last executing test programs: 6m37.464942988s ago: executing program 0 (id=426): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000a80)={{0x80, 0x7}, 'port1\x00', 0x44, 0xa04f2, 0x10000000, 0x0, 0x6, 0x6, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) 6m37.285627783s ago: executing program 0 (id=429): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="b635763d393429c783", 0x9}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) 6m37.11686599s ago: executing program 0 (id=433): syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6m37.056147184s ago: executing program 0 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{}]}) 6m36.856821643s ago: executing program 0 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 6m36.785372278s ago: executing program 0 (id=438): r0 = io_uring_setup(0x3f09, &(0x7f0000000040)={0x0, 0xf52, 0x1, 0x1, 0x202da}) close_range(r0, r0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000100)=""/35, 0x23}], 0x2) 6m36.618138387s ago: executing program 1 (id=439): setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 6m36.488487895s ago: executing program 1 (id=440): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @mcast1, 0xfffffffe}, 0x1c) 6m36.268545697s ago: executing program 1 (id=442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1, 0x32e}, 0x28) 6m36.034711263s ago: executing program 1 (id=444): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) 6m35.20077591s ago: executing program 1 (id=454): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m35.067808694s ago: executing program 1 (id=455): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f0003000000060010000200000005000400a200000014000300200100000000000000000000000000010400130008000700f5ffffff080002392cf0000006000f"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 6m21.569326473s ago: executing program 32 (id=438): r0 = io_uring_setup(0x3f09, &(0x7f0000000040)={0x0, 0xf52, 0x1, 0x1, 0x202da}) close_range(r0, r0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000100)=""/35, 0x23}], 0x2) 6m19.998387281s ago: executing program 33 (id=455): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f0003000000060010000200000005000400a200000014000300200100000000000000000000000000010400130008000700f5ffffff080002392cf0000006000f"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 2m56.271993327s ago: executing program 2 (id=3015): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000006380)=[@in6={0xa, 0x4e23, 0xc0, @mcast1, 0xfffff3fc}], 0x1c) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f00000074c0)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x22102, 0x0) 2m55.333444213s ago: executing program 2 (id=3026): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="af", 0x1, 0x20008080, 0x0, 0x0) shutdown(r0, 0x1) 2m55.204137767s ago: executing program 2 (id=3027): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) 2m54.904843542s ago: executing program 2 (id=3034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m54.772611538s ago: executing program 2 (id=3035): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x11012, r0, 0xa86b0000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) 2m54.175732496s ago: executing program 2 (id=3040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8cdee586d14ea9fb}, 0x0) 2m53.907092666s ago: executing program 34 (id=3040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8cdee586d14ea9fb}, 0x0) 2m50.185024145s ago: executing program 4 (id=3090): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='g'], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x60000094) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2m49.98277876s ago: executing program 4 (id=3093): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2002}) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) 2m49.871274295s ago: executing program 4 (id=3096): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x6, 0x5, 0x2, 0xe2, 0xc1, 0x8, 0xd1, 0x4, 0xf, 0xe3, 0xd2, 0x53, 0xf}, 0xe) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x1, 0x1161, 0x0) 2m48.973098339s ago: executing program 4 (id=3104): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x200) 2m48.918806297s ago: executing program 4 (id=3105): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m48.283258691s ago: executing program 4 (id=3108): r0 = socket(0x2, 0x3, 0x80) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="940200001900010000000000fcdbdf2500000000000023000000000040000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) 2m47.907721903s ago: executing program 35 (id=3108): r0 = socket(0x2, 0x3, 0x80) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="940200001900010000000000fcdbdf2500000000000023000000000040000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) 2m23.597681241s ago: executing program 3 (id=3261): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x99}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) 2m23.335128062s ago: executing program 3 (id=3262): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000c50000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) 2m19.935190025s ago: executing program 3 (id=3278): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 2m18.996216041s ago: executing program 3 (id=3293): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) close(0x3) 2m18.789867103s ago: executing program 3 (id=3295): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000005c0)={0x1, &(0x7f00000000c0)=[{@none}]}) 2m18.05220411s ago: executing program 3 (id=3297): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x3, 0x9, {{0x19, 0x4, 0x3, 0x7, 0x64, 0x68, 0x0, 0xa, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@cipso={0x86, 0x4d, 0x3, [{0x1, 0x10, "ee98a33fac186f83b425f7a6c419"}, {0x6, 0x11, "9f328253c9425d03b371ec7e0088c4"}, {0x5, 0xd, "a5a5a796138238d56a9261"}, {0x0, 0x4, "b975"}, {0x5, 0x9, "9859e2e4925287"}, {0x5, 0x7, "fd534a9760"}, {0x2, 0x5, "83b185"}]}]}}}}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001002bbd7000fffffffffc0200000000000000000000000000006401010200000000000000000000000000040000000000820a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa000000000000000000000000fe80000000000000000000000000000afe8800000000000000000000000001010a010100000000008df0f9c499d2792a3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2m17.470210169s ago: executing program 36 (id=3297): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x3, 0x9, {{0x19, 0x4, 0x3, 0x7, 0x64, 0x68, 0x0, 0xa, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@cipso={0x86, 0x4d, 0x3, [{0x1, 0x10, "ee98a33fac186f83b425f7a6c419"}, {0x6, 0x11, "9f328253c9425d03b371ec7e0088c4"}, {0x5, 0xd, "a5a5a796138238d56a9261"}, {0x0, 0x4, "b975"}, {0x5, 0x9, "9859e2e4925287"}, {0x5, 0x7, "fd534a9760"}, {0x2, 0x5, "83b185"}]}]}}}}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001002bbd7000fffffffffc0200000000000000000000000000006401010200000000000000000000000000040000000000820a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa000000000000000000000000fe80000000000000000000000000000afe8800000000000000000000000001010a010100000000008df0f9c499d2792a3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 19.504326123s ago: executing program 6 (id=4462): timer_create(0x3, 0x0, &(0x7f00000004c0)) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 19.104400859s ago: executing program 6 (id=4467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 15.346461823s ago: executing program 6 (id=4495): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8c1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 15.277616486s ago: executing program 6 (id=4496): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) getdents(r2, 0xfffffffffffffffd, 0xbb) 15.092544646s ago: executing program 6 (id=4499): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40eb, 0x0) 14.818591936s ago: executing program 6 (id=4504): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x100) close_range(r1, 0xffffffffffffffff, 0x0) 5.728086241s ago: executing program 9 (id=4570): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5.638974223s ago: executing program 7 (id=4571): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5.551052205s ago: executing program 9 (id=4572): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) 5.524959841s ago: executing program 7 (id=4573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) shutdown(r1, 0x1) 4.839122459s ago: executing program 7 (id=4575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x1, {0x0, 0x1}, {0x0, 0xf0, 0x2}, 0xfe, 0x1}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 4.823490911s ago: executing program 9 (id=4576): r0 = socket(0x10, 0x3, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.078028257s ago: executing program 7 (id=4577): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x47b6, 0x800000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 3.632444749s ago: executing program 7 (id=4578): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x86, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000006c0)='R', 0x1}], 0x1) 3.52931908s ago: executing program 9 (id=4579): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x20400, 0x4c3524dedc3b6717) fcntl$notify(r0, 0x402, 0x30) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0xc000000b) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000207481082505a3a40794010203010902"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1c) 2.530104393s ago: executing program 5 (id=4589): r0 = io_uring_setup(0x100068f9, &(0x7f00000002c0)={0x0, 0x76e1, 0x10, 0x0, 0x1d0}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[], 0x32600) close_range(r0, 0xffffffffffffffff, 0x0) 2.368827304s ago: executing program 5 (id=4593): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.146176021s ago: executing program 8 (id=4597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 2.131086526s ago: executing program 5 (id=4598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.006809026s ago: executing program 5 (id=4599): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1.930562868s ago: executing program 5 (id=4600): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x2c, 0x6e}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x400000080, {0x1fffffffffffffd, 0x2, 0x5, 0x7f, 0xa003, 0xff, {0x808, 0x3c, 0x6, 0x4, 0x2, 0x0, 0xdb, 0x6, 0xff, 0x8000, 0x0, 0x0, 0x0, 0xe70, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 1.28067366s ago: executing program 5 (id=4601): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) 1.025919013s ago: executing program 37 (id=4601): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) 1.008725449s ago: executing program 8 (id=4603): sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5bb7, &(0x7f0000000300)={0x0, 0xe99e, 0x2, 0x0, 0x276}, &(0x7f0000000380), &(0x7f00000003c0)) r1 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x20, 0xffffffff, 0x361, 0x0, r0}) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) 899.052067ms ago: executing program 8 (id=4604): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x81c0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0x9000, &(0x7f00000000c0)={0x0, 0x74, 0x100000}, 0x20) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffe) 633.070566ms ago: executing program 8 (id=4605): socket$inet(0x2, 0x5, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_io_uring_setup(0xbd8, &(0x7f00000021c0)={0x0, 0x5011, 0x8, 0x8001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 432.825376ms ago: executing program 9 (id=4606): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d", 0x13) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 274.164963ms ago: executing program 7 (id=4607): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f00000008c0)='.', 0x1) unshare(0x22020600) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) listen(r0, 0x6) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) close(0xffffffffffffffff) 272.740356ms ago: executing program 9 (id=4608): r0 = socket(0x40000000015, 0x5, 0x0) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b ) failed (rc=-5) [ 330.114367][ T5192] usb 7-1: Using ep0 maxpacket: 16 [ 330.120526][ T5192] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 330.120558][ T5192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.124792][ T5192] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 330.124822][ T5192] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.124841][ T5192] usb 7-1: Product: syz [ 330.124855][ T5192] usb 7-1: Manufacturer: syz [ 330.124869][ T5192] usb 7-1: SerialNumber: syz [ 330.130298][ T5192] usb 7-1: config 0 descriptor?? [ 330.139039][ T5192] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 330.139078][ T5192] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 330.737274][ T5192] em28xx 7-1:0.0: unknown em28xx chip ID (224) [ 330.943721][ T5192] em28xx 7-1:0.0: Config register raw data: 0xe0 [ 330.943751][ T5192] em28xx 7-1:0.0: I2S Audio (3 sample rate(s)) [ 330.943760][ T5192] em28xx 7-1:0.0: No AC97 audio processor [ 331.151318][ T5192] usb 7-1: USB disconnect, device number 8 [ 331.857507][T12608] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2700'. [ 332.272482][T12625] syzkaller1: entered promiscuous mode [ 332.272510][T12625] syzkaller1: entered allmulticast mode [ 333.035000][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2712'. [ 333.035029][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2712'. [ 334.164440][ T5999] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 334.322655][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.322770][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.322792][ T5999] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.322835][ T5999] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.322858][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.396851][ T5999] usb 7-1: config 0 descriptor?? [ 334.549183][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2737'. [ 334.747280][ T5192] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 334.809088][ T5999] usbhid 7-1:0.0: can't add hid device: -71 [ 334.809196][ T5999] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 334.813211][ T5999] usb 7-1: USB disconnect, device number 9 [ 334.892679][ T805] kernel write not supported for file /media0 (pid: 805 comm: kworker/1:2) [ 334.916800][ T5192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 334.916851][ T5192] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 334.916874][ T5192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.922176][ T5192] usb 3-1: config 0 descriptor?? [ 334.923368][T12693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 335.363420][ T5192] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 335.518267][T12717] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2746'. [ 335.551242][ T5955] usb 3-1: USB disconnect, device number 16 [ 335.934732][T12726] syzkaller1: entered promiscuous mode [ 335.934760][T12726] syzkaller1: entered allmulticast mode [ 336.439606][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 336.646007][ T5999] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 336.804390][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 336.838208][ T5999] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.838241][ T5999] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.843933][ T5999] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.843980][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.844000][ T5999] usb 4-1: Product: syz [ 336.844014][ T5999] usb 4-1: Manufacturer: syz [ 336.844027][ T5999] usb 4-1: SerialNumber: syz [ 337.121585][ T5999] usb 4-1: 0:2 : does not exist [ 337.157219][ T5999] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 337.198501][ T5999] usb 4-1: USB disconnect, device number 23 [ 337.668509][T12782] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 338.015735][T12783] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 339.274541][ T5192] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 339.288737][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2805'. [ 339.288786][T12845] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2805'. [ 339.374396][ T5878] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 339.429103][ T5192] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 339.429134][ T5192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.429154][ T5192] usb 6-1: Product: syz [ 339.429167][ T5192] usb 6-1: Manufacturer: syz [ 339.429181][ T5192] usb 6-1: SerialNumber: syz [ 339.467350][ T5192] usb 6-1: config 0 descriptor?? [ 339.472586][ T5192] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 339.504076][ T5192] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.515140][ T5192] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 339.515202][ T5192] usb 6-1: media controller created [ 339.544297][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 339.546673][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.546705][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.546744][ T5878] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 339.546772][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.553881][ T5192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.659871][ T5878] usb 5-1: config 0 descriptor?? [ 339.680877][ T5192] DVB: Unable to find symbol mt352_attach() [ 339.701217][T12832] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 339.701238][T12832] dvb-usb: bulk message failed: -22 (7/0) [ 340.000012][ T5192] DVB: Unable to find symbol nxt6000_attach() [ 340.000030][ T5192] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 340.057597][ T5192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 340.105332][ T5878] koneplus 0003:1E7D:2D51.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 340.111317][ T5192] dvb-usb: schedule remote query interval to 1000 msecs. [ 340.111341][ T5192] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 340.111358][ T5192] dvb-usb: bulk message failed: -22 (7/0) [ 340.111374][ T5192] dvb-usb: bulk message failed: -22 (7/0) [ 340.167481][ T5192] usb 6-1: USB disconnect, device number 14 [ 340.197987][T12864] loop2: detected capacity change from 0 to 7 [ 340.224525][ T5999] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 340.333531][ T5878] koneplus 0003:1E7D:2D51.0013: couldn't init struct koneplus_device [ 340.333586][ T5878] koneplus 0003:1E7D:2D51.0013: couldn't install mouse [ 340.337045][ T5878] koneplus 0003:1E7D:2D51.0013: probe with driver koneplus failed with error -71 [ 340.361612][T12864] Dev loop2: unable to read RDB block 7 [ 340.361667][T12864] loop2: AHDI p2 p3 [ 340.361693][T12864] loop2: partition table partially beyond EOD, truncated [ 340.361800][T12864] loop2: p2 start 13841266 is beyond EOD, truncated [ 340.375378][ T5999] usb 3-1: Using ep0 maxpacket: 16 [ 340.408753][ T5999] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 340.408784][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 340.408803][ T5999] usb 3-1: Product: syz [ 340.408816][ T5999] usb 3-1: Manufacturer: syz [ 340.408829][ T5999] usb 3-1: SerialNumber: syz [ 340.447825][ T5999] usb 3-1: config 0 descriptor?? [ 340.472618][ T5878] usb 5-1: USB disconnect, device number 14 [ 340.567842][ T5192] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 340.733306][ T5999] usb 3-1: USB disconnect, device number 17 [ 341.122000][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 341.659202][T12903] overlayfs: maximum fs stacking depth exceeded [ 342.444816][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 342.533584][ T5878] kernel read not supported for file /input/event2 (pid: 5878 comm: kworker/0:4) [ 342.564745][ T37] audit: type=1326 audit(1765435988.064:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12943 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e685f749 code=0x7ffc0000 [ 342.565409][ T37] audit: type=1326 audit(1765435988.064:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12943 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fd9e685f749 code=0x7ffc0000 [ 342.565727][ T37] audit: type=1326 audit(1765435988.064:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12943 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e685f749 code=0x7ffc0000 [ 343.059460][T12951] syzkaller1: entered promiscuous mode [ 343.059489][T12951] syzkaller1: entered allmulticast mode [ 343.344623][T12959] batadv_slave_1: entered promiscuous mode [ 343.353283][T12958] batadv_slave_1: left promiscuous mode [ 343.526439][T12970] input: syz0 as /devices/virtual/input/input27 [ 344.067529][ T5192] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 344.217023][ T5192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.217057][ T5192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.217095][ T5192] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 344.217117][ T5192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.273620][ T5192] usb 5-1: config 0 descriptor?? [ 344.722304][ T5192] hid_parser_main: 1 callbacks suppressed [ 344.722327][ T5192] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 344.722360][ T5192] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 344.722386][ T5192] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 344.722412][ T5192] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 344.722439][ T5192] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 344.789868][ T5192] playstation 0003:054C:0DF2.0014: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 344.918765][ T5192] playstation 0003:054C:0DF2.0014: Invalid reportID received, expected 9 got 169 [ 344.918809][ T5192] playstation 0003:054C:0DF2.0014: Failed to retrieve DualSense pairing info: -22 [ 344.918863][ T5192] playstation 0003:054C:0DF2.0014: Failed to get MAC address from DualSense [ 344.918881][ T5192] playstation 0003:054C:0DF2.0014: Failed to create dualsense. [ 344.921945][ T5192] playstation 0003:054C:0DF2.0014: probe with driver playstation failed with error -22 [ 345.131989][ T5192] usb 5-1: USB disconnect, device number 15 [ 345.634164][ T37] audit: type=1326 audit(1765435991.124:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13021 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107d95f749 code=0x7fc00000 [ 345.637305][T13051] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2892'. [ 345.698899][ T5122] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 345.701836][ T5122] Bluetooth: hci1: unexpected event for opcode 0x203e [ 346.250897][T13079] input: syz0 as /devices/virtual/input/input28 [ 347.128360][T13093] netlink: 'syz.5.2912': attribute type 12 has an invalid length. [ 347.128384][T13093] netlink: 'syz.5.2912': attribute type 29 has an invalid length. [ 347.128396][T13093] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2912'. [ 348.977981][T13134] speed is unknown, defaulting to 1000 [ 349.020476][T13138] loop2: detected capacity change from 0 to 7 [ 349.021530][T13138] Dev loop2: unable to read RDB block 7 [ 349.021575][T13138] loop2: unable to read partition table [ 349.021792][T13138] loop2: partition table beyond EOD, truncated [ 349.021809][T13138] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 349.744856][ T5122] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 349.745353][ T5122] Bluetooth: hci1: Injecting HCI hardware error event [ 349.752053][ T5820] Bluetooth: hci1: hardware error 0x00 [ 351.996331][ T5820] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 352.020424][ T5999] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 352.187906][ T5999] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 352.187987][ T5999] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.188014][ T5999] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 352.188036][ T5999] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.188080][ T5999] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.188102][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.281693][ T5999] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 352.307549][ T5999] usb 4-1: invalid MIDI out EP 0 [ 352.395965][ T5192] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 352.526288][ T5999] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 352.530746][ T5999] usb 4-1: USB disconnect, device number 24 [ 352.559658][ T5192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.559693][ T5192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.559829][ T5192] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 352.559853][ T5192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.611170][ T5192] usb 6-1: config 0 descriptor?? [ 353.066737][ T5192] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 353.066873][ T5192] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 353.072524][ T5192] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0015/input/input29 [ 353.178607][ T5192] cm6533_jd 0003:0D8C:0022.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 353.293525][ T5878] usb 6-1: USB disconnect, device number 15 [ 353.576234][ T37] audit: type=1326 audit(1765435999.074:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13272 comm="syz.2.2995" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f107d95f749 code=0x0 [ 353.664670][ T5955] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 353.823633][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.823667][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.823757][ T5955] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 353.823780][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.834799][ T5955] usb 5-1: config 0 descriptor?? [ 354.296519][ T5955] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 354.315003][ T5955] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 354.485674][ T5955] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE [ 354.906143][ T5955] cp2112 0003:10C4:EA90.0016: error setting SMBus config [ 354.911820][ T5955] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -71 [ 354.925011][ T5955] usb 5-1: USB disconnect, device number 16 [ 355.231560][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3019'. [ 355.231604][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3019'. [ 355.597093][T13334] vlan2: entered allmulticast mode [ 355.597360][T13334] bridge0: port 3(vlan2) entered blocking state [ 355.597490][T13334] bridge0: port 3(vlan2) entered disabled state [ 355.599945][T13334] vlan2: entered promiscuous mode [ 355.974711][ T5955] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 356.120165][T13346] vivid-004: disconnect [ 356.153256][T13345] vivid-004: reconnect [ 356.157342][ T5955] usb 5-1: unable to get BOS descriptor or descriptor too short [ 356.167977][ T5955] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 356.168011][ T5955] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 356.168034][ T5955] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 19, changing to 4 [ 356.168048][ T5955] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 479, setting to 0 [ 356.168061][ T5955] usb 5-1: config 1 interface 1 has no altsetting 0 [ 356.172167][ T5955] usb 5-1: string descriptor 0 read error: -22 [ 356.172920][ T5955] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.172934][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.251620][T13338] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 356.282181][ T5955] usb 5-1: low speed audio streaming not supported [ 356.505562][ T5955] usb 5-1: USB disconnect, device number 17 [ 356.578547][T13362] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3033'. [ 357.614145][T13385] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3047'. [ 357.703936][T13388] loop8: detected capacity change from 0 to 8 [ 357.719528][T13388] Dev loop8: unable to read RDB block 8 [ 357.719586][T13388] loop8: unable to read partition table [ 357.719815][T13388] loop8: partition table beyond EOD, truncated [ 357.719833][T13388] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 357.872958][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.889865][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.912334][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.931232][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.932083][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.967155][T13397] input: syz1 as /devices/virtual/input/input30 [ 358.139516][T13394] speed is unknown, defaulting to 1000 [ 358.213447][ T5878] kernel write not supported for file /vbi9 (pid: 5878 comm: kworker/0:4) [ 359.306404][ T5999] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 359.331115][T13394] chnl_net:caif_netlink_parms(): no params data found [ 359.460186][ T5999] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.460216][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.556591][ T5999] usb 4-1: config 0 descriptor?? [ 359.571170][ T5999] cp210x 4-1:0.0: cp210x converter detected [ 359.676613][ T5878] kernel read not supported for file 985/task/986/pagemap (pid: 5878 comm: kworker/0:4) [ 359.976319][ T5820] Bluetooth: hci2: command tx timeout [ 359.999601][ T5999] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 360.029439][ T37] audit: type=1326 audit(1765436005.524:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13460 comm="syz.6.3079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45d317f749 code=0x0 [ 360.033227][T13394] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.034016][T13394] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.037782][T13394] bridge_slave_0: entered allmulticast mode [ 360.060985][T13394] bridge_slave_0: entered promiscuous mode [ 360.103791][T13394] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.104135][T13394] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.105530][T13394] bridge_slave_1: entered allmulticast mode [ 360.122266][T13394] bridge_slave_1: entered promiscuous mode [ 360.242111][ T5999] usb 4-1: cp210x converter now attached to ttyUSB0 [ 360.431809][ T805] usb 4-1: USB disconnect, device number 25 [ 360.448751][ T805] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 360.529313][T13394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.532217][T13394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.564697][ T805] cp210x 4-1:0.0: device disconnected [ 360.675689][ T37] audit: type=1326 audit(1765436006.174:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.684797][ T37] audit: type=1326 audit(1765436006.184:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.694484][ T37] audit: type=1326 audit(1765436006.184:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.694532][ T37] audit: type=1326 audit(1765436006.184:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.694568][ T37] audit: type=1326 audit(1765436006.184:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.694607][ T37] audit: type=1326 audit(1765436006.184:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.694647][ T37] audit: type=1326 audit(1765436006.184:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.694686][ T37] audit: type=1326 audit(1765436006.184:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.694722][ T37] audit: type=1326 audit(1765436006.184:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13474 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 360.899038][T13394] team0: Port device team_slave_0 added [ 360.915900][T13394] team0: Port device team_slave_1 added [ 361.186754][T13394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.186772][T13394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.186797][T13394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.194995][T13394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.195012][T13394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.195036][T13394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.587119][T13394] hsr_slave_0: entered promiscuous mode [ 361.588065][T13394] hsr_slave_1: entered promiscuous mode [ 361.588644][T13394] debugfs: 'hsr0' already exists in 'hsr' [ 361.588666][T13394] Cannot create hsr debugfs directory [ 361.634600][ T5878] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 361.815063][ T5878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.815092][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.825043][ T5878] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 361.825071][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 361.825091][ T5878] usb 7-1: SerialNumber: syz [ 362.055063][ T5820] Bluetooth: hci2: command tx timeout [ 362.090435][ T5878] usb 7-1: 0:2 : does not exist [ 362.101659][ T5878] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 362.113850][ T5878] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 362.123348][ T5878] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 362.128710][ T5878] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 362.180073][ T5878] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 362.182822][ T5878] usb 7-1: USB disconnect, device number 10 [ 362.275018][ T805] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 362.427610][ T805] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 362.427658][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.433264][ T805] usb 6-1: config 0 descriptor?? [ 362.458581][ T805] cp210x 6-1:0.0: cp210x converter detected [ 362.595841][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.889235][ T805] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 362.913306][ T805] usb 6-1: cp210x converter now attached to ttyUSB0 [ 363.093399][ T5878] usb 6-1: USB disconnect, device number 16 [ 363.106089][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 363.234742][ T5878] cp210x 6-1:0.0: device disconnected [ 363.268916][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.324377][ T5999] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 363.347420][T13522] syzkaller1: entered promiscuous mode [ 363.347447][T13522] syzkaller1: entered allmulticast mode [ 363.474343][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 363.510729][ T5999] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 363.510759][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.520319][ T5999] usb 4-1: config 0 descriptor?? [ 363.556128][ T5999] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 363.589167][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.610066][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.612775][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.616866][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.622859][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.078902][ T5158] bcm5974 4-1:0.0: could not read from device [ 364.113379][ T5999] usb 4-1: USB disconnect, device number 26 [ 364.134391][ T5820] Bluetooth: hci2: command tx timeout [ 364.179593][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.574986][ T58] bridge0: port 3(netdevsim0) entered disabled state [ 364.672685][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 364.672722][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 364.704521][ T58] bridge0: port 3(netdevsim0) entered disabled state [ 364.779576][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.784371][ T805] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 364.894538][T13531] speed is unknown, defaulting to 1000 [ 364.984340][ T805] usb 6-1: Using ep0 maxpacket: 32 [ 364.993724][ T805] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 364.993752][ T805] usb 6-1: config 0 has no interface number 0 [ 364.993813][ T805] usb 6-1: config 0 interface 12 has no altsetting 0 [ 365.002596][ T805] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 365.002625][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.002644][ T805] usb 6-1: Product: syz [ 365.002657][ T805] usb 6-1: Manufacturer: syz [ 365.002670][ T805] usb 6-1: SerialNumber: syz [ 365.086859][ T805] usb 6-1: config 0 descriptor?? [ 365.734457][ T5820] Bluetooth: hci3: command tx timeout [ 365.973529][T13394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 366.033480][ T58] bridge_slave_1: left allmulticast mode [ 366.033558][ T58] bridge_slave_1: left promiscuous mode [ 366.050408][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.109092][ T805] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 366.109165][ T805] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 366.109183][ T805] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 366.109277][ T805] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 366.144966][ T5999] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 366.149858][ T805] usb 6-1: USB disconnect, device number 17 [ 366.176010][ T58] bridge_slave_0: left allmulticast mode [ 366.176041][ T58] bridge_slave_0: left promiscuous mode [ 366.176303][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.214567][ T5820] Bluetooth: hci2: command tx timeout [ 366.294806][ T5999] usb 7-1: Using ep0 maxpacket: 16 [ 366.302912][ T5999] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.302929][ T5999] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.302939][ T5999] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.344914][ T5999] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.344945][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.344965][ T5999] usb 7-1: Product: syz [ 366.344977][ T5999] usb 7-1: Manufacturer: syz [ 366.344989][ T5999] usb 7-1: SerialNumber: syz [ 366.768900][ T5999] usb 7-1: 0:2 : does not exist [ 367.412645][ T5999] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 367.454924][ T5999] usb 7-1: USB disconnect, device number 11 [ 367.832131][ T5820] Bluetooth: hci3: command tx timeout [ 369.155296][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.226226][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.285137][ T58] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 369.376258][ T58] bond0 (unregistering): Released all slaves [ 369.417321][T13394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.548979][T13394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.636690][ T58] tipc: Disabling bearer [ 369.637361][ T58] tipc: Disabling bearer [ 369.685385][ T58] tipc: Left network mode [ 369.691775][T13599] netlink: 'syz.5.3140': attribute type 1 has an invalid length. [ 369.691801][T13599] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3140'. [ 369.745355][T13394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.894665][ T5820] Bluetooth: hci3: command tx timeout [ 370.526444][T13635] netlink: 292 bytes leftover after parsing attributes in process `syz.5.3152'. [ 370.545605][T13635] netlink: 292 bytes leftover after parsing attributes in process `syz.5.3152'. [ 371.704958][T13666] trusted_key: syz.5.3166 sent an empty control message without MSG_MORE. [ 371.974490][ T5820] Bluetooth: hci3: command tx timeout [ 372.146319][ T1178] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 372.301733][ T58] hsr_slave_0: left promiscuous mode [ 372.334661][ T58] hsr_slave_1: left promiscuous mode [ 372.335710][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.335735][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.387280][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.387310][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.493820][ T58] veth1_macvtap: left promiscuous mode [ 372.493887][ T58] veth0_macvtap: left promiscuous mode [ 372.494121][ T58] veth0_vlan: left promiscuous mode [ 373.071410][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3180'. [ 373.124610][T13702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3180'. [ 373.690942][T13713] vivid-007: disconnect [ 373.701011][T13712] vivid-007: reconnect [ 375.454980][ T58] team0 (unregistering): Port device team_slave_1 removed [ 375.735624][ T58] team0 (unregistering): Port device team_slave_0 removed [ 378.601718][ T13] smc: removing ib device sz1 [ 378.643758][T13695] veth0_virt_wifi: entered promiscuous mode [ 378.659958][ T5878] speed is unknown, defaulting to 1000 [ 378.660001][ T5878] sz1: Port: 1 Link DOWN [ 378.721825][T13720] syzkaller1: entered promiscuous mode [ 378.721851][T13720] syzkaller1: entered allmulticast mode [ 378.779936][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.172991][T13531] chnl_net:caif_netlink_parms(): no params data found [ 379.381513][T13738] loop8: detected capacity change from 0 to 8 [ 379.441044][T13738] Dev loop8: unable to read RDB block 8 [ 379.441088][T13738] loop8: unable to read partition table [ 379.441274][T13738] loop8: partition table beyond EOD, truncated [ 379.441301][T13738] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 381.460744][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.464810][T13531] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.465067][T13531] bridge_slave_0: entered allmulticast mode [ 381.471486][T13531] bridge_slave_0: entered promiscuous mode [ 382.021179][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.021383][T13531] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.021629][T13531] bridge_slave_1: entered allmulticast mode [ 382.032647][T13531] bridge_slave_1: entered promiscuous mode [ 382.444903][T13531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.492302][T13394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.496528][T13531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.727762][T13394] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.833844][ T5892] kernel read not supported for file /vcs (pid: 5892 comm: kworker/1:4) [ 382.945739][T13531] team0: Port device team_slave_0 added [ 382.948504][T13531] team0: Port device team_slave_1 added [ 383.604377][ T5892] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 383.757563][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 383.760091][ T5892] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 383.760118][ T5892] usb 7-1: config 1 has no interface number 0 [ 383.760166][ T5892] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 383.760191][ T5892] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.760215][ T5892] usb 7-1: config 1 interface 105 has no altsetting 0 [ 383.820721][ T5892] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 383.820753][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.820772][ T5892] usb 7-1: Product: syz [ 383.820786][ T5892] usb 7-1: Manufacturer: syz [ 383.820799][ T5892] usb 7-1: SerialNumber: syz [ 383.858921][T13821] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 383.859032][T13821] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 383.904998][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.906529][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.970847][T13818] tun0: tun_chr_ioctl cmd 1074025675 [ 383.970873][T13818] tun0: persist enabled [ 383.970912][T13819] tun0: tun_chr_ioctl cmd 1074025675 [ 383.970925][T13819] tun0: persist disabled [ 383.980572][T13531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.980587][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.980620][T13531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.260310][T13531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.260327][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.260352][T13531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.271033][T13821] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 384.271159][T13821] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 384.453860][T13828] netlink: 408 bytes leftover after parsing attributes in process `syz.3.3231'. [ 384.751624][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.881542][ T5892] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 384.884039][ T5892] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 384.912574][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.912724][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.967936][ T5892] aqc111 7-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 4e:af:19:52:b5:77 [ 384.970211][ T5892] usb 7-1: USB disconnect, device number 12 [ 384.973103][ T5892] aqc111 7-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 385.125333][ T5892] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 385.125489][ T5892] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 385.125637][ T5892] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 385.143853][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.143890][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.143916][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.143942][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.143966][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.143992][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.144017][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.144041][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.144064][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.144087][ T5955] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 385.194355][ T5955] hid-generic 0003:0004:0000.0017: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 385.385005][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.523271][ T5892] kernel write not supported for file bpf-prog (pid: 5892 comm: kworker/1:4) [ 385.568383][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 385.568681][ T37] audit: type=1326 audit(1765436031.064:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc939f749 code=0x7ffc0000 [ 385.568742][ T37] audit: type=1326 audit(1765436031.064:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc939f749 code=0x7ffc0000 [ 385.568855][ T37] audit: type=1326 audit(1765436031.064:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8dc939f749 code=0x7ffc0000 [ 385.569152][ T37] audit: type=1326 audit(1765436031.064:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc939f749 code=0x7ffc0000 [ 385.569453][ T37] audit: type=1326 audit(1765436031.064:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc939f749 code=0x7ffc0000 [ 385.890814][ T5892] IPVS: starting estimator thread 0... [ 385.891004][T13853] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 386.004486][T13855] IPVS: using max 9 ests per chain, 21600 per kthread [ 386.028242][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.096053][T13531] hsr_slave_0: entered promiscuous mode [ 386.097609][T13531] hsr_slave_1: entered promiscuous mode [ 386.098731][T13531] debugfs: 'hsr0' already exists in 'hsr' [ 386.098754][T13531] Cannot create hsr debugfs directory [ 386.164391][ T5878] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 386.328934][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.328969][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.328991][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 386.329032][ T5878] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 386.329054][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.350152][ T5878] usb 4-1: config 0 descriptor?? [ 386.745230][ T58] bond0: (slave netdevsim0): Releasing backup interface [ 386.761429][T13884] 9pnet: p9_errstr2errno: server reported unknown error [ 386.806991][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.884670][ T5878] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 387.147566][ T5892] usb 4-1: USB disconnect, device number 27 [ 387.184390][ T5192] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 387.336826][ T5192] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 387.336859][ T5192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.342621][ T5192] usb 7-1: config 0 descriptor?? [ 387.625520][ T5192] kaweth 7-1:0.0: Firmware present in device. [ 387.808739][ T5192] kaweth 7-1:0.0: Statistics collection: 0 [ 387.808763][ T5192] kaweth 7-1:0.0: Multicast filter limit: 0 [ 387.808778][ T5192] kaweth 7-1:0.0: MTU: 0 [ 387.808791][ T5192] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 387.851145][ T58] vlan2: left promiscuous mode [ 387.851621][ T58] bridge0: port 3(vlan2) entered disabled state [ 387.928027][ T58] bridge_slave_1: left promiscuous mode [ 387.928509][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.995815][ T58] bridge_slave_0: left promiscuous mode [ 387.996072][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.420917][ T5192] kaweth 7-1:0.0: Error setting receive filter [ 388.421202][ T5192] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 388.447092][ T5192] usb 7-1: USB disconnect, device number 13 [ 389.058436][T13919] kernel read not supported for file /eth0 (pid: 13919 comm: syz.6.3267) [ 389.146723][ T37] audit: type=1800 audit(1765436034.554:884): pid=13919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3267" name="eth0" dev="mqueue" ino=23207 res=0 errno=0 [ 390.935085][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.025278][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.083404][ T58] bond0 (unregistering): Released all slaves [ 391.671968][T13531] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 391.711010][T13531] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 391.753502][T13531] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 391.846581][T13394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.855697][T13531] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 392.334463][T13531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.415589][T13531] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.460410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.460624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.529534][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.533459][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.986500][ T6639] bond0: (slave syz_tun): Releasing backup interface [ 393.091776][T13394] veth0_vlan: entered promiscuous mode [ 393.148543][T13394] veth1_vlan: entered promiscuous mode [ 393.329106][T13394] veth0_macvtap: entered promiscuous mode [ 393.355743][T13394] veth1_macvtap: entered promiscuous mode [ 393.400762][T13394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.453268][T13394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.529150][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.535704][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.563676][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.573672][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.617900][T13531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.001499][ T4011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.001520][ T4011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.244989][ T4011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.245011][ T4011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.338144][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.353988][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.362287][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.363722][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.370907][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.554562][T13531] veth0_vlan: entered promiscuous mode [ 394.678918][T13531] veth1_vlan: entered promiscuous mode [ 394.970561][T13531] veth0_macvtap: entered promiscuous mode [ 395.055251][T13531] veth1_macvtap: entered promiscuous mode [ 395.132007][T14035] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3307'. [ 395.346478][T13531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.379387][T13531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.427204][ T4011] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.433343][ T4011] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.470406][ T4011] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.474594][T14016] chnl_net:caif_netlink_parms(): no params data found [ 395.516851][ T4011] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.434626][T14016] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.434786][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.435060][T14016] bridge_slave_0: entered allmulticast mode [ 396.436719][T14016] bridge_slave_0: entered promiscuous mode [ 396.454757][ T5122] Bluetooth: hci0: command tx timeout [ 396.710096][T14016] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.710249][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.710487][T14016] bridge_slave_1: entered allmulticast mode [ 396.737517][T14016] bridge_slave_1: entered promiscuous mode [ 397.012528][T14016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.041775][T14016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.074470][ T4011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.074492][ T4011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.586887][T14016] team0: Port device team_slave_0 added [ 397.611331][T14016] team0: Port device team_slave_1 added [ 397.797004][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.797024][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.000028][T14016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.000046][T14016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.000061][T14016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.050005][T14016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.050017][T14016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.050033][T14016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.163579][T14099] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3332'. [ 398.460301][T14016] hsr_slave_0: entered promiscuous mode [ 398.461804][T14016] hsr_slave_1: entered promiscuous mode [ 398.463496][T14016] debugfs: 'hsr0' already exists in 'hsr' [ 398.463520][T14016] Cannot create hsr debugfs directory [ 398.534992][ T5122] Bluetooth: hci0: command tx timeout [ 398.864799][ T5192] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 399.014520][ T5192] usb 9-1: Using ep0 maxpacket: 16 [ 399.019333][ T5192] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.019360][ T5192] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.031589][ T5192] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.031620][ T5192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.031638][ T5192] usb 9-1: Product: syz [ 399.031651][ T5192] usb 9-1: Manufacturer: syz [ 399.031663][ T5192] usb 9-1: SerialNumber: syz [ 399.363299][ T5192] usb 9-1: 0:2 : does not exist [ 399.382276][ T5192] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 399.445619][ T5192] usb 9-1: USB disconnect, device number 2 [ 399.489919][T14140] tipc: Started in network mode [ 399.489938][T14140] tipc: Node identity -, cluster identity 4711 [ 400.154638][ T5192] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 400.304485][ T5192] usb 6-1: Using ep0 maxpacket: 16 [ 400.323281][ T5192] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 400.323312][ T5192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.331546][T14016] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 400.335842][ T5192] usb 6-1: config 0 descriptor?? [ 400.341278][ T5192] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 400.545651][T14016] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 400.614512][ T5122] Bluetooth: hci0: command tx timeout [ 400.753598][T14016] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 400.882903][T14016] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 400.950679][ T5955] kernel write not supported for file /zero (pid: 5955 comm: kworker/0:7) [ 401.397561][ T5885] usb 6-1: USB disconnect, device number 18 [ 401.436429][T14016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.508903][T14016] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.547201][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.547419][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.610341][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.622405][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.754017][ T37] audit: type=1326 audit(1765436047.244:885): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14197 comm="syz.7.3374" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0df89f749 code=0x0 [ 401.987609][T14206] Invalid argument reading file caps for ./file0 [ 402.384484][ T6295] page_pool_release_retry() stalled pool shutdown: id 62, 1 inflight 60 sec [ 402.431062][T14016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.601144][T14231] sctp: [Deprecated]: syz.5.3385 (pid 14231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.601144][T14231] Use struct sctp_sack_info instead [ 402.683814][ T5885] IPVS: starting estimator thread 0... [ 402.696742][ T5122] Bluetooth: hci0: command tx timeout [ 402.777332][T14236] IPVS: using max 14 ests per chain, 33600 per kthread [ 403.194766][ T3441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 403.686531][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3408'. [ 403.686549][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3408'. [ 403.870308][T14286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.005152][T14016] veth0_vlan: entered promiscuous mode [ 404.090646][T14016] veth1_vlan: entered promiscuous mode [ 404.286623][T14016] veth0_macvtap: entered promiscuous mode [ 404.313558][T14016] veth1_macvtap: entered promiscuous mode [ 404.352185][T14016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.423955][T14016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.478419][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.480462][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.480717][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.480753][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.784398][ T5192] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 404.979676][ T5192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.979710][ T5192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.979733][ T5192] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.979777][ T5192] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.979799][ T5192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.020662][ T5192] usb 6-1: config 0 descriptor?? [ 405.471078][ T5192] hid_parser_main: 23 callbacks suppressed [ 405.471102][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471133][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471161][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471189][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471216][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471242][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471269][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471296][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471323][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.471349][ T5192] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 405.566836][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.566858][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.597930][ T5192] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 405.704071][ T4011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.704092][ T4011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.722632][T14339] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3433'. [ 405.746395][ T5885] usb 6-1: USB disconnect, device number 19 [ 405.813697][T14346] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3435'. [ 405.895467][ T5192] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 406.047743][ T5192] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 406.047777][ T5192] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 406.047821][ T5192] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.047842][ T5192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.054945][T14341] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 406.055063][T14341] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 406.060562][ T5192] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.192477][T14356] usb usb8: usbfs: process 14356 (syz.6.3439) did not claim interface 0 before use [ 406.216528][ T49] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 406.308791][ T5885] hid-generic 0006:0004:0009.001A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 406.335059][ T5885] usb 8-1: USB disconnect, device number 2 [ 406.408750][ T49] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 406.411776][ T49] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.411806][ T49] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 406.411825][ T49] usb 9-1: SerialNumber: syz [ 407.148235][ T49] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 407.295566][T14382] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3450'. [ 407.474942][ T5955] usb 9-1: USB disconnect, device number 3 [ 407.479319][ T5955] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 407.935233][ T49] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 408.089146][ T49] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.089180][ T49] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.089217][ T49] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 408.089238][ T49] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.106423][ T49] usb 10-1: config 0 descriptor?? [ 408.651609][ T49] elan 0003:04F3:0755.001B: failed to start in urb: -90 [ 408.669351][ T49] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 408.915023][ T10] usb 10-1: USB disconnect, device number 2 [ 409.002921][T14418] loop7: detected capacity change from 0 to 16384 [ 409.037286][T14418] loop7: detected capacity change from 16384 to 16383 [ 409.345710][T14429] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 410.525082][ T5999] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 410.584331][ T49] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 410.687520][ T5999] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 410.687550][ T5999] usb 9-1: config 0 has no interface number 0 [ 410.693489][ T5999] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 410.693508][ T5999] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.693519][ T5999] usb 9-1: Product: syz [ 410.693526][ T5999] usb 9-1: Manufacturer: syz [ 410.693533][ T5999] usb 9-1: SerialNumber: syz [ 410.705830][ T5999] usb 9-1: config 0 descriptor?? [ 410.750980][ T5999] usb-storage 9-1:0.20: USB Mass Storage device detected [ 410.795193][ T49] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 410.795212][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.798183][ T49] usb 7-1: config 0 descriptor?? [ 410.841555][ T5999] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 411.189116][ T10] usb 9-1: USB disconnect, device number 4 [ 411.588111][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 411.814401][ T10] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 411.814431][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.814449][ T10] usb 8-1: Product: syz [ 411.814462][ T10] usb 8-1: Manufacturer: syz [ 411.814475][ T10] usb 8-1: SerialNumber: syz [ 411.878292][ T10] usb 8-1: config 0 descriptor?? [ 411.904155][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 412.047933][ T49] usb 7-1: Cannot set autoneg [ 412.048190][ T49] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 412.060990][ T49] usb 7-1: USB disconnect, device number 14 [ 412.243827][T14512] SQUASHFS error: Failed to read block 0x0: -5 [ 413.137907][ T10] usb 8-1: USB disconnect, device number 3 [ 413.671597][T14548] netlink: 'syz.6.3517': attribute type 5 has an invalid length. [ 413.716186][T14548] batman_adv: batadv0: Adding interface: vxlan0 [ 413.716206][T14548] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.716237][T14548] batman_adv: batadv0: Interface activated: vxlan0 [ 413.719239][ T3771] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.811467][ T3771] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.811514][ T3771] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.811534][ T3771] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.679719][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3533'. [ 414.891887][T14593] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3538'. [ 415.504409][ T5999] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 415.624392][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 415.665864][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.665901][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 415.666028][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 415.666051][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.666094][ T5999] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.666117][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.684888][ T5999] usb 6-1: config 0 descriptor?? [ 415.781530][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.781563][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.781597][ T10] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 415.781615][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.837533][ T10] usb 9-1: config 0 descriptor?? [ 416.131518][ T5999] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 416.255689][ T10] hid-led 0003:27B8:01ED.001D: collection stack underflow [ 416.255713][ T10] hid-led 0003:27B8:01ED.001D: item 0 2 0 12 parsing failed [ 416.256311][ T10] hid-led 0003:27B8:01ED.001D: probe with driver hid-led failed with error -22 [ 416.357421][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3555'. [ 416.357443][T14632] bridge: RTM_NEWNEIGH with invalid ether address [ 416.359994][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3555'. [ 416.360015][T14632] bridge: RTM_NEWNEIGH with invalid ether address [ 416.415166][ T5999] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 416.469701][ T5893] usb 9-1: USB disconnect, device number 5 [ 416.581033][ T5999] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.581069][ T5999] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.581093][ T5999] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 416.581115][ T5999] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.581159][ T5999] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.581182][ T5999] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.653192][ T5999] usb 10-1: config 0 descriptor?? [ 416.839392][T14643] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3558'. [ 417.107960][ T5999] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max [ 417.147165][ T5999] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 417.326166][T14655] netlink: 'syz.8.3564': attribute type 25 has an invalid length. [ 417.326192][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3564'. [ 417.380487][ T1178] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.380719][T14655] netlink: 'syz.8.3564': attribute type 25 has an invalid length. [ 417.380737][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3564'. [ 417.394466][ T1178] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.394667][ T1178] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.394703][ T1178] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.493675][ T5893] usb 10-1: USB disconnect, device number 3 [ 417.904338][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 417.955510][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3570'. [ 417.955543][T14668] netlink: 'syz.6.3570': attribute type 1 has an invalid length. [ 417.955556][T14668] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3570'. [ 418.081714][ T10] usb 8-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 418.081747][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.093183][ T10] usb 8-1: config 0 descriptor?? [ 418.113986][ T10] pwc: Creative Labs Webcam Pro Ex detected. [ 418.151534][T14671] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3571'. [ 418.365392][ T5878] usb 6-1: USB disconnect, device number 20 [ 418.575295][ T37] audit: type=1326 audit(1765436064.074:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14680 comm="syz.5.3575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x0 [ 418.718771][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 418.719798][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 418.921695][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 418.922176][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 418.922528][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 418.922854][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 418.923253][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 418.923586][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 418.923917][ T10] pwc: recv_control_msg error -71 req 06 val 0600 [ 418.924529][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 418.925030][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 418.925497][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 418.925963][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 418.926430][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 418.926894][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 418.927665][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 418.928125][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 418.936049][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031f71400: rx timeout, send abort [ 418.939237][ T10] pwc: Registered as video103. [ 418.942808][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input34 [ 418.951353][ T10] usb 8-1: USB disconnect, device number 4 [ 419.434667][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031f73400: rx timeout, send abort [ 419.437358][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031f71400: abort rx timeout. Force session deactivation [ 419.473135][T14707] serio: Serial port ttyS3 [ 419.525611][T14705] block nbd1: server does not support multiple connections per device. [ 419.526518][T14705] block nbd1: shutting down sockets [ 419.934747][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031f73400: abort rx timeout. Force session deactivation [ 420.156868][T14747] input: syz1 as /devices/virtual/input/input35 [ 420.890742][T14773] Bluetooth: MGMT ver 1.23 [ 421.111230][ T37] audit: type=1326 audit(1765436066.604:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 421.141969][ T37] audit: type=1326 audit(1765436066.634:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 421.142634][ T37] audit: type=1326 audit(1765436066.634:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 421.143392][ T37] audit: type=1326 audit(1765436066.634:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 421.145016][ T37] audit: type=1326 audit(1765436066.634:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 421.228547][ T37] audit: type=1326 audit(1765436066.634:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 421.256392][ T37] audit: type=1326 audit(1765436066.754:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 421.264575][ T37] audit: type=1326 audit(1765436066.754:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 421.265142][ T37] audit: type=1326 audit(1765436066.764:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14776 comm="syz.9.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd834a6f749 code=0x7ffc0000 [ 424.112246][T14843] __nla_validate_parse: 1 callbacks suppressed [ 424.112269][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3640'. [ 424.112286][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3640'. [ 424.112312][T14843] netlink: 'syz.9.3640': attribute type 15 has an invalid length. [ 424.182122][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3640'. [ 424.182148][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3640'. [ 424.182172][T14843] netlink: 'syz.9.3640': attribute type 15 has an invalid length. [ 424.228177][ T3484] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 424.228631][ T3484] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 424.228668][ T3484] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 424.228702][ T3484] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 424.974451][ T5885] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 425.160087][ T5885] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 425.160117][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.160137][ T5885] usb 8-1: Product: syz [ 425.160150][ T5885] usb 8-1: Manufacturer: syz [ 425.160165][ T5885] usb 8-1: SerialNumber: syz [ 425.258479][ T5885] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 425.631282][ T10] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 425.857082][T14858] random: crng reseeded on system resumption [ 426.918795][ T49] usb 8-1: USB disconnect, device number 5 [ 427.983020][ T10] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 427.989885][ T10] ath9k_htc: Failed to initialize the device [ 428.057196][ T49] usb 8-1: ath9k_htc: USB layer deinitialized [ 429.780386][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3676'. [ 429.780426][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3676'. [ 429.791571][T14936] geneve2: entered promiscuous mode [ 429.791597][T14936] geneve2: entered allmulticast mode [ 431.290000][T14988] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3702'. [ 432.404789][ T5955] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 432.554376][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 432.565344][ T5955] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 432.565378][ T5955] usb 6-1: config 0 interface 0 has no altsetting 0 [ 432.565412][ T5955] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 432.565434][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.636454][ T5955] usb 6-1: config 0 descriptor?? [ 432.909238][ T5955] usbhid 6-1:0.0: can't add hid device: -71 [ 432.909369][ T5955] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 432.946353][ T5955] usb 6-1: USB disconnect, device number 21 [ 433.525758][ T5892] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 433.674462][ T5893] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 433.674605][ T5892] usb 8-1: Using ep0 maxpacket: 32 [ 433.710647][ T5892] usb 8-1: unable to get BOS descriptor or descriptor too short [ 433.711891][ T5892] usb 8-1: config 8 has an invalid interface number: 191 but max is 0 [ 433.711916][ T5892] usb 8-1: config 8 has no interface number 0 [ 433.711949][ T5892] usb 8-1: config 8 interface 191 has no altsetting 0 [ 433.714118][ T5892] usb 8-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=6e.23 [ 433.714137][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.714147][ T5892] usb 8-1: Product: syz [ 433.714155][ T5892] usb 8-1: Manufacturer: syz [ 433.714162][ T5892] usb 8-1: SerialNumber: syz [ 433.834436][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 433.838784][ T5893] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 433.838812][ T5893] usb 6-1: config 0 has no interface number 0 [ 433.838932][ T5893] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 433.850489][ T5893] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 433.850566][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.850586][ T5893] usb 6-1: Product: syz [ 433.850601][ T5893] usb 6-1: Manufacturer: syz [ 433.850614][ T5893] usb 6-1: SerialNumber: syz [ 433.894445][ T5893] usb 6-1: config 0 descriptor?? [ 433.930746][ T5893] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 433.930784][ T5893] em28xx 6-1:0.132: Video interface 132 found: [ 433.980314][ T5892] gspca_main: spca501-2.14.0 probing 1776:501c [ 433.980900][ T5892] gspca_spca501: reg write: error -71 [ 433.980909][ T5892] spca501 8-1:8.191: Reg write failed for 0x02,0x07,0x05 [ 433.980959][ T5892] spca501 8-1:8.191: probe with driver spca501 failed with error -22 [ 433.987968][ T5892] usb 8-1: USB disconnect, device number 6 [ 434.200228][ T3771] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.330576][ T5893] em28xx 6-1:0.132: chip ID is em2874 [ 435.159409][ T5893] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 435.159441][ T5893] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 435.159486][ T5893] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 435.224368][ T5893] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 435.224399][ T5893] em28xx 6-1:0.132: analog set to bulk mode. [ 435.226041][ T49] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 435.230254][ T5892] em28xx 6-1:0.132: Registering V4L2 extension [ 435.294788][ T5893] usb 6-1: USB disconnect, device number 22 [ 435.303498][ T5893] em28xx 6-1:0.132: Disconnecting em28xx [ 435.397338][ T49] usb 9-1: Using ep0 maxpacket: 32 [ 435.401482][ T49] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 435.401511][ T49] usb 9-1: config 0 has no interface number 0 [ 435.438028][ T49] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 435.438061][ T49] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.438080][ T49] usb 9-1: Product: syz [ 435.438093][ T49] usb 9-1: Manufacturer: syz [ 435.438106][ T49] usb 9-1: SerialNumber: syz [ 435.451255][ T49] usb 9-1: config 0 descriptor?? [ 435.463760][ T49] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 435.638908][T15094] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 435.638937][T15094] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.662648][T15094] vhci_hcd vhci_hcd.0: Device attached [ 435.729878][ T49] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 435.779422][ T49] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 435.934458][ T5955] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 436.004722][ T5192] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 436.104534][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 436.106474][ T5955] usb 7-1: too many configurations: 60, using maximum allowed: 8 [ 436.116015][ T5892] usb 6-1: Decoder not found [ 436.116035][ T5892] em28xx 6-1:0.132: failed to create media graph [ 436.116172][ T5892] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 436.151477][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 436.154475][ T49] usb 9-1: USB disconnect, device number 6 [ 436.198324][ T5955] usb 7-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 436.198355][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 436.198375][ T5955] usb 7-1: Product: syz [ 436.198389][ T5955] usb 7-1: Manufacturer: syz [ 436.198402][ T5955] usb 7-1: SerialNumber: syz [ 436.293810][ T49] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 436.307099][ T5892] em28xx 6-1:0.132: Remote control support is not available for this card. [ 436.307598][ T5893] em28xx 6-1:0.132: Closing input extension [ 436.371524][ T5955] usb 7-1: config 0 descriptor?? [ 436.382715][ T49] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 436.383465][ T49] quatech2 9-1:0.51: device disconnected [ 436.457567][ T5955] pwc: Philips SPC 880NC USB webcam detected. [ 436.564885][T15112] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3752'. [ 436.579097][ T5893] em28xx 6-1:0.132: Freeing device [ 436.609705][T15094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.610055][T15094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.632218][ T5955] pwc: Warning: more than 1 configuration available. [ 436.632722][ T5955] pwc: Failed to set LED on/off time (-71) [ 436.634355][T15095] vhci_hcd: connection closed [ 436.648857][ T5955] pwc: send_video_command error -71 [ 436.648876][ T5955] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 436.648995][ T5955] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 436.660634][ T3718] vhci_hcd vhci_hcd.6: stop threads [ 436.662915][ T3718] vhci_hcd vhci_hcd.6: release socket [ 436.716463][ T5955] usb 7-1: USB disconnect, device number 15 [ 436.760066][ T3718] vhci_hcd vhci_hcd.6: disconnect device [ 437.124460][ T5893] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 437.286779][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 437.291109][ T5893] usb 6-1: config 32 has an invalid interface number: 4 but max is 0 [ 437.291137][ T5893] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 437.291157][ T5893] usb 6-1: config 32 has no interface number 0 [ 437.291202][ T5893] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 437.291225][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.353482][ T5893] hub 6-1:32.4: bad descriptor, ignoring hub [ 437.353507][ T5893] hub 6-1:32.4: probe with driver hub failed with error -5 [ 437.360574][T15137] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 437.826414][T15147] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3766'. [ 438.328231][ T10] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 439.575105][ T31] usb 6-1: USB disconnect, device number 23 [ 440.226990][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.711462][T15207] ceph: No mds server is up or the cluster is laggy [ 440.718798][T15212] ceph: No mds server is up or the cluster is laggy [ 441.530992][T15245] netlink: 'syz.6.3788': attribute type 1 has an invalid length. [ 441.531015][T15245] netlink: 'syz.6.3788': attribute type 4 has an invalid length. [ 441.531029][T15245] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3788'. [ 441.885834][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 441.885852][ T37] audit: type=1326 audit(1765436087.374:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15247 comm="syz.7.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0df89f749 code=0x7fc00000 [ 442.499299][ T37] audit: type=1326 audit(1765436087.994:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15247 comm="syz.7.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0df83b829 code=0x7fc00000 [ 443.077010][ T37] audit: type=1326 audit(1765436088.574:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.7.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0df89f749 code=0x7ffc0000 [ 443.078105][ T37] audit: type=1326 audit(1765436088.574:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.7.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc0df89f749 code=0x7ffc0000 [ 443.078903][ T37] audit: type=1326 audit(1765436088.574:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.7.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0df89f749 code=0x7ffc0000 [ 443.079047][ T37] audit: type=1326 audit(1765436088.574:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.7.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0df89f749 code=0x7ffc0000 [ 443.079199][ T37] audit: type=1326 audit(1765436088.574:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.7.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0df89f749 code=0x7ffc0000 [ 443.079366][ T37] audit: type=1326 audit(1765436088.574:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.7.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0df89f749 code=0x7ffc0000 [ 443.079964][ T37] audit: type=1326 audit(1765436088.574:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.7.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc0df89f749 code=0x7ffc0000 [ 443.080304][ T37] audit: type=1326 audit(1765436088.574:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.7.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc0df89f749 code=0x7ffc0000 [ 443.336604][T15297] netlink: 'syz.9.3812': attribute type 12 has an invalid length. [ 443.336628][T15297] netlink: 'syz.9.3812': attribute type 29 has an invalid length. [ 443.336638][T15297] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3812'. [ 443.336654][T15297] netlink: 'syz.9.3812': attribute type 1 has an invalid length. [ 443.336661][T15297] netlink: 47 bytes leftover after parsing attributes in process `syz.9.3812'. [ 443.791134][T15326] syz_tun: entered allmulticast mode [ 443.828547][T15323] syz_tun: left allmulticast mode [ 444.851439][T15374] netlink: 'syz.5.3844': attribute type 4 has an invalid length. [ 444.903275][T15375] netlink: 'syz.5.3844': attribute type 4 has an invalid length. [ 445.521536][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3855'. [ 445.521561][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3855'. [ 445.789869][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3855'. [ 445.789895][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3855'. [ 446.464586][ T5885] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 446.624380][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 446.626700][ T5885] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 446.626726][ T5885] usb 9-1: config 0 has no interface number 0 [ 446.629263][ T5885] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 446.629293][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.629313][ T5885] usb 9-1: Product: syz [ 446.629334][ T5885] usb 9-1: Manufacturer: syz [ 446.629349][ T5885] usb 9-1: SerialNumber: syz [ 446.634494][ T5878] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 446.708408][ T5885] usb 9-1: config 0 descriptor?? [ 446.788867][ T5878] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.789009][ T5878] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.789038][ T5878] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 446.789089][ T5878] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.791867][ T5878] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.791956][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.791977][ T5878] usb 10-1: Product: syz [ 446.791991][ T5878] usb 10-1: Manufacturer: syz [ 446.792005][ T5878] usb 10-1: SerialNumber: syz [ 446.912015][ T5885] uvcvideo 9-1:0.31: probe with driver uvcvideo failed with error -22 [ 446.912700][T15426] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 446.933126][ T5878] cdc_mbim 10-1:1.0: skipping garbage [ 446.942966][ T5885] usb 9-1: USB disconnect, device number 7 [ 446.974390][ T5955] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 446.981046][T15437] Invalid ELF header magic: != ELF [ 446.987190][ T5192] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 447.148419][ T5955] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 447.148505][ T5955] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 447.148545][ T5955] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 447.148567][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.160329][ T5192] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 447.160364][ T5192] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 447.160402][ T5192] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 447.160424][ T5192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.217335][T15434] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 447.233523][ T5192] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.273913][T15432] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 447.326806][ T5955] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.476504][ T5192] usb 7-1: USB disconnect, device number 16 [ 447.624161][ T5955] usb 8-1: USB disconnect, device number 7 [ 447.933971][ T5878] cdc_mbim 10-1:1.0: bind() failure [ 447.950024][ T5878] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 447.950152][ T5878] cdc_ncm 10-1:1.1: bind() failure [ 447.989361][ T5878] usb 10-1: USB disconnect, device number 4 [ 448.486915][T15452] input: syz1 as /devices/virtual/input/input36 [ 449.076502][ T31] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 449.241629][ T31] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 449.241657][ T31] usb 10-1: config 0 has no interface number 0 [ 449.250175][ T31] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 449.250203][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.250222][ T31] usb 10-1: Product: syz [ 449.250236][ T31] usb 10-1: Manufacturer: syz [ 449.250250][ T31] usb 10-1: SerialNumber: syz [ 449.315561][ T31] usb 10-1: config 0 descriptor?? [ 449.739157][ T31] usb 10-1: Firmware: major: 216, minor: 96, hardware type: UNKNOWN (94) [ 449.942285][ T31] usb 10-1: Read permanent extended address c2:ce:42:f0:c0:55:23:8e from device [ 449.942312][ T31] usb 10-1: atusb_probe: initialization failed, error = -524 [ 449.942564][ T31] atusb 10-1:0.128: probe with driver atusb failed with error -524 [ 450.196535][ T31] usb 10-1: USB disconnect, device number 5 [ 451.284410][ T115] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 451.458888][ T115] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 451.458920][ T115] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.458938][ T115] usb 10-1: Product: syz [ 451.458950][ T115] usb 10-1: Manufacturer: syz [ 451.458962][ T115] usb 10-1: SerialNumber: syz [ 451.469494][ T115] usb 10-1: config 0 descriptor?? [ 451.509816][ T115] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 451.923505][ T5955] hid_parser_main: 8 callbacks suppressed [ 451.923529][ T5955] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 451.923561][ T5955] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 451.923851][ T5955] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x3 [ 451.975524][ T5955] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 452.537310][T15558] netlink: 'syz.5.3923': attribute type 1 has an invalid length. [ 452.537332][T15558] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3923'. [ 452.810461][ T115] gspca_stk1135: reg_w 0xd err -71 [ 452.811525][ T115] gspca_stk1135: serial bus timeout: status=0x00 [ 452.811536][ T115] gspca_stk1135: Sensor write failed [ 452.811566][ T115] gspca_stk1135: serial bus timeout: status=0x00 [ 452.811575][ T115] gspca_stk1135: Sensor write failed [ 452.811605][ T115] gspca_stk1135: serial bus timeout: status=0x00 [ 452.811613][ T115] gspca_stk1135: Sensor read failed [ 452.811642][ T115] gspca_stk1135: serial bus timeout: status=0x00 [ 452.811652][ T115] gspca_stk1135: Sensor read failed [ 452.811658][ T115] gspca_stk1135: Detected sensor type unknown (0x0) [ 452.811696][ T115] gspca_stk1135: serial bus timeout: status=0x00 [ 452.811706][ T115] gspca_stk1135: Sensor read failed [ 452.811735][ T115] gspca_stk1135: serial bus timeout: status=0x00 [ 452.811744][ T115] gspca_stk1135: Sensor read failed [ 452.811773][ T115] gspca_stk1135: serial bus timeout: status=0x00 [ 452.811781][ T115] gspca_stk1135: Sensor write failed [ 452.811810][ T115] gspca_stk1135: serial bus timeout: status=0x00 [ 452.811818][ T115] gspca_stk1135: Sensor write failed [ 452.811908][ T115] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 452.826730][ T115] usb 10-1: USB disconnect, device number 6 [ 452.877503][T15567] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 453.230169][T15578] Bluetooth: MGMT ver 1.23 [ 454.338301][T15619] FAT-fs (loop19): unable to read boot sector [ 456.169381][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 456.169400][ T37] audit: type=1326 audit(1765436101.654:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15679 comm="syz.5.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 456.169698][ T37] audit: type=1326 audit(1765436101.664:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15679 comm="syz.5.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 456.169984][ T37] audit: type=1326 audit(1765436101.664:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15679 comm="syz.5.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 456.170470][ T37] audit: type=1326 audit(1765436101.664:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15679 comm="syz.5.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 456.170745][ T37] audit: type=1326 audit(1765436101.664:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15679 comm="syz.5.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 456.171009][ T37] audit: type=1326 audit(1765436101.664:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15679 comm="syz.5.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 456.339449][ T37] audit: type=1326 audit(1765436101.834:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15679 comm="syz.5.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 456.339587][ T37] audit: type=1326 audit(1765436101.834:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15679 comm="syz.5.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26399af749 code=0x7ffc0000 [ 456.428492][T15683] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 457.474370][ T49] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 457.626289][ T49] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.626321][ T49] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.626343][ T49] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.626384][ T49] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.626407][ T49] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.697122][ T49] usb 10-1: config 0 descriptor?? [ 458.187241][ T49] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 458.731991][T15736] block nbd5: shutting down sockets [ 460.454377][ C0] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967292. macoff=76 [ 460.652601][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4008'. [ 460.652642][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4008'. [ 460.717366][ T49] usb 10-1: USB disconnect, device number 7 [ 462.447285][ T5892] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 462.646601][ T5892] usb 10-1: Using ep0 maxpacket: 16 [ 462.650617][ T5892] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.650646][ T5892] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.683445][ T5892] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.683474][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.683493][ T5892] usb 10-1: Product: syz [ 462.683505][ T5892] usb 10-1: Manufacturer: syz [ 462.683518][ T5892] usb 10-1: SerialNumber: syz [ 462.704284][T15800] netlink: 'syz.8.4026': attribute type 1 has an invalid length. [ 462.877838][T15800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.964719][ T5892] usb 10-1: 0:2 : does not exist [ 462.971620][ T5892] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 462.998235][T15802] bond1: (slave geneve2): making interface the new active one [ 463.015103][T15802] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 463.049121][ T5892] usb 10-1: USB disconnect, device number 8 [ 465.237773][ T3905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 465.523026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 465.581667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 465.581934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 466.072214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 467.325303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 467.326735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 467.378399][T15890] veth0: entered promiscuous mode [ 467.379732][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4063'. [ 467.449357][ T5878] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 467.624382][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 467.689159][ T5878] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.689189][ T5878] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.702981][ T5878] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 467.703014][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.703033][ T5878] usb 7-1: Product: syz [ 467.703046][ T5878] usb 7-1: Manufacturer: syz [ 467.703059][ T5878] usb 7-1: SerialNumber: syz [ 467.710256][ T5878] usb 7-1: config 0 descriptor?? [ 468.289688][ T5878] usb 7-1: USB disconnect, device number 17 [ 468.659455][T15908] kernel read not supported for file /cpuacct.usage_percpu (pid: 15908 comm: syz.9.4069) [ 468.665799][ T37] audit: type=1800 audit(1765436114.164:919): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.4069" name="cpuacct.usage_percpu" dev="mqueue" ino=53656 res=0 errno=0 [ 469.534534][T15921] batadv_slave_1: entered promiscuous mode [ 469.541278][T15920] batadv_slave_1: left promiscuous mode [ 472.384916][T15999] pim6reg: entered allmulticast mode [ 472.388994][T15999] pim6reg: left allmulticast mode [ 473.465000][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4123'. [ 473.465017][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4123'. [ 474.494047][T16045] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.052756][T16068] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 477.059749][ T37] audit: type=1326 audit(1765436122.554:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16089 comm="syz.6.4145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45d317f749 code=0x0 [ 478.133894][ T37] audit: type=1326 audit(1765436123.624:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16103 comm="syz.7.4151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0df89f749 code=0x0 [ 479.066954][T16126] fuse: Bad value for 'fd' [ 479.067067][T16124] loop2: detected capacity change from 0 to 7 [ 479.074722][T16124] Dev loop2: unable to read RDB block 7 [ 479.074756][T16124] loop2: AHDI p1 p2 p3 [ 479.074782][T16124] loop2: partition table partially beyond EOD, truncated [ 479.074882][T16124] loop2: p1 start 1818582900 is beyond EOD, truncated [ 479.074899][T16124] loop2: p3 start 335544320 is beyond EOD, truncated [ 481.158303][T16187] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4183'. [ 481.635763][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4189'. [ 481.635791][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4189'. [ 482.228991][T16210] 9p: Bad value for 'wfdno' [ 482.354038][T16214] tc_dump_action: action bad kind [ 482.714362][ T5999] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 482.869472][ T5999] usb 10-1: Using ep0 maxpacket: 8 [ 482.897381][ T5999] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 482.897412][ T5999] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.897432][ T5999] usb 10-1: Product: syz [ 482.897446][ T5999] usb 10-1: Manufacturer: syz [ 482.897459][ T5999] usb 10-1: SerialNumber: syz [ 482.902997][ T5999] usb 10-1: config 0 descriptor?? [ 483.111350][ T5999] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 483.265054][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 484.157604][ T5999] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 484.182910][ T5999] usb 10-1: USB disconnect, device number 9 [ 484.565521][T16247] netlink: 'syz.6.4209': attribute type 3 has an invalid length. [ 484.876974][T16261] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 485.098826][ T3905] wlan1: Trigger new scan to find an IBSS to join [ 486.036367][T16281] netlink: 'syz.5.4220': attribute type 1 has an invalid length. [ 486.381802][T16283] bond3: (slave geneve3): making interface the new active one [ 486.418504][T16283] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 486.418623][ T3441] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 486.433903][ T3441] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 486.433951][ T3441] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 486.433985][ T3441] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 486.836420][T16302] fuse: Bad value for 'fd' [ 488.374404][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 488.824372][ T5892] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 488.984354][ T5892] usb 8-1: Using ep0 maxpacket: 16 [ 488.986683][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.986714][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.986767][ T5892] usb 8-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 488.986789][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.036072][ T5892] usb 8-1: config 0 descriptor?? [ 489.531074][ T5892] logitech-hidpp-device 0003:046D:C091.0021: hidraw0: USB HID v0.00 Device [HID 046d:c091] on usb-dummy_hcd.7-1/input0 [ 489.703051][ T5955] usb 8-1: USB disconnect, device number 8 [ 490.058564][ T3745] wlan1: Trigger new scan to find an IBSS to join [ 491.061484][ T43] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 491.112956][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4264'. [ 492.923663][T16445] loop2: detected capacity change from 0 to 7 [ 492.938499][T16445] Dev loop2: unable to read RDB block 7 [ 492.938535][T16445] loop2: AHDI p1 p2 p3 [ 492.938567][T16445] loop2: partition table partially beyond EOD, truncated [ 492.938676][T16445] loop2: p1 start 1818582900 is beyond EOD, truncated [ 492.938694][T16445] loop2: p3 start 335544320 is beyond EOD, truncated [ 493.264378][ T49] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 493.428879][ T49] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 493.428909][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.428919][ T49] usb 7-1: Product: syz [ 493.428927][ T49] usb 7-1: Manufacturer: syz [ 493.428935][ T49] usb 7-1: SerialNumber: syz [ 493.432443][ T49] usb 7-1: config 0 descriptor?? [ 493.437758][ T49] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 494.226096][T16474] netlink: 'syz.7.4299': attribute type 1 has an invalid length. [ 494.226118][T16474] netlink: 'syz.7.4299': attribute type 3 has an invalid length. [ 494.226131][T16474] netlink: 'syz.7.4299': attribute type 2 has an invalid length. [ 494.226143][T16474] netlink: 'syz.7.4299': attribute type 3 has an invalid length. [ 494.226155][T16474] netlink: 184 bytes leftover after parsing attributes in process `syz.7.4299'. [ 494.300116][T16472] fuse: root generation should be zero [ 494.516680][T16479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1704510192 (54544326144 ns) > initial count (4198303776 ns). Using initial count to start timer. [ 494.634354][ T115] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 494.786619][ T115] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.786652][ T115] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 494.786677][ T115] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 494.786701][ T115] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.786741][ T115] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.786762][ T115] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.861211][ T115] usb 8-1: config 0 descriptor?? [ 494.862351][T16477] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 494.885434][ T49] gspca_sunplus: reg_r err -71 [ 494.885594][ T49] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 494.900884][ T49] usb 7-1: USB disconnect, device number 18 [ 495.296148][ T115] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 495.358836][ T115] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 495.603920][ T115] usb 8-1: USB disconnect, device number 9 [ 497.204531][ T5955] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 497.361537][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.361572][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.361625][ T5955] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.361666][ T5955] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.361688][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.436402][ T5955] usb 8-1: config 0 descriptor?? [ 497.703704][T16542] pimreg: entered allmulticast mode [ 497.715223][T16548] pimreg: left allmulticast mode [ 497.872520][ T5955] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 498.964377][ T5955] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 499.164568][ T5955] usb 7-1: Using ep0 maxpacket: 8 [ 499.207410][ T5955] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.207471][ T5955] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 499.207495][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.211610][ T5955] usb 7-1: config 0 descriptor?? [ 499.271866][ T5955] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 499.883207][ T115] usb 8-1: USB disconnect, device number 10 [ 500.416141][T16606] input: syz0 as /devices/virtual/input/input38 [ 500.477504][T16609] syz_tun: entered allmulticast mode [ 500.499756][T16603] syz_tun: left allmulticast mode [ 500.690236][ T5955] gspca_vc032x: reg_w err -71 [ 500.690329][ T5955] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 500.693244][ T5955] usb 7-1: USB disconnect, device number 19 [ 500.786026][T16621] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4349'. [ 501.659949][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.935336][T16670] Bluetooth: hci0: unsupported parameter 178 [ 501.935359][T16670] Bluetooth: hci0: invalid len left 3, exp >= 100 [ 502.214502][ T49] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 502.394493][ T49] usb 8-1: Using ep0 maxpacket: 16 [ 502.406266][ T49] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 502.406295][ T49] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.416773][ T49] usb 8-1: config 0 descriptor?? [ 502.429703][ T49] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 502.520148][T16686] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4375'. [ 502.520323][T16686] netlink: 'syz.6.4375': attribute type 7 has an invalid length. [ 502.520339][T16686] netlink: 'syz.6.4375': attribute type 8 has an invalid length. [ 502.520621][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4375'. [ 503.884599][ T49] gspca_sonixj: i2c_w8 err -71 [ 503.904445][ T49] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 503.909253][ T49] usb 8-1: USB disconnect, device number 11 [ 505.862762][T16766] overlayfs: failed to clone lowerpath [ 505.974113][T16772] netlink: 'syz.6.4409': attribute type 12 has an invalid length. [ 507.280342][T16806] ALSA: seq fatal error: cannot create timer (-22) [ 507.459802][ T5999] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 507.649714][ T5999] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 507.653256][ T5999] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 507.653285][ T5999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.653305][ T5999] usb 8-1: Product: syz [ 507.653318][ T5999] usb 8-1: Manufacturer: syz [ 507.653331][ T5999] usb 8-1: SerialNumber: syz [ 507.693480][ T5999] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 508.025355][T16813] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4426'. [ 508.025533][T16813] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4426'. [ 508.206809][ T5999] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 509.824404][ T49] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 509.975014][ T49] usb 10-1: Using ep0 maxpacket: 32 [ 509.977436][ T49] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 509.977462][ T49] usb 10-1: config 0 has no interface number 0 [ 509.977508][ T49] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.977534][ T49] usb 10-1: config 0 interface 85 has no altsetting 0 [ 509.982173][ T49] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 509.982190][ T49] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.982200][ T49] usb 10-1: Product: syz [ 509.982208][ T49] usb 10-1: Manufacturer: syz [ 509.982215][ T49] usb 10-1: SerialNumber: syz [ 510.080808][ T49] usb 10-1: config 0 descriptor?? [ 510.697422][ T49] appletouch 10-1:0.85: Geyser mode initialized. [ 510.699481][ T49] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input39 [ 511.035866][ T5999] usb 8-1: USB disconnect, device number 12 [ 511.064381][ T49] usb 10-1: USB disconnect, device number 10 [ 511.146761][ T49] appletouch 10-1:0.85: input: appletouch disconnected [ 512.057399][T16911] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4465'. [ 512.273193][T16914] netlink: 'syz.6.4467': attribute type 1 has an invalid length. [ 512.337230][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4467'. [ 512.447548][T16914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.758050][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4480'. [ 513.820443][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4480'. [ 514.998655][T16969] overlayfs: failed to clone upperpath [ 515.646385][T16919] bond1 (unregistering): Released all slaves [ 516.293141][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4498'. [ 516.293166][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4498'. [ 516.605442][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4503'. [ 516.605478][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4503'. [ 517.217427][T17016] input: syz0 as /devices/virtual/input/input40 [ 517.465066][ T5885] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 517.559647][T17031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 517.624495][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.624524][ T5885] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 517.624577][ T5885] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 517.624599][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.630093][ T5885] usb 6-1: config 0 descriptor?? [ 517.640182][ T5885] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 517.640237][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 517.660710][ T5885] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 517.661662][ T5885] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 517.661716][ T5885] usb 6-1: media controller created [ 517.676893][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.702159][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 517.702330][ T5885] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 517.712423][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 517.718968][ T5885] dvb-usb: schedule remote query interval to 150 msecs. [ 517.718990][ T5885] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 517.885635][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 517.885694][ T5885] dvb-usb: error while querying for an remote control event. [ 518.044455][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 518.044487][ T5885] dvb-usb: error while querying for an remote control event. [ 518.204430][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 518.204463][ T5885] dvb-usb: error while querying for an remote control event. [ 518.213800][ T5893] usb 6-1: USB disconnect, device number 24 [ 518.310065][ T5893] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 518.357821][T17052] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.4524'. [ 518.357837][T17052] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4524'. [ 518.458330][ T5885] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 518.604416][ T5885] usb 10-1: Using ep0 maxpacket: 32 [ 518.606762][ T5885] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 518.606787][ T5885] usb 10-1: config 0 has no interface number 0 [ 518.606836][ T5885] usb 10-1: config 0 interface 89 has no altsetting 0 [ 518.611033][ T5885] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 518.611060][ T5885] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.611079][ T5885] usb 10-1: Product: syz [ 518.611093][ T5885] usb 10-1: Manufacturer: syz [ 518.611106][ T5885] usb 10-1: SerialNumber: syz [ 518.617805][ T5885] usb 10-1: config 0 descriptor?? [ 518.623940][ T5885] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 518.624047][ T5885] em28xx 10-1:0.89: Video interface 89 found: bulk [ 519.212131][ T37] audit: type=1326 audit(1765436164.704:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.212701][ T37] audit: type=1326 audit(1765436164.704:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.265673][ T5885] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 519.281014][ T37] audit: type=1326 audit(1765436164.774:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.281853][ T37] audit: type=1326 audit(1765436164.774:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.282754][ T37] audit: type=1326 audit(1765436164.774:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.299616][ T37] audit: type=1326 audit(1765436164.774:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.299722][ T37] audit: type=1326 audit(1765436164.794:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.299762][ T37] audit: type=1326 audit(1765436164.794:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.299799][ T37] audit: type=1326 audit(1765436164.794:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.301018][ T37] audit: type=1326 audit(1765436164.794:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17069 comm="syz.8.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f18943ef749 code=0x7ffc0000 [ 519.899667][ T5885] em28xx 10-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 519.899699][ T5885] em28xx 10-1:0.89: board has no eeprom [ 519.964357][ T5885] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 519.964386][ T5885] em28xx 10-1:0.89: analog set to bulk mode. [ 519.964729][ T115] em28xx 10-1:0.89: Registering V4L2 extension [ 519.979406][ T5885] usb 10-1: USB disconnect, device number 11 [ 519.991242][ T5885] em28xx 10-1:0.89: Disconnecting em28xx [ 520.076349][ T115] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 520.076364][ T115] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 520.076372][ T115] em28xx 10-1:0.89: No AC97 audio processor [ 520.078620][ T115] usb 10-1: Decoder not found [ 520.078635][ T115] em28xx 10-1:0.89: failed to create media graph [ 520.078663][ T115] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 520.080753][ T115] em28xx 10-1:0.89: Registering snapshot button... [ 520.103197][ T115] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input42 [ 520.180180][ T115] em28xx 10-1:0.89: Remote control support is not available for this card. [ 520.194441][ T5885] em28xx 10-1:0.89: Closing input extension [ 520.201351][ T5885] em28xx 10-1:0.89: Deregistering snapshot button [ 520.554618][T17088] evm: overlay not supported [ 521.137690][ T3651] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 521.593813][ T5885] em28xx 10-1:0.89: Freeing device [ 522.190760][T17123] block nbd9: NBD_DISCONNECT [ 524.039937][T17153] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 524.224035][ T5122] Bluetooth: hci0: command 0x0406 tx timeout [ 525.341222][T17169] loop2: detected capacity change from 0 to 7 [ 525.350578][T17169] Dev loop2: unable to read RDB block 7 [ 525.350630][T17169] loop2: unable to read partition table [ 525.350850][T17169] loop2: partition table beyond EOD, truncated [ 525.350867][T17169] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 526.565484][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4575'. [ 528.044553][ T5825] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 528.194610][ T5825] usb 10-1: Using ep0 maxpacket: 8 [ 528.201007][ T5825] usb 10-1: config 0 has no interfaces? [ 528.206261][ T5825] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=94.07 [ 528.206293][ T5825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.206311][ T5825] usb 10-1: Product: syz [ 528.206325][ T5825] usb 10-1: Manufacturer: syz [ 528.206338][ T5825] usb 10-1: SerialNumber: syz [ 528.215800][ T5825] usb 10-1: config 0 descriptor?? [ 529.074273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 529.078329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 530.515859][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.567451][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.587079][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.591373][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.592629][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.785983][ T5893] usb 10-1: USB disconnect, device number 12 [ 530.933650][T17263] loop2: detected capacity change from 0 to 7 [ 530.941536][T17263] Dev loop2: unable to read RDB block 7 [ 530.941585][T17263] loop2: unable to read partition table [ 530.941774][T17263] loop2: partition table beyond EOD, truncated [ 530.941792][T17263] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 531.296862][T17257] chnl_net:caif_netlink_parms(): no params data found [ 531.314360][ T58] unregister_netdevice: waiting for sit0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 531.359274][ T5955] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 531.549119][ T5955] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.549148][ T5955] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.553047][ T5955] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 531.553084][ T5955] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 531.553104][ T5955] usb 10-1: SerialNumber: syz [ 532.615176][ T5820] Bluetooth: hci4: command tx timeout [ 535.360997][ T5955] usb 10-1: 0:2 : does not exist [ 535.436029][ T5955] usb 10-1: USB disconnect, device number 13 [ 536.134797][ T5955] page_pool_release_retry() stalled pool shutdown: id 93, 1 inflight 60 sec