last executing test programs: 2m22.56826584s ago: executing program 3 (id=188): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x69}) 2m21.978950432s ago: executing program 3 (id=194): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f) 2m21.809553567s ago: executing program 3 (id=195): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x5, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x1, 0xffff, 0xa, 0x1fb, 0x1}) 2m21.586830887s ago: executing program 3 (id=198): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000002000fedbdf251000000018000180140002006e657464657673696d300000000000000800060000080000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) 2m20.586929236s ago: executing program 3 (id=208): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r2}, 0x80, 0x0}}], 0x2, 0x4040040) 2m20.441901779s ago: executing program 3 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r1, 0x0, 0x4048081) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_io_uring_setup(0x66f, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x6e36, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m5.352279587s ago: executing program 32 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r1, 0x0, 0x4048081) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_io_uring_setup(0x66f, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x6e36, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 10.420459316s ago: executing program 1 (id=830): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030113030303030303030303030303430393300bc8ae2c787d725d668ed2339ace784b8b4e01534a055fe2870f1761b45303115f5a87ea0d63ac71b82100a296e08bb4b99f5cf9198ef4543b68f08fe5f0bfa60801cd54edf811f"], 0x2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x800, 0x0, 0xbffffffe}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.240556432s ago: executing program 1 (id=833): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3d}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000200)="1f18b78592462ee0e66936b341dd595bf29d0cf4f0f32b7668a4cc8ac18db21efd6657c86e1bbd14bf371166bf5142279050c991d3bff077a6fd8cf9e30da7c3a9e2aaa033af822ff7a85336dc56583f958c3845d1336553871376535ea573880392532fae7205c76e93522d84f2b51615e31f12c1322536253e77f26f81fe0a95ef", 0x82}, {&(0x7f0000000140)="a4d9a9fb961fefd02c6dbbd818391a61de04b8a304a2fbb0052ae183cf2013783579e4e26a7099f07867455a624cc8af0cfa50903ba1906b2404993286e0833d15ea510231966d4b959b5de2ad0f", 0x4e}, {&(0x7f0000000300)="3ef3e1d09939dd7e073b2eb8ed106b63e4710ca8cd053ed662f72dfa62920f97379746cf86bd7c51a0b278ac41f746e4695359f9c4276db1eea695766cb2405825fd8e09efc0550a775692ea520d654b8adc9590d34d65879c59c2afc2f26f7faedbd55f8c050eb08fc6d940addd06ca25228b636bd7da83fb4d8361650501bb2549840e643ab6879816e203fbcd32d05fd42e5e65f9", 0x96}, {&(0x7f00000003c0)="23648afc2d94ce1302f0fa839eea8e40cf0ed6570cc0a6adeadf8c339c3bb3a509c35e4e20061f86536ad7f3776d3f877c162100cbecc64d08fe0b5f3cf7030c32ae6768", 0x44}, {&(0x7f0000000440)="362ce0b1355742b067bd4b234b8980032e623d7f131c410e5c9c0ce54975873d7fea61dc134915b8917ae112eb98992b99b6fb37a6d27fffdf1d5ef7bad23c365e7695bab85f3fedee62391116ca12858cd3b772866a354105389936ff07b8ce4fc6695b211bee9c2d1667d2a3c35940", 0x70}, {&(0x7f00000004c0)="200670cba708f2bf3bb013f289e4f301921659b485b569f2da8bd294cc3fd3d33cc454ba698029f9f0ce0255eb9dfb0d19", 0x31}, {&(0x7f0000000a80)="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", 0xdb2}], 0x7) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 9.24049483s ago: executing program 1 (id=837): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4073de899b38"], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000540)={0x77359400}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.937980373s ago: executing program 2 (id=850): socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) close(0xffffffffffffffff) truncate(0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 5.823683034s ago: executing program 4 (id=851): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 5.705693794s ago: executing program 4 (id=853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.354577685s ago: executing program 1 (id=854): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x22020600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) setns(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000, 0x101040) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f00000017c0)=""/4096) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2000}, 0x4000880) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002900)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x340, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x413, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x2, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x9}, {}, {}, {}, {}, {}, {}, {0xf5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x7, 0xffffffff, 0x6, 'snmp_trap\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x5, 0x22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, 0x0) 4.790744265s ago: executing program 4 (id=856): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x638182) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x80000000, 0x6, 0x7fffffff, 0xffffffff, 0x7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0xf8, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 4.146862302s ago: executing program 2 (id=860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 3.806221433s ago: executing program 2 (id=862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.596206711s ago: executing program 2 (id=864): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.533196037s ago: executing program 0 (id=865): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x7fff, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.238930133s ago: executing program 1 (id=866): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0xa, 0x801, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) sendmsg$nl_route(r1, 0x0, 0x24040040) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) 3.180317308s ago: executing program 0 (id=867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.545340224s ago: executing program 2 (id=868): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x837, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x16000000) sendmsg$inet(r0, 0x0, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 2.37503792s ago: executing program 4 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc820, 0x5, 0x401, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x5, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0xd, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x3, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0xb, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x9, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x800, 0x200, 0xfffffffe, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x4, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x992, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x3, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x200, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0xfffffffc, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 2.2524612s ago: executing program 4 (id=870): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000100)={0x38, 0x3, 0x8, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000800)={{}, 0xfd}) 2.117355253s ago: executing program 2 (id=871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 1.350915621s ago: executing program 0 (id=872): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x81, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0xcf, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0x9, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002"], 0x23c}}, 0x0) 1.068432636s ago: executing program 0 (id=873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 569.64035ms ago: executing program 0 (id=874): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x20048044}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) 222.911851ms ago: executing program 0 (id=875): futex(&(0x7f000000cffc)=0x4, 0xd, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000)=0x2, 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) 222.62797ms ago: executing program 1 (id=876): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=877): socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x43f4, 0x5c18, 0x6, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 86.999337][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.006320][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.032825][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.066915][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.103870][ T5770] team0: Port device team_slave_0 added [ 87.120847][ T5770] team0: Port device team_slave_1 added [ 87.169858][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.251747][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.259091][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.274078][ T5082] Bluetooth: hci0: command tx timeout [ 87.287462][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.313735][ T5769] hsr_slave_0: entered promiscuous mode [ 87.323736][ T5769] hsr_slave_1: entered promiscuous mode [ 87.374720][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.385432][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.416501][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.428721][ T5082] Bluetooth: hci3: command tx timeout [ 87.438330][ T5082] Bluetooth: hci2: command tx timeout [ 87.449331][ T5765] hsr_slave_0: entered promiscuous mode [ 87.456109][ T5765] hsr_slave_1: entered promiscuous mode [ 87.467946][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.476566][ T5765] Cannot create hsr debugfs directory [ 87.492018][ T5771] team0: Port device team_slave_0 added [ 87.508609][ T5082] Bluetooth: hci1: command tx timeout [ 87.541857][ T5771] team0: Port device team_slave_1 added [ 87.701548][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.708652][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.735203][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.764178][ T5770] hsr_slave_0: entered promiscuous mode [ 87.771069][ T5770] hsr_slave_1: entered promiscuous mode [ 87.777441][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.785450][ T5770] Cannot create hsr debugfs directory [ 87.823708][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.830886][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.857049][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.967881][ T5771] hsr_slave_0: entered promiscuous mode [ 87.975035][ T5771] hsr_slave_1: entered promiscuous mode [ 87.984299][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.992699][ T5771] Cannot create hsr debugfs directory [ 88.267237][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.290726][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.303512][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.314795][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.401683][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.413812][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.445387][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.456048][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.531662][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.549721][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.562320][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.573702][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.695120][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.706806][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.752171][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.765987][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.777971][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.801065][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.843675][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.851133][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.892767][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.900088][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.959671][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.009348][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.053869][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.061090][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.075054][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.082252][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.133149][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.243962][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.275652][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.326069][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.333307][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.358704][ T5082] Bluetooth: hci0: command tx timeout [ 89.395216][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.402447][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.422164][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.481305][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.488539][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.500612][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.507799][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.517199][ T5082] Bluetooth: hci2: command tx timeout [ 89.517385][ T5778] Bluetooth: hci3: command tx timeout [ 89.543720][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.589850][ T5778] Bluetooth: hci1: command tx timeout [ 89.792379][ T5769] veth0_vlan: entered promiscuous mode [ 89.820405][ T5769] veth1_vlan: entered promiscuous mode [ 89.853828][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.942229][ T5769] veth0_macvtap: entered promiscuous mode [ 89.990252][ T5769] veth1_macvtap: entered promiscuous mode [ 90.022688][ T5765] veth0_vlan: entered promiscuous mode [ 90.046753][ T5765] veth1_vlan: entered promiscuous mode [ 90.084970][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.133117][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.161882][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.172312][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.183819][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.193853][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.220131][ T5765] veth0_macvtap: entered promiscuous mode [ 90.267122][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.281181][ T5765] veth1_macvtap: entered promiscuous mode [ 90.315020][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.327931][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.341264][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.393780][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.406350][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.422072][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.444687][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.455441][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.464598][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.474313][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.528148][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.546382][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.557185][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.592301][ T5770] veth0_vlan: entered promiscuous mode [ 90.625759][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.635401][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.667207][ T5770] veth1_vlan: entered promiscuous mode [ 90.761640][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.784672][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.846991][ T5771] veth0_vlan: entered promiscuous mode [ 90.893666][ T5770] veth0_macvtap: entered promiscuous mode [ 90.922411][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.932636][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.946886][ T5771] veth1_vlan: entered promiscuous mode [ 90.979371][ T5770] veth1_macvtap: entered promiscuous mode [ 91.075604][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.100944][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.129933][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.143307][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.166002][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.229014][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.248620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.326151][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.344439][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.364447][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.376382][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.385279][ T5771] veth0_macvtap: entered promiscuous mode [ 91.413047][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.430816][ T5778] Bluetooth: hci0: command tx timeout [ 91.438395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 91.449993][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.459305][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.468109][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.560177][ T5771] veth1_macvtap: entered promiscuous mode [ 91.588565][ T5778] Bluetooth: hci3: command tx timeout [ 91.589631][ T5082] Bluetooth: hci2: command tx timeout [ 91.668577][ T5082] Bluetooth: hci1: command tx timeout [ 91.686436][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.777763][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.788265][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.810982][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.821302][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.838383][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.859442][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.038957][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.072939][ T787] cfg80211: failed to load regulatory.db [ 92.080302][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.101224][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.112193][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.128963][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.140363][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.165689][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.197387][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.224270][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.240676][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.253352][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283569][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.316322][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.411306][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.435335][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.537905][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.563726][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.862075][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.892902][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.069062][ T28] audit: type=1326 audit(1767839517.773:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 93.098239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.140629][ T28] audit: type=1326 audit(1767839517.773:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 93.185773][ T28] audit: type=1326 audit(1767839517.783:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fa072b829 code=0x7ffc0000 [ 93.298322][ T28] audit: type=1326 audit(1767839517.783:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 93.373857][ T28] audit: type=1326 audit(1767839517.803:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fa072b829 code=0x7ffc0000 [ 93.478275][ T28] audit: type=1326 audit(1767839517.803:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 93.511665][ T5082] Bluetooth: hci0: command tx timeout [ 93.602447][ T28] audit: type=1326 audit(1767839517.803:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fa072b829 code=0x7ffc0000 [ 93.668535][ T5082] Bluetooth: hci3: command tx timeout [ 93.675291][ T28] audit: type=1326 audit(1767839517.803:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 93.697702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.706243][ T5082] Bluetooth: hci2: command tx timeout [ 93.748787][ T5082] Bluetooth: hci1: command tx timeout [ 93.774730][ T28] audit: type=1326 audit(1767839517.803:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fa072b829 code=0x7ffc0000 [ 93.797724][ T28] audit: type=1326 audit(1767839517.803:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 94.050008][ T23] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 94.265199][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.284709][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.295976][ T23] usb 3-1: config 0 has no interface number 0 [ 94.309470][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 94.333367][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 94.357061][ T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.378933][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.429521][ T23] usb 3-1: config 0 descriptor?? [ 94.444676][ T5894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.482155][ T23] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 95.313602][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 95.328322][ T787] usb 3-1: USB disconnect, device number 2 [ 95.432157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.098707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.251404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.260421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.398807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.401276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.663093][ T5948] program syz.3.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.048064][ T5954] Zero length message leads to an empty skb [ 99.857718][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 99.857732][ T28] audit: type=1326 audit(1767839524.563:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 99.921693][ T28] audit: type=1326 audit(1767839524.573:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.035419][ T28] audit: type=1326 audit(1767839524.573:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.133645][ T28] audit: type=1326 audit(1767839524.573:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.208735][ T28] audit: type=1326 audit(1767839524.573:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.265312][ T28] audit: type=1326 audit(1767839524.583:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.328487][ T28] audit: type=1326 audit(1767839524.583:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.395271][ T28] audit: type=1326 audit(1767839524.583:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.468505][ T28] audit: type=1326 audit(1767839524.583:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.524944][ T28] audit: type=1326 audit(1767839524.583:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f996812b829 code=0x7ffc0000 [ 100.951680][ T5981] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.966180][ T5981] netlink: 'syz.1.33': attribute type 12 has an invalid length. [ 100.974739][ T5981] netlink: 'syz.1.33': attribute type 29 has an invalid length. [ 100.983202][ T5981] netlink: 148 bytes leftover after parsing attributes in process `syz.1.33'. [ 100.993696][ T5981] netlink: 'syz.1.33': attribute type 2 has an invalid length. [ 101.004514][ T5981] netlink: 23 bytes leftover after parsing attributes in process `syz.1.33'. [ 103.428886][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.478268][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.629554][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 103.655028][ T787] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 103.670155][ T787] usb 2-1: config 179 has no interface number 0 [ 103.679497][ T787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 103.688772][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 103.702900][ T787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 103.715575][ T787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.718635][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.739314][ T787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 103.758622][ T787] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.769879][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.789002][ T787] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 103.802404][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.824121][ T27] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 103.836546][ T6025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.843824][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.881397][ T27] usb 3-1: config 0 descriptor?? [ 104.152451][ T787] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 104.361888][ T787] usb 2-1: USB disconnect, device number 2 [ 104.361960][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 104.376152][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 104.416545][ T787] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 104.463201][ T2191] usb 3-1: USB disconnect, device number 3 [ 105.581206][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.738311][ T5888] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.768243][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 105.776847][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.794334][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.804649][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.827600][ T28] kauditd_printk_skb: 303 callbacks suppressed [ 105.827615][ T28] audit: type=1326 audit(1767839530.533:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 105.827614][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.827716][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.879490][ T28] audit: type=1326 audit(1767839530.593:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 105.891654][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.919537][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 105.935393][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 105.946351][ T28] audit: type=1326 audit(1767839530.623:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 105.971609][ T5888] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.000042][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.011625][ T5888] usb 2-1: Product: syz [ 106.015839][ T5888] usb 2-1: Manufacturer: syz [ 106.025853][ T5888] usb 2-1: SerialNumber: syz [ 106.048676][ T5888] usb 2-1: config 0 descriptor?? [ 106.082273][ T28] audit: type=1326 audit(1767839530.623:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 106.116684][ T28] audit: type=1326 audit(1767839530.623:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 106.162864][ T28] audit: type=1326 audit(1767839530.623:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 106.236373][ T28] audit: type=1326 audit(1767839530.623:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 106.256130][ T23] usb 3-1: usb_control_msg returned -32 [ 106.264756][ T28] audit: type=1326 audit(1767839530.623:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 106.304031][ T23] usbtmc 3-1:16.0: can't read capabilities [ 106.312256][ T6053] tipc: Enabling of bearer rejected, failed to enable media [ 106.320884][ T28] audit: type=1326 audit(1767839530.623:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 106.350645][ T28] audit: type=1326 audit(1767839530.623:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f7f7ab8f749 code=0x7ffc0000 [ 106.617272][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 106.640850][ T6061] netlink: 'syz.2.54': attribute type 72 has an invalid length. [ 106.656071][ T6061] netlink: 'syz.2.54': attribute type 8 has an invalid length. [ 106.727873][ T6064] netlink: 'syz.2.54': attribute type 72 has an invalid length. [ 106.743115][ T6064] netlink: 'syz.2.54': attribute type 8 has an invalid length. [ 107.250032][ T6069] netlink: 'syz.0.60': attribute type 21 has an invalid length. [ 107.257906][ T6069] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.266272][ T6069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.273965][ T6069] IPv6: NLM_F_CREATE should be set when creating new route [ 107.281348][ T6069] IPv6: NLM_F_CREATE should be set when creating new route [ 107.288762][ T6069] IPv6: NLM_F_CREATE should be set when creating new route [ 107.302455][ T6069] netlink: 'syz.0.60': attribute type 21 has an invalid length. [ 107.311960][ T6069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.820864][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.008265][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 108.016600][ T5834] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 108.025258][ T5834] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 108.038120][ T5834] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 108.050079][ T5834] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 108.063512][ T5834] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.074615][ T5834] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 108.085299][ T5834] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 108.102784][ T5834] usb 1-1: Product: syz [ 108.107124][ T5834] usb 1-1: Manufacturer: syz [ 108.112090][ T5834] usb 1-1: SerialNumber: syz [ 108.119938][ T5834] usb 1-1: config 0 descriptor?? [ 108.134772][ T5834] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 108.146246][ T5834] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 108.297106][ T23] usb 3-1: USB disconnect, device number 4 [ 108.480957][ T5834] usb 2-1: USB disconnect, device number 3 [ 108.859932][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.053993][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.060868][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 109.070169][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.088927][ T23] usb 3-1: config 0 descriptor?? [ 109.564130][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 109.573256][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 109.590158][ T23] usb 3-1: USB disconnect, device number 5 [ 110.612045][ T5834] usb 1-1: USB disconnect, device number 2 [ 110.680319][ T5834] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 112.720582][ T5082] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 112.729906][ T5082] Bluetooth: hci1: Injecting HCI hardware error event [ 112.740068][ T5778] Bluetooth: hci1: hardware error 0x00 [ 112.788689][ T5772] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.986006][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 113.020701][ T5772] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 113.048257][ T5772] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 113.089451][ T5772] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 113.183474][ T5772] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 113.245460][ T5772] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.295876][ T5772] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 113.329928][ T5772] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 113.363092][ T5772] usb 2-1: Product: syz [ 113.373512][ T5772] usb 2-1: Manufacturer: syz [ 113.388255][ T5772] usb 2-1: SerialNumber: syz [ 113.432472][ T5772] usb 2-1: config 0 descriptor?? [ 113.520788][ T5772] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.569956][ T5772] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 113.816854][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.91'. [ 113.832896][ T6162] netlink: 76 bytes leftover after parsing attributes in process `syz.3.91'. [ 114.169094][ T6165] binder_alloc: 6164: binder_alloc_buf, no vma [ 114.514037][ T6169] netlink: 'syz.3.93': attribute type 4 has an invalid length. [ 114.788522][ T5778] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 115.601722][ T5813] usb 2-1: USB disconnect, device number 4 [ 115.612042][ T5813] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 116.108240][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.326803][ T27] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 116.376978][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.397218][ T27] usb 1-1: Product: syz [ 116.405202][ T27] usb 1-1: Manufacturer: syz [ 116.414959][ T27] usb 1-1: SerialNumber: syz [ 116.426732][ T27] usb 1-1: config 0 descriptor?? [ 116.552452][ T27] viperboard 1-1:0.0: version 0.00 found at bus 001 address 003 [ 116.597112][ T27] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 116.680873][ T27] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 116.715508][ T27] usb 1-1: USB disconnect, device number 3 [ 117.478414][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.628352][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.636010][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.678387][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 117.689241][ T27] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 117.697668][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 117.718744][ T27] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 117.734241][ T27] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 117.747825][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.764816][ T27] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 117.775361][ T27] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 117.795120][ T27] usb 3-1: Product: syz [ 117.801039][ T27] usb 3-1: Manufacturer: syz [ 117.805782][ T27] usb 3-1: SerialNumber: syz [ 117.815693][ T27] usb 3-1: config 0 descriptor?? [ 117.819611][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 117.833488][ T27] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 117.836193][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 117.856828][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.870101][ T787] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 117.878693][ T27] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 117.880282][ T5813] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.896376][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.904675][ T787] usb 4-1: Product: syz [ 117.909290][ T787] usb 4-1: Manufacturer: syz [ 117.914828][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.928218][ T787] usb 4-1: SerialNumber: syz [ 117.947890][ T787] usb 4-1: config 0 descriptor?? [ 117.958745][ T5813] usb 2-1: config 0 descriptor?? [ 117.987732][ T787] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 118.374645][ T6209] syz.1.108 uses obsolete (PF_INET,SOCK_PACKET) [ 118.386956][ T5813] usbhid 2-1:0.0: can't add hid device: -71 [ 118.397387][ T5813] usbhid: probe of 2-1:0.0 failed with error -71 [ 118.409824][ T5813] usb 2-1: USB disconnect, device number 5 [ 118.622038][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.639120][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.922296][ T787] gspca_sonixj: reg_w1 err -110 [ 118.929207][ T787] sonixj: probe of 4-1:0.0 failed with error -110 [ 118.966293][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 120.261510][ T27] usb 3-1: USB disconnect, device number 6 [ 120.290590][ T27] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 120.499402][ T5813] usb 4-1: USB disconnect, device number 2 [ 121.166750][ T6271] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 121.598264][ T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.796135][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 121.855165][ T787] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 121.879431][ T787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 121.915862][ T787] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 121.943083][ T787] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 121.958603][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.967997][ T787] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 121.978026][ T787] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 121.986622][ T787] usb 3-1: Product: syz [ 121.991344][ T787] usb 3-1: Manufacturer: syz [ 121.995945][ T787] usb 3-1: SerialNumber: syz [ 122.062817][ T787] usb 3-1: config 0 descriptor?? [ 122.096472][ T787] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 122.126759][ T787] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 122.131188][ T6296] vivid-002: ================= START STATUS ================= [ 122.147625][ T6296] vivid-002: Radio HW Seek Mode: Bounded [ 122.164850][ T6296] vivid-002: Radio Programmable HW Seek: false [ 122.176754][ T6296] vivid-002: RDS Rx I/O Mode: Block I/O [ 122.193917][ T6296] vivid-002: Generate RBDS Instead of RDS: false [ 122.213890][ T6296] vivid-002: RDS Reception: true [ 122.226982][ T6296] vivid-002: RDS Program Type: 0 inactive [ 122.241281][ T6296] vivid-002: RDS PS Name: inactive [ 122.256497][ T6296] vivid-002: RDS Radio Text: inactive [ 122.263842][ T6296] vivid-002: RDS Traffic Announcement: false inactive [ 122.271192][ T6296] vivid-002: RDS Traffic Program: false inactive [ 122.277976][ T6296] vivid-002: RDS Music: false inactive [ 122.288862][ T6296] vivid-002: ================== END STATUS ================== [ 123.605642][ T6328] batman_adv: batadv0: Adding interface: dummy0 [ 123.613080][ T6328] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.638900][ T6328] batman_adv: batadv0: Interface activated: dummy0 [ 123.661182][ T6328] batadv0: mtu less than device minimum [ 123.669134][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.682078][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.694589][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.707266][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.719919][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.732501][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.744607][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.756497][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.768693][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.327275][ T787] usb 3-1: USB disconnect, device number 7 [ 124.348518][ T787] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 124.488600][ T5834] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 124.651889][ T6351] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 124.668526][ T6351] kvm: pic: non byte read [ 124.674139][ T6351] kvm: pic: level sensitive irq not supported [ 124.674613][ T6351] kvm: pic: non byte read [ 124.686047][ T6351] kvm: pic: level sensitive irq not supported [ 124.687064][ T6351] kvm: pic: non byte read [ 124.698712][ T5834] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.707148][ T5834] usb 4-1: config 0 has no interface number 0 [ 124.709463][ T6351] kvm: pic: level sensitive irq not supported [ 124.713607][ T6351] kvm: pic: non byte read [ 124.735435][ T5834] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 124.747987][ T5834] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 124.763879][ T5834] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.773423][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.801026][ T5834] usb 4-1: config 0 descriptor?? [ 124.807110][ T6339] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.825669][ T5834] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 125.571996][ T6364] program syz.2.160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.620968][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 125.631828][ T5813] usb 4-1: USB disconnect, device number 3 [ 126.971601][ T6394] vivid-003: ================= START STATUS ================= [ 126.981279][ T6394] vivid-003: Radio HW Seek Mode: Bounded [ 126.987179][ T6394] vivid-003: Radio Programmable HW Seek: false [ 126.994831][ T6394] vivid-003: RDS Rx I/O Mode: Block I/O [ 127.001141][ T6394] vivid-003: Generate RBDS Instead of RDS: false [ 127.007589][ T6394] vivid-003: RDS Reception: true [ 127.013655][ T6394] vivid-003: RDS Program Type: 0 inactive [ 127.021843][ T6394] vivid-003: RDS PS Name: inactive [ 127.027328][ T6394] vivid-003: RDS Radio Text: inactive [ 127.035166][ T6394] vivid-003: RDS Traffic Announcement: false inactive [ 127.043636][ T6394] vivid-003: RDS Traffic Program: false inactive [ 127.062680][ T6394] vivid-003: RDS Music: false inactive [ 127.082934][ T6394] vivid-003: ================== END STATUS ================== [ 128.825516][ T6434] syzkaller0: entered promiscuous mode [ 128.831134][ T6434] syzkaller0: entered allmulticast mode [ 128.871521][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.898842][ T6436] vivid-001: ================= START STATUS ================= [ 128.907817][ T6436] vivid-001: Radio HW Seek Mode: Bounded [ 128.915328][ T6436] vivid-001: Radio Programmable HW Seek: false [ 128.926140][ T6436] vivid-001: RDS Rx I/O Mode: Block I/O [ 128.937830][ T6436] vivid-001: Generate RBDS Instead of RDS: false [ 128.946512][ T6436] vivid-001: RDS Reception: true [ 128.980229][ T6436] vivid-001: RDS Program Type: 0 inactive [ 128.986087][ T6436] vivid-001: RDS PS Name: inactive [ 129.054127][ T6436] vivid-001: RDS Radio Text: inactive [ 129.064030][ T6436] vivid-001: RDS Traffic Announcement: false inactive [ 129.078184][ T6436] vivid-001: RDS Traffic Program: false inactive [ 129.084604][ T6436] vivid-001: RDS Music: false inactive [ 129.128343][ T6436] vivid-001: ================== END STATUS ================== [ 130.963115][ T6473] binder: 6472:6473 ioctl c0306201 0 returned -14 [ 131.337967][ T6490] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.628386][ T5772] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.820607][ T5772] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 131.836294][ T5772] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 131.886398][ T5772] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 131.927865][ T5772] usb 3-1: config 220 has no interface number 2 [ 131.938363][ T5772] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 131.968740][ T5772] usb 3-1: config 220 interface 0 has no altsetting 0 [ 131.983969][ T5772] usb 3-1: config 220 interface 76 has no altsetting 0 [ 132.007988][ T5772] usb 3-1: config 220 interface 1 has no altsetting 0 [ 132.033270][ T5772] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 132.043037][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.060195][ T5772] usb 3-1: Product: syz [ 132.073551][ T5772] usb 3-1: Manufacturer: syz [ 132.092512][ T5772] usb 3-1: SerialNumber: syz [ 132.204314][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 132.534025][ T5772] usb 3-1: selecting invalid altsetting 0 [ 132.547807][ T5772] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 132.556225][ T5772] usb 3-1: No valid video chain found. [ 132.577397][ T5772] usb 3-1: selecting invalid altsetting 0 [ 132.588592][ T5772] usbtest: probe of 3-1:220.1 failed with error -22 [ 132.612994][ T5772] usb 3-1: USB disconnect, device number 8 [ 133.039563][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.054614][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.898950][ T6525] binder: 6524:6525 ioctl c0306201 0 returned -14 [ 134.978675][ T5813] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.183269][ T5813] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 135.197449][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.206210][ T5813] usb 2-1: Product: syz [ 135.215281][ T5813] usb 2-1: Manufacturer: syz [ 135.220363][ T5813] usb 2-1: SerialNumber: syz [ 135.227785][ T5813] usb 2-1: config 0 descriptor?? [ 135.242920][ T5813] hub 2-1:0.0: bad descriptor, ignoring hub [ 135.251556][ T5813] hub: probe of 2-1:0.0 failed with error -5 [ 135.458916][ T5813] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 135.480855][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.491606][ T5813] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 135.506251][ T5813] usb 2-1: media controller created [ 135.534748][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.590529][ T5813] DVB: Unable to find symbol dib7000p_attach() [ 135.596777][ T5813] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 135.666665][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.677523][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.686612][ T5813] rc_core: IR keymap rc-dib0700-rc5 not found [ 135.695457][ T5813] Registered IR keymap rc-empty [ 135.703982][ T5813] dvb-usb: could not initialize remote control. [ 135.710619][ T5813] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 135.714854][ T6534] dib0700: tx buffer length is larger than 4. Not supported. [ 135.756709][ T5813] usb 2-1: USB disconnect, device number 6 [ 135.807390][ T5813] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 136.139688][ T6555] binder: 6554:6555 ioctl c0306201 0 returned -14 [ 138.165894][ T6601] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 140.378941][ T6637] syz.1.253[6637]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 141.947399][ T6664] PKCS8: Unsupported PKCS#8 version [ 142.499945][ T6674] vivid-000: ================= START STATUS ================= [ 142.532947][ T6674] vivid-000: Radio HW Seek Mode: Bounded [ 142.564901][ T6674] vivid-000: Radio Programmable HW Seek: false [ 142.607682][ T6674] vivid-000: RDS Rx I/O Mode: Block I/O [ 142.631589][ T6674] vivid-000: Generate RBDS Instead of RDS: false [ 142.655452][ T6674] vivid-000: RDS Reception: true [ 142.664913][ T6674] vivid-000: RDS Program Type: 0 inactive [ 142.678353][ T6674] vivid-000: RDS PS Name: inactive [ 142.697243][ T6674] vivid-000: RDS Radio Text: inactive [ 142.714036][ T6674] vivid-000: RDS Traffic Announcement: false inactive [ 142.741214][ T6674] vivid-000: RDS Traffic Program: false inactive [ 142.768347][ T6674] vivid-000: RDS Music: false inactive [ 142.810809][ T6674] vivid-000: ================== END STATUS ================== [ 146.794894][ T6730] vivid-001: ================= START STATUS ================= [ 146.809378][ T6730] vivid-001: Radio HW Seek Mode: Bounded [ 146.815316][ T6730] vivid-001: Radio Programmable HW Seek: false [ 146.826242][ T6730] vivid-001: RDS Rx I/O Mode: Block I/O [ 146.832459][ T6730] vivid-001: Generate RBDS Instead of RDS: false [ 146.842776][ T6730] vivid-001: RDS Reception: true [ 146.847813][ T6730] vivid-001: RDS Program Type: 0 inactive [ 146.855245][ T6730] vivid-001: RDS PS Name: inactive [ 146.862381][ T6730] vivid-001: RDS Radio Text: inactive [ 146.868066][ T6730] vivid-001: RDS Traffic Announcement: false inactive [ 146.875735][ T6730] vivid-001: RDS Traffic Program: false inactive [ 146.884291][ T6730] vivid-001: RDS Music: false inactive [ 146.890473][ T6730] vivid-001: ================== END STATUS ================== [ 147.750422][ T5082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.761881][ T5082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.770604][ T5082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.779707][ T5082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.787724][ T5082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.795634][ T5082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.173382][ T6751] chnl_net:caif_netlink_parms(): no params data found [ 148.371054][ T6751] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.414217][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.453092][ T6751] bridge_slave_0: entered allmulticast mode [ 148.481964][ T6751] bridge_slave_0: entered promiscuous mode [ 148.521028][ T6751] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.537781][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.567947][ T6751] bridge_slave_1: entered allmulticast mode [ 148.579354][ T6751] bridge_slave_1: entered promiscuous mode [ 148.785631][ T6751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.831543][ T6751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.113090][ T6751] team0: Port device team_slave_0 added [ 149.236407][ T6751] team0: Port device team_slave_1 added [ 149.455699][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.473493][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.563870][ T6751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.609399][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.627904][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.723603][ T6751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.765561][ T6784] netlink: 136 bytes leftover after parsing attributes in process `syz.2.304'. [ 149.829478][ T5082] Bluetooth: hci4: command tx timeout [ 150.083588][ T6751] hsr_slave_0: entered promiscuous mode [ 150.128777][ T6751] hsr_slave_1: entered promiscuous mode [ 150.152560][ T6751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.182979][ T6751] Cannot create hsr debugfs directory [ 150.612164][ T6751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.632507][ T6751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.662842][ T6751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.680897][ T6751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.843359][ T6751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.885832][ T6751] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.901142][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.908418][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.964472][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.971709][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.523473][ T6751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.908869][ T5082] Bluetooth: hci4: command tx timeout [ 152.165995][ T6751] veth0_vlan: entered promiscuous mode [ 152.172911][ T5888] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.219940][ T6751] veth1_vlan: entered promiscuous mode [ 152.237493][ T6841] vivid-003: ================= START STATUS ================= [ 152.245528][ T6841] vivid-003: Radio HW Seek Mode: Bounded [ 152.251915][ T6841] vivid-003: Radio Programmable HW Seek: false [ 152.258644][ T6841] vivid-003: RDS Rx I/O Mode: Block I/O [ 152.265447][ T6841] vivid-003: Generate RBDS Instead of RDS: false [ 152.272528][ T6841] vivid-003: RDS Reception: true [ 152.277661][ T6841] vivid-003: RDS Program Type: 0 inactive [ 152.284003][ T6841] vivid-003: RDS PS Name: inactive [ 152.291658][ T6841] vivid-003: RDS Radio Text: inactive [ 152.299169][ T6841] vivid-003: RDS Traffic Announcement: false inactive [ 152.306542][ T6841] vivid-003: RDS Traffic Program: false inactive [ 152.313571][ T6841] vivid-003: RDS Music: false inactive [ 152.319526][ T6841] vivid-003: ================== END STATUS ================== [ 152.347279][ T6751] veth0_macvtap: entered promiscuous mode [ 152.365115][ T6751] veth1_macvtap: entered promiscuous mode [ 152.374760][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.390805][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.411328][ T5888] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.425597][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.440372][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.453387][ T5888] usb 3-1: SerialNumber: syz [ 152.458065][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.470931][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.483362][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.493562][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.516892][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.527325][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.542862][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.557028][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.590775][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.605230][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.615982][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.629622][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.640069][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.650994][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.662333][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.674046][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.688818][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.706983][ T6751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.730383][ T5888] usb 3-1: 0:2 : does not exist [ 152.735676][ T5888] usb 3-1: unit 255 not found! [ 152.745018][ T6751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.755472][ T6751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.766947][ T6751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.777372][ T5888] usb 3-1: 5:0: cannot get min/max values for control 17 (id 5) [ 152.824892][ T5888] usb 3-1: USB disconnect, device number 9 [ 153.048724][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.063506][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.121761][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.130087][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.358346][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.417129][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 153.417145][ T28] audit: type=1326 audit(1767839578.123:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.4.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedc778f749 code=0x0 [ 153.528072][ T6856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.544307][ T6856] bond0: (slave bond1): Enslaving as an active interface with an up link [ 153.558534][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 153.576108][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 153.609883][ T6861] netlink: 14 bytes leftover after parsing attributes in process `syz.2.324'. [ 153.632509][ T27] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 153.654915][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.708846][ T27] usb 1-1: Product: syz [ 153.725862][ T27] usb 1-1: Manufacturer: syz [ 153.744472][ T27] usb 1-1: SerialNumber: syz [ 153.760950][ T27] usb 1-1: config 0 descriptor?? [ 153.767698][ T6847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.793868][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 153.810259][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 153.829917][ T27] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 153.956308][ T6861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.995873][ T5082] Bluetooth: hci4: command tx timeout [ 154.039694][ T6861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.051157][ T27] usb 1-1: USB disconnect, device number 4 [ 154.057070][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 154.097298][ T6861] bond0 (unregistering): (slave bond1): Releasing backup interface [ 154.126895][ T6861] bond0 (unregistering): Released all slaves [ 156.084407][ T5082] Bluetooth: hci4: command tx timeout [ 156.418389][ T5813] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 156.632171][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 156.644457][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 156.678817][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 156.714440][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 156.739968][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 156.750672][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 156.767183][ T5813] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 156.792572][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.814832][ T5813] usb 5-1: Product: syz [ 156.827679][ T5813] usb 5-1: Manufacturer: syz [ 156.842491][ T5813] usb 5-1: SerialNumber: syz [ 156.868410][ T5813] usb 5-1: config 0 descriptor?? [ 156.942335][ T5813] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 156.969468][ T5813] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 156.989680][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 157.123345][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 157.137729][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 157.147602][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 157.173059][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 157.208772][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 157.248423][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 157.267000][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 157.280406][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 157.291207][ T6933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.351'. [ 159.465042][ T6960] batman_adv: batadv0: Interface deactivated: dummy0 [ 159.689240][ T6960] batman_adv: batadv0: Removing interface: dummy0 [ 159.891393][ T23] usb 5-1: USB disconnect, device number 2 [ 160.732586][ T6981] syz.4.362 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.752993][ T6981] random: crng reseeded on system resumption [ 162.158438][ T5888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.355020][ T7008] program syz.0.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.380251][ T5888] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 162.411050][ T5888] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 162.428456][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.452361][ T5888] usb 3-1: Product: syz [ 162.463980][ T5888] usb 3-1: Manufacturer: syz [ 162.478472][ T5888] usb 3-1: SerialNumber: syz [ 162.507313][ T5888] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 162.720476][ T5888] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 162.732289][ T5888] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 162.747632][ T5888] usb 3-1: media controller created [ 162.834032][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.108103][ T5888] usb 3-1: USB disconnect, device number 10 [ 163.999237][ T7035] __nla_validate_parse: 24 callbacks suppressed [ 163.999254][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 164.698263][ T5813] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.884482][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 164.903805][ T5813] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 164.939583][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.960707][ T5813] usb 1-1: config 0 descriptor?? [ 164.967899][ T5834] IPVS: starting estimator thread 0... [ 164.992901][ T5813] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 165.088385][ T7064] IPVS: using max 27 ests per chain, 64800 per kthread [ 166.226689][ T5813] gspca_sonixj: reg_w1 err -71 [ 166.258849][ T5813] sonixj: probe of 1-1:0.0 failed with error -71 [ 166.285003][ T5813] usb 1-1: USB disconnect, device number 5 [ 166.937706][ T7083] netlink: 136 bytes leftover after parsing attributes in process `syz.0.395'. [ 167.057227][ T7086] mmap: syz.0.397 (7086) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.168327][ T5813] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 167.178543][ T5772] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.380448][ T5813] usb 2-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 167.397299][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.398543][ T5772] usb 5-1: Using ep0 maxpacket: 32 [ 167.423890][ T5813] usb 2-1: New USB device found, idVendor=10c5, idProduct=81ab, bcdDevice=e4.46 [ 167.436545][ T5772] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 167.440733][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 167.448898][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 167.466517][ T5813] usb 2-1: Product: syz [ 167.468337][ T5772] usb 5-1: config 1 interface 0 has no altsetting 0 [ 167.471934][ T5813] usb 2-1: Manufacturer: syz [ 167.484478][ T5772] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 167.494109][ T5813] usb 2-1: SerialNumber: syz [ 167.508875][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.512166][ T5813] usb 2-1: config 0 descriptor?? [ 167.516914][ T5772] usb 5-1: Product: syz [ 167.516932][ T5772] usb 5-1: Manufacturer: syz [ 167.516947][ T5772] usb 5-1: SerialNumber: syz [ 167.555960][ T5813] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 167.699158][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.717228][ T27] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.740028][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.786562][ T5772] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 167.796203][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.809239][ T7089] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 167.853372][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 167.882630][ T5772] usb 5-1: USB disconnect, device number 3 [ 168.024424][ T5772] appletouch 5-1:1.0: input: appletouch disconnected [ 168.104126][ T3381] usb 1-1: USB disconnect, device number 6 [ 169.951254][ T5772] usb 2-1: USB disconnect, device number 7 [ 170.061915][ T5834] IPVS: starting estimator thread 0... [ 170.178480][ T7112] IPVS: using max 21 ests per chain, 50400 per kthread [ 171.096525][ T7123] warning: `syz.2.407' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.628268][ T5772] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.850442][ T5772] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 171.871517][ T5772] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.895560][ T5772] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.932713][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.951874][ T5772] usb 1-1: config 0 descriptor?? [ 171.972366][ T5772] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 172.087121][ T7143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.818582][ T7151] sctp: [Deprecated]: syz.2.415 (pid 7151) Use of int in maxseg socket option. [ 172.818582][ T7151] Use struct sctp_assoc_value instead [ 172.935230][ T7154] vivid-000: ================= START STATUS ================= [ 172.944161][ T7154] vivid-000: Radio HW Seek Mode: Bounded [ 172.954637][ T7154] vivid-000: Radio Programmable HW Seek: false [ 172.961681][ T7154] vivid-000: RDS Rx I/O Mode: Block I/O [ 172.967610][ T7154] vivid-000: Generate RBDS Instead of RDS: false [ 172.975414][ T7154] vivid-000: RDS Reception: true [ 172.980973][ T7154] vivid-000: RDS Program Type: 0 inactive [ 172.987001][ T7154] vivid-000: RDS PS Name: inactive [ 172.995199][ T7154] vivid-000: RDS Radio Text: inactive [ 173.001674][ T7154] vivid-000: RDS Traffic Announcement: false inactive [ 173.008951][ T7154] vivid-000: RDS Traffic Program: false inactive [ 173.015513][ T7154] vivid-000: RDS Music: false inactive [ 173.021688][ T7154] vivid-000: ================== END STATUS ================== [ 173.118242][ T2191] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 173.310224][ T2191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 173.321359][ T2191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 173.340634][ T2191] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.354234][ T2191] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.364598][ T2191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.380458][ T2191] usb 2-1: config 0 descriptor?? [ 173.412035][ T7150] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.852403][ T2191] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 173.885456][ T2191] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 174.200706][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (syz.4.420) [ 174.366527][ T2191] usb 1-1: USB disconnect, device number 7 [ 174.419221][ T3381] usb 2-1: USB disconnect, device number 8 [ 174.823481][ T7180] process 'syz.0.423' launched './file1' with NULL argv: empty string added [ 175.475177][ T7189] kvm: user requested TSC rate below hardware speed [ 176.580168][ T5772] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.638652][ T5882] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 176.768204][ T5772] usb 3-1: Using ep0 maxpacket: 32 [ 176.777386][ T5772] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 176.786280][ T5772] usb 3-1: config 0 has no interface number 0 [ 176.793520][ T5772] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.816317][ T5772] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 176.828295][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 176.833657][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.845939][ T5882] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.857859][ T5772] usb 3-1: Product: syz [ 176.865793][ T5772] usb 3-1: Manufacturer: syz [ 176.870675][ T5882] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 176.887065][ T5772] usb 3-1: SerialNumber: syz [ 176.895712][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.905189][ T5772] usb 3-1: config 0 descriptor?? [ 176.918949][ T5882] usb 1-1: Product: syz [ 176.923255][ T5882] usb 1-1: Manufacturer: syz [ 176.937114][ T5772] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 176.947604][ T5882] usb 1-1: SerialNumber: syz [ 176.953108][ T3381] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.971942][ T5882] usb 1-1: config 0 descriptor?? [ 177.124075][ T5772] usb 3-1: qt2_attach - failed to power on unit: -71 [ 177.138559][ T5772] quatech2: probe of 3-1:0.51 failed with error -71 [ 177.148432][ T3381] usb 2-1: Using ep0 maxpacket: 16 [ 177.156955][ T3381] usb 2-1: config 0 has no interfaces? [ 177.181770][ T5772] usb 3-1: USB disconnect, device number 11 [ 177.187863][ T3381] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.212530][ T3381] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.225028][ T3381] usb 2-1: Manufacturer: syz [ 177.234505][ T3381] usb 2-1: config 0 descriptor?? [ 177.436272][ T5882] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 178.071668][ T2191] usb 1-1: USB disconnect, device number 8 [ 178.832000][ T7246] binder: BINDER_SET_CONTEXT_MGR already set [ 178.843669][ T7246] binder: 7245:7246 ioctl 4018620d 200000004a80 returned -16 [ 179.828353][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 179.897243][ T3381] usb 2-1: USB disconnect, device number 9 [ 179.968673][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.448'. [ 180.143341][ T7269] vivid-001: ================= START STATUS ================= [ 180.195954][ T7269] vivid-001: Radio HW Seek Mode: Bounded [ 180.204549][ T7269] vivid-001: Radio Programmable HW Seek: false [ 180.228855][ T7269] vivid-001: RDS Rx I/O Mode: Block I/O [ 180.259804][ T7269] vivid-001: Generate RBDS Instead of RDS: false [ 180.266288][ T7269] vivid-001: RDS Reception: true [ 180.281321][ T7269] vivid-001: RDS Program Type: 0 inactive [ 180.287261][ T7269] vivid-001: RDS PS Name: inactive [ 180.297698][ T7269] vivid-001: RDS Radio Text: inactive [ 180.305888][ T7269] vivid-001: RDS Traffic Announcement: false inactive [ 180.325767][ T7269] vivid-001: RDS Traffic Program: false inactive [ 180.365796][ T7269] vivid-001: RDS Music: false inactive [ 180.396729][ T7269] vivid-001: ================== END STATUS ================== [ 180.450246][ T3381] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 180.661535][ T3381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 180.708318][ T3381] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 180.745124][ T3381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.807332][ T3381] usb 2-1: config 0 descriptor?? [ 180.829858][ T7272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.098461][ T28] audit: type=1326 audit(1767839605.803:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc778f749 code=0x7ffc0000 [ 181.208035][ T28] audit: type=1326 audit(1767839605.803:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc772b829 code=0x7ffc0000 [ 181.255388][ T28] audit: type=1326 audit(1767839605.803:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc778f749 code=0x7ffc0000 [ 181.313509][ T3381] usbhid 2-1:0.0: can't add hid device: -71 [ 181.329104][ T3381] usbhid: probe of 2-1:0.0 failed with error -71 [ 181.362621][ T3381] usb 2-1: USB disconnect, device number 10 [ 181.378449][ T28] audit: type=1326 audit(1767839605.843:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc772b829 code=0x7ffc0000 [ 181.444867][ T28] audit: type=1326 audit(1767839605.843:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc772b829 code=0x7ffc0000 [ 181.478258][ T28] audit: type=1326 audit(1767839605.843:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc772b829 code=0x7ffc0000 [ 181.534769][ T28] audit: type=1326 audit(1767839605.843:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc772b829 code=0x7ffc0000 [ 181.568874][ T28] audit: type=1326 audit(1767839605.843:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc772b829 code=0x7ffc0000 [ 181.598487][ T28] audit: type=1326 audit(1767839605.843:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc772b829 code=0x7ffc0000 [ 181.626507][ T28] audit: type=1326 audit(1767839605.843:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc772b829 code=0x7ffc0000 [ 181.658856][ T7292] binder: BINDER_SET_CONTEXT_MGR already set [ 181.666023][ T7292] binder: 7290:7292 ioctl 4018620d 200000004a80 returned -16 [ 182.261620][ T7308] vivid-000: ================= START STATUS ================= [ 182.276375][ T7308] vivid-000: Radio HW Seek Mode: Bounded [ 182.287822][ T7308] vivid-000: Radio Programmable HW Seek: false [ 182.294395][ T7308] vivid-000: RDS Rx I/O Mode: Block I/O [ 182.300435][ T7308] vivid-000: Generate RBDS Instead of RDS: false [ 182.312301][ T7308] vivid-000: RDS Reception: true [ 182.317432][ T7308] vivid-000: RDS Program Type: 0 inactive [ 182.332849][ T7308] vivid-000: RDS PS Name: inactive [ 182.344568][ T7308] vivid-000: RDS Radio Text: inactive [ 182.350408][ T7308] vivid-000: RDS Traffic Announcement: false inactive [ 182.357305][ T7308] vivid-000: RDS Traffic Program: false inactive [ 182.374453][ T7308] vivid-000: RDS Music: false inactive [ 182.382980][ T7308] vivid-000: ================== END STATUS ================== [ 183.450256][ T7331] loop2: detected capacity change from 0 to 7 [ 183.506269][ T5920] Dev loop2: unable to read RDB block 7 [ 183.529754][ T5920] loop2: unable to read partition table [ 183.546537][ T5920] loop2: partition table beyond EOD, truncated [ 183.583265][ T7331] Dev loop2: unable to read RDB block 7 [ 183.593163][ T7331] loop2: unable to read partition table [ 183.613430][ T7331] loop2: partition table beyond EOD, truncated [ 183.622868][ T7331] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.705089][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.794217][ T7335] binder: BINDER_SET_CONTEXT_MGR already set [ 183.800460][ T7335] binder: 7334:7335 ioctl 4018620d 200000000100 returned -16 [ 183.815106][ T7335] binder: BINDER_SET_CONTEXT_MGR already set [ 183.821981][ T7335] binder: 7334:7335 ioctl 4018620d 200000004a80 returned -16 [ 183.842534][ T7337] vivid-001: ================= START STATUS ================= [ 183.851391][ T7337] vivid-001: Radio HW Seek Mode: Bounded [ 183.857121][ T7337] vivid-001: Radio Programmable HW Seek: false [ 183.864070][ T7337] vivid-001: RDS Rx I/O Mode: Block I/O [ 183.870278][ T7337] vivid-001: Generate RBDS Instead of RDS: false [ 183.878090][ T7337] vivid-001: RDS Reception: true [ 183.883366][ T7337] vivid-001: RDS Program Type: 0 inactive [ 183.889779][ T7337] vivid-001: RDS PS Name: inactive [ 183.896275][ T7337] vivid-001: RDS Radio Text: inactive [ 183.903185][ T7337] vivid-001: RDS Traffic Announcement: false inactive [ 183.916449][ T7337] vivid-001: RDS Traffic Program: false inactive [ 183.925588][ T7337] vivid-001: RDS Music: false inactive [ 183.934610][ T7337] vivid-001: ================== END STATUS ================== [ 183.946910][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.966260][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.976406][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.995148][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.005379][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.026278][ T9] usb 2-1: config 0 descriptor?? [ 184.459302][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 184.481303][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 185.152136][ T7363] syz_tun: entered promiscuous mode [ 185.165092][ T7363] syz_tun: left promiscuous mode [ 185.303109][ T2191] usb 2-1: USB disconnect, device number 11 [ 185.538314][ T3381] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 185.726835][ T3381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.745021][ T3381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.757839][ T3381] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.775930][ T3381] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.785675][ T3381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.798843][ T3381] usb 1-1: config 0 descriptor?? [ 186.243054][ T3381] plantronics 0003:047F:FFFF.0003: unbalanced delimiter at end of report description [ 186.263396][ T3381] plantronics 0003:047F:FFFF.0003: parse failed [ 186.276249][ T3381] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 186.426508][ T2191] usb 1-1: USB disconnect, device number 9 [ 186.778326][ T787] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 186.960554][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 186.974426][ T787] usb 5-1: config 143 has an invalid descriptor of length 0, skipping remainder of the config [ 186.994275][ T787] usb 5-1: config 143 has 0 interfaces, different from the descriptor's value: 1 [ 187.012283][ T787] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 187.024071][ T787] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 187.032482][ T787] usb 5-1: Product: syz [ 187.036707][ T787] usb 5-1: SerialNumber: syz [ 188.668259][ T5882] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 188.878348][ T5882] usb 3-1: not running at top speed; connect to a high speed hub [ 188.942731][ T5882] usb 3-1: config 1 has an invalid interface number: 54 but max is 0 [ 189.108527][ T5882] usb 3-1: config 1 has no interface number 0 [ 189.115289][ T5882] usb 3-1: config 1 interface 54 has no altsetting 0 [ 189.169985][ T5882] usb 3-1: New USB device found, idVendor=1114, idProduct=0001, bcdDevice=f4.a7 [ 189.208225][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.216313][ T5882] usb 3-1: Product: syz [ 189.258461][ T5882] usb 3-1: Manufacturer: syz [ 189.273363][ T5882] usb 3-1: SerialNumber: syz [ 189.382307][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 189.382322][ T28] audit: type=1326 audit(1767839614.083:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 189.513466][ T28] audit: type=1326 audit(1767839614.083:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 189.624469][ T28] audit: type=1326 audit(1767839614.083:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 189.686397][ T28] audit: type=1326 audit(1767839614.083:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 189.737430][ T28] audit: type=1326 audit(1767839614.083:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 189.954721][ T28] audit: type=1326 audit(1767839614.093:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 190.084459][ T28] audit: type=1326 audit(1767839614.103:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 190.123256][ T28] audit: type=1326 audit(1767839614.123:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 190.157263][ T28] audit: type=1326 audit(1767839614.143:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 190.253307][ T28] audit: type=1326 audit(1767839614.143:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4fa078f749 code=0x7ffc0000 [ 190.542392][ T5772] usb 5-1: USB disconnect, device number 4 [ 190.999851][ T7429] capability: warning: `syz.4.494' uses deprecated v2 capabilities in a way that may be insecure [ 191.630991][ T7436] binder: BINDER_SET_CONTEXT_MGR already set [ 191.637075][ T7436] binder: 7435:7436 ioctl 4018620d 200000004a80 returned -16 [ 193.130993][ T5882] usb 3-1: USB disconnect, device number 12 [ 193.291111][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.498'. [ 194.479773][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.489556][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615683][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 194.615695][ T28] audit: type=1800 audit(1767839619.323:505): pid=7461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.503" name="bus" dev="ramfs" ino=19480 res=0 errno=0 [ 195.118263][ T2191] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 195.431099][ T2191] usb 3-1: Using ep0 maxpacket: 16 [ 195.475780][ T2191] usb 3-1: config 0 has no interfaces? [ 195.492813][ T2191] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.516595][ T2191] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.532061][ T2191] usb 3-1: Manufacturer: syz [ 195.573500][ T2191] usb 3-1: config 0 descriptor?? [ 198.043313][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.517'. [ 198.412361][ T2191] usb 3-1: USB disconnect, device number 13 [ 200.038302][ T2191] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 200.239578][ T2191] usb 5-1: Using ep0 maxpacket: 32 [ 200.273823][ T2191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.333817][ T2191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.378280][ T2191] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.426229][ T2191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.459245][ T2191] usb 5-1: config 0 descriptor?? [ 200.519769][ T2191] hub 5-1:0.0: USB hub found [ 200.548797][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.778468][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 200.819061][ T9] usb 1-1: config 0 has no interfaces? [ 200.837161][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.849390][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.857652][ T9] usb 1-1: Manufacturer: syz [ 200.873590][ T9] usb 1-1: config 0 descriptor?? [ 203.865557][ T2191] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 203.903288][ T2191] usbhid 5-1:0.0: can't add hid device: -71 [ 203.941851][ T2191] usbhid: probe of 5-1:0.0 failed with error -71 [ 203.998233][ T5813] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 204.011039][ T2191] usb 5-1: USB disconnect, device number 5 [ 204.059242][ T787] usb 1-1: USB disconnect, device number 10 [ 204.198274][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 204.249471][ T5813] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 204.257902][ T5813] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 204.286069][ T5813] usb 2-1: config 127 has no interface number 1 [ 204.313732][ T5813] usb 2-1: config 127 interface 171 has no altsetting 0 [ 204.341864][ T5813] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 204.367205][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.391479][ T5813] usb 2-1: Product: syz [ 204.395804][ T5813] usb 2-1: Manufacturer: syz [ 204.403604][ T5813] usb 2-1: SerialNumber: syz [ 204.580175][ T2191] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 204.795836][ T2191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.843112][ T2191] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 204.882159][ T2191] usb 5-1: can't read configurations, error -71 [ 206.567955][ T5813] xr_serial 2-1:127.171: xr_serial converter detected [ 206.595779][ T5813] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 206.609834][ T5813] xr_serial: probe of ttyUSB0 failed with error -71 [ 206.634315][ T5813] usb 2-1: USB disconnect, device number 12 [ 206.656311][ T5813] xr_serial 2-1:127.171: device disconnected [ 207.293568][ T7629] netlink: 596 bytes leftover after parsing attributes in process `syz.2.547'. [ 207.560811][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.546'. [ 207.798244][ T5813] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 208.010450][ T5813] usb 3-1: config 0 has no interfaces? [ 208.025428][ T5813] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 208.038535][ T5813] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 208.065982][ T5813] usb 3-1: Manufacturer: syz [ 208.088910][ T5813] usb 3-1: config 0 descriptor?? [ 208.343572][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'. [ 208.373070][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'. [ 208.422528][ T5813] usb 3-1: USB disconnect, device number 14 [ 208.966193][ T7648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.973681][ T7648] IPv6: NLM_F_CREATE should be set when creating new route [ 210.014829][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.024233][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.646961][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.673207][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.708627][ T2191] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.911497][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 211.913234][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.917766][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 211.923886][ T2191] usb 1-1: Using ep0 maxpacket: 8 [ 211.946407][ T2191] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 211.968239][ T2191] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.986333][ T2191] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.996395][ T2191] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.010371][ T2191] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.028505][ T2191] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.037620][ T2191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.255945][ T7648] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.265089][ T7648] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.276923][ T7648] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.293198][ T7648] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.302344][ T2191] usb 1-1: GET_CAPABILITIES returned 0 [ 212.317570][ T2191] usbtmc 1-1:16.0: can't read capabilities [ 212.505760][ T7676] usb 1-1: USB disconnect, device number 11 [ 212.513043][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 212.968308][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 213.088258][ T7677] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 213.158268][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 213.168853][ T23] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 213.176883][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.187136][ T23] usb 2-1: config 0 has no interface number 0 [ 213.195132][ T23] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.227697][ T23] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 213.238356][ T23] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 213.252993][ T23] usb 2-1: Product: syz [ 213.257313][ T23] usb 2-1: SerialNumber: syz [ 213.294950][ T23] usb 2-1: config 0 descriptor?? [ 213.332597][ T23] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 213.368514][ T7677] usb 3-1: Using ep0 maxpacket: 32 [ 213.384854][ T7677] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 213.401142][ T7677] usb 3-1: config 0 has no interface number 0 [ 213.407477][ T7677] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 213.418921][ T7677] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 213.437952][ T7677] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.461486][ T7677] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 213.477316][ T7677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.486147][ T7677] usb 3-1: Product: syz [ 213.500354][ T7677] usb 3-1: Manufacturer: syz [ 213.507845][ T7677] usb 3-1: SerialNumber: syz [ 213.529677][ T7677] usb 3-1: config 0 descriptor?? [ 213.626409][ T7677] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input10 [ 213.657451][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 213.913076][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 213.969740][ T8] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 213.997098][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.055971][ T8] usb 1-1: Product: syz [ 214.138564][ T7704] program syz.4.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.167164][ T8] usb 1-1: Manufacturer: syz [ 214.282520][ T8] usb 1-1: SerialNumber: syz [ 214.314072][ T8] usb 1-1: config 0 descriptor?? [ 214.352701][ T8] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 214.378488][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 214.440005][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.466104][ T8] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 214.476458][ T8] usb 1-1: media controller created [ 214.525445][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.553920][ T7697] cxusb: i2c wr: len=80 is too big! [ 214.553920][ T7697] [ 214.617146][ T8] usb 1-1: selecting invalid altsetting 7 [ 214.637950][ T8] cxusb: set interface failed [ 214.646949][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 214.798445][ T8] DVB: Unable to find symbol lgdt330x_attach() [ 214.818274][ T8] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 214.961233][ T8] rc_core: IR keymap rc-dvico-portable not found [ 214.986200][ T8] Registered IR keymap rc-empty [ 215.008872][ T8] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 215.042977][ T8] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 215.082352][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 215.112492][ T8] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 215.146449][ T8] usb 1-1: USB disconnect, device number 12 [ 215.243272][ T8] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 215.429983][ T7720] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 216.087495][ T7677] usb 3-1: USB disconnect, device number 15 [ 216.451792][ T7724] tipc: Started in network mode [ 216.467484][ T7724] tipc: Node identity , cluster identity 4711 [ 216.520142][ T7724] tipc: Failed to obtain node identity [ 216.525705][ T7724] tipc: Enabling of bearer rejected, failed to enable media [ 216.552111][ T7726] syzkaller0: entered promiscuous mode [ 216.557654][ T7726] syzkaller0: entered allmulticast mode [ 217.046771][ T7677] usb 2-1: USB disconnect, device number 13 [ 217.698286][ T7677] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 217.878237][ T7677] usb 1-1: Using ep0 maxpacket: 32 [ 217.885761][ T7677] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 217.897149][ T7677] usb 1-1: config 0 has no interface number 0 [ 217.908389][ T7677] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 217.922051][ T7677] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 217.939382][ T7677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.956697][ T7677] usb 1-1: Product: syz [ 217.965433][ T7677] usb 1-1: Manufacturer: syz [ 217.976806][ T7677] usb 1-1: SerialNumber: syz [ 218.002531][ T7677] usb 1-1: config 0 descriptor?? [ 218.018792][ T7742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.251175][ T7742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.684431][ T7677] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 219.710800][ T7677] asix: probe of 1-1:0.188 failed with error -71 [ 219.751370][ T7677] usb 1-1: USB disconnect, device number 13 [ 219.964477][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.191275][ T23] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 220.209328][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.245470][ T23] usb 5-1: config 0 has no interface number 0 [ 220.254994][ T23] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 220.266473][ T23] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.297327][ T23] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 220.309899][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.331076][ T23] usb 5-1: Product: syz [ 220.342102][ T23] usb 5-1: Manufacturer: syz [ 220.354719][ T23] usb 5-1: SerialNumber: syz [ 220.407879][ T23] usb 5-1: config 0 descriptor?? [ 220.546570][ T7783] tipc: Started in network mode [ 220.551926][ T7783] tipc: Node identity 9ae752e1caa3, cluster identity 4711 [ 220.562248][ T7783] tipc: Enabled bearer , priority 0 [ 220.584729][ T7782] tipc: Disabling bearer [ 220.623254][ T23] usbtouchscreen: probe of 5-1:0.117 failed with error -32 [ 220.651777][ T23] usb 5-1: USB disconnect, device number 8 [ 220.853648][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 221.828307][ T8] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 222.078579][ T8] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 222.108517][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.147322][ T8] usb 5-1: Product: syz [ 222.199542][ T8] usb 5-1: Manufacturer: syz [ 222.244814][ T8] usb 5-1: SerialNumber: syz [ 222.317201][ T8] usb 5-1: config 0 descriptor?? [ 222.498313][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 222.702963][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 222.732774][ T23] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 222.781782][ T23] usb 1-1: config 0 has no interface number 0 [ 222.810433][ T23] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 222.862739][ T23] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 222.901862][ T23] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.973570][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 223.026021][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.086714][ T23] usb 1-1: Product: syz [ 223.098508][ T23] usb 1-1: Manufacturer: syz [ 223.103148][ T23] usb 1-1: SerialNumber: syz [ 223.225244][ T23] usb 1-1: config 0 descriptor?? [ 223.268218][ T23] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input13 [ 224.686632][ T7837] tipc: Failed to remove unknown binding: 66,0,0/0:659616915/659616916 [ 224.717701][ T7837] tipc: Failed to remove unknown binding: 66,0,0/0:659616915/659616916 [ 225.091755][ T23] usb 5-1: USB disconnect, device number 9 [ 225.430619][ T5813] usb 1-1: USB disconnect, device number 14 [ 225.591519][ T7852] binder: BINDER_SET_CONTEXT_MGR already set [ 225.597672][ T7852] binder: 7850:7852 ioctl 4018620d 200000004a80 returned -16 [ 225.958430][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.158587][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 226.169443][ T23] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 226.177967][ T23] usb 5-1: config 0 has no interface number 0 [ 226.190022][ T23] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 226.218762][ T23] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 226.231256][ T23] usb 5-1: Product: syz [ 226.235501][ T23] usb 5-1: Manufacturer: syz [ 226.246564][ T23] usb 5-1: config 0 descriptor?? [ 226.510798][ T23] usb 5-1: USB disconnect, device number 10 [ 226.747550][ T7862] netlink: 'syz.0.615': attribute type 17 has an invalid length. [ 227.915069][ T7884] binder: BINDER_SET_CONTEXT_MGR already set [ 227.939076][ T7884] binder: 7883:7884 ioctl 4018620d 200000000100 returned -16 [ 227.959345][ T7884] binder: BINDER_SET_CONTEXT_MGR already set [ 227.974381][ T7884] binder: 7883:7884 ioctl 4018620d 200000004a80 returned -16 [ 228.032311][ T5813] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.238404][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 228.283167][ T5813] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 228.297335][ T5813] usb 5-1: config 0 has no interface number 0 [ 228.311266][ T5813] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 228.324598][ T5813] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 228.337995][ T5813] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.385133][ T5813] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 228.436663][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.465283][ T5813] usb 5-1: Product: syz [ 228.502286][ T5813] usb 5-1: Manufacturer: syz [ 228.514548][ T5813] usb 5-1: SerialNumber: syz [ 228.536375][ T5813] usb 5-1: config 0 descriptor?? [ 228.573203][ T5813] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input14 [ 230.187596][ T7923] binder: 7922:7923 ioctl c0306201 0 returned -14 [ 231.128061][ T23] usb 5-1: USB disconnect, device number 11 [ 231.468319][ T7659] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 231.674251][ T7659] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 231.699921][ T7659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.722062][ T7659] usb 1-1: Product: syz [ 231.733568][ T7659] usb 1-1: Manufacturer: syz [ 231.744661][ T7659] usb 1-1: SerialNumber: syz [ 231.960773][ T5813] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.197267][ T7659] net_ratelimit: 10 callbacks suppressed [ 232.197285][ T7659] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 232.226823][ T5813] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 232.265679][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.316905][ T5813] usb 5-1: Product: syz [ 232.352052][ T5813] usb 5-1: Manufacturer: syz [ 232.384197][ T5813] usb 5-1: SerialNumber: syz [ 232.427270][ T5813] usb 5-1: config 0 descriptor?? [ 233.849362][ T7977] binder: 7976:7977 ioctl c0306201 0 returned -14 [ 233.881289][ T7659] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 233.948295][ T7659] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 234.006683][ T7659] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 234.057154][ T7659] lan78xx: probe of 1-1:1.0 failed with error -71 [ 234.118294][ T7659] usb 1-1: USB disconnect, device number 15 [ 234.572701][ T5813] usb 5-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 234.597864][ T5813] f81604 5-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 234.618777][ T5813] f81604: probe of 5-1:0.0 failed with error -110 [ 235.137355][ T7659] usb 5-1: USB disconnect, device number 12 [ 235.786852][ T8013] binder: 8012:8013 ioctl c0306201 0 returned -14 [ 235.828281][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 235.838379][ T7659] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 236.069160][ T7659] usb 1-1: Using ep0 maxpacket: 32 [ 236.088531][ T7659] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 236.112994][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.120922][ T7659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.145033][ T7659] usb 1-1: config 0 descriptor?? [ 236.157480][ T8] usb 5-1: config 0 has an invalid interface number: 238 but max is 0 [ 236.181958][ T8] usb 5-1: config 0 has no interface number 0 [ 236.202341][ T8] usb 5-1: config 0 interface 238 has no altsetting 0 [ 236.245156][ T8] usb 5-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d [ 236.267438][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.277968][ T8] usb 5-1: Product: syz [ 236.291034][ T8] usb 5-1: SerialNumber: syz [ 236.352396][ T8] usb 5-1: config 0 descriptor?? [ 236.391902][ T7659] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 236.429693][ T7659] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.452787][ T7659] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 236.483915][ T7659] usb 1-1: media controller created [ 236.547174][ T7659] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.808600][ T5813] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 237.058570][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 237.081758][ T5813] usb 3-1: config 0 has no interfaces? [ 237.128930][ T5813] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.168365][ T5813] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.231597][ T5813] usb 3-1: Manufacturer: syz [ 237.280118][ T8024] netlink: 'syz.1.669': attribute type 21 has an invalid length. [ 237.316175][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 237.330781][ T5813] usb 3-1: config 0 descriptor?? [ 237.367433][ T8024] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.377392][ T8024] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.386328][ T8024] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.395255][ T8024] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.456120][ T8024] netlink: 'syz.1.669': attribute type 21 has an invalid length. [ 237.485139][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 237.518366][ T7659] stb0899_attach: Driver disabled by Kconfig [ 237.524933][ T7659] az6027: no front-end attached [ 237.524933][ T7659] [ 237.547691][ T7659] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 237.602209][ T7659] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 237.672850][ T7659] dvb-usb: schedule remote query interval to 400 msecs. [ 237.696249][ T7659] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 238.228709][ T7659] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 238.358311][ T23] usb 1-1: USB disconnect, device number 16 [ 238.417669][ T7659] usb 2-1: Using ep0 maxpacket: 8 [ 238.463313][ T7659] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.495314][ T7659] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.531878][ T7659] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 238.543466][ T7659] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 238.565700][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 238.607097][ T7659] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.638535][ T7659] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.647800][ T7659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.026215][ T7659] usb 2-1: GET_CAPABILITIES returned 0 [ 239.068769][ T7659] usbtmc 2-1:16.0: can't read capabilities [ 239.250254][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.321632][ T8] gspca_main: spca501-2.14.0 probing 1776:501c [ 239.328895][ T8] gspca_spca501: reg write: error -71 [ 239.334391][ T8] spca501 5-1:0.238: Reg write failed for 0x02,0x07,0x05 [ 239.357647][ T7659] usb 2-1: USB disconnect, device number 14 [ 239.371323][ T8] spca501: probe of 5-1:0.238 failed with error -22 [ 239.433372][ T8] usb 5-1: USB disconnect, device number 13 [ 239.830419][ T7659] usb 3-1: USB disconnect, device number 16 [ 240.130019][ T8050] netlink: 188 bytes leftover after parsing attributes in process `syz.2.679'. [ 243.125040][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.703'. [ 243.208338][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 243.402229][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.443950][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.462691][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.491078][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.515309][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.539034][ T8] usb 2-1: config 0 descriptor?? [ 243.857469][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.707'. [ 243.971296][ T8] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 244.010371][ T8] plantronics 0003:047F:FFFF.0004: parse failed [ 244.031245][ T8] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 244.162390][ T5888] usb 2-1: USB disconnect, device number 15 [ 245.108438][ T5888] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 245.318343][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 245.331534][ T5888] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 245.348463][ T5888] usb 2-1: config 0 has no interface number 0 [ 245.358226][ T5888] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 245.381361][ T5888] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 245.398296][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.418269][ T5888] usb 2-1: Product: syz [ 245.427144][ T5888] usb 2-1: Manufacturer: syz [ 245.443447][ T5888] usb 2-1: SerialNumber: syz [ 245.467319][ T5888] usb 2-1: config 0 descriptor?? [ 245.487328][ T8141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.734606][ T8141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.170671][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.717'. [ 247.736204][ T8185] netlink: 'syz.4.729': attribute type 27 has an invalid length. [ 247.819668][ T5888] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 247.863981][ T5888] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 247.892830][ T5888] asix: probe of 2-1:0.188 failed with error -71 [ 247.932584][ T5888] usb 2-1: USB disconnect, device number 16 [ 247.952473][ T8190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.731'. [ 248.060022][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.071145][ T8185] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.090618][ T8185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.193919][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'. [ 248.288220][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 248.495207][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 248.579340][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.604254][ T23] usb 5-1: config 0 has no interface number 0 [ 248.645066][ T23] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 248.691426][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.706975][ T23] usb 5-1: Product: syz [ 248.721614][ T23] usb 5-1: Manufacturer: syz [ 248.752391][ T23] usb 5-1: SerialNumber: syz [ 248.770859][ T23] usb 5-1: config 0 descriptor?? [ 248.784469][ T23] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 249.358459][ T23] gspca_spca1528: reg_w err -110 [ 249.408377][ T23] spca1528: probe of 5-1:0.1 failed with error -110 [ 249.788395][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 250.019394][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 250.050593][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.082511][ T23] usb 1-1: Product: syz [ 250.090998][ T23] usb 1-1: Manufacturer: syz [ 250.100997][ T23] usb 1-1: SerialNumber: syz [ 250.532015][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 251.223677][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 251.240132][ T5882] usb 5-1: USB disconnect, device number 14 [ 251.408538][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 251.416964][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.435432][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.446060][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.456881][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 251.461595][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 251.481576][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.505316][ T9] usb 2-1: config 0 descriptor?? [ 251.939501][ T9] cougar 0003:060B:500A.0005: unexpected long global item [ 251.947490][ T9] cougar 0003:060B:500A.0005: parse failed [ 251.954132][ T9] cougar: probe of 0003:060B:500A.0005 failed with error -22 [ 252.128756][ T9] usb 2-1: USB disconnect, device number 17 [ 252.704841][ T8243] random: crng reseeded on system resumption [ 252.770610][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 252.797107][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 252.810742][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 252.825583][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 252.838024][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 252.851229][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 252.863722][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 252.881868][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 252.893247][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.906054][ T23] lan78xx: probe of 1-1:1.0 failed with error -71 [ 252.934061][ T23] usb 1-1: USB disconnect, device number 17 [ 253.507367][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 253.677594][ T28] audit: type=1326 audit(1767839678.383:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.700213][ T28] audit: type=1326 audit(1767839678.383:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.723172][ T28] audit: type=1326 audit(1767839678.393:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.752353][ T28] audit: type=1326 audit(1767839678.393:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.782906][ T28] audit: type=1326 audit(1767839678.393:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.811348][ T28] audit: type=1326 audit(1767839678.393:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.840198][ T28] audit: type=1326 audit(1767839678.393:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.868530][ T28] audit: type=1326 audit(1767839678.393:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.891591][ T28] audit: type=1326 audit(1767839678.393:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 253.921201][ T28] audit: type=1326 audit(1767839678.393:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f996818f749 code=0x7ffc0000 [ 254.075550][ T8272] Cannot find set identified by id 65534 to match [ 254.708009][ T23] IPVS: starting estimator thread 0... [ 254.799352][ T8289] IPVS: using max 18 ests per chain, 43200 per kthread [ 255.912613][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.919229][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.244258][ T8403] netlink: 104 bytes leftover after parsing attributes in process `syz.1.808'. [ 259.421324][ T8407] tipc: Enabled bearer , priority 10 [ 259.555657][ T8410] binder: 8408:8410 ioctl c0306201 0 returned -14 [ 259.874312][ T28] kauditd_printk_skb: 361 callbacks suppressed [ 259.874324][ T28] audit: type=1326 audit(1767839684.583:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedc778f749 code=0x0 [ 259.976197][ T8419] binder_alloc: 8417: binder_alloc_buf, no vma [ 260.540708][ T5813] tipc: Node number set to 1346654945 [ 260.925925][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 261.963432][ T8463] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 262.313332][ T28] audit: type=1326 audit(1767839687.013:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.0.831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fa078f749 code=0x0 [ 262.335000][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.377464][ T28] audit: type=1326 audit(1767839687.083:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedc778f749 code=0x0 [ 262.399131][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.117097][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 263.568414][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 263.590937][ T7659] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 263.782829][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 263.807292][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.821256][ T7659] usb 2-1: Using ep0 maxpacket: 16 [ 263.836784][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.846598][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.858389][ T7659] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 263.867506][ T7659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.887471][ T23] usb 1-1: config 0 descriptor?? [ 263.903516][ T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 263.913522][ T7659] usb 2-1: config 0 descriptor?? [ 263.932193][ T7659] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 264.777307][ T8501] binder: 8499:8501 ioctl c0306201 0 returned -14 [ 265.640077][ T28] audit: type=1326 audit(1767839690.353:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f996818f749 code=0x0 [ 266.304526][ T5813] usb 1-1: USB disconnect, device number 18 [ 266.373569][ T8513] netlink: 'syz.0.846': attribute type 32 has an invalid length. [ 266.580274][ T7659] gspca_sonixj: reg_w1 err -71 [ 266.585212][ T7659] sonixj: probe of 2-1:0.0 failed with error -71 [ 266.626693][ T7659] usb 2-1: USB disconnect, device number 18 [ 266.876859][ T8528] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 269.134640][ T8566] binder: BINDER_SET_CONTEXT_MGR already set [ 269.158214][ T8566] binder: 8564:8566 ioctl 4018620d 200000004a80 returned -16 [ 270.530809][ T8589] QAT: Device 253 not found [ 272.638296][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 272.648203][ T6503] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 272.858283][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 272.926011][ T9] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 272.938061][ T9] usb 1-1: config 0 has no interface number 0 [ 272.956815][ T9] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 272.977028][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.998464][ T9] usb 1-1: Product: syz [ 273.005112][ T9] usb 1-1: Manufacturer: syz [ 273.014590][ T9] usb 1-1: SerialNumber: syz [ 273.083762][ T9] usb 1-1: config 0 descriptor?? [ 273.112799][ T9] as10x_usb: device has been detected [ 273.119459][ T9] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 273.195705][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 273.314727][ T9] as10x_usb: error during firmware upload part1 [ 273.337517][ T9] Registered device PCTV Systems picoStick (74e) [ 273.349236][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 273.384295][ T9] usb 1-1: USB disconnect, device number 19 [ 273.482249][ T9] Unregistered device PCTV Systems picoStick (74e) [ 273.484524][ T9] as10x_usb: device has been disconnected