last executing test programs: 3.838901156s ago: executing program 2 (id=698): syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x80000001, {{0x2, 0x0, 0x100000005, 0x0, 0xfff, 0x3, {0x0, 0x100000000, 0x1137, 0xffff, 0x1, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x2, 0xee00, 0x0, 0xfffffff9, 0x1}}, {0x0, 0xd}}}, 0x0, 0x0}) 3.542407047s ago: executing program 0 (id=701): socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0) 3.357430183s ago: executing program 0 (id=704): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 3.141589595s ago: executing program 0 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) 2.908064888s ago: executing program 0 (id=708): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = msgget$private(0x0, 0x200) msgsnd(r0, &(0x7f0000000200)=ANY=[], 0x2000, 0x0) 2.826763258s ago: executing program 2 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x30, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x800) 2.650249349s ago: executing program 2 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close(0x3) 2.494034162s ago: executing program 2 (id=715): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) 2.401143947s ago: executing program 2 (id=717): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 1.903370873s ago: executing program 1 (id=721): r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000004c0)="b24f53f2", 0x4, r0) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x2, 0x1) socket(0x2, 0x2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) 1.885221461s ago: executing program 0 (id=722): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/280, 0x118}, {&(0x7f0000000940)=""/235, 0xeb}, {&(0x7f0000003240)=""/4076, 0xfec}, {&(0x7f0000000a40)=""/259, 0x103}, {&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000001140)=""/4084, 0xff4}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000540)=""/240, 0xf0}], 0xb}, 0x4000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.694516531s ago: executing program 1 (id=723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x2c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @NL80211_ATTR_KEYS={0x4}]}, 0x2c}}, 0x800) 1.640514972s ago: executing program 4 (id=724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080006"], 0x44}}, 0x0) 1.499446279s ago: executing program 4 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.402051543s ago: executing program 1 (id=727): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) 1.351741541s ago: executing program 3 (id=728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0) 1.228286706s ago: executing program 1 (id=729): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x5, 0xf6}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) 1.132044239s ago: executing program 3 (id=730): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x7, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x5}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0x4d6, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.023856303s ago: executing program 4 (id=731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010006"], 0x28}}, 0x0) 1.02369734s ago: executing program 1 (id=732): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = msgget$private(0x0, 0x200) msgsnd(r0, &(0x7f0000000200)=ANY=[], 0x2000, 0x0) 890.975014ms ago: executing program 0 (id=733): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(0x0, 0x100000000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7, 0x4000004, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 883.022181ms ago: executing program 3 (id=734): r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000004c0)="b24f53f2", 0x4, r0) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x2, 0x1) socket(0x2, 0x2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) 758.580615ms ago: executing program 4 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000100)=""/7, 0x9}) 747.435192ms ago: executing program 3 (id=736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080006"], 0x44}}, 0x0) 298.063366ms ago: executing program 4 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x2c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @NL80211_ATTR_KEYS={0x4}]}, 0x2c}}, 0x800) 255.874812ms ago: executing program 3 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x54, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbf7, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) 184.392203ms ago: executing program 3 (id=739): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) 176.450447ms ago: executing program 2 (id=740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0) 7.257673ms ago: executing program 4 (id=741): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) 0s ago: executing program 1 (id=742): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 81.700284][ T5817] cgroup: Unknown subsys name 'net' [ 81.840289][ T5817] cgroup: Unknown subsys name 'cpuset' [ 81.850258][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.548354][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.773987][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.782830][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.791607][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.800631][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.809102][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.817137][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.825129][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.833212][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.840720][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.867104][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.875873][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.878275][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.884683][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.897005][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.904065][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.913322][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.921097][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.921974][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.929461][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.937299][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.944932][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.951218][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.961061][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.966460][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.971926][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.645151][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 88.823060][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 88.912445][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.972346][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.054112][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.061827][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.069547][ T5847] bridge_slave_0: entered allmulticast mode [ 89.077239][ T5847] bridge_slave_0: entered promiscuous mode [ 89.091316][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.098554][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.105771][ T5847] bridge_slave_1: entered allmulticast mode [ 89.113997][ T5847] bridge_slave_1: entered promiscuous mode [ 89.165971][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.312316][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.341897][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.349285][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.357309][ T5850] bridge_slave_0: entered allmulticast mode [ 89.364699][ T5850] bridge_slave_0: entered promiscuous mode [ 89.390720][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.428939][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.436260][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.443476][ T5845] bridge_slave_0: entered allmulticast mode [ 89.452143][ T5845] bridge_slave_0: entered promiscuous mode [ 89.460366][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.468076][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.475294][ T5850] bridge_slave_1: entered allmulticast mode [ 89.483836][ T5850] bridge_slave_1: entered promiscuous mode [ 89.522870][ T5847] team0: Port device team_slave_0 added [ 89.544182][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.551585][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.560123][ T5845] bridge_slave_1: entered allmulticast mode [ 89.567961][ T5845] bridge_slave_1: entered promiscuous mode [ 89.599950][ T5847] team0: Port device team_slave_1 added [ 89.620739][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.628023][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.635506][ T5849] bridge_slave_0: entered allmulticast mode [ 89.643890][ T5849] bridge_slave_0: entered promiscuous mode [ 89.708062][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.715404][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.723208][ T5849] bridge_slave_1: entered allmulticast mode [ 89.732674][ T5849] bridge_slave_1: entered promiscuous mode [ 89.755971][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.779785][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.787194][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.814073][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.827890][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.835021][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.861102][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.907625][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.919825][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.929889][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.937488][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.944726][ T5846] bridge_slave_0: entered allmulticast mode [ 89.952872][ T5846] bridge_slave_0: entered promiscuous mode [ 89.963313][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.971111][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.978926][ T5846] bridge_slave_1: entered allmulticast mode [ 89.986852][ T5846] bridge_slave_1: entered promiscuous mode [ 90.008575][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.026895][ T5844] Bluetooth: hci1: command tx timeout [ 90.032687][ T5844] Bluetooth: hci2: command tx timeout [ 90.038366][ T5828] Bluetooth: hci3: command tx timeout [ 90.040485][ T5837] Bluetooth: hci0: command tx timeout [ 90.106054][ T5837] Bluetooth: hci4: command tx timeout [ 90.115284][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.168451][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.181906][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.193605][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.220937][ T5845] team0: Port device team_slave_0 added [ 90.229897][ T5850] team0: Port device team_slave_0 added [ 90.239974][ T5850] team0: Port device team_slave_1 added [ 90.253554][ T5847] hsr_slave_0: entered promiscuous mode [ 90.261103][ T5847] hsr_slave_1: entered promiscuous mode [ 90.305666][ T5845] team0: Port device team_slave_1 added [ 90.361523][ T5846] team0: Port device team_slave_0 added [ 90.371748][ T5849] team0: Port device team_slave_0 added [ 90.406026][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.413130][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.442107][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.456576][ T5846] team0: Port device team_slave_1 added [ 90.465198][ T5849] team0: Port device team_slave_1 added [ 90.487295][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.494333][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.520693][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.532673][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.540501][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.566925][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.633672][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.640918][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.667243][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.705226][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.713595][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.739785][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.753022][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.761514][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.787839][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.844830][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.852014][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.878386][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.897203][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.904198][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.930578][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.008193][ T5845] hsr_slave_0: entered promiscuous mode [ 91.014969][ T5845] hsr_slave_1: entered promiscuous mode [ 91.022566][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.030962][ T5845] Cannot create hsr debugfs directory [ 91.048552][ T5850] hsr_slave_0: entered promiscuous mode [ 91.055040][ T5850] hsr_slave_1: entered promiscuous mode [ 91.061581][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.069337][ T5850] Cannot create hsr debugfs directory [ 91.114196][ T5846] hsr_slave_0: entered promiscuous mode [ 91.120862][ T5846] hsr_slave_1: entered promiscuous mode [ 91.128223][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.135982][ T5846] Cannot create hsr debugfs directory [ 91.257100][ T5849] hsr_slave_0: entered promiscuous mode [ 91.263582][ T5849] hsr_slave_1: entered promiscuous mode [ 91.270438][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.278115][ T5849] Cannot create hsr debugfs directory [ 91.800758][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.833320][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.862429][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.887983][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.942750][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.955087][ T10] cfg80211: failed to load regulatory.db [ 91.993745][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.013395][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.037157][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.082582][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.093276][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.106834][ T5837] Bluetooth: hci0: command tx timeout [ 92.107550][ T5844] Bluetooth: hci2: command tx timeout [ 92.112369][ T5837] Bluetooth: hci3: command tx timeout [ 92.117860][ T5828] Bluetooth: hci1: command tx timeout [ 92.136659][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.175537][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.189312][ T5837] Bluetooth: hci4: command tx timeout [ 92.291078][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.310651][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.341022][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.352676][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.388445][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.449098][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.462847][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.496849][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.503789][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.535202][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.542590][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.551690][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.588311][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.600009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.607221][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.661140][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.749119][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.756365][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.785193][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.819865][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.827157][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.876660][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.890007][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.912849][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.920075][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.959263][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.966490][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.008247][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.060959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.068190][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.101466][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.108652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.142207][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.247145][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.302491][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.333502][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.381989][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.389192][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.403622][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.427147][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.434303][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.449040][ T5847] veth0_vlan: entered promiscuous mode [ 93.487504][ T5847] veth1_vlan: entered promiscuous mode [ 93.622833][ T5850] veth0_vlan: entered promiscuous mode [ 93.630820][ T5847] veth0_macvtap: entered promiscuous mode [ 93.643362][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.655293][ T5845] veth0_vlan: entered promiscuous mode [ 93.679439][ T5847] veth1_macvtap: entered promiscuous mode [ 93.689871][ T5850] veth1_vlan: entered promiscuous mode [ 93.717972][ T5845] veth1_vlan: entered promiscuous mode [ 93.791086][ T5850] veth0_macvtap: entered promiscuous mode [ 93.808962][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.828969][ T5850] veth1_macvtap: entered promiscuous mode [ 93.861905][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.885457][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.897030][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.909317][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.932677][ T5846] veth0_vlan: entered promiscuous mode [ 93.951410][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.959769][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.968983][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.981519][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.990681][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.006985][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.017722][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.030709][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.042557][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.053602][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.063310][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.072411][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.087421][ T5845] veth0_macvtap: entered promiscuous mode [ 94.143723][ T5845] veth1_macvtap: entered promiscuous mode [ 94.162507][ T5846] veth1_vlan: entered promiscuous mode [ 94.186334][ T5837] Bluetooth: hci2: command tx timeout [ 94.186437][ T55] Bluetooth: hci1: command tx timeout [ 94.191787][ T5837] Bluetooth: hci0: command tx timeout [ 94.197541][ T5844] Bluetooth: hci3: command tx timeout [ 94.266809][ T5844] Bluetooth: hci4: command tx timeout [ 94.275141][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.290417][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.300823][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.311541][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.323639][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.384406][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.393831][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.394814][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.412270][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.422410][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.433931][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.447052][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.461680][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.470304][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.537751][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.548145][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.558302][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.568651][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.593365][ T5846] veth0_macvtap: entered promiscuous mode [ 94.618993][ T5849] veth0_vlan: entered promiscuous mode [ 94.628109][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.638314][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.641121][ T5846] veth1_macvtap: entered promiscuous mode [ 94.672640][ T5849] veth1_vlan: entered promiscuous mode [ 94.689489][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.707593][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.811738][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.827507][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.847204][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.857483][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.868005][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.878598][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.889153][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.900752][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.922668][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.935589][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.982946][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.994694][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.004773][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.020693][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.030653][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.055942][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.087943][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.149753][ T5849] veth0_macvtap: entered promiscuous mode [ 95.209206][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.224089][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.235348][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.251027][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.264200][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.273306][ T5849] veth1_macvtap: entered promiscuous mode [ 95.282739][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.331792][ T5901] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1' sets config #0 [ 95.343413][ T5901] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1' sets config #1 [ 95.422373][ T5903] Zero length message leads to an empty skb [ 95.430237][ T5903] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.439821][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.486956][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.500211][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.512637][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.528972][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.540819][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.566665][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.577544][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.588248][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.601330][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.646207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.654579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.707318][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.726107][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.739976][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.751037][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.782313][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.828501][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.847591][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.871943][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.884249][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.932676][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.946349][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.059501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 96.098555][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.108308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.152315][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.270377][ T5844] Bluetooth: hci3: command tx timeout [ 96.276464][ T5837] Bluetooth: hci1: command tx timeout [ 96.279737][ T5828] Bluetooth: hci2: command tx timeout [ 96.295985][ T55] Bluetooth: hci0: command tx timeout [ 96.347512][ T55] Bluetooth: hci4: command tx timeout [ 96.395292][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.408551][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.426342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.490366][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.606047][ T5887] usb 2-1: device descriptor read/64, error -71 [ 96.674009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.683173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.692405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.799920][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.808179][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.876807][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.926744][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.934647][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.974723][ T5916] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8'. [ 97.027383][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 97.040463][ T5887] usb 2-1: device descriptor read/64, error -71 [ 97.054896][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.075318][ T5916] mmap: syz.0.8 (5916): VmData 37367808 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 97.089078][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.158079][ T5887] usb usb2-port1: attempt power cycle [ 97.187513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.476874][ T5827] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.616036][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.626451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 97.792925][ T5887] usb 2-1: device descriptor read/8, error -71 [ 97.980093][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 98.002191][ T5934] loop8: detected capacity change from 0 to 1 [ 98.013850][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.022952][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.045359][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.354399][ T5887] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.382489][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.392507][ T5887] usb 2-1: device descriptor read/8, error -71 [ 98.437147][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.439940][ T5827] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.494406][ T5934] ldm_validate_partition_table(): Disk read failed. [ 98.504593][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.513827][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.521948][ T5887] usb usb2-port1: unable to enumerate USB device [ 98.546138][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.554769][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.566132][ T5934] Dev loop8: unable to read RDB block 0 [ 98.571888][ T5934] Buffer I/O error on dev loop8, logical block 0, async page read [ 98.580458][ T5934] loop8: unable to read partition table [ 98.586621][ T5934] loop8: partition table beyond EOD, truncated [ 98.592874][ T5934] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 98.714451][ T5827] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.879694][ T5827] usb 3-1: config 1 interface 0 has no altsetting 0 [ 98.900717][ T5827] usb 3-1: string descriptor 0 read error: -22 [ 98.929361][ T5827] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 98.965992][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.179023][ T5943] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 100.288484][ T5941] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11'. [ 100.369534][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.533554][ T5924] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.876241][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 100.930722][ T5924] usb 2-1: config index 0 descriptor too short (expected 259, got 27) [ 100.998185][ T5924] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 101.032548][ T5924] usb 2-1: can't read configurations, error -22 [ 101.256590][ T5891] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 101.296804][ T5924] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.386027][ T5891] usb 5-1: device descriptor read/64, error -71 [ 101.455936][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 101.479619][ T5924] usb 2-1: config index 0 descriptor too short (expected 259, got 27) [ 101.524388][ T5924] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 101.601267][ T5924] usb 2-1: can't read configurations, error -22 [ 101.630239][ T5924] usb usb2-port1: attempt power cycle [ 101.639508][ T5891] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 101.988979][ T5891] usb 5-1: device descriptor read/64, error -71 [ 102.096637][ T5891] usb usb5-port1: attempt power cycle [ 102.226548][ T5924] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.251174][ T5827] usbhid 3-1:1.0: can't add hid device: -71 [ 102.257461][ T5827] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 102.309902][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 102.317390][ T5924] usb 2-1: config index 0 descriptor too short (expected 259, got 27) [ 102.325688][ T5924] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 102.353957][ T5827] usb 3-1: USB disconnect, device number 2 [ 102.361495][ T5924] usb 2-1: can't read configurations, error -22 [ 102.456308][ T5891] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 102.536564][ T5924] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.547705][ T5891] usb 5-1: device descriptor read/8, error -71 [ 102.591490][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 102.607566][ T5924] usb 2-1: config index 0 descriptor too short (expected 259, got 27) [ 102.632238][ T5924] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 102.663607][ T5924] usb 2-1: can't read configurations, error -22 [ 102.719151][ T5924] usb usb2-port1: unable to enumerate USB device [ 102.807443][ T5891] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 102.896563][ T5891] usb 5-1: device descriptor read/8, error -71 [ 103.008412][ T5891] usb usb5-port1: unable to enumerate USB device [ 103.229585][ T5962] vlan2: entered allmulticast mode [ 103.286879][ T5968] qrtr: Invalid version 0 [ 103.306010][ T5924] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 103.436033][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.565920][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 103.599319][ T5924] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.617900][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 103.628149][ T5924] usb 2-1: config 0 has no interface number 0 [ 103.660102][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.675126][ T5886] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.678316][ T5924] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 103.703457][ T5886] usb 3-1: config 1 interface 0 has no altsetting 0 [ 103.744749][ T5886] usb 3-1: string descriptor 0 read error: -22 [ 103.751481][ T5886] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 103.763619][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.818967][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.876093][ T5924] usb 2-1: Product: syz [ 103.906093][ T5888] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.927220][ T5924] usb 2-1: Manufacturer: syz [ 103.959190][ T5924] usb 2-1: SerialNumber: syz [ 104.040468][ T5924] usb 2-1: config 0 descriptor?? [ 104.050627][ T5924] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 104.075953][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 104.092693][ T5924] usb 2-1: selecting invalid altsetting 1 [ 104.109407][ T5888] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.119768][ T5888] usb 5-1: config 0 has no interface number 0 [ 104.126010][ T5924] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 104.199707][ T5888] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 104.218130][ T5924] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.231087][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.243059][ T5888] usb 5-1: Product: syz [ 104.267842][ T5924] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 104.283268][ T5888] usb 5-1: Manufacturer: syz [ 104.310790][ T5888] usb 5-1: SerialNumber: syz [ 104.317010][ T5924] usb 2-1: media controller created [ 104.337830][ T5888] usb 5-1: config 0 descriptor?? [ 104.358721][ T5888] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 105.038190][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.139048][ T5924] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 105.160680][ T5924] zl10353_read_register: readreg error (reg=127, ret==-71) [ 105.178112][ T5924] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 105.490761][ T5924] usb 2-1: USB disconnect, device number 10 [ 105.935932][ T5987] overlayfs: missing 'lowerdir' [ 106.913506][ T5888] gspca_spca1528: reg_r err -71 [ 106.918749][ T5888] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 106.965969][ T119] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.976251][ T5888] usb 5-1: USB disconnect, device number 6 [ 107.145045][ T119] usb 4-1: Using ep0 maxpacket: 8 [ 107.167570][ T119] usb 4-1: config 5 has an invalid interface number: 101 but max is 1 [ 107.190218][ T119] usb 4-1: config 5 has an invalid interface number: 119 but max is 1 [ 107.230734][ T119] usb 4-1: config 5 has an invalid interface number: 182 but max is 1 [ 107.281382][ T119] usb 4-1: config 5 has 3 interfaces, different from the descriptor's value: 2 [ 107.297546][ T5994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23'. [ 107.343834][ T119] usb 4-1: config 5 has no interface number 0 [ 107.365871][ T119] usb 4-1: config 5 has no interface number 1 [ 107.383545][ T119] usb 4-1: config 5 has no interface number 2 [ 107.407309][ T119] usb 4-1: config 5 interface 101 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 107.456005][ T119] usb 4-1: config 5 interface 101 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 107.490984][ T5886] usbhid 3-1:1.0: can't add hid device: -71 [ 107.508457][ T5886] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 107.535995][ T119] usb 4-1: config 5 interface 101 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 107.547168][ T5886] usb 3-1: USB disconnect, device number 3 [ 107.599318][ T119] usb 4-1: config 5 interface 101 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 107.645999][ T119] usb 4-1: config 5 interface 101 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 107.677937][ T119] usb 4-1: config 5 interface 101 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 32 [ 107.691756][ T119] usb 4-1: config 5 interface 101 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 107.708843][ T119] usb 4-1: config 5 interface 101 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 107.724765][ T119] usb 4-1: config 5 interface 101 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 107.781410][ T119] usb 4-1: config 5 interface 101 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 107.816110][ T119] usb 4-1: config 5 interface 101 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 107.836747][ T119] usb 4-1: too many endpoints for config 5 interface 119 altsetting 171: 146, using maximum allowed: 30 [ 107.854830][ T119] usb 4-1: config 5 interface 119 altsetting 171 has a duplicate endpoint with address 0x5, skipping [ 107.901017][ T119] usb 4-1: config 5 interface 119 altsetting 171 has 2 endpoint descriptors, different from the interface descriptor's value: 146 [ 107.929430][ T119] usb 4-1: config 5 interface 182 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 107.950935][ T119] usb 4-1: config 5 interface 101 has no altsetting 0 [ 107.967595][ T119] usb 4-1: config 5 interface 119 has no altsetting 0 [ 107.987744][ T119] usb 4-1: config 5 interface 182 has no altsetting 0 [ 108.000877][ T119] usb 4-1: New USB device found, idVendor=0403, idProduct=6045, bcdDevice=66.a7 [ 108.013100][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.021267][ T119] usb 4-1: Product: ꓏芀䐫응ম쭎泋睖팄鄄㘤켣攄䡼Ꮔ㤘챏껉彺ഴ쨁Ở閐턷㚺⯠韝亿홈书⿩䅌쳝譽鑜裏抢錀걪坁ज़꾄㡰娠皀綐緳疘쯔祻㒓芇⯓桝ꆯ묗뻙猂귉ႛ絞㺮Ʃ蘷㾅榑퍙ᔶᢟ跧휳ࢥӲ纒㐗풠ბⲯ箦撉硌䫁紲鶺ꥋ嗛拠㊿ [ 108.051569][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.059767][ T119] usb 4-1: Manufacturer: Т [ 108.064395][ T119] usb 4-1: SerialNumber: Д [ 108.082937][ T5992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.092748][ T5992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.313242][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.323677][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.334163][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.344262][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.367237][ T119] ftdi_sio 4-1:5.101: FTDI USB Serial Device converter detected [ 108.378120][ T119] ftdi_sio ttyUSB0: unknown device type: 0x66a7 [ 108.398144][ T119] ftdi_sio 4-1:5.119: FTDI USB Serial Device converter detected [ 108.408653][ T119] ftdi_sio ttyUSB1: unknown device type: 0x66a7 [ 108.418695][ T119] ftdi_sio 4-1:5.182: FTDI USB Serial Device converter detected [ 108.427697][ T119] ftdi_sio ttyUSB2: unknown device type: 0x66a7 [ 108.443873][ T119] usb 4-1: USB disconnect, device number 2 [ 108.459747][ T119] ftdi_sio 4-1:5.101: device disconnected [ 108.471547][ T119] ftdi_sio 4-1:5.119: device disconnected [ 108.490706][ T119] ftdi_sio 4-1:5.182: device disconnected [ 118.779088][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 118.869312][ T6009] fuse: Unknown parameter 'default_permissions' [ 118.944414][ T6004] syz.0.24 (6004) used greatest stack depth: 18792 bytes left [ 119.092598][ T6013] team0: Port device bridge1 added [ 119.404169][ T6026] overlayfs: missing 'lowerdir' [ 119.435910][ T5938] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 119.623167][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 119.633040][ T5938] usb 2-1: config 5 has an invalid interface number: 101 but max is 1 [ 119.641647][ T5938] usb 2-1: config 5 has an invalid interface number: 119 but max is 1 [ 119.655176][ T5938] usb 2-1: config 5 has an invalid interface number: 182 but max is 1 [ 119.819710][ T5938] usb 2-1: config 5 has 3 interfaces, different from the descriptor's value: 2 [ 119.856515][ T5938] usb 2-1: config 5 has no interface number 0 [ 119.883698][ T5938] usb 2-1: config 5 has no interface number 1 [ 119.892501][ T5938] usb 2-1: config 5 has no interface number 2 [ 119.903203][ T5938] usb 2-1: config 5 interface 101 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 119.913415][ T5938] usb 2-1: config 5 interface 101 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 119.930808][ T5938] usb 2-1: config 5 interface 101 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 119.943556][ T5938] usb 2-1: config 5 interface 101 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 119.962160][ T5938] usb 2-1: config 5 interface 101 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 120.342545][ T5938] usb 2-1: config 5 interface 101 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 32 [ 120.421004][ T5938] usb 2-1: config 5 interface 101 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 120.515993][ T5938] usb 2-1: config 5 interface 101 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 120.554496][ T5938] usb 2-1: config 5 interface 101 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 120.611508][ T5938] usb 2-1: config 5 interface 101 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 120.677133][ T5938] usb 2-1: config 5 interface 101 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 120.752221][ T5938] usb 2-1: too many endpoints for config 5 interface 119 altsetting 171: 146, using maximum allowed: 30 [ 120.793991][ T5938] usb 2-1: config 5 interface 119 altsetting 171 has a duplicate endpoint with address 0x5, skipping [ 120.814354][ T5938] usb 2-1: config 5 interface 119 altsetting 171 has 2 endpoint descriptors, different from the interface descriptor's value: 146 [ 120.875952][ T5938] usb 2-1: config 5 interface 182 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 120.915990][ T5938] usb 2-1: config 5 interface 101 has no altsetting 0 [ 120.922848][ T5938] usb 2-1: config 5 interface 119 has no altsetting 0 [ 120.959145][ T5938] usb 2-1: config 5 interface 182 has no altsetting 0 [ 120.980912][ T5938] usb 2-1: New USB device found, idVendor=0403, idProduct=6045, bcdDevice=66.a7 [ 120.998855][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.013381][ T5938] usb 2-1: Product: ꓏芀䐫응ম쭎泋睖팄鄄㘤켣攄䡼Ꮔ㤘챏껉彺ഴ쨁Ở閐턷㚺⯠韝亿홈书⿩䅌쳝譽鑜裏抢錀걪坁ज़꾄㡰娠皀綐緳疘쯔祻㒓芇⯓桝ꆯ묗뻙猂귉ႛ絞㺮Ʃ蘷㾅榑퍙ᔶᢟ跧휳ࢥӲ纒㐗풠ბⲯ箦撉硌䫁紲鶺ꥋ嗛拠㊿ [ 121.115430][ T5938] usb 2-1: Manufacturer: Т [ 121.123499][ T5938] usb 2-1: SerialNumber: Д [ 121.142160][ T6017] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.155766][ T6017] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.162391][ T30] audit: type=1326 audit(1747211967.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 121.433325][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.442825][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.454504][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.464580][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.501135][ T5938] ftdi_sio 2-1:5.101: FTDI USB Serial Device converter detected [ 121.523363][ T5938] ftdi_sio ttyUSB0: unknown device type: 0x66a7 [ 121.565191][ T5938] ftdi_sio 2-1:5.119: FTDI USB Serial Device converter detected [ 121.582180][ T5938] ftdi_sio ttyUSB1: unknown device type: 0x66a7 [ 121.592722][ T5938] ftdi_sio 2-1:5.182: FTDI USB Serial Device converter detected [ 121.605745][ T5938] ftdi_sio ttyUSB2: unknown device type: 0x66a7 [ 121.618037][ T5938] usb 2-1: USB disconnect, device number 11 [ 121.643850][ T5938] ftdi_sio 2-1:5.101: device disconnected [ 121.653350][ T5938] ftdi_sio 2-1:5.119: device disconnected [ 121.664307][ T5938] ftdi_sio 2-1:5.182: device disconnected [ 125.994891][ T6053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34'. [ 126.164962][ T6061] loop8: detected capacity change from 0 to 1 [ 126.174454][ T6061] buffer_io_error: 19 callbacks suppressed [ 126.174508][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.192084][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.469070][ T6064] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.478713][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.488063][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.497090][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.526618][ T6061] ldm_validate_partition_table(): Disk read failed. [ 126.533571][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.554262][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.615957][ T5827] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.624401][ T6063] netlink: 'syz.2.36': attribute type 10 has an invalid length. [ 126.684664][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.789337][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.885965][ T6061] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.905196][ T6061] Dev loop8: unable to read RDB block 0 [ 126.972013][ T6061] loop8: unable to read partition table [ 127.083444][ T6063] team0: Port device wlan1 added [ 127.179780][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 127.200120][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.208145][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 127.225434][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.248698][ T5891] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.291809][ T6061] loop8: partition table beyond EOD, truncated [ 127.337235][ T5891] usb 5-1: config 1 interface 0 has no altsetting 0 [ 127.371340][ T6061] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 127.628569][ T5827] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.658111][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'. [ 127.684000][ T5827] usb 4-1: config 1 interface 0 has no altsetting 0 [ 127.693137][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 127.708265][ T5891] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 127.742326][ T6071] dummy0: entered promiscuous mode [ 127.823344][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.882500][ T5827] usb 4-1: string descriptor 0 read error: -22 [ 127.900587][ T5827] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 127.933114][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.892901][ T6079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.42'. [ 130.047072][ T5827] usbhid 4-1:1.0: can't add hid device: -71 [ 130.054657][ T5827] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 130.155574][ T5827] usb 4-1: USB disconnect, device number 3 [ 130.421699][ T5891] usbhid 5-1:1.0: can't add hid device: -71 [ 130.439768][ T5891] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 130.470885][ T5891] usb 5-1: USB disconnect, device number 7 [ 130.625123][ T6102] capability: warning: `syz.3.48' uses deprecated v2 capabilities in a way that may be insecure [ 130.702170][ T6101] vlan2: entered allmulticast mode [ 130.710630][ T6101] bridge0: port 3(vlan2) entered blocking state [ 130.718829][ T6101] bridge0: port 3(vlan2) entered disabled state [ 130.727857][ T6101] vlan2: entered promiscuous mode [ 130.753332][ T5827] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.767477][ T6101] bridge0: mtu less than device minimum [ 130.871613][ T6104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.49'. [ 130.922240][ T5938] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 130.958282][ T5827] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 130.989862][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.007657][ T5827] usb 2-1: config 0 descriptor?? [ 131.032304][ T5827] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 131.105141][ T5938] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 131.135741][ T5938] usb 4-1: config 0 has no interface number 0 [ 131.153723][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 131.160146][ T5938] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 131.163098][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 131.188702][ T5938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66 [ 131.198954][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.249723][ T5938] usb 4-1: config 0 descriptor?? [ 131.490363][ T5938] usb 4-1: string descriptor 0 read error: -71 [ 131.524949][ T5938] usbtest 4-1:0.138: couldn't get endpoints, -22 [ 131.652255][ T5938] usbtest 4-1:0.138: probe with driver usbtest failed with error -22 [ 131.773484][ T5938] usb 4-1: USB disconnect, device number 4 [ 132.928061][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968926][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.136037][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.291808][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.301082][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.453186][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 133.654612][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.792666][ T5888] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.070320][ T5888] usb 4-1: config 1 interface 0 has no altsetting 0 [ 134.359679][ T6139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.399390][ T5886] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 134.543411][ T5888] usb 4-1: string descriptor 0 read error: -22 [ 134.557833][ T5888] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 134.575981][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.588708][ T5886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.597036][ T5886] usb 5-1: config 0 has no interface number 0 [ 134.618910][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 134.715500][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 134.740807][ T5886] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.778939][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.810094][ T5886] usb 5-1: config 0 descriptor?? [ 134.823144][ T6136] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 134.854629][ T5886] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.260228][ T5886] usb 5-1: USB disconnect, device number 8 [ 136.397653][ T5827] usb 2-1: USB disconnect, device number 12 [ 137.646194][ T5888] usbhid 4-1:1.0: can't add hid device: -71 [ 137.712671][ T5888] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 137.994769][ T5888] usb 4-1: USB disconnect, device number 5 [ 138.710929][ T6186] loop8: detected capacity change from 0 to 1 [ 138.720340][ T6186] buffer_io_error: 19 callbacks suppressed [ 138.720397][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 138.746160][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 138.798618][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 138.807782][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 138.820570][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 138.885974][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.959715][ T6187] Buffer I/O error on dev loop8, logical block 0, async page read [ 138.980512][ T6186] ldm_validate_partition_table(): Disk read failed. [ 139.063346][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.170982][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.189910][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.200036][ T5888] usb 4-1: Product: syz [ 139.204269][ T5888] usb 4-1: Manufacturer: syz [ 139.219106][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.227217][ T5888] usb 4-1: SerialNumber: syz [ 139.291745][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.301471][ T6186] Buffer I/O error on dev loop8, logical block 0, async page read [ 139.314866][ T6186] Dev loop8: unable to read RDB block 0 [ 139.324180][ T6186] loop8: unable to read partition table [ 139.338000][ T6186] loop8: partition table beyond EOD, truncated [ 139.376130][ T6186] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 139.668716][ T119] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 139.853416][ T119] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.876462][ T119] usb 3-1: config 0 has no interface number 0 [ 139.889858][ T119] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 139.906057][ T119] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 139.923607][ T119] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.935687][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.985896][ T119] usb 3-1: config 0 descriptor?? [ 140.006791][ T6193] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.022168][ T119] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 140.251912][ T5827] usb 3-1: USB disconnect, device number 4 [ 140.279857][ T6202] syz.4.76 uses obsolete (PF_INET,SOCK_PACKET) [ 140.287866][ T5888] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 140.310590][ T5888] cdc_ncm 4-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 140.337471][ T5888] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 140.642090][ T5888] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 140.755475][ T5888] usb 4-1: USB disconnect, device number 6 [ 140.820125][ T5888] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 140.859063][ T6208] FAULT_INJECTION: forcing a failure. [ 140.859063][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.931468][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.4.79 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 140.931501][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.931518][ T6208] Call Trace: [ 140.931534][ T6208] [ 140.931544][ T6208] dump_stack_lvl+0x189/0x250 [ 140.931595][ T6208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.931626][ T6208] ? __pfx__printk+0x10/0x10 [ 140.931661][ T6208] should_fail_ex+0x414/0x560 [ 140.931689][ T6208] _copy_to_user+0x31/0xb0 [ 140.931723][ T6208] simple_read_from_buffer+0xe1/0x170 [ 140.931756][ T6208] proc_fail_nth_read+0x1df/0x250 [ 140.931790][ T6208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.931824][ T6208] ? rw_verify_area+0x258/0x650 [ 140.931847][ T6208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.931881][ T6208] vfs_read+0x200/0x980 [ 140.931910][ T6208] ? __pfx___mutex_lock+0x10/0x10 [ 140.931940][ T6208] ? __pfx_vfs_read+0x10/0x10 [ 140.931967][ T6208] ? __fget_files+0x2a/0x420 [ 140.932027][ T6208] ? __fget_files+0x3a0/0x420 [ 140.932054][ T6208] ? __fget_files+0x2a/0x420 [ 140.932092][ T6208] ksys_read+0x145/0x250 [ 140.932120][ T6208] ? __pfx_ksys_read+0x10/0x10 [ 140.932146][ T6208] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 140.932174][ T6208] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.932203][ T6208] __do_fast_syscall_32+0xb4/0x110 [ 140.932233][ T6208] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.932263][ T6208] do_fast_syscall_32+0x34/0x80 [ 140.932291][ T6208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.932315][ T6208] RIP: 0023:0xf70be539 [ 140.932340][ T6208] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 140.932357][ T6208] RSP: 002b:00000000f50ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 140.932379][ T6208] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50ae620 [ 140.932393][ T6208] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 140.932406][ T6208] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 140.932415][ T6208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.932425][ T6208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.932449][ T6208] [ 141.431203][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 141.633613][ T6215] dummy0: entered promiscuous mode [ 143.244706][ T6263] binder: 6261:6263 ioctl 541b 0 returned -22 [ 143.814319][ T6284] binfmt_misc: register: failed to install interpreter file ./file1 [ 144.060864][ T6293] binfmt_misc: register: failed to install interpreter file ./file1 [ 145.229771][ T6334] netlink: 'syz.2.138': attribute type 31 has an invalid length. [ 145.319473][ T6336] netlink: 'syz.3.140': attribute type 2 has an invalid length. [ 145.331248][ T6336] netlink: 'syz.3.140': attribute type 8 has an invalid length. [ 145.341681][ T6336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.140'. [ 146.693527][ T6384] netlink: 'syz.1.161': attribute type 29 has an invalid length. [ 146.768124][ T6384] netlink: 'syz.1.161': attribute type 29 has an invalid length. [ 146.856141][ T6388] netlink: 'syz.1.161': attribute type 29 has an invalid length. [ 146.995441][ T6393] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 148.091307][ T6433] netlink: 'syz.0.183': attribute type 29 has an invalid length. [ 148.146503][ T6433] netlink: 'syz.0.183': attribute type 29 has an invalid length. [ 148.175104][ T6433] netlink: 'syz.0.183': attribute type 29 has an invalid length. [ 150.026810][ T6500] netlink: 130976 bytes leftover after parsing attributes in process `syz.2.218'. [ 150.248045][ T6513] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.829874][ T6530] validate_nla: 1 callbacks suppressed [ 150.829894][ T6530] netlink: 'syz.1.232': attribute type 29 has an invalid length. [ 150.903645][ T6534] netlink: 'syz.1.232': attribute type 29 has an invalid length. [ 150.940370][ T6538] netlink: 'syz.1.232': attribute type 29 has an invalid length. [ 151.016177][ T6530] netlink: 'syz.1.232': attribute type 29 has an invalid length. [ 151.276791][ T6548] warning: `syz.2.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.862151][ T5886] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 152.041254][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.060004][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.099497][ T5886] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 152.125850][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.152390][ T5886] usb 2-1: Product: syz [ 152.157948][ T5886] usb 2-1: Manufacturer: syz [ 152.179543][ T5886] usb 2-1: SerialNumber: syz [ 152.217444][ T5886] usb 2-1: config 0 descriptor?? [ 152.248059][ T5886] usb 2-1: ucan: probing device on interface #0 [ 152.270661][ T5886] usb 2-1: ucan: invalid EP count (0) [ 152.286806][ T5886] usb 2-1: ucan: probe failed; try to update the device firmware [ 152.506187][ T5886] usb 2-1: USB disconnect, device number 13 [ 153.332163][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 154.118239][ T6606] netlink: 144 bytes leftover after parsing attributes in process `syz.1.261'. [ 155.502994][ T6634] netlink: 'syz.4.264': attribute type 10 has an invalid length. [ 155.586247][ T6634] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 155.641292][ T6634] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 156.084451][ T6634] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 156.778540][ T119] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.935859][ T119] usb 3-1: Using ep0 maxpacket: 8 [ 156.950211][ T119] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 156.981659][ T119] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 157.000162][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.385950][ T119] usb 3-1: Product: syz [ 157.396204][ T119] usb 3-1: Manufacturer: syz [ 157.416587][ T119] usb 3-1: SerialNumber: syz [ 157.451215][ T119] usb 3-1: config 0 descriptor?? [ 157.477246][ T119] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 157.502239][ T119] usb 3-1: setting power ON [ 157.517188][ T119] dvb-usb: bulk message failed: -22 (2/0) [ 157.559361][ T119] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.590747][ T119] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 157.624154][ T119] usb 3-1: media controller created [ 157.848348][ T119] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.017219][ T119] usb 3-1: selecting invalid altsetting 6 [ 158.023296][ T119] usb 3-1: digital interface selection failed (-22) [ 158.079612][ T119] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 158.118509][ T119] usb 3-1: setting power OFF [ 158.136021][ T119] dvb-usb: bulk message failed: -22 (2/0) [ 158.160725][ T119] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 158.230706][ T119] (NULL device *): no alternate interface [ 158.378050][ T6680] bridge_slave_0: left allmulticast mode [ 158.420127][ T6680] bridge_slave_0: left promiscuous mode [ 158.441718][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.525909][ T5886] IPVS: starting estimator thread 0... [ 158.546121][ T6680] bridge_slave_1: left allmulticast mode [ 158.547799][ T6684] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 158.552476][ T6680] bridge_slave_1: left promiscuous mode [ 158.626296][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.657029][ T6686] IPVS: using max 36 ests per chain, 86400 per kthread [ 158.745690][ T6680] bond0: (slave bond_slave_0): Releasing backup interface [ 158.817744][ T6680] bond0: (slave bond_slave_1): Releasing backup interface [ 158.943921][ T6695] dvb-usb: bulk message failed: -22 (3/0) [ 158.966593][ T6680] team0: Port device team_slave_0 removed [ 159.024808][ T6695] usb 3-1: gpio_write failed. [ 159.046039][ T6695] dvb-usb: bulk message failed: -22 (5/0) [ 159.060292][ T6680] team0: Port device team_slave_1 removed [ 159.073995][ T6680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.102126][ T6680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.151618][ T6680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.186043][ T6680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.198999][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 160.216533][ T6706] mmap: syz.1.296 (6706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 160.334383][ T119] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 160.409854][ T119] usb 3-1: USB disconnect, device number 5 [ 160.420203][ T6714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'. [ 160.522110][ T6714] netlink: 96 bytes leftover after parsing attributes in process `syz.3.294'. [ 161.195652][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.408909][ T55] Bluetooth: Frame is too long (len 10, expected len 4) [ 162.084327][ T5952] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 162.331061][ T5952] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 162.351614][ T5952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.381196][ T5952] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.402010][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.413029][ T5952] usb 2-1: Product: syz [ 162.417444][ T5952] usb 2-1: Manufacturer: syz [ 162.471496][ T5952] usb 2-1: SerialNumber: syz [ 162.510406][ T5952] usb 2-1: config 0 descriptor?? [ 162.580784][ T5952] usb 2-1: selecting invalid altsetting 0 [ 162.828646][ T5952] usb 2-1: USB disconnect, device number 14 [ 163.245887][ T119] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 163.466289][ T119] usb 5-1: Using ep0 maxpacket: 8 [ 163.486096][ T119] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.539863][ T119] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 163.558878][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.576086][ T119] usb 5-1: Product: syz [ 163.581612][ T119] usb 5-1: Manufacturer: syz [ 163.597697][ T119] usb 5-1: SerialNumber: syz [ 163.860479][ T119] usb 5-1: selecting invalid altsetting 1 [ 163.886003][ T119] catc 5-1:8.0: Can't set altsetting 1. [ 163.891695][ T119] catc 5-1:8.0: probe with driver catc failed with error -5 [ 163.970550][ T119] usb 5-1: USB disconnect, device number 9 [ 164.415928][ T5952] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 164.580143][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 164.616730][ T5952] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 164.645363][ T5952] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 164.667244][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.685927][ T5952] usb 2-1: Product: syz [ 164.696373][ T5952] usb 2-1: Manufacturer: syz [ 164.702469][ T5952] usb 2-1: SerialNumber: syz [ 164.727399][ T5952] usb 2-1: config 0 descriptor?? [ 164.772754][ T5952] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 164.791254][ T5952] usb 2-1: setting power ON [ 164.811507][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 164.855470][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.879126][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 164.913713][ T5952] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 164.934501][ T5952] usb 2-1: media controller created [ 164.975511][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.987357][ T6788] dvb-usb: bulk message failed: -22 (3/0) [ 164.993155][ T6788] usb 2-1: gpio_write failed. [ 165.041762][ T6788] dvb-usb: bulk message failed: -22 (5/0) [ 165.086747][ T5952] usb 2-1: selecting invalid altsetting 6 [ 165.101192][ T5952] usb 2-1: digital interface selection failed (-22) [ 165.110757][ T5952] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 165.110815][ T6808] dvb-usb: bulk message failed: -22 (4/0) [ 165.126680][ T5952] usb 2-1: setting power OFF [ 165.148139][ T6808] cxusb: i2c read failed [ 165.153081][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 165.163182][ T5952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 165.172829][ T5827] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 165.199515][ T6812] GUP no longer grows the stack in syz.2.337 (6812): 80004000-8000a000 (80001000) [ 165.209077][ T5952] (NULL device *): no alternate interface [ 165.209166][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.2.337 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 165.209194][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.209208][ T6812] Call Trace: [ 165.209216][ T6812] [ 165.209226][ T6812] dump_stack_lvl+0x189/0x250 [ 165.209264][ T6812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.209296][ T6812] ? __pfx__printk+0x10/0x10 [ 165.209314][ T6812] ? find_vma+0xe7/0x160 [ 165.209357][ T6812] __get_user_pages+0x24e4/0x2a40 [ 165.209421][ T6812] ? __pfx___get_user_pages+0x10/0x10 [ 165.209447][ T6812] ? __gup_longterm_locked+0xbf7/0x15b0 [ 165.209474][ T6812] ? down_read_killable+0x1d1/0x350 [ 165.209503][ T6812] ? try_get_folio+0x633/0x660 [ 165.209536][ T6812] __gup_longterm_locked+0xd66/0x15b0 [ 165.209583][ T6812] ? try_grab_folio_fast+0x19a/0x4d0 [ 165.209624][ T6812] ? gup_fast_fallback+0x1672/0x1d60 [ 165.209656][ T6812] gup_fast_fallback+0x1843/0x1d60 [ 165.209722][ T6812] ? __pfx_gup_fast_fallback+0x10/0x10 [ 165.209754][ T6812] ? __pfx_get_page_from_freelist+0x10/0x10 [ 165.209775][ T6812] ? is_valid_gup_args+0x11f/0x200 [ 165.209805][ T6812] ? get_user_pages_fast+0x4d/0xb0 [ 165.209835][ T6812] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 165.209870][ T6812] ? sock_write_iter+0x258/0x330 [ 165.209892][ T6812] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 165.209919][ T6812] iov_iter_get_pages2+0x5e/0xa0 [ 165.209953][ T6812] sk_msg_zerocopy_from_iter+0x1f6/0x830 [ 165.209998][ T6812] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 165.210063][ T6812] tls_sw_sendmsg+0x9b0/0x23c0 [ 165.210140][ T6812] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 165.210173][ T6812] ? __lock_acquire+0xaac/0xd20 [ 165.210204][ T6812] ? __pfx_aa_sk_perm+0x10/0x10 [ 165.210224][ T6812] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 165.210251][ T6812] ? sock_rps_record_flow+0x19/0x400 [ 165.210287][ T6812] ? inet_getname+0x4b7/0x530 [ 165.210322][ T6812] ? inet6_sendmsg+0x101/0x120 [ 165.210345][ T6812] __sock_sendmsg+0xe5/0x270 [ 165.210371][ T6812] sock_write_iter+0x258/0x330 [ 165.210394][ T6812] ? __pfx_sock_write_iter+0x10/0x10 [ 165.210443][ T6812] ? __pfx_aa_file_perm+0x10/0x10 [ 165.210478][ T6812] do_iter_readv_writev+0x56b/0x7f0 [ 165.210510][ T6812] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 165.210544][ T6812] ? bpf_lsm_file_permission+0x9/0x20 [ 165.210578][ T6812] ? security_file_permission+0x75/0x290 [ 165.210614][ T6812] ? rw_verify_area+0x258/0x650 [ 165.210643][ T6812] vfs_writev+0x306/0x9a0 [ 165.210685][ T6812] ? __pfx_vfs_writev+0x10/0x10 [ 165.210734][ T6812] ? __fget_files+0x2a/0x420 [ 165.210768][ T6812] ? __fget_files+0x3a0/0x420 [ 165.210795][ T6812] ? __fget_files+0x2a/0x420 [ 165.210835][ T6812] do_writev+0x14d/0x2d0 [ 165.210869][ T6812] ? __pfx_do_writev+0x10/0x10 [ 165.210903][ T6812] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 165.210933][ T6812] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.210963][ T6812] __do_fast_syscall_32+0xb4/0x110 [ 165.210994][ T6812] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.211025][ T6812] do_fast_syscall_32+0x34/0x80 [ 165.211055][ T6812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.211080][ T6812] RIP: 0023:0xf7f36539 [ 165.211098][ T6812] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 165.211116][ T6812] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 165.211156][ T6812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 165.211171][ T6812] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.211182][ T6812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.211194][ T6812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 165.211206][ T6812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.211239][ T6812] [ 165.766818][ T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 165.775409][ T55] Bluetooth: hci2: Injecting HCI hardware error event [ 165.783154][ T55] Bluetooth: hci2: hardware error 0x00 [ 165.859353][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.880682][ T5952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 165.912729][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.981731][ T5952] usb 2-1: USB disconnect, device number 15 [ 166.001853][ T5827] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.052350][ T5827] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.079594][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.100199][ T5827] usb 1-1: Product: syz [ 166.106268][ T5827] usb 1-1: Manufacturer: syz [ 166.114739][ T5827] usb 1-1: SerialNumber: syz [ 166.121377][ T6822] ALSA: mixer_oss: invalid index 40000 [ 166.143455][ T5827] usb 1-1: selecting invalid altsetting 1 [ 166.296047][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.465894][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 166.479754][ T5886] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 166.496234][ T5886] usb 3-1: config 4 has no interface number 0 [ 166.503211][ T5886] usb 3-1: config 4 interface 51 has no altsetting 0 [ 166.515265][ T5886] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 166.525212][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.544999][ T5886] usb 3-1: Product: syz [ 166.549924][ T5886] usb 3-1: Manufacturer: syz [ 166.559775][ T5886] usb 3-1: SerialNumber: syz [ 166.580237][ T5886] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 166.762308][ T5827] usb 1-1: selecting invalid altsetting 1 [ 166.768351][ T5827] cdc_ncm 1-1:1.0: bind() failure [ 166.784891][ T119] usb 3-1: USB disconnect, device number 6 [ 166.951370][ T5886] usb 1-1: USB disconnect, device number 2 [ 167.188701][ T6823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.913743][ T6845] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 167.934728][ T6845] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 167.946871][ T6845] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 167.955126][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 168.056232][ T119] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 168.110548][ T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 168.251718][ T119] usb 3-1: Using ep0 maxpacket: 8 [ 168.261429][ T119] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 168.288834][ T119] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.340796][ T119] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.374017][ T119] usb 3-1: config 1 interface 1 has no altsetting 0 [ 168.403777][ T119] usb 3-1: New USB device found, idVendor=196b, idProduct=0101, bcdDevice= 0.40 [ 168.421482][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.453513][ T119] usb 3-1: Product: syz [ 168.460290][ T119] usb 3-1: Manufacturer: syz [ 168.464961][ T119] usb 3-1: SerialNumber: syz [ 168.708222][ T119] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 168.734197][ T119] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 168.754422][ T119] usb 3-1: 2:1 : invalid channels 0 [ 168.876345][ T119] usb 3-1: USB disconnect, device number 7 [ 170.596434][ T5888] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 170.837317][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.885407][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.968999][ T5888] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 171.050378][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.171079][ T5888] usb 2-1: config 0 descriptor?? [ 171.644432][ T5888] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 171.873299][ T5888] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 171.984183][ T5888] usb 2-1: USB disconnect, device number 16 [ 172.347448][ T6935] fido_id[6935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 172.545925][ T5888] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 172.708871][ T5888] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.749395][ T5888] usb 5-1: config 0 has no interface number 0 [ 172.757236][ T5888] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 172.779040][ T5888] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 172.806475][ T5888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.832079][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.848624][ C1] Unknown status report in ack skb [ 172.871059][ T5888] usb 5-1: config 0 descriptor?? [ 172.887013][ T6941] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.914881][ T5888] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 173.109772][ T5827] usb 5-1: USB disconnect, device number 10 [ 174.484903][ C0] Unknown status report in ack skb [ 174.981646][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 175.546740][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 176.528035][ T119] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 176.695877][ T119] usb 5-1: Using ep0 maxpacket: 8 [ 176.715429][ T119] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 176.745025][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.775865][ T119] usb 5-1: Product: syz [ 176.780137][ T119] usb 5-1: Manufacturer: syz [ 176.784786][ T119] usb 5-1: SerialNumber: syz [ 176.837017][ T119] usb 5-1: config 0 descriptor?? [ 177.058517][ T119] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 177.210421][ T7031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.428'. [ 178.215921][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.396393][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.429446][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.465904][ T5891] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 178.475012][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.515836][ T5891] usb 1-1: config 0 descriptor?? [ 178.879761][ T119] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 178.890834][ T119] dvbdev: DVB: registering new adapter (Terratec H7) [ 178.903779][ T119] usb 5-1: media controller created [ 179.077798][ T119] usb read operation failed. (-71) [ 179.116039][ T5888] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.159228][ T5891] usb 1-1: language id specifier not provided by device, defaulting to English [ 179.174096][ T119] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 179.209012][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 179.231234][ T119] usb 5-1: USB disconnect, device number 11 [ 179.360964][ T5891] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 179.364159][ T5888] usb 3-1: config 0 has no interfaces? [ 179.371241][ T5891] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 179.383348][ T5891] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 179.398767][ T5891] usb 1-1: USB disconnect, device number 3 [ 179.405997][ T5888] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 179.431089][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.451086][ T5888] usb 3-1: config 0 descriptor?? [ 181.426446][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 181.929559][ T5890] usb 3-1: USB disconnect, device number 8 [ 183.390499][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 183.681285][ T30] audit: type=1800 audit(1747212029.970:3): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.472" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 183.766017][ T5886] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 183.944565][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 183.966299][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 183.990804][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 184.043105][ T5886] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 184.058282][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.096114][ T5886] usb 3-1: Product: syz [ 184.106834][ T5886] usb 3-1: Manufacturer: syz [ 184.116047][ T5886] usb 3-1: SerialNumber: syz [ 184.142549][ T5886] usb 3-1: config 0 descriptor?? [ 184.191307][ T5886] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 184.225267][ T5886] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 184.803166][ T5886] em28xx 3-1:0.0: chip ID is em2874 [ 185.009003][ T5890] usb 3-1: USB disconnect, device number 9 [ 185.034620][ T5890] em28xx 3-1:0.0: Disconnecting em28xx [ 185.070268][ T5890] em28xx 3-1:0.0: Freeing device [ 185.391319][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 186.530002][ T7240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.511'. [ 187.085974][ T5890] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 187.248252][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.275903][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.285743][ T5890] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 187.305434][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.539348][ T5890] usb 1-1: config 0 descriptor?? [ 187.963944][ T5890] usbhid 1-1:0.0: can't add hid device: -71 [ 187.977376][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 188.018341][ T5890] usb 1-1: USB disconnect, device number 4 [ 188.713159][ T7284] binder: 7283:7284 ioctl c0306201 0 returned -14 [ 190.335864][ T5827] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 190.395294][ T7318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.542'. [ 190.530860][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.550573][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.563446][ T5827] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 190.575347][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.598697][ T5827] usb 2-1: config 0 descriptor?? [ 190.635945][ T5890] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 190.938600][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.961153][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 190.982599][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65296, setting to 64 [ 191.004809][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.041923][ T5827] usbhid 2-1:0.0: can't add hid device: -71 [ 191.044237][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.060452][ T5827] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.075879][ T5890] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.097669][ T5827] usb 2-1: USB disconnect, device number 17 [ 191.107832][ T5890] usb 4-1: Manufacturer: syz [ 191.137407][ T5890] usb 4-1: config 0 descriptor?? [ 191.505840][ T5890] rc_core: IR keymap rc-hauppauge not found [ 191.526015][ T5890] Registered IR keymap rc-empty [ 191.546365][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.587207][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.619601][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 191.661631][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 191.708546][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.737020][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.756310][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.786339][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.806313][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.838133][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.875950][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.905667][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.936560][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 191.966797][ T5890] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.029745][ T5890] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.053856][ T5890] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.102068][ T5890] usb 4-1: USB disconnect, device number 7 [ 192.686878][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 193.125903][ T5890] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 193.298622][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.334455][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.359283][ T5890] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 193.378764][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.412266][ T5890] usb 3-1: config 0 descriptor?? [ 193.927033][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 193.933062][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 194.051049][ T5890] usb 3-1: USB disconnect, device number 10 [ 194.353662][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.362674][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.085864][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.260719][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.285997][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 195.312567][ T7417] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 195.319278][ T7417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.355900][ T5890] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.375887][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.376042][ T7417] vhci_hcd vhci_hcd.0: Device attached [ 195.404792][ T5890] usb 1-1: Product: syz [ 195.409257][ T5890] usb 1-1: Manufacturer: syz [ 195.413901][ T5890] usb 1-1: SerialNumber: syz [ 195.442674][ T5890] usb 1-1: config 0 descriptor?? [ 195.477496][ T5890] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 195.606069][ T119] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 195.906493][ T5890] usb 1-1: USB disconnect, device number 5 [ 196.028679][ T7420] vhci_hcd: connection reset by peer [ 196.050991][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.066803][ T53] vhci_hcd: stop threads [ 196.067711][ T53] vhci_hcd: release socket [ 196.124861][ T53] vhci_hcd: disconnect device [ 197.171128][ T7446] tipc: Started in network mode [ 197.177916][ T7446] tipc: Node identity ac141425, cluster identity 4711 [ 197.186346][ T7446] tipc: New replicast peer: 0.0.0.0 [ 197.193272][ T7446] tipc: Enabled bearer , priority 10 [ 197.216065][ T7446] tipc: New replicast peer: 172.20.20.170 [ 198.306998][ T5888] tipc: Node number set to 2886997029 [ 198.826938][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.836347][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.845604][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.855088][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.865206][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.874507][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.883884][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.893203][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.902559][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.912264][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 199.980026][ T5888] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 200.145880][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 200.164547][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.191034][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 200.219188][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 200.255947][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 200.292267][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 200.326515][ T5888] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 200.335639][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 200.355432][ T5888] usb 1-1: Product: syz [ 200.365888][ T5888] usb 1-1: Manufacturer: syz [ 200.370558][ T5888] usb 1-1: SerialNumber: syz [ 200.388320][ T5888] usb 1-1: config 0 descriptor?? [ 200.601692][ T5888] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 200.611939][ T5888] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 200.735907][ T119] vhci_hcd: vhci_device speed not set [ 200.802471][ T5888] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 200.810860][ T5888] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 200.862723][ T5888] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 201.003300][ T5888] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 201.205108][ T5888] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 201.222078][ T5888] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 201.303451][ T5888] usb 1-1: USB disconnect, device number 6 [ 202.786472][ T5827] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.938232][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.959815][ T5827] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 202.984554][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.016588][ T5827] usb 4-1: config 0 descriptor?? [ 203.034701][ T5827] pwc: Askey VC010 type 2 USB webcam detected. [ 203.434601][ T5827] pwc: recv_control_msg error -32 req 02 val 2b00 [ 203.461332][ T5827] pwc: recv_control_msg error -32 req 02 val 2700 [ 203.489526][ T5827] pwc: recv_control_msg error -32 req 02 val 2c00 [ 203.510754][ T5827] pwc: recv_control_msg error -32 req 04 val 1000 [ 203.528231][ T5827] pwc: recv_control_msg error -32 req 04 val 1300 [ 203.543564][ T5827] pwc: recv_control_msg error -32 req 04 val 1400 [ 203.963445][ T5827] pwc: recv_control_msg error -71 req 04 val 1500 [ 203.973571][ T5827] pwc: recv_control_msg error -71 req 02 val 2500 [ 204.002944][ T5827] pwc: recv_control_msg error -71 req 02 val 2400 [ 204.022477][ T5827] pwc: recv_control_msg error -71 req 02 val 2600 [ 204.051062][ T5827] pwc: recv_control_msg error -71 req 02 val 2900 [ 204.089651][ T5827] pwc: recv_control_msg error -71 req 02 val 2800 [ 204.132888][ T5827] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.156550][ T5827] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.186685][ T5827] pwc: Registered as video103. [ 204.214449][ T5827] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 204.281008][ T5827] usb 4-1: USB disconnect, device number 8 [ 204.961595][ T7647] __nla_validate_parse: 39 callbacks suppressed [ 204.961615][ T7647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.681'. [ 205.819538][ T7670] tipc: Started in network mode [ 205.835584][ T7670] tipc: Node identity ac141425, cluster identity 4711 [ 205.856423][ T7670] tipc: New replicast peer: 0.0.0.0 [ 205.870529][ T7670] tipc: Enabled bearer , priority 10 [ 205.884273][ T7676] tipc: New replicast peer: 172.20.20.170 [ 206.334867][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.870262][ T5827] tipc: Node number set to 2886997029 [ 209.006768][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 209.950241][ T1109] wlan1: Trigger new scan to find an IBSS to join [ 209.984010][ T1109] ------------[ cut here ]------------ [ 210.055860][ T1109] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 [ 210.063709][ T1109] index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 210.131513][ T1109] CPU: 1 UID: 0 PID: 1109 Comm: kworker/u8:7 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 210.131544][ T1109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.131558][ T1109] Workqueue: events_unbound cfg80211_wiphy_work [ 210.131597][ T1109] Call Trace: [ 210.131605][ T1109] [ 210.131614][ T1109] dump_stack_lvl+0x189/0x250 [ 210.131652][ T1109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.131683][ T1109] ? __pfx__printk+0x10/0x10 [ 210.131719][ T1109] ubsan_epilogue+0xa/0x40 [ 210.131740][ T1109] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 210.131777][ T1109] ieee80211_request_ibss_scan+0x600/0x8b0 [ 210.131822][ T1109] ieee80211_ibss_work+0xde7/0x1060 [ 210.131858][ T1109] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 210.131910][ T1109] ? ieee80211_iface_work+0xf39/0xfe0 [ 210.131940][ T1109] ? rcu_is_watching+0x15/0xb0 [ 210.131966][ T1109] cfg80211_wiphy_work+0x2dc/0x460 [ 210.131999][ T1109] ? process_scheduled_works+0x9ec/0x17a0 [ 210.132022][ T1109] process_scheduled_works+0xade/0x17a0 [ 210.132076][ T1109] ? __pfx_process_scheduled_works+0x10/0x10 [ 210.132204][ T1109] worker_thread+0x8a0/0xda0 [ 210.132249][ T1109] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.132285][ T1109] ? __kthread_parkme+0x7b/0x200 [ 210.132320][ T1109] kthread+0x711/0x8a0 [ 210.132351][ T1109] ? __pfx_worker_thread+0x10/0x10 [ 210.132372][ T1109] ? __pfx_kthread+0x10/0x10 [ 210.132400][ T1109] ? __pfx_kthread+0x10/0x10 [ 210.132425][ T1109] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.132448][ T1109] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.132475][ T1109] ? __pfx_kthread+0x10/0x10 [ 210.132501][ T1109] ret_from_fork+0x4b/0x80 [ 210.132523][ T1109] ? __pfx_kthread+0x10/0x10 [ 210.132553][ T1109] ret_from_fork_asm+0x1a/0x30 [ 210.132592][ T1109] [ 210.133823][ T1109] ---[ end trace ]--- [ 210.438274][ T1109] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 210.445509][ T1109] CPU: 0 UID: 0 PID: 1109 Comm: kworker/u8:7 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 210.457688][ T1109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.467762][ T1109] Workqueue: events_unbound cfg80211_wiphy_work [ 210.474121][ T1109] Call Trace: [ 210.477412][ T1109] [ 210.480355][ T1109] dump_stack_lvl+0x99/0x250 [ 210.484971][ T1109] ? __asan_memcpy+0x40/0x70 [ 210.489582][ T1109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.494808][ T1109] ? __pfx__printk+0x10/0x10 [ 210.499426][ T1109] panic+0x2db/0x790 [ 210.503449][ T1109] ? __pfx_panic+0x10/0x10 [ 210.507886][ T1109] ? _printk+0xcf/0x120 [ 210.512056][ T1109] ? __pfx__printk+0x10/0x10 [ 210.516667][ T1109] check_panic_on_warn+0x89/0xb0 [ 210.521629][ T1109] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 210.527397][ T1109] ieee80211_request_ibss_scan+0x600/0x8b0 [ 210.533256][ T1109] ieee80211_ibss_work+0xde7/0x1060 [ 210.538498][ T1109] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 210.544172][ T1109] ? ieee80211_iface_work+0xf39/0xfe0 [ 210.549567][ T1109] ? rcu_is_watching+0x15/0xb0 [ 210.554349][ T1109] cfg80211_wiphy_work+0x2dc/0x460 [ 210.559519][ T1109] ? process_scheduled_works+0x9ec/0x17a0 [ 210.565252][ T1109] process_scheduled_works+0xade/0x17a0 [ 210.570836][ T1109] ? __pfx_process_scheduled_works+0x10/0x10 [ 210.576856][ T1109] worker_thread+0x8a0/0xda0 [ 210.581461][ T1109] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.587811][ T1109] ? __kthread_parkme+0x7b/0x200 [ 210.592774][ T1109] kthread+0x711/0x8a0 [ 210.596870][ T1109] ? __pfx_worker_thread+0x10/0x10 [ 210.601999][ T1109] ? __pfx_kthread+0x10/0x10 [ 210.606607][ T1109] ? __pfx_kthread+0x10/0x10 [ 210.611213][ T1109] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.616431][ T1109] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.621645][ T1109] ? __pfx_kthread+0x10/0x10 [ 210.626252][ T1109] ret_from_fork+0x4b/0x80 [ 210.630681][ T1109] ? __pfx_kthread+0x10/0x10 [ 210.635288][ T1109] ret_from_fork_asm+0x1a/0x30 [ 210.640083][ T1109] [ 210.643389][ T1109] Kernel Offset: disabled [ 210.647781][ T1109] Rebooting in 86400 seconds..