last executing test programs: 8.344849128s ago: executing program 4 (id=2793): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x4804) 8.140520174s ago: executing program 4 (id=2797): getpid() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r0, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 7.986139337s ago: executing program 4 (id=2802): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$midi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.540572601s ago: executing program 4 (id=2811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x20040044) 6.531972582s ago: executing program 4 (id=2828): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(r0, 0x0, 0x8202) 6.253011954s ago: executing program 4 (id=2832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xd4597, 0x2a2e3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.634015406s ago: executing program 2 (id=2842): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) writev(r7, &(0x7f00000005c0)=[{&(0x7f00000004c0)='F', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 5.615162037s ago: executing program 1 (id=2843): symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 5.436497995s ago: executing program 1 (id=2844): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) 5.272643906s ago: executing program 1 (id=2848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 5.026104919s ago: executing program 1 (id=2852): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=[{0x10, 0x1, 0x51}], 0x10}}], 0x1, 0x20000081) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f000086c000/0x3000)=nil, &(0x7f0000a71000/0x2000)=nil, &(0x7f0000e7f000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000d47000/0x1000)=nil, &(0x7f0000df9000/0x1000)=nil, &(0x7f0000fd3000/0x1000)=nil, &(0x7f0000000200)="a840b230b59195eb70c8e8857d040057596c3f05db0afc61256d6bf73ed231aa7cae465416af8432efc7b3ccdf88c30015e565fc6f8e912387ecbae56f1476ddc9bed81ed190e83f0412041ef0af444ae864ee4fad57d8ea38477bbc8bb25ee105b4056029a0fa0c4d146d88b7faaac0884a6171d2d116be5caaa2c66e50f4e6379390eb02a5624acacca0547fa8ae65dace62571f31644515b08e63c9498317a3262953", 0xa4, r1}, 0x68) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_io_uring_setup(0x239, 0x0, &(0x7f00000000c0), &(0x7f0000000340)) select(0x40, &(0x7f0000000680)={0x7, 0x800, 0x80, 0x6, 0xfffffffffffffffb, 0x34, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0x1, 0xac, 0xed6f, 0xe21}, &(0x7f0000000740)={0x0, 0xea60}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000080)) 4.219971132s ago: executing program 2 (id=2857): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) 4.139509126s ago: executing program 0 (id=2858): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x30884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x58, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f00000001c0)=0x1, 0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 4.137821165s ago: executing program 1 (id=2859): socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xfc, {"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", 0x1000}}, 0x1006) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000280)='./file1\x00') ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 4.050865601s ago: executing program 3 (id=2860): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x800, 0x1b4) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000a80)=[{0x0}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 3.908195809s ago: executing program 2 (id=2861): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r4 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r3}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_enter(r4, 0x1d2d, 0x8890, 0x0, 0x0, 0x0) 2.284746673s ago: executing program 3 (id=2862): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000500)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) syz_io_uring_setup(0x5c3, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.153934329s ago: executing program 2 (id=2863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0x8}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r5}]}, 0x40}}, 0x40040d0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) 1.576215854s ago: executing program 3 (id=2864): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 1.480147815s ago: executing program 3 (id=2865): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @random="3481c669c6d4", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "440101", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x6, 0x0, [@mcast1]}]}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.268865855s ago: executing program 3 (id=2866): r0 = socket$packet(0x11, 0x3, 0x300) accept4(r0, 0x0, 0x0, 0x1800) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655", 0x28, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 970.353047ms ago: executing program 0 (id=2867): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf5, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000"], 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) 839.850996ms ago: executing program 0 (id=2868): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 721.222582ms ago: executing program 0 (id=2869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x3, {[@generic={0x2, 0x4, "a47d"}]}}}}}}}}, 0x0) 697.345876ms ago: executing program 0 (id=2870): r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) 570.500362ms ago: executing program 3 (id=2871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f00000000c0)) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000140), 0x200, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) 565.645931ms ago: executing program 0 (id=2872): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x10, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x45040, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_by_handle_at(r1, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300fb, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x830200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) 477.669845ms ago: executing program 2 (id=2873): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000120"], 0x48}}, 0x0) 356.83186ms ago: executing program 2 (id=2874): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000006, 0x100010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000140)={'team_slave_0\x00', @random="0200ac7f7f00"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000180)=""/131, 0x83) 0s ago: executing program 1 (id=2875): syz_usb_connect(0x6, 0x24, &(0x7f00000025c0)={{0x12, 0x1, 0x300, 0x8d, 0xe7, 0xd2, 0x20, 0x83a, 0xc522, 0xa53c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x9e, 0x4, 0x0, 0x49, 0x9c, 0xed, 0xff}}]}}]}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d6, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffa, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x4000000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) kernel console output (not intermixed with test programs): T9602] tipc: Enabled bearer , priority 0 [ 207.167805][ T9600] tipc: Resetting bearer [ 207.249653][ T9600] tipc: Disabling bearer [ 207.287510][ T9610] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1410'. [ 208.543361][ T9643] netlink: 'syz.4.1424': attribute type 4 has an invalid length. [ 208.612666][ T9645] netlink: 'syz.1.1425': attribute type 13 has an invalid length. [ 208.645934][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 208.674589][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 208.706636][ T9645] tipc: Enabled bearer , priority 0 [ 209.317689][ T9662] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1432'. [ 209.327661][ T9661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.824828][ T9673] netlink: 'syz.1.1436': attribute type 4 has an invalid length. [ 209.835509][ T5908] tipc: Node number set to 3718835917 [ 209.951204][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'. [ 210.081909][ T9679] netlink: 'syz.3.1439': attribute type 13 has an invalid length. [ 210.107037][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 210.132753][ T9684] syzkaller0: entered promiscuous mode [ 210.138365][ T9684] syzkaller0: entered allmulticast mode [ 210.176810][ T9679] tipc: Enabled bearer , priority 0 [ 210.188723][ T9678] tipc: Resetting bearer [ 210.280364][ T9678] tipc: Disabling bearer [ 210.430898][ T9697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 211.424318][ T9707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1449'. [ 211.445124][ T9706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.526175][ T5927] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.704051][ T9713] binder: 9710:9713 ioctl c0306201 2000000003c0 returned -14 [ 211.713879][ T5927] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 211.733705][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.752614][ T5927] usb 4-1: config 0 descriptor?? [ 211.784177][ T5927] cp210x 4-1:0.0: cp210x converter detected [ 211.821925][ T9715] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1453'. [ 211.925997][ T797] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.051810][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'. [ 212.086346][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 212.094240][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.123266][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.172837][ T797] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 212.195349][ T5927] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 212.207626][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.234273][ T797] usb 1-1: config 0 descriptor?? [ 212.253031][ T5927] usb 4-1: cp210x converter now attached to ttyUSB0 [ 212.422890][ T5927] usb 4-1: USB disconnect, device number 10 [ 212.457133][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.701160][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 212.701174][ T30] audit: type=1326 audit(1770446486.774:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 212.762332][ T5927] cp210x 4-1:0.0: device disconnected [ 212.762439][ T30] audit: type=1326 audit(1770446486.774:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 212.813616][ T30] audit: type=1326 audit(1770446486.774:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 212.838918][ T9749] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 212.882235][ T30] audit: type=1326 audit(1770446486.774:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 212.911543][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 212.932031][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 212.933693][ T30] audit: type=1326 audit(1770446486.774:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 212.964785][ T30] audit: type=1326 audit(1770446486.774:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 212.991441][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 212.991918][ T30] audit: type=1326 audit(1770446486.774:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 213.005517][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 213.030031][ T30] audit: type=1326 audit(1770446486.774:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 213.031701][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1469'. [ 213.053279][ T30] audit: type=1326 audit(1770446486.774:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 213.083925][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 213.095680][ T30] audit: type=1326 audit(1770446486.774:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb37d9aeb9 code=0x7ffc0000 [ 213.136767][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 213.144211][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 213.182568][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 213.199917][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 213.225679][ T797] apple 0003:05AC:024B.0009: unknown main item tag 0x0 [ 213.248513][ T797] apple 0003:05AC:024B.0009: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 213.285831][ T797] usb 1-1: USB disconnect, device number 9 [ 213.442142][ T9756] fido_id[9756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 213.848456][ T9773] capability: warning: `syz.1.1478' uses 32-bit capabilities (legacy support in use) [ 214.047097][ T9778] __nla_validate_parse: 2 callbacks suppressed [ 214.047113][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 214.325860][ T9783] netlink: 'syz.3.1475': attribute type 4 has an invalid length. [ 214.935524][ T9791] loop5: detected capacity change from 0 to 7 [ 214.970471][ T5832] Dev loop5: unable to read RDB block 7 [ 214.996189][ T5832] loop5: AHDI p1 p2 [ 215.000138][ T5832] loop5: partition table partially beyond EOD, truncated [ 215.033657][ T5832] loop5: p1 size 150995456 extends beyond EOD, truncated [ 215.075029][ T9791] Dev loop5: unable to read RDB block 7 [ 215.080958][ T9791] loop5: AHDI p1 p2 [ 215.126583][ T9791] loop5: partition table partially beyond EOD, truncated [ 215.148819][ T9791] loop5: p1 size 150995456 extends beyond EOD, truncated [ 215.409628][ T5832] udevd[5832]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 215.480354][ T5832] udevd[5832]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 215.635717][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1491'. [ 215.726314][ T9815] No such timeout policy "syz1" [ 215.908060][ T9817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.828282][ T9824] netlink: 'syz.0.1494': attribute type 4 has an invalid length. [ 217.570684][ T9837] program syz.0.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.701028][ T9845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1503'. [ 218.450934][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'. [ 218.885067][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'. [ 219.068112][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1516'. [ 219.334947][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 219.334965][ T30] audit: type=1326 audit(1770446493.624:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 219.745539][ T30] audit: type=1326 audit(1770446493.654:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 219.865678][ T30] audit: type=1326 audit(1770446493.674:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 219.978887][ T30] audit: type=1326 audit(1770446493.674:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 220.085512][ T30] audit: type=1326 audit(1770446493.674:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 220.159062][ T30] audit: type=1326 audit(1770446493.674:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 220.250017][ T30] audit: type=1326 audit(1770446493.754:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 220.303619][ T30] audit: type=1326 audit(1770446493.754:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 220.362420][ T30] audit: type=1326 audit(1770446493.754:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 220.392929][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 220.410949][ T30] audit: type=1326 audit(1770446493.764:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 220.441094][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1528'. [ 221.028002][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1537'. [ 221.079138][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'. [ 221.113574][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 221.679010][ T797] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 221.838080][ T797] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 221.847049][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.890354][ T797] usb 2-1: config 0 has no interfaces? [ 221.908936][ T797] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 221.928125][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 221.930141][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.985970][ T797] usb 2-1: config 0 descriptor?? [ 222.768635][ T9981] netlink: 'syz.4.1555': attribute type 4 has an invalid length. [ 222.815851][ T9981] netlink: 'syz.4.1555': attribute type 4 has an invalid length. [ 222.906131][ T9987] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1558'. [ 223.140078][ T9997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.014634][T10019] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1572'. [ 224.182249][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.226353][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 224.270365][T10035] bond0: (slave syz_tun): Releasing backup interface [ 224.281105][T10035] bond0: (slave dummy0): Releasing backup interface [ 224.295118][T10035] bridge_slave_0: left allmulticast mode [ 224.301276][T10035] bridge_slave_0: left promiscuous mode [ 224.308476][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.324108][T10035] bridge_slave_1: left allmulticast mode [ 224.335620][T10035] bridge_slave_1: left promiscuous mode [ 224.344894][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.359027][T10035] bond0: (slave bond_slave_0): Releasing backup interface [ 224.371310][T10035] bond0: (slave bond_slave_1): Releasing backup interface [ 224.392304][T10035] team0: Port device team_slave_0 removed [ 224.408942][T10035] team0: Port device team_slave_1 removed [ 224.415291][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.423435][T10035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.434749][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.443078][T10035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.451835][T10035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.513788][ T981] usb 2-1: USB disconnect, device number 7 [ 224.753842][T10045] netlink: 'syz.3.1584': attribute type 13 has an invalid length. [ 224.806000][T10045] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1584'. [ 225.108383][T10045] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 225.117452][T10045] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 225.130165][T10045] tipc: Enabled bearer , priority 0 [ 225.701996][T10060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.935638][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'. [ 226.245330][T10073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.868431][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 226.868447][ T30] audit: type=1326 audit(1770446501.164:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 226.964053][ T30] audit: type=1326 audit(1770446501.204:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 227.034632][ T30] audit: type=1326 audit(1770446501.204:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 227.165713][ T30] audit: type=1326 audit(1770446501.204:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 227.832852][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 227.864658][ T30] audit: type=1326 audit(1770446501.204:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 227.972930][ T30] audit: type=1326 audit(1770446501.214:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 228.045793][ T30] audit: type=1326 audit(1770446501.214:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 228.135541][ T30] audit: type=1326 audit(1770446501.214:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ef9aeb9 code=0x7ffc0000 [ 228.264071][T10104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.770848][T10112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.399576][T10122] dummy0: Caught tx_queue_len zero misconfig [ 230.015349][T10136] fuse: Bad value for 'fd' [ 230.075587][T10138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.195017][T10144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.281961][T10154] lo: Caught tx_queue_len zero misconfig [ 230.699480][T10173] fuse: Bad value for 'fd' [ 232.633948][ T30] audit: type=1326 audit(1770446506.924:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 232.744953][ T30] audit: type=1326 audit(1770446506.924:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 232.821528][ T30] audit: type=1326 audit(1770446506.924:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 232.914689][ T30] audit: type=1326 audit(1770446506.924:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 232.993513][ T30] audit: type=1326 audit(1770446506.924:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 233.094740][ T30] audit: type=1326 audit(1770446506.924:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 233.177983][ T30] audit: type=1326 audit(1770446506.924:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 233.254498][ T30] audit: type=1326 audit(1770446506.924:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 233.342877][ T30] audit: type=1326 audit(1770446506.924:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 233.422298][ T30] audit: type=1326 audit(1770446506.924:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 233.993976][T10208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.235099][T10211] fuse: Bad value for 'fd' [ 234.302427][T10212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.726655][T10243] netlink: 'syz.2.1657': attribute type 13 has an invalid length. [ 235.734532][T10243] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1657'. [ 235.796680][T10243] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 235.815224][T10243] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 235.843125][T10243] tipc: Enabled bearer , priority 0 [ 236.060593][T10252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.350987][T10258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.836722][ T43] tipc: Node number set to 2060085604 [ 236.859906][T10276] netlink: 'syz.0.1670': attribute type 13 has an invalid length. [ 236.871108][T10276] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1670'. [ 236.895912][T10276] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 236.908992][T10276] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 236.948669][T10276] tipc: Enabled bearer , priority 0 [ 237.103049][T10288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.636668][ T30] kauditd_printk_skb: 1107 callbacks suppressed [ 237.636685][ T30] audit: type=1326 audit(1770446511.934:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 237.715517][ T30] audit: type=1326 audit(1770446511.964:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 237.775667][ T30] audit: type=1326 audit(1770446511.964:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 237.835592][ T30] audit: type=1326 audit(1770446511.964:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 237.895612][ T30] audit: type=1326 audit(1770446511.964:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 237.955506][ T30] audit: type=1326 audit(1770446511.964:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 238.015195][ T30] audit: type=1326 audit(1770446511.964:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 238.076421][ T30] audit: type=1326 audit(1770446511.964:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 238.108102][T10304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.135561][ T30] audit: type=1326 audit(1770446511.964:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 238.205595][ T30] audit: type=1326 audit(1770446511.964:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d3d53c2d9 code=0x7ffc0000 [ 238.219662][T10310] sch_tbf: peakrate 511 is lower than or equals to rate 16149960914006595198 ! [ 238.767535][T10325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.109709][T10349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1702'. [ 240.156440][T10348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.173113][T10350] netlink: 'syz.0.1698': attribute type 4 has an invalid length. [ 240.799588][T10374] netlink: 'syz.1.1712': attribute type 13 has an invalid length. [ 240.810341][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1712'. [ 240.839538][T10374] tipc: Enabling of bearer rejected, already enabled [ 241.550618][T10401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1723'. [ 241.573012][T10400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.707974][T10408] program syz.3.1725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.917254][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 241.997014][ T5833] Bluetooth: hci2: unexpected event for opcode 0x200b [ 242.087911][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.105647][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.129614][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.165371][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.184880][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.197296][ T10] usb 1-1: Product: syz [ 242.201494][ T10] usb 1-1: Manufacturer: syz [ 242.217340][ T10] usb 1-1: SerialNumber: syz [ 242.236236][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 242.250189][ T10] cdc_ncm 1-1:1.0: bind() failure [ 242.445344][ T10] usb 1-1: USB disconnect, device number 10 [ 242.852438][T10467] binder: 10466:10467 ioctl c0306201 0 returned -14 [ 242.950884][T10473] netlink: 'syz.2.1749': attribute type 13 has an invalid length. [ 242.972902][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1749'. [ 243.012932][T10473] tipc: Enabling of bearer rejected, already enabled [ 243.054557][T10476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1750'. [ 243.082319][T10475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.708609][T10537] netlink: 'syz.2.1763': attribute type 13 has an invalid length. [ 244.716650][T10537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1763'. [ 244.746500][T10537] tipc: Enabling of bearer rejected, already enabled [ 245.029836][T10549] program syz.0.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.151617][T10552] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1771'. [ 245.872420][T10572] netlink: 'syz.4.1776': attribute type 13 has an invalid length. [ 245.896954][T10572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1776'. [ 245.957093][T10572] tipc: Enabling of bearer rejected, already enabled [ 246.171446][T10582] kvm: pic: non byte read [ 246.179476][T10582] kvm: pic: single mode not supported [ 246.179495][T10582] kvm: pic: level sensitive irq not supported [ 246.185102][T10582] kvm: pic: non byte read [ 246.197089][T10582] kvm: pic: non byte read [ 246.201868][T10582] kvm: pic: non byte read [ 246.209596][T10581] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 246.218237][T10582] kvm: pic: non byte read [ 246.238463][T10582] kvm: pic: single mode not supported [ 246.238531][T10582] kvm: pic: non byte read [ 246.276920][T10582] kvm: pic: level sensitive irq not supported [ 246.276987][T10582] kvm: pic: non byte read [ 246.312909][T10582] kvm: pic: single mode not supported [ 246.312929][T10582] kvm: pic: level sensitive irq not supported [ 246.331377][T10582] kvm: pic: non byte read [ 246.375869][T10582] kvm: pic: non byte read [ 246.646103][ T30] kauditd_printk_skb: 2159 callbacks suppressed [ 246.646120][ T30] audit: type=1326 audit(1770446520.944:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7079aeb9 code=0x7ffc0000 [ 246.680659][ T30] audit: type=1326 audit(1770446520.944:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7079aeb9 code=0x7ffc0000 [ 246.703652][ T30] audit: type=1326 audit(1770446520.944:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4d7079aeb9 code=0x7ffc0000 [ 246.745651][ T30] audit: type=1326 audit(1770446520.954:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 246.768907][ T30] audit: type=1326 audit(1770446520.954:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 246.794608][ T30] audit: type=1326 audit(1770446520.954:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 246.900778][ T30] audit: type=1326 audit(1770446520.954:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 246.963853][ T30] audit: type=1326 audit(1770446520.954:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 246.999066][ T30] audit: type=1326 audit(1770446520.954:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 247.034920][ T30] audit: type=1326 audit(1770446520.954:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d7073c2d9 code=0x7ffc0000 [ 249.833526][T10643] netlink: 'syz.3.1804': attribute type 10 has an invalid length. [ 249.905547][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.400556][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1809'. [ 250.518725][T10668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.300596][T10702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.525806][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 251.684360][T10709] sctp: [Deprecated]: syz.0.1828 (pid 10709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.684360][T10709] Use struct sctp_sack_info instead [ 251.701396][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 251.714232][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 251.740554][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 251.771782][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.790929][ T9] usb 5-1: Product: syz [ 251.858646][ T9] usb 5-1: Manufacturer: syz [ 251.863647][ T9] usb 5-1: SerialNumber: syz [ 251.875344][ T9] usb 5-1: config 0 descriptor?? [ 251.887590][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 252.234344][T10723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.516942][ T981] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 252.522966][ T9] gspca_zc3xx: reg_w_i err -71 [ 252.756454][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 252.764737][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 252.777268][ T981] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 252.786423][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.794874][ T981] usb 1-1: Product: syz [ 252.799325][ T981] usb 1-1: Manufacturer: syz [ 252.804021][ T981] usb 1-1: SerialNumber: syz [ 252.811567][ T981] usb 1-1: config 0 descriptor?? [ 252.821104][ T981] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 252.846591][ T981] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 253.126047][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 253.132541][ T9] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 253.158941][ T9] usb 5-1: USB disconnect, device number 7 [ 253.329295][T10738] netlink: 'syz.3.1839': attribute type 4 has an invalid length. [ 253.437144][ T981] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 253.887009][ T981] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 253.917814][ T981] em28xx 1-1:0.0: board has no eeprom [ 254.034163][T10758] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 254.104897][T10758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.131175][T10761] veth3: entered promiscuous mode [ 254.141104][T10761] bond1: (slave veth3): Enslaving as an active interface with a down link [ 254.222909][ T981] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 254.237546][ T981] em28xx 1-1:0.0: dvb set to bulk mode. [ 254.251058][ T43] em28xx 1-1:0.0: Binding DVB extension [ 254.320795][ T981] usb 1-1: USB disconnect, device number 11 [ 254.346532][ T981] em28xx 1-1:0.0: Disconnecting em28xx [ 254.441410][ T43] em28xx 1-1:0.0: Registering input extension [ 254.469858][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.480012][ T981] em28xx 1-1:0.0: Closing input extension [ 254.516237][ T981] em28xx 1-1:0.0: Freeing device [ 254.788077][T10781] netlink: 'syz.0.1853': attribute type 4 has an invalid length. [ 255.247576][T10796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.661405][T10805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1862'. [ 255.690459][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697055][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.079063][T10813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.467908][T10809] netlink: 'syz.4.1864': attribute type 4 has an invalid length. [ 257.556215][T10864] batman_adv: batadv0: Adding interface: dummy0 [ 257.613368][T10864] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.666447][T10864] batman_adv: batadv0: Interface activated: dummy0 [ 258.379012][T10873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.737684][ T30] kauditd_printk_skb: 2892 callbacks suppressed [ 258.737700][ T30] audit: type=1326 audit(1770446533.024:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.005798][ T30] audit: type=1326 audit(1770446533.024:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.204857][ T30] audit: type=1326 audit(1770446533.024:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.277464][ T30] audit: type=1326 audit(1770446533.024:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.327396][ T30] audit: type=1326 audit(1770446533.024:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.395473][ T30] audit: type=1326 audit(1770446533.024:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.511110][ T30] audit: type=1326 audit(1770446533.024:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.539165][T10880] program syz.3.1891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.584198][T10882] dvmrp6: entered allmulticast mode [ 259.606053][ T30] audit: type=1326 audit(1770446533.024:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.671646][ T30] audit: type=1326 audit(1770446533.024:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.704512][ T30] audit: type=1326 audit(1770446533.024:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7faf6299aeb9 code=0x7ffc0000 [ 259.902595][T10901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.025566][ T981] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 260.176696][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 260.183416][ T981] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.193720][ T981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.207224][ T981] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.216360][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.224355][ T981] usb 4-1: Product: syz [ 260.228696][ T981] usb 4-1: Manufacturer: syz [ 260.233296][ T981] usb 4-1: SerialNumber: syz [ 260.255518][ T5825] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 260.405538][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 260.412415][ T5825] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 260.420695][ T5825] usb 2-1: config 0 has no interface number 0 [ 260.427011][ T5825] usb 2-1: config 0 interface 182 has no altsetting 0 [ 260.436286][ T5825] usb 2-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 260.451404][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.462941][ T981] usb 4-1: 0:2 : does not exist [ 260.468939][ T5825] usb 2-1: Product: syz [ 260.473437][ T5825] usb 2-1: Manufacturer: syz [ 260.478907][ T5825] usb 2-1: SerialNumber: syz [ 260.487700][ T981] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 260.501069][ T5825] usb 2-1: config 0 descriptor?? [ 260.522286][ T5825] hub 2-1:0.182: bad descriptor, ignoring hub [ 260.538758][ T981] usb 4-1: USB disconnect, device number 11 [ 260.545574][ T5825] hub 2-1:0.182: probe with driver hub failed with error -5 [ 260.591568][T10410] udevd[10410]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.736466][ T5825] kaweth 2-1:0.182: Firmware present in device. [ 260.921680][ T5825] kaweth 2-1:0.182: Statistics collection: 0 [ 260.927946][ T5825] kaweth 2-1:0.182: Multicast filter limit: 0 [ 260.934036][ T5825] kaweth 2-1:0.182: MTU: 0 [ 260.942320][ T5825] kaweth 2-1:0.182: Read MAC address 00:00:00:00:00:00 [ 261.091516][T10926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1912'. [ 261.415108][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 261.442799][T10933] erspan0: entered promiscuous mode [ 261.456632][T10933] macvtap1: entered promiscuous mode [ 261.462209][T10933] macvtap1: entered allmulticast mode [ 261.486526][T10933] erspan0: entered allmulticast mode [ 261.487230][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 261.552180][T10936] erspan0: left allmulticast mode [ 261.557811][ T5825] kaweth 2-1:0.182: kaweth interface created at eth1 [ 261.576161][T10936] erspan0: left promiscuous mode [ 261.836791][ T5825] usb 2-1: USB disconnect, device number 8 [ 262.869166][T10976] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1923'. [ 263.615671][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 263.654498][T11001] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1932'. [ 263.792725][T11010] lo: Caught tx_queue_len zero misconfig [ 263.798684][T11010] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1933'. [ 263.900555][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.985145][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 264.011583][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 264.107340][T11013] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1936'. [ 264.150557][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.182391][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.360773][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.405649][ T5825] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 264.558944][ T43] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 264.580006][T11024] udevd[11024]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.655498][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 264.667249][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.681568][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.703758][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 264.735560][ T5825] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 264.754592][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.783107][ T5825] usb 4-1: config 0 descriptor?? [ 264.893002][T11034] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 264.920503][T11034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.931149][T11034] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 264.942384][T11032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1943'. [ 265.140392][T11045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1949'. [ 265.240511][ T5825] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000A/input/input20 [ 265.335726][ T5825] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000A/input/input21 [ 265.469449][ T5825] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 265.490920][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1955'. [ 265.800011][ T5825] usb 4-1: USB disconnect, device number 12 [ 266.402080][ T9] usb 5-1: USB disconnect, device number 8 [ 266.470069][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1962'. [ 266.744181][T11095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.811167][T11096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1968'. [ 266.847396][T11094] kvm: pic: single mode not supported [ 266.850392][T11094] kvm: pic: single mode not supported [ 266.985902][T11094] kvm: pic: single mode not supported [ 267.014090][T11094] kvm: pic: single mode not supported [ 267.019829][T11094] kvm: pic: level sensitive irq not supported [ 268.315564][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 268.406059][ T981] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 268.566923][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 268.579448][ T9] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 268.588836][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.619393][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 268.632806][ T981] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 268.648552][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.648555][ T9] usb 2-1: Product: syz [ 268.648575][ T981] usb 3-1: Product: syz [ 268.665371][ T981] usb 3-1: Manufacturer: syz [ 268.670160][ T981] usb 3-1: SerialNumber: syz [ 268.683574][ T981] usb 3-1: config 0 descriptor?? [ 268.693874][ T981] hub 3-1:0.0: bad descriptor, ignoring hub [ 268.702232][ T981] hub 3-1:0.0: probe with driver hub failed with error -5 [ 268.710609][ T981] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 268.728926][ T9] usb 2-1: Manufacturer: syz [ 268.733551][ T9] usb 2-1: SerialNumber: syz [ 268.775094][ T9] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 268.858752][T11149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.105191][ T981] gspca_vc032x: reg_w err -71 [ 269.110454][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.124559][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.141066][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.169103][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.181642][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.198091][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.218546][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.243580][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.263513][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.283448][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.314115][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.329359][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.349630][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.354946][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.390877][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.393973][ T9] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 269.401012][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.453841][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.476322][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.481650][ T981] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.504530][ T9] usb 2-1: USB disconnect, device number 9 [ 269.541120][ T981] gspca_vc032x: Unknown sensor... [ 269.559920][ T981] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 269.648089][ T981] usb 3-1: USB disconnect, device number 10 [ 270.326024][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 270.495624][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 270.613400][T11197] fuse: Bad value for 'fd' [ 270.977093][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 270.987417][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.092516][ T9] usb 5-1: Product: syz [ 271.123141][ T9] usb 5-1: Manufacturer: syz [ 271.158878][ T9] usb 5-1: SerialNumber: syz [ 271.181356][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 271.237650][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 271.531800][T11206] netlink: 'syz.1.2015': attribute type 13 has an invalid length. [ 271.579813][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2015'. [ 271.640246][T11206] tipc: Enabling of bearer rejected, already enabled [ 271.704826][ T5908] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 272.577923][ T5908] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 272.735466][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 272.751743][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.763713][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.819585][ T5908] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.829023][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.842272][ T5908] usb 5-1: Product: syz [ 272.852301][ T5908] usb 5-1: Manufacturer: syz [ 272.862135][ T5908] usb 5-1: SerialNumber: syz [ 273.092089][ T5908] usb 5-1: 0:2 : does not exist [ 273.111632][ T5908] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 273.125673][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 273.165035][ T5908] usb 5-1: USB disconnect, device number 10 [ 273.264958][T10410] udevd[10410]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.297370][ T9] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 273.355351][ T9] usb 2-1: config 7 has no interface number 0 [ 273.378753][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 273.392347][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.408246][ T9] usb 2-1: Product: syz [ 273.421982][ T9] usb 2-1: Manufacturer: syz [ 273.437023][ T9] usb 2-1: SerialNumber: syz [ 273.684674][ T9] as10x_usb: device has been detected [ 273.703733][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 273.731684][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 273.755852][ T5825] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 273.787123][ T9] as10x_usb: error during firmware upload part1 [ 273.804482][ T9] Registered device Elgato EyeTV DTT Deluxe [ 273.812337][ T9] usb 2-1: USB disconnect, device number 10 [ 273.855300][T11233] netlink: 'syz.4.2027': attribute type 13 has an invalid length. [ 273.871135][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 273.873292][ T9] as10x_usb: device has been disconnected [ 273.884404][T11233] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2027'. [ 274.225507][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 274.231308][ T5825] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 274.246466][ T5825] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 274.250906][T11233] tipc: Enabling of bearer rejected, already enabled [ 274.255669][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.274247][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.304760][ T5825] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 274.317585][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.332417][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.349572][ T5825] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 274.358958][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.370294][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.380917][ T5825] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 274.391100][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.401724][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.434358][ T5825] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 274.453589][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.480138][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.506673][ T5825] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 274.525436][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.547314][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.567396][ T5825] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 274.576881][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.591802][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.604992][ T5825] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 274.614363][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.624827][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.637675][ T5825] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.647722][ T5825] usb 1-1: New USB device strings: Mfr=62, Product=56, SerialNumber=29 [ 274.656378][ T5825] usb 1-1: Product: syz [ 274.660772][ T5825] usb 1-1: Manufacturer: syz [ 274.666151][ T5825] usb 1-1: SerialNumber: syz [ 274.725529][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 274.889554][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 274.890266][ T5825] usb 1-1: 0:2 : does not exist [ 274.909352][ T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 274.921728][ T9] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 274.931035][ T9] usb 2-1: config 0 has no interface number 0 [ 274.939849][ T9] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.951827][ T5825] usb 1-1: USB disconnect, device number 12 [ 274.966957][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.998272][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 275.011921][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 275.024639][ T9] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 275.033244][ T9] usb 2-1: Product: syz [ 275.037724][ T9] usb 2-1: Manufacturer: syz [ 275.062382][ T9] usb 2-1: config 0 descriptor?? [ 275.491157][ T9] usb 2-1: USB disconnect, device number 11 [ 275.622974][T11260] ALSA: mixer_oss: invalid OSS volume '' [ 275.760503][T11266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.432986][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2050'. [ 276.775785][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 276.937439][ T9] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 276.956442][ T9] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 276.982267][ T9] usb 4-1: config 171 has no interface number 0 [ 277.025572][ T9] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 277.049990][ T9] usb 4-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 277.285331][ T5908] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.301990][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 277.311502][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.319741][ T9] usb 4-1: Product: syz [ 277.324162][ T9] usb 4-1: Manufacturer: syz [ 277.328854][ T9] usb 4-1: SerialNumber: syz [ 277.343199][T11299] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.425502][ T797] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 277.455344][ T5908] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 277.468295][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.477164][ T5908] usb 5-1: Product: syz [ 277.481516][ T5908] usb 5-1: Manufacturer: syz [ 277.486191][T11314] program syz.1.2061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.486496][ T5908] usb 5-1: SerialNumber: syz [ 277.505202][ T5908] usb 5-1: config 0 descriptor?? [ 277.514289][ T5908] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 277.562985][ T9] ath6kl: Failed to submit usb control message: -71 [ 277.577209][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 277.594150][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 277.602513][ T797] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 277.612888][ T9] ath6kl: Unable to send get target info: -71 [ 277.631764][ T797] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 277.646256][ T9] ath6kl: Failed to init ath6kl core: -71 [ 277.667796][ T9] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 277.676808][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.698802][ T797] usb 1-1: Product: syz [ 277.713273][ T797] usb 1-1: Manufacturer: syz [ 277.718774][ T9] usb 4-1: USB disconnect, device number 13 [ 277.735565][ T797] usb 1-1: SerialNumber: syz [ 277.761305][ T797] usb 1-1: config 0 descriptor?? [ 277.789201][ T797] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 277.947417][ T5908] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 278.153609][ T5908] usb 5-1: USB disconnect, device number 11 [ 278.990247][ T797] gspca_zc3xx: reg_w_i err -71 [ 279.396914][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 279.438342][T11347] macvtap1: entered promiscuous mode [ 279.454893][T11347] team0: entered promiscuous mode [ 279.460242][T11347] macvtap1: entered allmulticast mode [ 279.478759][T11347] team0: entered allmulticast mode [ 279.485052][T11347] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 279.513551][T11348] team0: left allmulticast mode [ 279.533543][T11348] team0: left promiscuous mode [ 279.605607][ T797] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 279.615599][ T797] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 279.649113][ T797] usb 1-1: USB disconnect, device number 13 [ 279.775983][T11364] loop5: detected capacity change from 0 to 7 [ 279.811181][T11364] Dev loop5: unable to read RDB block 7 [ 279.830625][T11364] loop5: unable to read partition table [ 279.835506][ T981] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 279.862315][T11364] loop5: partition table beyond EOD, truncated [ 279.887531][T11364] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.305555][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 280.316236][ T981] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 280.324635][ T981] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 280.335068][ T981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 280.354370][ T981] usb 3-1: config 1 has no interface number 0 [ 280.375942][ T981] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.450262][ T981] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 280.519800][ T981] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 280.537522][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.631556][ T981] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 280.809833][ T981] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 281.301329][ T5825] usb 3-1: USB disconnect, device number 11 [ 281.310382][ T5825] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 282.072619][T11414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.722384][T11427] netlink: zone id is out of range [ 283.110718][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2105'. [ 283.537541][T11430] netlink: 'syz.3.2104': attribute type 4 has an invalid length. [ 283.767704][T11450] netlink: set zone limit has 4 unknown bytes [ 285.758276][T11488] bond0: Caught tx_queue_len zero misconfig [ 286.058490][T11497] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 286.170504][T11483] netlink: 'syz.4.2124': attribute type 4 has an invalid length. [ 286.550314][T11513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.842010][T11581] program syz.3.2159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.738132][T11613] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 290.901919][T11613] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 291.940544][T11629] loop8: detected capacity change from 0 to 7 [ 291.970596][T10410] Dev loop8: unable to read RDB block 7 [ 291.977886][T10410] loop8: unable to read partition table [ 291.998273][T10410] loop8: partition table beyond EOD, truncated [ 292.153684][T11629] Dev loop8: unable to read RDB block 7 [ 292.181045][T11629] loop8: unable to read partition table [ 292.206168][T11629] loop8: partition table beyond EOD, truncated [ 292.270114][T11629] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 293.055959][ T797] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 293.215965][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 293.224887][ T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.235725][ T797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.250322][ T797] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.262017][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.512489][ T797] usb 2-1: Product: syz [ 293.517151][ T797] usb 2-1: Manufacturer: syz [ 293.521948][ T797] usb 2-1: SerialNumber: syz [ 293.740167][ T797] usb 2-1: 0:2 : does not exist [ 293.762695][ T797] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 293.813468][ T797] usb 2-1: USB disconnect, device number 12 [ 293.892066][T10410] udevd[10410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.986642][ T5927] IPVS: starting estimator thread 0... [ 294.095198][T11690] IPVS: using max 34 ests per chain, 81600 per kthread [ 294.335633][ T5833] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 294.339079][ T5824] Bluetooth: hci1: unexpected event for opcode 0x200d [ 294.810063][T11732] batadv_slave_0: Caught tx_queue_len zero misconfig [ 295.140159][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'. [ 295.675736][ T5927] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 295.837873][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 295.844386][ T5927] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 295.854399][ T5927] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 295.871456][ T5927] usb 4-1: config 0 has no interface number 0 [ 295.889162][ T5927] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 295.899146][ T5927] usb 4-1: config 0 has no interface number 0 [ 295.921088][ T5927] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 295.930231][ T5927] usb 4-1: config 0 has no interface number 0 [ 295.941354][ T5927] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 295.952283][ T5927] usb 4-1: config 0 has no interface number 0 [ 295.996033][ T5927] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 296.035336][ T5927] usb 4-1: config 0 has no interface number 0 [ 296.049413][ T5927] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 296.108651][ T5927] usb 4-1: config 0 has no interface number 0 [ 296.164467][ T5927] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 296.241987][ T5927] usb 4-1: config 0 has no interface number 0 [ 296.259467][ T5927] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 296.275535][ T5927] usb 4-1: config 0 has no interface number 0 [ 296.304713][ T5927] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 296.324471][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.343473][ T5927] usb 4-1: Product: syz [ 296.358628][ T5927] usb 4-1: Manufacturer: syz [ 296.363270][ T5927] usb 4-1: SerialNumber: syz [ 296.394700][ T5927] usb 4-1: config 0 descriptor?? [ 296.413121][ T5927] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 296.947939][T11786] geneve2: entered promiscuous mode [ 297.012504][T11790] cgroup: fork rejected by pids controller in /syz1 [ 297.179475][ T5927] etas_es58x 4-1:0.2: could not retrieve the product info string [ 297.587835][ T5838] syz_tun (unregistering): left allmulticast mode [ 298.365506][T11821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.405552][ T5824] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 298.418188][ T5824] Bluetooth: hci3: Injecting HCI hardware error event [ 298.427600][ T5824] Bluetooth: hci3: hardware error 0x00 [ 298.453217][ T5927] usb 4-1: USB disconnect, device number 14 [ 298.481016][ T5927] etas_es58x 4-1:0.2: Disconnecting syz syz [ 298.545070][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.554583][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.563373][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.573740][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.581812][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.900555][T11832] chnl_net:caif_netlink_parms(): no params data found [ 300.112501][T11832] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.189526][T11832] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.226550][T11832] bridge_slave_0: entered allmulticast mode [ 300.254643][T11832] bridge_slave_0: entered promiscuous mode [ 300.305468][T11832] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.330945][T11832] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.397237][T11832] bridge_slave_1: entered allmulticast mode [ 300.427254][T11832] bridge_slave_1: entered promiscuous mode [ 300.565517][ T5824] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 300.579285][T11832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.645521][ T5824] Bluetooth: hci1: command tx timeout [ 300.647340][T11832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.742906][T11883] syz_tun: entered allmulticast mode [ 300.796915][T11832] team0: Port device team_slave_0 added [ 300.813942][T11832] team0: Port device team_slave_1 added [ 300.923267][T11832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.955913][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.048943][T11832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.068686][T11832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.095979][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.156683][T11832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.335827][T11832] hsr_slave_0: entered promiscuous mode [ 301.342681][T11832] hsr_slave_1: entered promiscuous mode [ 301.349427][T11832] debugfs: 'hsr0' already exists in 'hsr' [ 301.355688][T11832] Cannot create hsr debugfs directory [ 301.560686][T11906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2276'. [ 301.605776][ T981] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 301.660371][T11832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.749686][T11832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.770825][ T981] usb 5-1: config 0 has no interfaces? [ 301.776520][ T981] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 301.788018][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.814022][ T981] usb 5-1: config 0 descriptor?? [ 301.887110][T11832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.056314][ T5825] usb 5-1: USB disconnect, device number 12 [ 302.063547][ T5824] Bluetooth: hci2: Malformed LE Event: 0x0d [ 302.097576][T11832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.431301][T11832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.493355][T11832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.531276][T11919] netlink: 'syz.2.2280': attribute type 13 has an invalid length. [ 302.542336][T11832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.707867][T11832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.725703][ T5824] Bluetooth: hci1: command tx timeout [ 302.795700][T11919] tipc: Enabling of bearer rejected, already enabled [ 303.206045][T11832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.234776][T11832] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.257572][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.264756][ T8647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.348315][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.355482][ T8647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.502114][T11832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.538323][T11944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2287'. [ 303.612864][T11832] veth0_vlan: entered promiscuous mode [ 303.640776][T11832] veth1_vlan: entered promiscuous mode [ 303.674197][T11832] veth0_macvtap: entered promiscuous mode [ 303.683905][T11832] veth1_macvtap: entered promiscuous mode [ 303.700562][T11832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.721201][T11832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.751558][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.763968][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.798355][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.819651][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.194138][ T8647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.223679][ T8647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.249522][ T8647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.257770][ T8647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.818660][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'. [ 304.827697][ T5824] Bluetooth: hci1: command tx timeout [ 305.310384][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2305'. [ 305.479202][T11993] hsr_slave_1 (unregistering): left promiscuous mode [ 306.223547][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2312'. [ 306.383218][T12019] binder: 12017:12019 ioctl 4018620d 0 returned -22 [ 306.401561][T12019] binder: 12017:12019 ioctl c0306201 200000000180 returned -11 [ 306.889928][ T5824] Bluetooth: hci1: command tx timeout [ 306.928734][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 307.584967][T12053] binder: 12052:12053 ioctl c0306201 0 returned -14 [ 308.341397][T12070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.525619][ T5825] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 308.697268][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 308.709861][ T5825] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.728150][ T5825] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.764230][ T5825] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 308.825473][ T5825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 308.852504][ T5825] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 308.879224][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.933111][ T5825] usb 4-1: config 0 descriptor?? [ 309.317856][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2341'. [ 309.698523][T12086] pim6reg: entered allmulticast mode [ 311.198231][ T5825] usbhid 4-1:0.0: can't add hid device: -71 [ 311.207301][T12106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.235315][ T5825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 311.334642][ T5825] usb 4-1: USB disconnect, device number 15 [ 311.915647][T12117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.823690][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2360'. [ 313.855539][T12143] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 313.996630][T12149] vlan2: entered promiscuous mode [ 314.001702][T12149] bridge0: entered promiscuous mode [ 314.082450][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2364'. [ 316.600520][T12203] loop2: detected capacity change from 0 to 7 [ 316.650868][T12203] Dev loop2: unable to read RDB block 7 [ 316.745310][T12203] loop2: AHDI p2 p3 [ 316.915559][T12203] loop2: partition table partially beyond EOD, truncated [ 316.922835][T12203] loop2: p2 start 1702059890 is beyond EOD, truncated [ 317.130996][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.137389][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.207171][ T797] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 317.207858][ T5195] Dev loop2: unable to read RDB block 7 [ 317.345839][ T5195] loop2: AHDI p2 p3 [ 317.349765][ T5195] loop2: partition table partially beyond EOD, truncated [ 317.375673][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 317.432468][ T797] usb 5-1: config 8 has an invalid interface number: 159 but max is 0 [ 317.535877][ T797] usb 5-1: config 8 has no interface number 0 [ 317.543225][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 317.550188][ T797] usb 5-1: config 8 interface 159 has no altsetting 0 [ 317.822190][ T797] usb 5-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 317.901139][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.909350][ T797] usb 5-1: Product: syz [ 317.913632][ T797] usb 5-1: Manufacturer: syz [ 317.919608][ T797] usb 5-1: SerialNumber: syz [ 318.296035][ T5195] Dev loop2: unable to read RDB block 7 [ 318.308685][ T5195] loop2: AHDI p2 p3 [ 318.314188][ T5195] loop2: partition table partially beyond EOD, truncated [ 318.330909][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 318.563780][ T5195] Dev loop2: unable to read RDB block 7 [ 318.590582][ T5195] loop2: AHDI p2 p3 [ 318.612303][ T5195] loop2: partition table partially beyond EOD, truncated [ 318.630142][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 320.035235][ T797] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 320.306113][ T797] gspca_sonixj: reg_w1 err -71 [ 320.310996][ T797] sonixj 5-1:8.159: probe with driver sonixj failed with error -71 [ 320.423411][ T797] usb 5-1: USB disconnect, device number 13 [ 320.442918][T12233] tipc: Started in network mode [ 320.489849][T12233] tipc: Node identity 4, cluster identity 4711 [ 320.528755][T12233] tipc: Node number set to 4 [ 320.681589][T12233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.744569][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 320.905606][ T5825] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 321.067817][ T5825] usb 4-1: config 16 has an invalid interface number: 92 but max is 0 [ 321.082936][ T5825] usb 4-1: config 16 has no interface number 0 [ 321.093116][ T5825] usb 4-1: New USB device found, idVendor=04cb, idProduct=012d, bcdDevice=bd.dd [ 321.164043][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.401994][ T5825] gspca_main: finepix-2.14.0 probing 04cb:012d [ 321.414413][ T5825] usb 4-1: USB disconnect, device number 16 [ 322.525028][T12285] loop5: detected capacity change from 0 to 7 [ 322.544769][T12207] Dev loop5: unable to read RDB block 7 [ 322.554794][T12207] loop5: unable to read partition table [ 322.568238][T12207] loop5: partition table beyond EOD, truncated [ 322.586447][T12285] Dev loop5: unable to read RDB block 7 [ 322.596983][T12285] loop5: unable to read partition table [ 322.613166][T12285] loop5: partition table beyond EOD, truncated [ 322.630314][T12285] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 323.026535][ T5908] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 323.222773][ T5908] usb 1-1: config 8 has an invalid interface number: 85 but max is 0 [ 323.231213][ T5908] usb 1-1: config 8 has no interface number 0 [ 323.246785][ T5908] usb 1-1: config 8 interface 85 has no altsetting 0 [ 323.328763][ T5908] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=88.34 [ 323.346391][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.584414][ T5908] usb 1-1: string descriptor 0 read error: -71 [ 323.593828][ T5908] kvaser_usb 1-1:8.85: error -ENODEV: Cannot get usb endpoint(s) [ 323.658060][ T5908] usb 1-1: USB disconnect, device number 14 [ 323.806420][T12304] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 323.813208][T12304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.869725][T12304] vhci_hcd vhci_hcd.0: Device attached [ 324.099451][T12305] vhci_hcd: connection closed [ 324.108640][ T60] vhci_hcd vhci_hcd.3: stop threads [ 324.120292][ T60] vhci_hcd vhci_hcd.3: release socket [ 324.126967][ T60] vhci_hcd vhci_hcd.3: disconnect device [ 324.175687][ T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 324.183226][ T10] usb 39-1: enqueue for inactive port 0 [ 324.255691][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 326.956360][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 327.185852][ T5908] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 327.348808][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.384178][ T5908] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 327.413707][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.497106][ T5908] usb 2-1: config 0 descriptor?? [ 327.914844][T12364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.942230][T12364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.989752][ T5908] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 328.039394][ T5908] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input24 [ 328.438234][ T5908] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 328.575962][ T5824] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 328.584734][ T5824] Bluetooth: hci1: Injecting HCI hardware error event [ 328.597169][ T5824] Bluetooth: hci1: hardware error 0x00 [ 328.711016][ T9] usb 2-1: USB disconnect, device number 13 [ 330.536485][T12409] binder: 12398:12409 ioctl 4018620d 0 returned -22 [ 330.662569][ T5824] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 331.026435][T12414] netlink: 'syz.4.2455': attribute type 10 has an invalid length. [ 331.057809][T12414] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 331.420671][T12424] vivid-001: ================= START STATUS ================= [ 331.500572][T12424] vivid-001: Radio HW Seek Mode: Bounded [ 331.531731][T12424] vivid-001: Radio Programmable HW Seek: false [ 331.540557][T12424] vivid-001: RDS Rx I/O Mode: Block I/O [ 331.572426][T12424] vivid-001: Generate RBDS Instead of RDS: false [ 331.615188][T12424] vivid-001: RDS Reception: true [ 331.794254][T12424] vivid-001: RDS Program Type: 0 inactive [ 331.817150][T12424] vivid-001: RDS PS Name: inactive [ 331.846119][ T36] wlan0: Trigger new scan to find an IBSS to join [ 331.866583][T12424] vivid-001: RDS Radio Text: inactive [ 331.872132][T12424] vivid-001: RDS Traffic Announcement: false inactive [ 331.879136][T12424] vivid-001: RDS Traffic Program: false inactive [ 331.885676][T12424] vivid-001: RDS Music: false inactive [ 331.891212][T12424] vivid-001: ================== END STATUS ================== [ 332.646157][T12452] bond0: Caught tx_queue_len zero misconfig [ 333.279098][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2468'. [ 333.815743][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 333.995596][ T10] usb 1-1: device descriptor read/64, error -71 [ 334.119163][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 334.245591][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 334.310362][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.327487][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.348679][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 334.391360][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.399661][ T10] usb 1-1: device descriptor read/64, error -71 [ 334.415815][ T9] usb 3-1: SerialNumber: syz [ 334.521106][ T10] usb usb1-port1: attempt power cycle [ 334.687893][ T9] usb 3-1: 0:2 : does not exist [ 334.775245][ T9] usb 3-1: USB disconnect, device number 12 [ 334.814443][T12207] udevd[12207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.877898][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 334.887310][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 334.923105][ T10] usb 1-1: device descriptor read/8, error -71 [ 335.185589][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 335.208446][ T10] usb 1-1: device descriptor read/8, error -71 [ 335.352727][ T10] usb usb1-port1: unable to enumerate USB device [ 335.984738][T12383] Set syz1 is full, maxelem 65536 reached [ 336.138136][T12507] gre0: entered promiscuous mode [ 336.292549][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'. [ 336.494837][T12514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2489'. [ 336.886435][ T8657] wlan0: Trigger new scan to find an IBSS to join [ 336.916011][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2497'. [ 337.029313][T12536] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2495'. [ 337.585484][ T5900] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 337.751027][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 337.780151][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 337.803051][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.825811][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 337.849683][ T5900] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 337.859082][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.869952][ T5900] usb 4-1: Product: syz [ 337.877009][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 337.887083][ T5900] usb 4-1: Manufacturer: syz [ 337.895823][ T5900] usb 4-1: SerialNumber: syz [ 337.904227][ T5900] usb 4-1: config 0 descriptor?? [ 338.047170][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 338.055986][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.196424][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 338.205657][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 338.205854][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.213643][ T9] usb 5-1: Manufacturer: syz [ 338.223965][ T9] usb 5-1: config 0 descriptor?? [ 338.345691][ T9] rc_core: IR keymap rc-hauppauge not found [ 338.352254][ T9] Registered IR keymap rc-empty [ 338.385847][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 338.412375][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 338.474015][ T9] usb 5-1: USB disconnect, device number 14 [ 338.905729][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 339.067106][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.159214][T12573] binder: BINDER_SET_CONTEXT_MGR already set [ 339.165564][T12573] binder: 12565:12573 ioctl 4018620d 200000000040 returned -16 [ 339.201655][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.214896][ T9] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 339.224497][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.240001][ T9] usb 1-1: config 0 descriptor?? [ 339.383277][T12570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.768534][ T9] nti 0003:0757:0A00.000C: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0 [ 340.004663][ T981] usb 1-1: USB disconnect, device number 19 [ 340.025806][ T9] usb 4-1: USB disconnect, device number 17 [ 341.025874][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 341.115497][ T5900] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 341.115690][ T981] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 341.217445][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.227803][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 341.242848][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.252575][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.260934][ T9] usb 4-1: Product: syz [ 341.265177][ T9] usb 4-1: Manufacturer: syz [ 341.269793][ T9] usb 4-1: SerialNumber: syz [ 341.282097][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.294832][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.295722][ T5900] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 341.305732][ T5908] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 341.312475][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 341.332383][ T981] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 341.333006][ T5900] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.353357][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.362696][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 341.365597][ T981] usb 1-1: config 0 descriptor?? [ 341.374122][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 341.394648][ T5900] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 341.403119][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 341.414290][ T5900] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.426354][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 341.438132][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 341.452613][ T5900] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 341.460346][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 341.471407][ T5900] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.483385][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 341.494890][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 341.495681][T12600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.520303][T12600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.522612][ T5900] usb 5-1: string descriptor 0 read error: -22 [ 341.528877][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 341.537569][ T5900] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 341.542146][ T5908] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 341.549429][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.557441][ T5908] usb 2-1: config 2 has no interface number 0 [ 341.576911][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 341.584106][ T5908] usb 2-1: config 2 interface 31 has no altsetting 0 [ 341.595865][ T9] usb 4-1: USB disconnect, device number 18 [ 341.604912][ T5908] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 341.607400][ T5900] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 341.620872][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.629834][ T5908] usb 2-1: Product: syz [ 341.634867][ T5908] usb 2-1: Manufacturer: syz [ 341.657210][ T5908] usb 2-1: SerialNumber: syz [ 341.798145][ T981] hid_parser_main: 59 callbacks suppressed [ 341.798163][ T981] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 341.834011][ T981] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 341.894714][ T5900] usb 5-1: USB disconnect, device number 15 [ 342.012261][ T981] cp2112 0003:10C4:EA90.000D: error requesting version [ 342.024615][ T981] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -32 [ 342.075587][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 342.111190][ T5908] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 342.123775][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2532'. [ 342.142687][ T5908] usb 2-1: USB disconnect, device number 14 [ 342.225987][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 342.233171][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 342.242195][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 342.253410][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.264568][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.276276][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 342.287002][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.298433][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.311724][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.321044][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.533567][ T9] usb 4-1: usb_control_msg returned -32 [ 342.539540][ T9] usbtmc 4-1:16.0: can't read capabilities [ 342.739040][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.745272][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.751412][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.758031][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.765496][ C0] usbtmc 4-1:16.0: invalid notification: 11 [ 342.773004][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.781994][ C0] usbtmc 4-1:16.0: invalid notification: 2 [ 342.788320][ C0] usbtmc 4-1:16.0: invalid notification: 5 [ 342.794533][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.801077][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.807752][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.814756][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.820859][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.826910][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.832956][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.839022][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.845047][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.851062][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.857079][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.863103][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.869183][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.875220][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.881244][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.887855][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.894074][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.900947][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.907351][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.913383][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.919415][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.925451][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.931485][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.937564][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.943610][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.949634][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.955645][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.961666][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.967694][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.973726][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.979881][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.986105][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.992335][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 342.998397][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.004424][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.015457][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.021493][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.027541][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.033556][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.039742][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.045939][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.051957][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.058077][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.064091][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.070102][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.076100][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.082118][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.088685][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.096634][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.102653][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.108639][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.114662][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.120689][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.126850][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.132869][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.138907][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.144908][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.150935][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.156934][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.163041][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.169104][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.175106][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.181130][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.187147][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.198235][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.204248][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.210259][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.216325][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.222323][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.228447][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.234444][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.240471][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.246490][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.252529][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.258627][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.264785][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.270788][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.276841][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.282882][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.288975][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.295649][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.301816][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.307821][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.313824][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.321765][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.327830][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.333831][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.339873][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.345899][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.351925][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.357963][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.363958][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.370062][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.376089][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.382228][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.388251][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.394282][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.400733][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.406768][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.412785][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.418779][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.424788][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.430825][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.436955][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.442996][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.449094][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.455144][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.461213][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.467310][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.473340][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.479383][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.485429][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.491450][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.498888][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.505320][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.511399][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.517445][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.523479][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.529547][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.535581][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.541622][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.547687][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.553718][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.559811][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.565857][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.571881][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.577928][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.583956][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.589995][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.596362][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.603815][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.610217][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.616305][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.622354][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.628395][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.634418][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.640468][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.646492][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.652514][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.658562][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.664691][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.670753][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.676823][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.682852][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.688931][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.694996][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.701056][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.708478][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.714817][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.720987][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.727016][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.733064][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.739135][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.745187][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.751208][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.757252][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.763287][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.769348][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.775351][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.781375][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.787391][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.793386][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.799407][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.807627][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.813640][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.819652][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.825663][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.831647][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.837672][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.843665][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.849965][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.856112][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.863084][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.869105][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.875094][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.881093][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.887099][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.893090][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.899082][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.905086][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.913184][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.919451][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.927544][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.933571][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 343.941379][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 344.456274][ T5927] usb 1-1: USB disconnect, device number 20 [ 344.509813][ T5908] usb 4-1: USB disconnect, device number 19 [ 344.716699][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2545'. [ 344.747136][T12662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.967738][ T5908] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 345.249046][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 345.263058][ T5908] usb 3-1: config 2 has an invalid interface number: 211 but max is 0 [ 345.278814][ T5908] usb 3-1: config 2 has no interface number 0 [ 345.294242][ T5908] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.316668][ T5908] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 345.330714][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.347290][ T5908] usb 3-1: Product: syz [ 345.353772][ T5908] usb 3-1: Manufacturer: syz [ 345.363618][ T5908] usb 3-1: SerialNumber: syz [ 345.394282][ T5908] em28xx 3-1:2.211: New device syz syz @ 480 Mbps (2040:8268, interface 211, class 211) [ 345.424018][ T5908] em28xx 3-1:2.211: Video interface 211 found: [ 345.440572][T12687] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2551'. [ 345.897114][ T13] wlan0: Trigger new scan to find an IBSS to join [ 347.425807][ T5908] em28xx 3-1:2.211: unknown em28xx chip ID (0) [ 347.462763][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'. [ 347.503089][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2557'. [ 347.513996][ T5908] em28xx 3-1:2.211: reading from i2c device at 0xa0 failed (error=-5) [ 347.522890][ T5908] em28xx 3-1:2.211: board has no eeprom [ 347.625567][ T5908] em28xx 3-1:2.211: Identified as PCTV tripleStick (292e) (card=94) [ 347.656223][ T5908] em28xx 3-1:2.211: Currently, V4L2 is not supported on this model [ 347.664212][ T43] em28xx 3-1:2.211: Binding DVB extension [ 347.689533][ T43] em28xx 3-1:2.211: no endpoint for DVB mode and transfer type 0 [ 347.700131][ T43] em28xx 3-1:2.211: failed to pre-allocate USB transfer buffers for DVB. [ 347.713040][ T5908] usb 3-1: USB disconnect, device number 13 [ 347.729110][ T5908] em28xx 3-1:2.211: Disconnecting em28xx [ 347.739440][ T43] em28xx 3-1:2.211: Registering input extension [ 347.760536][ T5908] em28xx 3-1:2.211: Closing input extension [ 347.801910][ T5908] em28xx 3-1:2.211: Freeing device [ 347.905818][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 348.077306][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.095051][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 348.096381][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'. [ 348.111783][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 348.123663][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.137287][T12735] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 348.156949][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.523329][ T9] usb 5-1: USB disconnect, device number 16 [ 349.142431][T12782] binder: BINDER_SET_CONTEXT_MGR already set [ 349.148564][T12782] binder: 12777:12782 ioctl 4018620d 200000000040 returned -16 [ 349.561220][T12785] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 349.846070][ T8636] wlan0: Trigger new scan to find an IBSS to join [ 350.021904][T12796] SET target dimension over the limit! [ 350.023157][T12797] bond0: Caught tx_queue_len zero misconfig [ 352.409636][ T8636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.612594][T12804] veth0_to_team: entered promiscuous mode [ 352.869408][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 352.869427][ T30] audit: type=1326 audit(1770446627.154:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.0.2590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f652ef9aeb9 code=0x0 [ 354.885933][ T5908] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 355.035449][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 355.100872][ T5908] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 355.111137][ T5908] usb 2-1: config 0 has no interface number 0 [ 355.134244][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.198980][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 355.242708][ T5908] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.279957][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 355.315051][ T5908] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 355.348004][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.377338][ T5908] usb 2-1: config 0 descriptor?? [ 355.412339][ T5908] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 355.490177][T12877] netlink: 'syz.3.2608': attribute type 13 has an invalid length. [ 356.249259][T12892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.550515][ T5908] usb 2-1: USB disconnect, device number 15 [ 357.566804][ T5908] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 357.670964][T12914] netlink: 'syz.4.2620': attribute type 13 has an invalid length. [ 358.295728][T12937] netlink: 'syz.4.2627': attribute type 10 has an invalid length. [ 358.396514][T12937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.426109][T12937] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 358.462787][ T8636] bond0: (slave batadv0): interface is now down [ 358.495774][ T8636] bond0: (slave batadv0): interface is now down [ 358.525701][ T8634] bond0: (slave batadv0): interface is now down [ 358.532893][ T8634] bond0: now running without any active interface! [ 358.542087][T12941] netlink: 'syz.4.2627': attribute type 10 has an invalid length. [ 358.592197][T12941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2627'. [ 358.968811][ T5927] IPVS: starting estimator thread 0... [ 359.097117][T12941] batadv0: entered promiscuous mode [ 359.126347][T12941] batadv0: entered allmulticast mode [ 359.135580][T12944] IPVS: using max 57 ests per chain, 136800 per kthread [ 359.216148][T12941] bond0: (slave batadv0): Releasing backup interface [ 359.274915][T12941] bridge0: port 1(batadv0) entered blocking state [ 359.284192][T12941] bridge0: port 1(batadv0) entered disabled state [ 359.311695][T12937] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 359.356820][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2631'. [ 359.616165][ T8634] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 359.625721][ T8634] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 360.117789][T12964] netlink: 'syz.3.2637': attribute type 13 has an invalid length. [ 360.419215][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'. [ 361.230543][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'. [ 361.406878][T12988] misc userio: Invalid payload size [ 361.412977][T12988] misc userio: No port type given on /dev/userio [ 362.096913][ T5900] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 362.110407][ T5900] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.209844][T13004] fido_id[13004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 362.350218][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2655'. [ 362.868552][ T5900] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 363.026265][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 363.060155][ T5900] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 363.073146][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.089755][ T5900] usb 3-1: Product: syz [ 363.098514][ T5900] usb 3-1: Manufacturer: syz [ 363.110252][ T5900] usb 3-1: SerialNumber: syz [ 363.123459][ T5900] usb 3-1: config 0 descriptor?? [ 363.404152][T13048] loop8: detected capacity change from 0 to 8 [ 363.438671][T13003] Dev loop8: unable to read RDB block 8 [ 363.444406][T13003] loop8: unable to read partition table [ 363.456254][T13003] loop8: partition table beyond EOD, truncated [ 363.473988][T13048] Dev loop8: unable to read RDB block 8 [ 363.485009][T13048] loop8: unable to read partition table [ 363.528821][T13048] loop8: partition table beyond EOD, truncated [ 363.553766][T13048] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 363.614134][ T5900] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 363.643170][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 363.716585][ T5900] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 363.734005][ T5900] usb 3-1: media controller created [ 363.805424][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.066262][T13064] binder: 13063:13064 ioctl c0306201 0 returned -14 [ 364.095263][T13064] binder: 13063:13064 ioctl 40045644 1 returned -22 [ 364.398520][ T5900] zl10353_read_register: readreg error (reg=127, ret==0) [ 364.415764][ T5900] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 364.423747][ T5900] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 364.462556][ T5900] usb 3-1: USB disconnect, device number 14 [ 364.907611][ T5900] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 365.324814][T13084] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2682'. [ 365.543554][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2684'. [ 365.615801][ T5900] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 365.780273][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 365.811682][ T5900] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 365.821094][ T5900] usb 5-1: config 0 has no interface number 0 [ 365.856997][ T5900] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 365.876532][ T5900] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 365.910977][ T5900] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 365.945710][ T5900] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.966274][ T5900] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 365.994797][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.030634][ T5900] usb 5-1: config 0 descriptor?? [ 366.064789][ T5900] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 367.158888][T13136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2696'. [ 368.014277][T13157] loop8: detected capacity change from 0 to 8 [ 368.025152][T13157] Dev loop8: unable to read RDB block 8 [ 368.033826][T13157] loop8: unable to read partition table [ 368.040625][T13157] loop8: partition table beyond EOD, truncated [ 368.061291][T13157] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 368.382484][ T5900] usb 5-1: USB disconnect, device number 17 [ 368.392201][ T5900] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 368.537786][T13177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2714'. [ 368.652501][T13184] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2721'. [ 368.905950][T13189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2723'. [ 369.281915][T13208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2734'. [ 369.411509][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2735'. [ 369.628726][T13233] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2743'. [ 370.064882][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2757'. [ 370.369011][T13277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2765'. [ 370.576443][T13283] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 370.706456][T13283] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 370.733203][T13288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.738348][T13283] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 371.632054][T13305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2778'. [ 371.791840][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2781'. [ 371.987961][T13325] usb usb8: usbfs: process 13325 (syz.4.2784) did not claim interface 0 before use [ 373.400636][T13369] netlink: 'syz.4.2802': attribute type 4 has an invalid length. [ 374.073553][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2818'. [ 374.465899][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 374.722780][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.742079][ T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.776325][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.785733][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.809654][T13424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 374.844892][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.873336][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2830'. [ 375.027043][T13470] x_tables: duplicate underflow at hook 2 [ 375.053672][ T43] usb 1-1: USB disconnect, device number 21 [ 375.359204][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.369388][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.377711][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.393639][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.412471][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.717769][T12911] syz_tun (unregistering): left allmulticast mode [ 375.748002][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 375.980777][ T8638] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.136622][ T8638] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.434505][T13485] chnl_net:caif_netlink_parms(): no params data found [ 376.606667][T13526] binder: BINDER_SET_CONTEXT_MGR already set [ 376.613761][T13526] binder: 13524:13526 ioctl 4018620d 2000000002c0 returned -16 [ 376.623726][ T8638] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.848493][ T8638] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.002055][T13485] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.009597][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.019536][T13485] bridge_slave_0: entered allmulticast mode [ 377.027344][T13485] bridge_slave_0: entered promiscuous mode [ 377.036463][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.043722][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.051394][T13485] bridge_slave_1: entered allmulticast mode [ 377.101030][T13485] bridge_slave_1: entered promiscuous mode [ 377.152618][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 377.259868][T13485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.295186][T13485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.345581][ T5908] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 377.423124][T13485] team0: Port device team_slave_0 added [ 377.489535][ T5837] Bluetooth: hci5: command tx timeout [ 377.493351][T13485] team0: Port device team_slave_1 added [ 377.512796][ T8638] bridge0: port 1(batadv0) entered disabled state [ 377.566806][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 377.577631][ T5908] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 377.595172][ T5908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.630587][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.646837][ T5908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 377.668933][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 377.708238][ T5908] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.773064][ T5908] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.789901][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.264352][ T5908] usb 2-1: usb_control_msg returned -32 [ 378.274453][ T5908] usbtmc 2-1:16.0: can't read capabilities [ 378.568361][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.574817][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.615636][ T797] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 378.907304][ T8638] dvmrp6 (unregistering): left allmulticast mode [ 379.194058][T13572] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 379.528736][ T5837] Bluetooth: hci5: command tx timeout [ 380.293449][ T8638] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 380.312491][ T8638] bond0 (unregistering): Released all slaves [ 380.340681][T13578] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 380.447560][ T8638] tipc: Disabling bearer [ 380.477512][ T8638] tipc: Left network mode [ 380.485969][T13485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.505950][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.569176][T13485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.590886][T13485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.600073][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.627828][T13485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.749339][T13485] hsr_slave_0: entered promiscuous mode [ 380.775964][T13485] hsr_slave_1: entered promiscuous mode [ 380.785068][T13601] random: crng reseeded on system resumption [ 380.820129][T13485] debugfs: 'hsr0' already exists in 'hsr' [ 380.833814][T13485] Cannot create hsr debugfs directory [ 381.097613][ T5908] usb 2-1: USB disconnect, device number 16 [ 381.568990][ T8638] ------------[ cut here ]------------ [ 381.574715][ T8638] sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt [ 381.574740][ T8638] WARNING: net/mac80211/key.c:1169 at ieee80211_free_keys+0x7b8/0x8e0, CPU#0: kworker/u8:11/8638 [ 381.595724][ T8638] Modules linked in: [ 381.599863][ T8638] CPU: 0 UID: 0 PID: 8638 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.611790][ T8638] Tainted: [L]=SOFTLOCKUP [ 381.616211][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 381.626358][ T8638] Workqueue: netns cleanup_net [ 381.631152][ T8638] RIP: 0010:ieee80211_free_keys+0x7b8/0x8e0 [ 381.638227][ T8638] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8d 29 85 00 cc e8 47 a0 af f6 90 0f 0b 90 e9 04 fa ff ff e8 39 a0 af f6 90 <0f> 0b 90 e9 32 fe ff ff e8 2b a0 af f6 e9 d4 fd ff ff 48 c7 c1 c0 [ 381.658320][ T8638] RSP: 0018:ffffc900032e6fe0 EFLAGS: 00010293 [ 381.664409][ T8638] RAX: ffffffff8b14d9e7 RBX: 0000000000000000 RCX: ffff888053ef9e80 [ 381.672433][ T8638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 381.680514][ T8638] RBP: ffffc900032e70b0 R08: ffffc900032e6dc7 R09: 1ffff9200065cdb8 [ 381.688856][ T8638] R10: dffffc0000000000 R11: fffff5200065cdb9 R12: 0000000000000001 [ 381.697567][ T8638] R13: ffff8880545a8d80 R14: ffff888054a65730 R15: 0000000000000001 [ 381.706416][ T8638] FS: 0000000000000000(0000) GS:ffff8881256f3000(0000) knlGS:0000000000000000 [ 381.715913][ T8638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.722515][ T8638] CR2: 0000200000101030 CR3: 0000000050740000 CR4: 00000000003526f0 [ 381.730989][ T8638] Call Trace: [ 381.734254][ T8638] [ 381.737218][ T8638] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 381.742836][ T8638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.748697][ T8638] ieee80211_do_stop+0xf3b/0x1ff0 [ 381.753711][ T8638] ? qdisc_reset+0x28c/0x550 [ 381.758325][ T8638] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 381.763774][ T8638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.769736][ T8638] ieee80211_stop+0x1b1/0x240 [ 381.774400][ T8638] ? __pfx_ieee80211_stop+0x10/0x10 [ 381.779639][ T8638] __dev_close_many+0x368/0x6d0 [ 381.784511][ T8638] ? __pfx___dev_close_many+0x10/0x10 [ 381.789895][ T8638] netif_close_many+0x225/0x420 [ 381.795064][ T8638] ? __pfx_netif_close_many+0x10/0x10 [ 381.800666][ T8638] netif_close+0x160/0x220 [ 381.805065][ T8638] ? __pfx_netif_close+0x10/0x10 [ 381.810128][ T8638] ? __mutex_lock+0xd09/0x1300 [ 381.814881][ T8638] dev_close+0x10a/0x220 [ 381.819149][ T8638] cfg80211_shutdown_all_interfaces+0xc4/0x200 [ 381.825289][ T8638] ieee80211_remove_interfaces+0x108/0x6d0 [ 381.825495][ T5837] Bluetooth: hci5: command tx timeout [ 381.831144][ T8638] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 381.842856][ T8638] ieee80211_unregister_hw+0x5d/0x2c0 [ 381.848395][ T8638] mac80211_hwsim_del_radio+0x28a/0x490 [ 381.853967][ T8638] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 381.860113][ T8638] ? __local_bh_enable_ip+0xd0/0x130 [ 381.865546][ T8638] hwsim_exit_net+0xede/0xfa0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 381.871019][ T8638] ? hwsim_exit_net+0x336/0xfa0 [ 381.875974][ T8638] ? __pfx_hwsim_exit_net+0x10/0x10 [ 381.881200][ T8638] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 381.887055][ T8638] ops_undo_list+0x49f/0x940 [ 381.891634][ T8638] ? __pfx_ops_undo_list+0x10/0x10 [ 381.897115][ T8638] ? do_raw_spin_unlock+0xf5/0x210 [ 381.902217][ T8638] cleanup_net+0x4df/0x7b0 [ 381.906905][ T8638] ? __pfx_cleanup_net+0x10/0x10 [ 381.911845][ T8638] ? process_scheduled_works+0xa0f/0x17a0 [ 381.917659][ T8638] ? process_scheduled_works+0xa0f/0x17a0 [ 381.924241][ T8638] process_scheduled_works+0xaec/0x17a0 [ 381.930368][ T8638] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.936417][ T8638] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.941446][ T8638] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.946897][ T8638] ? schedule+0x90/0x360 [ 381.951161][ T8638] worker_thread+0xda6/0x1360 [ 381.956077][ T8638] kthread+0x726/0x8b0 [ 381.960171][ T8638] ? __pfx_worker_thread+0x10/0x10 [ 381.965301][ T8638] ? __pfx_kthread+0x10/0x10 [ 381.970065][ T8638] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.975264][ T8638] ? __pfx_kthread+0x10/0x10 [ 381.979950][ T8638] ret_from_fork+0x51b/0xa40 [ 381.984553][ T8638] ? __pfx_ret_from_fork+0x10/0x10 [ 381.989812][ T8638] ? __switch_to+0xc82/0x1410 [ 381.994511][ T8638] ? __pfx_kthread+0x10/0x10 [ 381.999784][ T8638] ret_from_fork_asm+0x1a/0x30 [ 382.004590][ T8638] [ 382.008170][ T8638] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 382.015469][ T8638] CPU: 0 UID: 0 PID: 8638 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.026579][ T8638] Tainted: [L]=SOFTLOCKUP [ 382.030886][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 382.040918][ T8638] Workqueue: netns cleanup_net [ 382.045671][ T8638] Call Trace: [ 382.048933][ T8638] [ 382.051845][ T8638] vpanic+0x1e0/0x670 [ 382.055810][ T8638] panic+0xc5/0xd0 [ 382.059510][ T8638] ? __pfx_panic+0x10/0x10 [ 382.063908][ T8638] ? ret_from_fork_asm+0x1a/0x30 [ 382.068833][ T8638] __warn+0x315/0x4a0 [ 382.072798][ T8638] ? ieee80211_free_keys+0x7b8/0x8e0 [ 382.078062][ T8638] ? ieee80211_free_keys+0x7b8/0x8e0 [ 382.083328][ T8638] __report_bug+0x29a/0x540 [ 382.087811][ T8638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 382.093771][ T8638] ? ieee80211_free_keys+0x7b8/0x8e0 [ 382.099042][ T8638] ? __pfx___report_bug+0x10/0x10 [ 382.104057][ T8638] ? kthread_data+0x4f/0xc0 [ 382.108547][ T8638] ? wq_worker_running+0x9c/0x200 [ 382.113555][ T8638] ? synchronize_rcu_expedited+0x663/0x770 [ 382.119351][ T8638] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 382.125499][ T8638] ? ieee80211_free_keys+0x7b8/0x8e0 [ 382.130766][ T8638] report_bug+0x16a/0x220 [ 382.135078][ T8638] ? ieee80211_free_keys+0x7b8/0x8e0 [ 382.140337][ T8638] ? ieee80211_free_keys+0x7ba/0x8e0 [ 382.145598][ T8638] handle_bug+0x98/0x200 [ 382.149819][ T8638] exc_invalid_op+0x1a/0x50 [ 382.154300][ T8638] asm_exc_invalid_op+0x1a/0x20 [ 382.159131][ T8638] RIP: 0010:ieee80211_free_keys+0x7b8/0x8e0 [ 382.165003][ T8638] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8d 29 85 00 cc e8 47 a0 af f6 90 0f 0b 90 e9 04 fa ff ff e8 39 a0 af f6 90 <0f> 0b 90 e9 32 fe ff ff e8 2b a0 af f6 e9 d4 fd ff ff 48 c7 c1 c0 [ 382.184592][ T8638] RSP: 0018:ffffc900032e6fe0 EFLAGS: 00010293 [ 382.190669][ T8638] RAX: ffffffff8b14d9e7 RBX: 0000000000000000 RCX: ffff888053ef9e80 [ 382.198620][ T8638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 382.206572][ T8638] RBP: ffffc900032e70b0 R08: ffffc900032e6dc7 R09: 1ffff9200065cdb8 [ 382.214537][ T8638] R10: dffffc0000000000 R11: fffff5200065cdb9 R12: 0000000000000001 [ 382.222493][ T8638] R13: ffff8880545a8d80 R14: ffff888054a65730 R15: 0000000000000001 [ 382.230460][ T8638] ? ieee80211_free_keys+0x7b7/0x8e0 [ 382.235736][ T8638] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 382.241369][ T8638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.247156][ T8638] ieee80211_do_stop+0xf3b/0x1ff0 [ 382.252170][ T8638] ? qdisc_reset+0x28c/0x550 [ 382.256742][ T8638] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 382.262189][ T8638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.267990][ T8638] ieee80211_stop+0x1b1/0x240 [ 382.272670][ T8638] ? __pfx_ieee80211_stop+0x10/0x10 [ 382.277853][ T8638] __dev_close_many+0x368/0x6d0 [ 382.282686][ T8638] ? __pfx___dev_close_many+0x10/0x10 [ 382.288111][ T8638] netif_close_many+0x225/0x420 [ 382.292942][ T8638] ? __pfx_netif_close_many+0x10/0x10 [ 382.298297][ T8638] netif_close+0x160/0x220 [ 382.302693][ T8638] ? __pfx_netif_close+0x10/0x10 [ 382.307610][ T8638] ? __mutex_lock+0xd09/0x1300 [ 382.312357][ T8638] dev_close+0x10a/0x220 [ 382.316581][ T8638] cfg80211_shutdown_all_interfaces+0xc4/0x200 [ 382.322720][ T8638] ieee80211_remove_interfaces+0x108/0x6d0 [ 382.328939][ T8638] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 382.335258][ T8638] ieee80211_unregister_hw+0x5d/0x2c0 [ 382.340639][ T8638] mac80211_hwsim_del_radio+0x28a/0x490 [ 382.346173][ T8638] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 382.352232][ T8638] ? __local_bh_enable_ip+0xd0/0x130 [ 382.357497][ T8638] hwsim_exit_net+0xede/0xfa0 [ 382.362160][ T8638] ? hwsim_exit_net+0x336/0xfa0 [ 382.367005][ T8638] ? __pfx_hwsim_exit_net+0x10/0x10 [ 382.372207][ T8638] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 382.378001][ T8638] ops_undo_list+0x49f/0x940 [ 382.382574][ T8638] ? __pfx_ops_undo_list+0x10/0x10 [ 382.387664][ T8638] ? do_raw_spin_unlock+0xf5/0x210 [ 382.392758][ T8638] cleanup_net+0x4df/0x7b0 [ 382.397244][ T8638] ? __pfx_cleanup_net+0x10/0x10 [ 382.402167][ T8638] ? process_scheduled_works+0xa0f/0x17a0 [ 382.407872][ T8638] ? process_scheduled_works+0xa0f/0x17a0 [ 382.413572][ T8638] process_scheduled_works+0xaec/0x17a0 [ 382.419119][ T8638] ? __pfx_process_scheduled_works+0x10/0x10 [ 382.425082][ T8638] ? do_raw_spin_lock+0x12b/0x2f0 [ 382.430111][ T8638] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 382.435462][ T8638] ? schedule+0x90/0x360 [ 382.439691][ T8638] worker_thread+0xda6/0x1360 [ 382.444360][ T8638] kthread+0x726/0x8b0 [ 382.448408][ T8638] ? __pfx_worker_thread+0x10/0x10 [ 382.453501][ T8638] ? __pfx_kthread+0x10/0x10 [ 382.458070][ T8638] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.463247][ T8638] ? __pfx_kthread+0x10/0x10 [ 382.467820][ T8638] ret_from_fork+0x51b/0xa40 [ 382.472394][ T8638] ? __pfx_ret_from_fork+0x10/0x10 [ 382.477483][ T8638] ? __switch_to+0xc82/0x1410 [ 382.482161][ T8638] ? __pfx_kthread+0x10/0x10 [ 382.486743][ T8638] ret_from_fork_asm+0x1a/0x30 [ 382.491494][ T8638] [ 382.494644][ T8638] Kernel Offset: disabled [ 382.498952][ T8638] Rebooting in 86400 seconds..