startup_entry+0x4f/0x60 [ 847.873777][ C1] start_secondary+0x21d/0x2b0 [ 847.873797][ C1] ? __pfx_start_secondary+0x10/0x10 [ 847.873819][ C1] common_startup_64+0x13e/0x148 [ 847.873842][ C1]