last executing test programs: 12.24705406s ago: executing program 1 (id=731): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x800, 0x0, 0x3e, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002680), 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 11.523733898s ago: executing program 1 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 9.604286695s ago: executing program 1 (id=736): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r2, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 9.427435779s ago: executing program 3 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x309, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 9.187558085s ago: executing program 3 (id=738): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x78222551}, 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x13, r4, 0xd8630000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) 9.084587978s ago: executing program 1 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000020205000000000000000000020000061800028014000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 7.474612927s ago: executing program 3 (id=740): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x800, 0x0, 0x3e, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002680), 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 7.034330628s ago: executing program 1 (id=742): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x78222551}, 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x13, r3, 0xd8630000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) 5.352623139s ago: executing program 1 (id=743): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) unshare(0x6a060000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 4.52476582s ago: executing program 0 (id=747): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 4.518261699s ago: executing program 3 (id=748): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0xe26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000280)="866f9be5741eea6b76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0bab566113ef2cb5b3e51b06e5925d81e6e4fd80f16439e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1ba5140011f729f8cc3255291014c332eb7a1958a88d150eb4e8dca1a80a824d203b4b38981012000000000000000000", 0xbd}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008", 0xce}, {&(0x7f00000000c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/48, 0x30}, {&(0x7f0000000b40)="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", 0x312}], 0x5}}], 0x1, 0x40080a0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040052) 4.395122712s ago: executing program 3 (id=749): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/20, 0x14}, 0x8}], 0x1, 0x120, 0x0) 4.312440175s ago: executing program 0 (id=750): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x40, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10080}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000950000000000000042cc2eb38da2cb240c44c95d80d0accad91adc896d2ecd5d60666e9ef28eea12d6be5a3799e3557cdd6b74a1af8c00dec4b095044802324b73389a48af1b98506e99f35bd63b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000020205000000000000000000020000061800028014000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 2.220862846s ago: executing program 3 (id=751): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d500000001"], 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 2.214431256s ago: executing program 2 (id=752): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000480)=""/189, 0xbd) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) 2.108635279s ago: executing program 0 (id=753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.025975591s ago: executing program 2 (id=754): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "2502"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0) 1.863766505s ago: executing program 0 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 1.710801618s ago: executing program 0 (id=756): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x800, 0x0, 0x3e, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002680), 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.372707317s ago: executing program 2 (id=757): syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.258976149s ago: executing program 2 (id=758): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0xe26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000280)="866f9be5741eea6b76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0bab566113ef2cb5b3e51b06e5925d81e6e4fd80f16439e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1ba5140011f729f8cc3255291014c332eb7a1958a88d150eb4e8dca1a80a824d203b4b38981012000000000000000000", 0xbd}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008", 0xce}, {&(0x7f00000000c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/48, 0x30}, {&(0x7f0000000b40)="853d812375877866806fdff43051b4023fa2334c45b8d31dff2233f12c7ffec14b58976722a067ecd394dcf55ad8bc6adf88e0dd053d47e5ddc3b08ac01e128339844430d1033bc401927fd38018f2b0e9b713aa160d7b265e90ca90a88cbb0b1493ccdd35f17ed434451c742e3d9c7607fb338490fb578a48c1853a42bbd171367e33a75c9cde0160143ad61ffad513ae1059f9e31087c6448fae895aa68e70fa53628160525c97bf79f68247bf691e8e46c94c3c0fa018fd9d10c19d7bf717ef1da47e10b55a09cb5e411146c03b26abef74a1b955c2202b9a4838f5b2495c6728602328820e2df2acfb22138f1d86c29f73641d1a55e8deadd320d9e951b33370ccebbd05a4d4358c514b5c7b695a9ec90b36ac77e9dd4e03569065d281b1b727a1692e26b8f363d7540e8ca2e806164a6fc46f8e2d2a6c128daf63a398077a13fbc0d539bda7fb8b904638e612482b548f1a089ec8d80fe0e6baf6379a037ce7efdf6ede864f2c8736b1abb71991ba15f2fd1372314390de9a3fa1a4eefc12dfd5bbf5c6606a4a5d2e08742f02fbc8aaa140a652369a2200736851cf259dde2999c8b2539d7702d0b37aae943e160e14d24b3eaa0b025d55a16c924f16e9eecebbc52b2069ba5223df0e252c78372aa13958a89a2b3a2044aa2275817ac942b261d2f2c25c45984b8af9dfa7652f7530aa4e714ad4c66b65ebaf42e223e415f1326bfd00d98bdaa4396a23aaa3623d0324beb61843f685a4e577247ae9b833aee04e55ae6d336d73513fbdcc62af87d2ba946a9c25d175e66990c636df62f853377274c1a04fb1fb235ee080cad746e239cdc728474812e995ac0c670f9885ad7704a281044948efd5170cab39daa5b034349741fb857260796231aa7864e9517c159e7a5e05d86dd4f4185d0ece85f3bcdaf83dab3e2dfbe8ee2786b23b7f0dda7243e217382da2d3f481447f0f54f2d4b0d52e7afb07cc615c06699f53aadaf1073cbc7e40477acad0a92ec51ee421524bc082abb17cd85d21caf69dafb65e4896f5879c8c4e5a1ac91d4b9529da9cab44e27a88a1d446d5e59f6e186083d7b10ba0cee1933f62e8326fac01b12bdf", 0x312}], 0x5}}], 0x1, 0x40080a0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040052) 1.21430685s ago: executing program 2 (id=759): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/20, 0x14}, 0x8}], 0x1, 0x120, 0x0) 4.65797ms ago: executing program 2 (id=760): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 0s ago: executing program 0 (id=761): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x40, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10080}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000950000000000000042cc2eb38da2cb240c44c95d80d0accad91adc896d2ecd5d60666e9ef28eea12d6be5a3799e3557cdd6b74a1af8c00dec4b095044802324b73389a48af1b98506e99f35bd63b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000020205000000000000000000020000061800028014000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) kernel console output (not intermixed with test programs): to 1560 would solve the problem. [ 84.536673][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.544956][ T5790] Bluetooth: hci0: command tx timeout [ 84.559386][ T5776] hsr_slave_0: entered promiscuous mode [ 84.565972][ T5776] hsr_slave_1: entered promiscuous mode [ 84.572369][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.580179][ T5776] Cannot create hsr debugfs directory [ 84.601410][ T5790] Bluetooth: hci3: command tx timeout [ 84.629741][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.638891][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.668279][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.685769][ T5778] Bluetooth: hci2: command tx timeout [ 84.691945][ T5790] Bluetooth: hci1: command tx timeout [ 84.716563][ T5780] hsr_slave_0: entered promiscuous mode [ 84.723616][ T5780] hsr_slave_1: entered promiscuous mode [ 84.729982][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.738369][ T5780] Cannot create hsr debugfs directory [ 84.923140][ T5788] hsr_slave_0: entered promiscuous mode [ 84.929861][ T5788] hsr_slave_1: entered promiscuous mode [ 84.936838][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.944617][ T5788] Cannot create hsr debugfs directory [ 85.238697][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.266279][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.285305][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.304049][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.332876][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.354576][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.379353][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.407073][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.460901][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.479675][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.490776][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.506163][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.625174][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.635277][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.655364][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.668724][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.731918][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.786725][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.835023][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.848252][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.884626][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.891960][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.926608][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.933842][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.945035][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.952228][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.980499][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.987666][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.005092][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.063581][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.097402][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.117840][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.125031][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.165117][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.172345][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.266007][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.333110][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.340349][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.386023][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.393320][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.602885][ T5778] Bluetooth: hci0: command tx timeout [ 86.681866][ T5778] Bluetooth: hci3: command tx timeout [ 86.758598][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.765958][ T5778] Bluetooth: hci2: command tx timeout [ 86.771513][ T5778] Bluetooth: hci1: command tx timeout [ 86.866503][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.944076][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.976601][ T5781] veth0_vlan: entered promiscuous mode [ 86.998233][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.038879][ T5781] veth1_vlan: entered promiscuous mode [ 87.157155][ T5788] veth0_vlan: entered promiscuous mode [ 87.173868][ T5776] veth0_vlan: entered promiscuous mode [ 87.196513][ T5788] veth1_vlan: entered promiscuous mode [ 87.237672][ T5776] veth1_vlan: entered promiscuous mode [ 87.266865][ T5781] veth0_macvtap: entered promiscuous mode [ 87.307683][ T5780] veth0_vlan: entered promiscuous mode [ 87.320066][ T5781] veth1_macvtap: entered promiscuous mode [ 87.368807][ T5788] veth0_macvtap: entered promiscuous mode [ 87.386699][ T5780] veth1_vlan: entered promiscuous mode [ 87.402951][ T5788] veth1_macvtap: entered promiscuous mode [ 87.414388][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.455075][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.490842][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.503077][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.516582][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.536026][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.548562][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.557974][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.568480][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.589929][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.602064][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.614006][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.625119][ T5776] veth0_macvtap: entered promiscuous mode [ 87.646421][ T5776] veth1_macvtap: entered promiscuous mode [ 87.669639][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.679390][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.688233][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.698158][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.725637][ T5780] veth0_macvtap: entered promiscuous mode [ 87.768480][ T5780] veth1_macvtap: entered promiscuous mode [ 87.780286][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.797226][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.810338][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.821389][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.833938][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.897030][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.919811][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.930325][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.941315][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.953640][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.024099][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.034404][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.045231][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.054779][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.070933][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.083555][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.093757][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.104367][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.114240][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.126163][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.138810][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.159355][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.168513][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.179133][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.190316][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.198095][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.211668][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.221839][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.232627][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.244621][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.275041][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.286184][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.295033][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.303815][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380698][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.388835][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.477270][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.493176][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.509431][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.514882][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.610185][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.630591][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.681559][ T5790] Bluetooth: hci0: command tx timeout [ 88.762523][ T5790] Bluetooth: hci3: command tx timeout [ 88.781047][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.820133][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.829918][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.841474][ T5790] Bluetooth: hci1: command tx timeout [ 88.847053][ T5790] Bluetooth: hci2: command tx timeout [ 88.884868][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.942719][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.005311][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.022251][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.121736][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.181785][ T5826] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.324303][ T5855] Zero length message leads to an empty skb [ 89.411886][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 89.442452][ T5826] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 89.452184][ T5826] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.468391][ T5826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.480272][ T5826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.502828][ T5826] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.516945][ T5826] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.528377][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.765762][ T5826] usb 3-1: GET_CAPABILITIES returned 0 [ 89.798454][ T5826] usbtmc 3-1:16.0: can't read capabilities [ 89.990150][ T5826] usb 3-1: USB disconnect, device number 2 [ 90.118753][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 90.532418][ T175] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.732471][ T5887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 90.741452][ T175] usb 2-1: Using ep0 maxpacket: 16 [ 90.752781][ T175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.763390][ T5790] Bluetooth: hci0: command tx timeout [ 90.783795][ T175] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.793746][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.806406][ T175] usb 2-1: Product: syz [ 90.810661][ T175] usb 2-1: Manufacturer: syz [ 90.819609][ T175] usb 2-1: SerialNumber: syz [ 90.841687][ T5790] Bluetooth: hci3: command tx timeout [ 90.850759][ T175] usb 2-1: config 0 descriptor?? [ 90.911564][ T5826] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.932147][ T5790] Bluetooth: hci2: command tx timeout [ 90.937687][ T5790] Bluetooth: hci1: command tx timeout [ 91.157549][ T5826] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.168719][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.179423][ T5826] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.191077][ T5826] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.211238][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.229537][ T5826] usb 4-1: Product: syz [ 91.233483][ T5817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.235527][ T5826] usb 4-1: Manufacturer: syz [ 91.269963][ T5826] cdc_wdm 4-1:1.0: skipping garbage [ 91.289219][ T5826] cdc_wdm 4-1:1.0: skipping garbage [ 91.299850][ T5826] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 91.440071][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.455425][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.476730][ T5817] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 91.488126][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.514542][ T5817] usb 3-1: config 0 descriptor?? [ 91.569282][ T8] usb 4-1: USB disconnect, device number 2 [ 92.047955][ T9] cfg80211: failed to load regulatory.db [ 92.136607][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.146628][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.160512][ T5894] capability: warning: `syz.2.15' uses deprecated v2 capabilities in a way that may be insecure [ 92.182287][ T5817] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x1 [ 92.195020][ T5817] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 92.379088][ T5817] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 92.389230][ T5817] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 92.413658][ T5817] arvo: probe of 0003:1E7D:30D4.0001 failed with error -71 [ 92.445272][ T5817] usb 3-1: USB disconnect, device number 3 [ 92.650934][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 92.843402][ T5818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.973755][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 93.031237][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 93.038832][ T5818] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 93.048448][ T5818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.060396][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.071423][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.086358][ T5818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.099933][ T5818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.114912][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.354679][ T5817] usb 2-1: USB disconnect, device number 2 [ 93.385122][ T5818] usb 1-1: GET_CAPABILITIES returned 0 [ 93.390714][ T5818] usbtmc 1-1:16.0: can't read capabilities [ 93.522347][ T5943] syzkaller0: entered promiscuous mode [ 93.532698][ T5943] syzkaller0: entered allmulticast mode [ 93.604983][ T5819] usb 1-1: USB disconnect, device number 2 [ 93.689924][ T5946] syzkaller0: entered promiscuous mode [ 93.695977][ T5946] syzkaller0: entered allmulticast mode [ 93.866828][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 93.919661][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 94.392102][ T5968] syzkaller0: entered promiscuous mode [ 94.397946][ T5968] syzkaller0: entered allmulticast mode [ 94.587754][ T5970] syzkaller0: entered promiscuous mode [ 94.618038][ T5970] syzkaller0: entered allmulticast mode [ 94.746553][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 95.102396][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 95.196548][ T5997] syzkaller0: entered promiscuous mode [ 95.208864][ T5997] syzkaller0: entered allmulticast mode [ 95.211752][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.359983][ T6000] syzkaller0: entered promiscuous mode [ 95.365810][ T6000] syzkaller0: entered allmulticast mode [ 95.401306][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 95.413152][ T5817] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 95.426140][ T5817] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.436455][ T5817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.449394][ T5817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.459624][ T5817] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.472991][ T5817] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.483432][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.589545][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 95.599832][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 95.716250][ T5817] usb 1-1: GET_CAPABILITIES returned 0 [ 95.735127][ T5817] usbtmc 1-1:16.0: can't read capabilities [ 95.852217][ T6007] syzkaller0: entered promiscuous mode [ 95.862457][ T6007] syzkaller0: entered allmulticast mode [ 95.925899][ T9] usb 1-1: USB disconnect, device number 3 [ 95.962423][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 96.285972][ T6018] syzkaller0: entered promiscuous mode [ 96.301254][ T6018] syzkaller0: entered allmulticast mode [ 96.380862][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 96.400554][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 96.410655][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 96.896607][ T6042] mmap: syz.1.70 (6042) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.922104][ T5817] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.089607][ T6046] syzkaller0: entered promiscuous mode [ 97.098451][ T6046] syzkaller0: entered allmulticast mode [ 97.119656][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 97.131227][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.141692][ T5817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.156905][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 97.190668][ T5817] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 97.200098][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.208554][ T5817] usb 1-1: Product: syz [ 97.214081][ T5817] usb 1-1: Manufacturer: syz [ 97.218808][ T5817] usb 1-1: SerialNumber: syz [ 97.246572][ T5817] ums-karma 1-1:1.0: USB Mass Storage device detected [ 97.268427][ T5817] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 97.268427][ T5817] Please send a copy of this message to and [ 97.482944][ T9] usb 1-1: USB disconnect, device number 4 [ 97.772353][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.937915][ T6073] syzkaller0: entered promiscuous mode [ 97.943687][ T6073] syzkaller0: entered allmulticast mode [ 97.961348][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 97.981383][ T5819] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 97.989760][ T5819] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.005576][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.016690][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.026857][ T5819] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.047938][ T5819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.057419][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.293955][ T5819] usb 4-1: GET_CAPABILITIES returned 0 [ 98.299541][ T5819] usbtmc 4-1:16.0: can't read capabilities [ 98.499481][ T5826] usb 4-1: USB disconnect, device number 3 [ 98.531697][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.651264][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.736704][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.748311][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.758985][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 98.768189][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.778839][ T9] usb 1-1: config 0 descriptor?? [ 98.847337][ T5819] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 98.858867][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.870030][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.879870][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 98.895784][ T5819] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 98.904976][ T5819] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 98.913201][ T5819] usb 2-1: Manufacturer: syz [ 98.920324][ T5819] usb 2-1: config 0 descriptor?? [ 99.357432][ T5819] usbhid 2-1:0.0: can't add hid device: -32 [ 99.370302][ T5819] usbhid: probe of 2-1:0.0 failed with error -32 [ 99.381628][ T5819] usb 2-1: USB disconnect, device number 3 [ 99.396224][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.417596][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.432252][ T9] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x1 [ 99.443203][ T9] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 99.475290][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.629773][ T9] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 99.641440][ T9] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 99.652407][ T5817] usb 3-1: device descriptor read/64, error -71 [ 99.674121][ T9] arvo: probe of 0003:1E7D:30D4.0002 failed with error -71 [ 99.702659][ T9] usb 1-1: USB disconnect, device number 5 [ 99.730155][ T6096] tipc: Started in network mode [ 99.745659][ T6096] tipc: Node identity 0efb71b3340e, cluster identity 4711 [ 99.757702][ T6096] tipc: Enabled bearer , priority 0 [ 99.770924][ T6096] tipc: Resetting bearer [ 99.787857][ T6095] tipc: Disabling bearer [ 99.931253][ T5817] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.983346][ T6100] __nla_validate_parse: 5 callbacks suppressed [ 99.983363][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 100.101275][ T5817] usb 3-1: device descriptor read/64, error -71 [ 100.221445][ T5817] usb usb3-port1: attempt power cycle [ 100.321254][ T789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.471272][ T175] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.514614][ T789] usb 4-1: Using ep0 maxpacket: 16 [ 100.522857][ T789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.534231][ T789] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.550231][ T789] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.559611][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.567744][ T789] usb 4-1: Product: syz [ 100.572548][ T789] usb 4-1: Manufacturer: syz [ 100.577199][ T789] usb 4-1: SerialNumber: syz [ 100.584439][ T789] usb 4-1: config 0 descriptor?? [ 100.641894][ T5817] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.661348][ T175] usb 1-1: Using ep0 maxpacket: 8 [ 100.674162][ T175] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 100.686042][ T175] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.696071][ T5817] usb 3-1: device descriptor read/8, error -71 [ 100.709618][ T175] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.719972][ T175] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.737998][ T175] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.756666][ T175] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.767220][ T175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.890549][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 100.901068][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 100.961940][ T5817] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.011858][ T5817] usb 3-1: device descriptor read/8, error -71 [ 101.021599][ T175] usb 1-1: GET_CAPABILITIES returned 0 [ 101.027156][ T175] usbtmc 1-1:16.0: can't read capabilities [ 101.142818][ T5817] usb usb3-port1: unable to enumerate USB device [ 101.149520][ T6116] tipc: Started in network mode [ 101.155156][ T6116] tipc: Node identity 3a9b659b6718, cluster identity 4711 [ 101.164314][ T6116] tipc: Enabled bearer , priority 0 [ 101.177685][ T6116] tipc: Resetting bearer [ 101.191481][ T6115] tipc: Disabling bearer [ 101.225873][ T5817] usb 1-1: USB disconnect, device number 6 [ 101.591355][ T5818] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.775889][ T5818] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.786834][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.797930][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.807747][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.824059][ T5818] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.841210][ T5818] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.849615][ T5818] usb 2-1: Manufacturer: syz [ 101.863718][ T5818] usb 2-1: config 0 descriptor?? [ 102.148445][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 102.298860][ T5818] usbhid 2-1:0.0: can't add hid device: -32 [ 102.306458][ T5818] usbhid: probe of 2-1:0.0 failed with error -32 [ 102.315842][ T5818] usb 2-1: USB disconnect, device number 4 [ 102.651354][ T5817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 102.799460][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 102.809554][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 102.854070][ T5817] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.871227][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.897409][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.911286][ T5817] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.935399][ T5817] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.945808][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.955595][ T5817] usb 3-1: Product: syz [ 102.959851][ T5817] usb 3-1: Manufacturer: syz [ 102.993371][ T5817] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 103.189639][ T6144] tipc: Started in network mode [ 103.196539][ T6144] tipc: Node identity c66b5de26c1e, cluster identity 4711 [ 103.205266][ T6144] tipc: Enabled bearer , priority 0 [ 103.218558][ T6144] tipc: Resetting bearer [ 103.231498][ T175] usb 3-1: USB disconnect, device number 8 [ 103.247265][ T5817] usb 4-1: USB disconnect, device number 4 [ 103.535753][ T6142] tipc: Disabling bearer [ 104.465503][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 104.638485][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 104.648534][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 104.701593][ T5819] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.841579][ T175] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.852632][ T5819] usb 4-1: device descriptor read/64, error -71 [ 105.041258][ T175] usb 2-1: Using ep0 maxpacket: 16 [ 105.048705][ T175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.070791][ T175] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.094035][ T175] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.103911][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.112463][ T175] usb 2-1: Product: syz [ 105.117423][ T175] usb 2-1: Manufacturer: syz [ 105.122347][ T175] usb 2-1: SerialNumber: syz [ 105.131384][ T5817] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.135940][ T175] usb 2-1: config 0 descriptor?? [ 105.151302][ T5819] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.239764][ T6174] tipc: Started in network mode [ 105.245626][ T6174] tipc: Node identity 7a11a94a0b59, cluster identity 4711 [ 105.253310][ T6174] tipc: Enabled bearer , priority 0 [ 105.262858][ T6174] syzkaller0: entered promiscuous mode [ 105.268366][ T6174] syzkaller0: entered allmulticast mode [ 105.286019][ T6174] tipc: Resetting bearer [ 105.298951][ T6173] tipc: Resetting bearer [ 105.311406][ T5819] usb 4-1: device descriptor read/64, error -71 [ 105.326104][ T6173] tipc: Disabling bearer [ 105.327551][ T5817] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.342252][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.352535][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.361700][ T5817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.376828][ T5817] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.387605][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.395788][ T5817] usb 1-1: Product: syz [ 105.400124][ T5817] usb 1-1: Manufacturer: syz [ 105.422493][ T5817] cdc_wdm 1-1:1.0: skipping garbage [ 105.428243][ T5817] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 105.440612][ T5819] usb usb4-port1: attempt power cycle [ 105.623177][ T6182] netlink: 72 bytes leftover after parsing attributes in process `syz.2.127'. [ 105.639223][ T175] usb 1-1: USB disconnect, device number 7 [ 105.710916][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.128'. [ 105.721544][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.128'. [ 105.851410][ T5819] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.882239][ T5819] usb 4-1: device descriptor read/8, error -71 [ 106.151339][ T5819] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.192024][ T5819] usb 4-1: device descriptor read/8, error -71 [ 106.226506][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 106.322176][ T5819] usb usb4-port1: unable to enumerate USB device [ 106.694478][ T6194] fuse: Unknown parameter 'grou00000000000000000000' [ 106.783184][ T6196] tipc: Enabled bearer , priority 0 [ 106.797153][ T6196] syzkaller0: entered promiscuous mode [ 106.804247][ T6196] syzkaller0: entered allmulticast mode [ 106.835255][ T6196] tipc: Resetting bearer [ 106.848218][ T6195] tipc: Resetting bearer [ 106.878403][ T6195] tipc: Disabling bearer [ 107.045764][ T6206] netlink: 72 bytes leftover after parsing attributes in process `syz.2.136'. [ 107.143677][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 107.153948][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 107.324294][ T6219] fuse: Unknown parameter 'grou00000000000000000000' [ 107.383662][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 107.491404][ T5817] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.626730][ T5819] usb 2-1: USB disconnect, device number 5 [ 107.633918][ T6227] tipc: Enabled bearer , priority 0 [ 107.654124][ T6227] syzkaller0: entered promiscuous mode [ 107.659667][ T6227] syzkaller0: entered allmulticast mode [ 107.680862][ T6227] tipc: Resetting bearer [ 107.697172][ T6226] tipc: Resetting bearer [ 107.705447][ T5817] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.728804][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.748263][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.750186][ T6226] tipc: Disabling bearer [ 107.769560][ T5817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.789435][ T6229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.145'. [ 107.789961][ T5817] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.800632][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.145'. [ 107.819395][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.827652][ T5817] usb 1-1: Product: syz [ 107.836365][ T5817] usb 1-1: Manufacturer: syz [ 107.859097][ T5817] cdc_wdm 1-1:1.0: skipping garbage [ 107.865911][ T5817] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 108.109579][ T5817] usb 1-1: USB disconnect, device number 8 [ 108.251715][ T6239] fuse: Unknown parameter 'grou00000000000000000000' [ 109.186092][ T6250] tipc: Enabled bearer , priority 0 [ 109.198260][ T6250] syzkaller0: entered promiscuous mode [ 109.205326][ T6250] syzkaller0: entered allmulticast mode [ 109.226860][ T6250] tipc: Resetting bearer [ 109.247990][ T6249] tipc: Resetting bearer [ 109.303495][ T6249] tipc: Disabling bearer [ 109.341253][ T5817] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.411273][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.491393][ T5817] usb 2-1: device descriptor read/64, error -71 [ 109.601376][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 109.609637][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.628178][ T5819] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 109.637514][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.647666][ T5819] usb 3-1: Product: syz [ 110.971152][ C0] sched: RT throttling activated [ 110.972373][ T5819] usb 3-1: Manufacturer: syz [ 110.982108][ T5819] usb 3-1: SerialNumber: syz [ 110.989320][ T5819] usb 3-1: config 0 descriptor?? [ 111.394669][ T5817] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 111.591544][ T5817] usb 2-1: device descriptor read/64, error -71 [ 111.712044][ T5817] usb usb2-port1: attempt power cycle [ 111.731343][ T789] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.861276][ T5826] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.913427][ T789] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.922404][ T789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.932690][ T789] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.941714][ T789] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.956772][ T789] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.966049][ T789] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.974406][ T789] usb 1-1: Product: syz [ 111.978663][ T789] usb 1-1: Manufacturer: syz [ 111.992720][ T789] cdc_wdm 1-1:1.0: skipping garbage [ 111.999461][ T789] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 112.053056][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.069354][ T5826] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 112.087430][ T5826] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 112.098332][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.197197][ T789] usb 1-1: USB disconnect, device number 9 [ 113.297165][ T6277] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6277] [ 113.850080][ T5839] usb 3-1: USB disconnect, device number 9 [ 113.927687][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.992246][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.019186][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.036646][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.223781][ T6286] tipc: Enabled bearer , priority 0 [ 114.251731][ T6281] syzkaller0: entered promiscuous mode [ 114.263023][ T6281] syzkaller0: entered allmulticast mode [ 114.310411][ T6281] tipc: Resetting bearer [ 114.362517][ T6279] tipc: Resetting bearer [ 114.422101][ T6279] tipc: Disabling bearer [ 114.761422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 114.801154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.024658][ T6292] __nla_validate_parse: 7 callbacks suppressed [ 116.024677][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 116.119922][ T5826] qmi_wwan: probe of 4-1:1.0 failed with error -22 [ 116.179935][ T5826] usb 4-1: USB disconnect, device number 9 [ 116.414977][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.172'. [ 117.521593][ T5819] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.913062][ T5826] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.923797][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 118.009484][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.045800][ T6314] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6314] [ 118.085946][ T5819] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.146704][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.191598][ T5826] usb 1-1: device descriptor read/64, error -71 [ 118.286186][ T5819] usb 4-1: Product: syz [ 118.320188][ T5819] usb 4-1: Manufacturer: syz [ 118.334623][ T5819] usb 4-1: SerialNumber: syz [ 118.422237][ T5819] usb 4-1: config 0 descriptor?? [ 118.591411][ T5826] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 120.331336][ T789] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 120.641300][ T5826] usb 1-1: device descriptor read/64, error -71 [ 120.729842][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 120.736510][ T175] usb 4-1: USB disconnect, device number 10 [ 120.762808][ T5826] usb usb1-port1: attempt power cycle [ 120.869126][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.897229][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.943473][ T789] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 120.981734][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.032619][ T789] usb 2-1: config 0 descriptor?? [ 121.135768][ T6345] fuse: Unknown parameter 'grou00000000000000000000' [ 121.321923][ T6347] fuse: Unknown parameter 'group_id00000000000000000000' [ 121.400261][ T28] audit: type=1326 audit(1786946811.676:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.3.187" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93099e0d9 code=0x0 [ 121.494435][ T6355] process 'syz.0.188' launched './file2' with NULL argv: empty string added [ 121.748254][ T789] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x1 [ 121.777773][ T789] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 121.952654][ T789] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device [ 122.046307][ T789] arvo 0003:1E7D:30D4.0003: couldn't install keyboard [ 122.055767][ T6357] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6357] [ 122.158330][ T789] arvo: probe of 0003:1E7D:30D4.0003 failed with error -71 [ 122.200632][ T789] usb 2-1: USB disconnect, device number 9 [ 123.061385][ T789] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 123.122539][ T5818] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.215930][ T6373] fuse: Unknown parameter 'group_i00000000000000000000' [ 123.281397][ T5839] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.292512][ T789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.335015][ T789] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 123.354634][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.363862][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 123.370320][ T789] usb 1-1: Product: syz [ 123.376927][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.461296][ T789] usb 1-1: Manufacturer: syz [ 123.482765][ T789] usb 1-1: SerialNumber: syz [ 123.491665][ T5818] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.500766][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.513543][ T789] ums-karma 1-1:1.0: USB Mass Storage device detected [ 123.521247][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 123.537422][ T5818] usb 3-1: Product: syz [ 123.565708][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.578783][ T5818] usb 3-1: Manufacturer: syz [ 123.587749][ T789] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 123.587749][ T789] Please send a copy of this message to and [ 123.667444][ T5818] usb 3-1: SerialNumber: syz [ 123.751724][ T5818] usb 3-1: config 0 descriptor?? [ 124.691498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 125.101163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 125.391153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.411156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.604298][ T5839] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.673226][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.691442][ T5839] usb 4-1: Product: syz [ 125.695906][ T5839] usb 4-1: Manufacturer: syz [ 125.700742][ T5839] usb 4-1: SerialNumber: syz [ 125.712431][ T5839] usb 4-1: config 0 descriptor?? [ 125.768973][ T789] usb 1-1: USB disconnect, device number 13 [ 125.890203][ T5839] usb 3-1: USB disconnect, device number 10 [ 126.225040][ T6388] fuse: Bad value for 'user_id' [ 126.272459][ T28] audit: type=1326 audit(1786946816.556:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a199e0d9 code=0x0 [ 126.723187][ T6394] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6394] [ 127.288401][ T5839] usb 4-1: USB disconnect, device number 11 [ 127.741770][ T6404] fuse: Unknown parameter 'group_i00000000000000000000' [ 128.098265][ T6405] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6405] [ 128.232814][ T789] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 128.600209][ T789] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.609073][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.619393][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.660528][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.683783][ T789] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.694123][ T789] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.713971][ T789] usb 3-1: Product: syz [ 128.761529][ T789] usb 3-1: Manufacturer: syz [ 128.812245][ T789] cdc_wdm 3-1:1.0: skipping garbage [ 128.841295][ T789] cdc_wdm 3-1:1.0: skipping garbage [ 128.846599][ T789] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 128.971498][ T5839] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.102229][ T175] usb 3-1: USB disconnect, device number 11 [ 129.171227][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 129.184725][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 129.216038][ T5839] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.240502][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.249395][ T5839] usb 4-1: Product: syz [ 129.321311][ T5839] usb 4-1: Manufacturer: syz [ 129.325989][ T5839] usb 4-1: SerialNumber: syz [ 129.336582][ T5839] usb 4-1: config 0 descriptor?? [ 129.752635][ T6419] fuse: Bad value for 'user_id' [ 129.788031][ T28] audit: type=1326 audit(1786946820.066:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.0.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a199e0d9 code=0x0 [ 130.141476][ T6429] syzkaller0: entered promiscuous mode [ 130.147999][ T6429] syzkaller0: entered allmulticast mode [ 131.014012][ T6433] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6433] [ 132.233523][ T5819] usb 4-1: USB disconnect, device number 12 [ 132.243983][ T6436] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.503092][ T6439] fuse: Bad value for 'user_id' [ 133.030627][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.041450][ T5839] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.052133][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.309506][ T5839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.358737][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.430383][ T5839] usb 4-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 133.450681][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.557039][ T5839] cdc_phonet: probe of 4-1:1.0 failed with error -22 [ 133.681301][ T175] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.794591][ T5839] usb 4-1: USB disconnect, device number 13 [ 133.908210][ T175] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.941186][ T175] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.961228][ T175] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.998340][ T175] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.050475][ T175] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.081929][ T175] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.109677][ T175] usb 1-1: Product: syz [ 134.124658][ T175] usb 1-1: Manufacturer: syz [ 134.162699][ T175] cdc_wdm 1-1:1.0: skipping garbage [ 134.167984][ T175] cdc_wdm 1-1:1.0: skipping garbage [ 134.195773][ T175] cdc_wdm 1-1:1.0: skipping garbage [ 134.197096][ T6451] syzkaller0: entered promiscuous mode [ 134.217395][ T6451] syzkaller0: entered allmulticast mode [ 134.226655][ T175] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 134.383014][ T6452] tipc: Enabled bearer , priority 0 [ 134.390105][ T6454] syzkaller0: entered promiscuous mode [ 134.401085][ T6454] syzkaller0: entered allmulticast mode [ 134.412631][ T175] usb 1-1: USB disconnect, device number 14 [ 134.475137][ T6452] tipc: Resetting bearer [ 134.983288][ T6457] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6457] [ 136.138931][ T5826] tipc: Node number set to 1568892315 [ 136.174841][ T6450] tipc: Resetting bearer [ 136.402028][ T6450] tipc: Disabling bearer [ 136.488177][ T6464] fuse: Unknown parameter 'group_id00000000000000000000' [ 136.832238][ T5839] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 136.868686][ T6468] fuse: Bad value for 'user_id' [ 137.751186][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 137.774741][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 137.828341][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.841484][ T6475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 137.860092][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.881680][ T5839] usb 3-1: Product: syz [ 137.885918][ T5839] usb 3-1: Manufacturer: syz [ 137.914755][ T5839] usb 3-1: SerialNumber: syz [ 137.956898][ T5839] usb 3-1: config 0 descriptor?? [ 138.493369][ T6478] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6478] [ 139.737166][ T5818] usb 3-1: USB disconnect, device number 12 [ 140.060761][ T6485] fuse: Bad value for 'user_id' [ 140.088872][ T28] audit: type=1326 audit(1786946830.366:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93099e0d9 code=0x0 [ 140.133784][ T6486] syzkaller0: entered promiscuous mode [ 140.161392][ T6486] syzkaller0: entered allmulticast mode [ 141.093318][ T6494] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6494] [ 142.823292][ T6499] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6499] [ 144.019801][ T6501] fuse: Bad value for 'fd' [ 144.601257][ T789] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 144.640229][ T6506] fuse: Unknown parameter 'grou00000000000000000000' [ 144.834055][ T789] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.843425][ T789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.875724][ T789] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.911407][ T789] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.953464][ T789] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.963228][ T789] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.981300][ T789] usb 1-1: Product: syz [ 144.996093][ T789] usb 1-1: Manufacturer: syz [ 145.036207][ T789] cdc_wdm 1-1:1.0: skipping garbage [ 145.061314][ T789] cdc_wdm 1-1:1.0: skipping garbage [ 145.075169][ T789] cdc_wdm 1-1:1.0: skipping garbage [ 145.092577][ T789] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 145.257131][ T789] usb 1-1: USB disconnect, device number 15 [ 145.327926][ T6508] syzkaller0: entered promiscuous mode [ 145.350176][ T6508] syzkaller0: entered allmulticast mode [ 145.369655][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 148.523498][ T6536] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6536] [ 149.604604][ T6539] fuse: Bad value for 'fd' [ 149.612774][ T28] audit: type=1326 audit(1786946839.896:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86559e0d9 code=0x0 [ 149.845689][ T6542] fuse: Bad value for 'fd' [ 150.062368][ T6546] fuse: Unknown parameter 'group_i00000000000000000000' [ 150.291789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 150.701230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 150.906668][ T6549] netlink: 'syz.2.253': attribute type 6 has an invalid length. [ 150.914783][ T6549] netlink: 'syz.2.253': attribute type 7 has an invalid length. [ 150.928029][ T6549] netlink: 'syz.2.253': attribute type 8 has an invalid length. [ 150.935976][ T6549] netlink: 'syz.2.253': attribute type 15 has an invalid length. [ 152.733128][ T5818] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.851503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 153.583489][ T6566] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6566] [ 154.774135][ T5818] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.785928][ T6569] tipc: Enabled bearer , priority 0 [ 154.792731][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.808058][ T6569] syzkaller0: entered promiscuous mode [ 154.813918][ T5818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.823229][ T6569] syzkaller0: entered allmulticast mode [ 154.832533][ T5818] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.886781][ T6569] tipc: Resetting bearer [ 154.894775][ T5818] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.909334][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.918085][ T5818] usb 3-1: Product: syz [ 154.923144][ T5818] usb 3-1: Manufacturer: syz [ 154.938310][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 154.944284][ T6568] tipc: Resetting bearer [ 154.950170][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 154.961004][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 154.971247][ T5818] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 154.994002][ T6568] tipc: Disabling bearer [ 155.152280][ T6573] fuse: Bad value for 'fd' [ 155.162708][ T5839] usb 3-1: USB disconnect, device number 13 [ 155.261449][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.001257][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 157.012899][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 157.032749][ T6579] fuse: Bad value for 'fd' [ 157.039854][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 157.052345][ T28] audit: type=1326 audit(1786946847.336:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.2.263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 157.075662][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.083902][ T8] usb 2-1: Product: syz [ 157.088102][ T8] usb 2-1: Manufacturer: syz [ 157.101256][ T8] usb 2-1: SerialNumber: syz [ 157.114161][ T8] usb 2-1: config 0 descriptor?? [ 157.422774][ T6582] syzkaller0: entered promiscuous mode [ 157.428461][ T6582] syzkaller0: entered allmulticast mode [ 158.649378][ T5819] usb 2-1: USB disconnect, device number 10 [ 160.462976][ T6591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'. [ 160.755761][ T6611] fuse: Bad value for 'fd' [ 160.791992][ T6615] fuse: Bad value for 'fd' [ 160.815366][ T28] audit: type=1326 audit(1786946851.096:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.2.272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 161.101706][ T5819] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.171367][ T5839] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 161.314652][ T5819] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.323796][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.345110][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.374502][ T5819] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 161.401421][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 161.406994][ T5819] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.423113][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.444338][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 161.460231][ T5819] usb 2-1: Product: syz [ 161.468162][ T5839] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.489538][ T5819] usb 2-1: Manufacturer: syz [ 161.490927][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.519082][ T5839] usb 4-1: Product: syz [ 161.534187][ T5839] usb 4-1: Manufacturer: syz [ 161.545802][ T5839] usb 4-1: SerialNumber: syz [ 161.564590][ T5839] usb 4-1: config 0 descriptor?? [ 161.572233][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 161.602843][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 161.664420][ T5819] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 161.833767][ T5826] usb 2-1: USB disconnect, device number 11 [ 162.574038][ T6685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.276'. [ 163.745604][ T6687] syzkaller0: entered promiscuous mode [ 163.752756][ T6687] syzkaller0: entered allmulticast mode [ 164.590348][ T5826] usb 4-1: USB disconnect, device number 14 [ 167.751950][ T6712] fuse: Bad value for 'fd' [ 167.835294][ T6714] fuse: Bad value for 'fd' [ 167.844401][ T28] audit: type=1326 audit(1786946858.126:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.2.283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 168.471276][ T5818] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 168.686682][ T5818] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.731890][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.784864][ T5818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.842799][ T5818] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 168.904487][ T5818] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.954463][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.994549][ T5818] usb 4-1: Product: syz [ 169.019185][ T5818] usb 4-1: Manufacturer: syz [ 169.061851][ T5818] cdc_wdm 4-1:1.0: skipping garbage [ 169.080411][ T6733] tipc: Enabled bearer , priority 0 [ 169.112696][ T5818] cdc_wdm 4-1:1.0: skipping garbage [ 169.118037][ T5818] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 169.323188][ T5818] usb 4-1: USB disconnect, device number 15 [ 169.330416][ T6741] syzkaller0: entered promiscuous mode [ 169.342531][ T6741] syzkaller0: entered allmulticast mode [ 170.542649][ T6732] tipc: Resetting bearer [ 172.196211][ T6732] tipc: Disabling bearer [ 172.365304][ T5839] tipc: Node number set to 1900587338 [ 173.741135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 174.465873][ T6782] syzkaller0: entered promiscuous mode [ 174.511138][ T6782] syzkaller0: entered allmulticast mode [ 174.691978][ T5839] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 174.736204][ T6792] fuse: Bad value for 'fd' [ 174.959743][ T5839] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.797461][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.816403][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 175.826202][ T5839] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 175.853370][ T5839] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.883844][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.901587][ T5839] usb 3-1: Product: syz [ 175.905833][ T5839] usb 3-1: Manufacturer: syz [ 176.023055][ T5839] cdc_wdm 3-1:1.0: skipping garbage [ 176.073003][ T5839] cdc_wdm 3-1:1.0: skipping garbage [ 176.124791][ T5839] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 176.272910][ T5839] usb 3-1: USB disconnect, device number 14 [ 176.356447][ T6825] fuse: Bad value for 'fd' [ 176.390160][ T28] audit: type=1326 audit(1786946866.666:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.3.296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93099e0d9 code=0x0 [ 179.703969][ T6858] fuse: Invalid rootmode [ 183.769697][ T6843] tipc: Enabling of bearer rejected, failed to enable media [ 184.045517][ T6901] fuse: Bad value for 'fd' [ 184.071177][ T28] audit: type=1326 audit(1786946874.346:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 184.380455][ T6911] fuse: Invalid rootmode [ 184.451207][ T5816] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 184.645424][ T5816] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.681855][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.711213][ T5816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.720907][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.754838][ T5816] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.768612][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.805868][ T5816] usb 2-1: Product: syz [ 184.810370][ T5816] usb 2-1: Manufacturer: syz [ 184.893231][ T5816] cdc_wdm 2-1:1.0: skipping garbage [ 184.911231][ T5816] cdc_wdm 2-1:1.0: skipping garbage [ 184.936557][ T5816] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 184.970470][ T5816] cdc_wdm 2-1:1.0: Unknown control protocol [ 185.083884][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 185.126531][ T5819] usb 2-1: USB disconnect, device number 12 [ 187.418319][ T6948] syzkaller0: entered promiscuous mode [ 187.432608][ T6948] syzkaller0: entered allmulticast mode [ 187.782149][ T6965] fuse: Invalid rootmode [ 187.941068][ T6969] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 188.783823][ T6975] fuse: Invalid rootmode [ 188.823670][ T28] audit: type=1326 audit(1786946879.066:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.325" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a199e0d9 code=0x0 [ 188.900109][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 189.891028][ T5816] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 190.763733][ T5816] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.832930][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.901245][ T5816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.961250][ T5816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.001210][ T5816] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.022390][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.049846][ T5816] usb 4-1: Product: syz [ 191.054176][ T5816] usb 4-1: Manufacturer: syz [ 191.076484][ T5816] cdc_wdm 4-1:1.0: skipping garbage [ 191.082214][ T5816] cdc_wdm 4-1:1.0: skipping garbage [ 191.096386][ T5816] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 191.102544][ T5816] cdc_wdm 4-1:1.0: Unknown control protocol [ 191.296371][ T5818] usb 4-1: USB disconnect, device number 16 [ 192.048026][ T6956] tipc: Enabling of bearer rejected, failed to enable media [ 194.183404][ T7021] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7021] [ 195.200225][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.206748][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.262208][ T7020] fuse: Bad value for 'rootmode' [ 197.211193][ T175] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 197.441697][ T175] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.450397][ T175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.535471][ T175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.573613][ T175] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.614577][ T175] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.623971][ T175] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.645852][ T175] usb 3-1: Product: syz [ 197.650082][ T175] usb 3-1: Manufacturer: syz [ 197.678767][ T175] cdc_wdm 3-1:1.0: skipping garbage [ 197.701139][ T175] cdc_wdm 3-1:1.0: skipping garbage [ 197.731490][ T175] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 197.737479][ T175] cdc_wdm 3-1:1.0: Unknown control protocol [ 197.900822][ T175] usb 3-1: USB disconnect, device number 15 [ 198.027647][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 198.138919][ T7064] fuse: Invalid rootmode [ 198.145476][ T28] audit: type=1326 audit(1786946888.426:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a199e0d9 code=0x0 [ 198.226286][ T7066] tipc: Enabled bearer , priority 0 [ 198.236989][ T7066] syzkaller0: entered promiscuous mode [ 198.243214][ T7066] syzkaller0: entered allmulticast mode [ 198.264118][ T7066] tipc: Resetting bearer [ 198.273114][ T7065] tipc: Resetting bearer [ 198.292981][ T7065] tipc: Disabling bearer [ 198.461923][ T7069] syzkaller0: entered promiscuous mode [ 198.467481][ T7069] syzkaller0: entered allmulticast mode [ 199.023703][ T7073] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7073] [ 202.759614][ T7115] fuse: Bad value for 'rootmode' [ 203.784743][ T7119] tipc: Enabling of bearer rejected, failed to enable media [ 203.954889][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 204.463156][ T7138] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7138] [ 205.556289][ T7141] fuse: Invalid rootmode [ 205.565111][ T28] audit: type=1326 audit(1786946895.846:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 205.651214][ T5818] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 205.839997][ T5818] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.849782][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.862330][ T5818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.872583][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.887953][ T5818] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.900305][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.910668][ T5818] usb 4-1: Product: syz [ 205.915999][ T5818] usb 4-1: Manufacturer: syz [ 205.953470][ T5818] cdc_wdm 4-1:1.0: skipping garbage [ 205.958835][ T5818] cdc_wdm 4-1:1.0: skipping garbage [ 205.967244][ T5818] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 205.975522][ T5818] cdc_wdm 4-1:1.0: Unknown control protocol [ 206.322766][ T5839] usb 4-1: USB disconnect, device number 17 [ 207.068279][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.356'. [ 207.742815][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 207.748904][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 207.757047][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 207.764222][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 207.838676][ T7169] fuse: Bad value for 'rootmode' [ 208.609814][ T7190] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7190] [ 209.530654][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 209.578523][ T7192] tipc: Enabled bearer , priority 0 [ 209.622707][ T7198] syzkaller0: entered promiscuous mode [ 209.628346][ T7198] syzkaller0: entered allmulticast mode [ 209.636226][ T7192] syzkaller0: entered promiscuous mode [ 209.647169][ T7192] syzkaller0: entered allmulticast mode [ 210.275266][ T7205] fuse: Bad value for 'rootmode' [ 210.291208][ T28] audit: type=1326 audit(1786946900.566:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.2.367" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 211.493390][ T7212] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7212] [ 215.020846][ T7246] fuse: Unknown parameter 'use00000000000000000000' [ 215.337078][ T7248] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7248] [ 216.457476][ T7200] tipc: Resetting bearer [ 216.472926][ T7191] tipc: Resetting bearer [ 216.496359][ T7191] tipc: Disabling bearer [ 217.021303][ T7259] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7259] [ 219.815090][ T7269] fuse: Unknown parameter 'use00000000000000000000' [ 219.860513][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 220.582134][ T7294] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7294] [ 222.981136][ T7302] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7302] [ 224.156545][ T7306] tipc: Enabled bearer , priority 0 [ 224.261635][ T7306] syzkaller0: entered promiscuous mode [ 224.267143][ T7306] syzkaller0: entered allmulticast mode [ 224.520869][ T7306] tipc: Resetting bearer [ 224.563737][ T7305] tipc: Resetting bearer [ 224.711981][ T7310] fuse: Bad value for 'rootmode' [ 224.722264][ T7305] tipc: Disabling bearer [ 224.751742][ T28] audit: type=1326 audit(1786946915.026:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.2.380" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 225.192643][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 227.329240][ T7331] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7331] [ 229.324859][ T7360] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7360] [ 231.065649][ T7368] fuse: Bad value for 'rootmode' [ 231.076417][ T28] audit: type=1326 audit(1786946921.356:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93099e0d9 code=0x0 [ 231.624289][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 231.866301][ T7376] tipc: Enabled bearer , priority 0 [ 231.876442][ T7376] syzkaller0: entered promiscuous mode [ 231.882664][ T7376] syzkaller0: entered allmulticast mode [ 231.913240][ T7376] tipc: Resetting bearer [ 231.934404][ T7375] tipc: Resetting bearer [ 231.973119][ T7375] tipc: Disabling bearer [ 232.228199][ T7378] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7378] [ 233.625703][ T7384] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7384] [ 235.801846][ T7398] fuse: Unknown parameter 'use00000000000000000000' [ 236.074648][ T7400] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7400] [ 237.017198][ T28] audit: type=1326 audit(1786946927.296:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a199e0d9 code=0x0 [ 237.581243][ T789] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 237.781222][ T789] usb 1-1: Using ep0 maxpacket: 8 [ 237.838918][ T789] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 237.927080][ T789] usb 1-1: config 0 has no interface number 0 [ 237.947900][ T789] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 237.975413][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.009294][ T789] usb 1-1: config 0 descriptor?? [ 238.185107][ T789] viperboard 1-1:0.143: version 0.00 found at bus 001 address 016 [ 238.437729][ T7421] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7421] [ 239.368157][ T789] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 239.377018][ T789] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 239.588625][ T9] usb 1-1: USB disconnect, device number 16 [ 240.021302][ T5826] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 240.211175][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 240.244089][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.311420][ T5826] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.841542][ T7434] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7434] [ 241.276882][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.288322][ T5826] usb 4-1: Product: syz [ 241.292612][ T5826] usb 4-1: Manufacturer: syz [ 241.297257][ T5826] usb 4-1: SerialNumber: syz [ 241.313848][ T5826] usb 4-1: config 0 descriptor?? [ 241.323307][ T5826] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 241.333621][ T5826] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 241.373123][ T7437] fuse: Unknown parameter 'use00000000000000000000' [ 241.391353][ T28] audit: type=1326 audit(1786946931.666:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a199e0d9 code=0x0 [ 241.945962][ T5826] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 242.097558][ T7446] fuse: Unknown parameter 'grou00000000000000000000' [ 242.449227][ T7451] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7451] [ 243.481304][ T5826] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 243.489775][ T5826] em28xx 4-1:0.0: board has no eeprom [ 243.611747][ T5826] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 243.619690][ T5826] em28xx 4-1:0.0: dvb set to bulk mode. [ 243.651370][ T8] em28xx 4-1:0.0: Binding DVB extension [ 243.691734][ T5826] usb 4-1: USB disconnect, device number 18 [ 243.698736][ T5826] em28xx 4-1:0.0: Disconnecting em28xx [ 243.776576][ T8] em28xx 4-1:0.0: Registering input extension [ 243.804944][ T5826] em28xx 4-1:0.0: Closing input extension [ 243.860504][ T5826] em28xx 4-1:0.0: Freeing device [ 244.851415][ T7471] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7471] [ 245.361868][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.542270][ T7474] Invalid argument reading file caps for ./file0 [ 245.561252][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 245.578077][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 245.597773][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.618653][ T8] usb 2-1: Product: syz [ 245.633517][ T8] usb 2-1: Manufacturer: syz [ 245.638327][ T8] usb 2-1: SerialNumber: syz [ 245.661028][ T8] usb 2-1: config 0 descriptor?? [ 245.681885][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 246.521387][ T7477] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7477] [ 247.113627][ T8] gspca_sonixj: reg_r err -110 [ 247.118668][ T8] sonixj: probe of 2-1:0.0 failed with error -110 [ 247.252762][ T5818] usb 2-1: USB disconnect, device number 13 [ 247.407590][ T7483] fuse: Unknown parameter 'grou00000000000000000000' [ 247.506790][ T7486] fuse: Unknown parameter 'use00000000000000000000' [ 247.520114][ T28] audit: type=1326 audit(1786946937.796:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.2.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 248.121216][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 248.304430][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.314878][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.329099][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 248.340630][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.347448][ T5818] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 248.362430][ T8] usb 4-1: config 0 descriptor?? [ 248.375476][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 249.952673][ T5816] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 250.052566][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 250.074024][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 250.088107][ T5818] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 250.099174][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.108606][ T5818] usb 1-1: Product: syz [ 250.115113][ T5818] usb 1-1: Manufacturer: syz [ 250.119756][ T5818] usb 1-1: SerialNumber: syz [ 250.130016][ T5818] usb 1-1: config 0 descriptor?? [ 250.143680][ T5818] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 250.156782][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 250.164072][ T5818] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 250.172442][ T5816] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.180538][ T5816] usb 2-1: config 0 has no interface number 0 [ 250.195212][ T5816] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 250.204473][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.217387][ T5816] usb 2-1: Product: syz [ 250.221883][ T5816] usb 2-1: Manufacturer: syz [ 250.226572][ T5816] usb 2-1: SerialNumber: syz [ 250.252107][ T5816] usb 2-1: config 0 descriptor?? [ 250.274024][ T5816] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 250.793235][ T5818] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 251.441322][ T7506] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7506] [ 252.292526][ T5816] gspca_spca1528: reg_w err -110 [ 252.341365][ T5816] spca1528: probe of 2-1:0.1 failed with error -110 [ 252.361238][ T5816] usb 2-1: USB disconnect, device number 14 [ 252.409017][ T5818] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 252.423978][ T5818] em28xx 1-1:0.0: board has no eeprom [ 252.456159][ T175] usb 4-1: USB disconnect, device number 19 [ 252.501349][ T5818] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 252.509267][ T5818] em28xx 1-1:0.0: dvb set to bulk mode. [ 252.542339][ T5817] em28xx 1-1:0.0: Binding DVB extension [ 252.579109][ T5818] usb 1-1: USB disconnect, device number 17 [ 252.617414][ T5818] em28xx 1-1:0.0: Disconnecting em28xx [ 252.720658][ T5817] em28xx 1-1:0.0: Registering input extension [ 252.749026][ T5818] em28xx 1-1:0.0: Closing input extension [ 252.801705][ T5818] em28xx 1-1:0.0: Freeing device [ 253.461333][ T7520] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7520] [ 253.944180][ T7523] fuse: Unknown parameter 'grou00000000000000000000' [ 254.798596][ T7528] tipc: Enabled bearer , priority 0 [ 254.829399][ T7528] syzkaller0: entered promiscuous mode [ 254.853173][ T7528] syzkaller0: entered allmulticast mode [ 254.900993][ T7527] tipc: Resetting bearer [ 254.979917][ T7527] tipc: Disabling bearer [ 256.341675][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.348053][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.801649][ T5817] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 257.002289][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 257.031223][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 257.053358][ T7544] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7544] [ 257.084131][ T5817] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 257.111186][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.131251][ T5817] usb 3-1: Product: syz [ 257.135454][ T5817] usb 3-1: Manufacturer: syz [ 257.160845][ T5817] usb 3-1: SerialNumber: syz [ 257.182368][ T5817] usb 3-1: config 0 descriptor?? [ 257.214030][ T5817] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.231287][ T5817] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 258.121337][ T7548] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7548] [ 258.892850][ T5817] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 259.355891][ T5817] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 259.374476][ T5817] em28xx 3-1:0.0: board has no eeprom [ 259.451229][ T5159] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 259.671361][ T5817] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 259.690979][ T5817] em28xx 3-1:0.0: dvb set to bulk mode. [ 259.699200][ T23] em28xx 3-1:0.0: Binding DVB extension [ 259.715928][ T5817] usb 3-1: USB disconnect, device number 16 [ 259.719764][ T5159] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.739897][ T5817] em28xx 3-1:0.0: Disconnecting em28xx [ 259.766355][ T5159] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 259.817062][ T5159] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 259.877173][ T5159] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 259.897231][ T5159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 259.904178][ T23] em28xx 3-1:0.0: Registering input extension [ 259.915616][ T5817] em28xx 3-1:0.0: Closing input extension [ 259.927322][ T5159] usb 1-1: Product: syz [ 259.941122][ T5159] usb 1-1: Manufacturer: syz [ 259.945012][ T5817] em28xx 3-1:0.0: Freeing device [ 259.960981][ T5159] usb 1-1: SerialNumber: syz [ 260.023436][ T5159] usb 1-1: config 0 descriptor?? [ 260.036423][ T5159] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 260.071200][ T5159] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 260.078225][ T5159] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 260.280046][ T7556] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 260.301233][ T7556] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.386569][ T7558] fuse: Unknown parameter 'group_i00000000000000000000' [ 262.104434][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'. [ 262.521851][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 263.653822][ T7573] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7573] [ 263.675916][ T8] usb 1-1: USB disconnect, device number 18 [ 264.202834][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 264.421831][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 264.444644][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 264.481958][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 264.505074][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.539834][ T8] usb 1-1: Product: syz [ 264.554812][ T8] usb 1-1: Manufacturer: syz [ 264.568216][ T8] usb 1-1: SerialNumber: syz [ 264.587096][ T8] usb 1-1: config 0 descriptor?? [ 264.604514][ T8] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 264.625664][ T8] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 266.493640][ T8] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 268.305754][ T8] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 268.329099][ T8] em28xx 1-1:0.0: board has no eeprom [ 268.451330][ T8] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 268.459351][ T8] em28xx 1-1:0.0: dvb set to bulk mode. [ 268.522105][ T175] em28xx 1-1:0.0: Binding DVB extension [ 268.558166][ T8] usb 1-1: USB disconnect, device number 19 [ 268.592197][ T8] em28xx 1-1:0.0: Disconnecting em28xx [ 268.773591][ T175] em28xx 1-1:0.0: Registering input extension [ 268.811129][ T8] em28xx 1-1:0.0: Closing input extension [ 268.846690][ T8] em28xx 1-1:0.0: Freeing device [ 270.064241][ T7614] loop8: detected capacity change from 0 to 7 [ 270.101286][ T7614] Dev loop8: unable to read RDB block 7 [ 270.119996][ T7614] loop8: unable to read partition table [ 270.133307][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 270.146941][ T7614] loop8: partition table beyond EOD, truncated [ 270.155907][ T7618] fuse: Unknown parameter 'group_i00000000000000000000' [ 270.170708][ T7614] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 273.825011][ T7629] fuse: Unknown parameter 'user_id00000000000000000000' [ 273.841740][ T7631] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 274.093571][ T7635] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 274.295485][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.490'. [ 274.478232][ T7644] fuse: Bad value for 'fd' [ 274.491975][ T28] audit: type=1326 audit(1786946964.776:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.2.492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 274.951279][ T5818] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 275.016959][ T7650] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7650] [ 275.151145][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 275.165514][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 275.180356][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.192163][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.200826][ T5818] usb 4-1: Product: syz [ 275.207014][ T5818] usb 4-1: Manufacturer: syz [ 275.213538][ T5818] usb 4-1: SerialNumber: syz [ 275.252936][ T5818] usb 4-1: config 0 descriptor?? [ 275.272973][ T5818] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.282554][ T5818] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 275.668025][ T7654] fuse: Unknown parameter 'group_i00000000000000000000' [ 276.413092][ T5818] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 276.542208][ T7661] fuse: Bad value for 'fd' [ 276.720871][ T7665] syz.0.499[7665]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 276.863562][ T5818] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 276.881250][ T5818] em28xx 4-1:0.0: board has no eeprom [ 276.996316][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.500'. [ 277.051742][ T7673] fuse: Bad value for 'fd' [ 277.085339][ T28] audit: type=1326 audit(1786946967.366:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.2.502" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x0 [ 277.191893][ T5818] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 277.207095][ T5818] em28xx 4-1:0.0: dvb set to bulk mode. [ 277.225901][ T5816] em28xx 4-1:0.0: Binding DVB extension [ 277.248426][ T5818] usb 4-1: USB disconnect, device number 20 [ 277.273644][ T5818] em28xx 4-1:0.0: Disconnecting em28xx [ 277.487454][ T7680] fuse: Unknown parameter 'group_id00000000000000000000' [ 278.250151][ T5816] em28xx 4-1:0.0: Registering input extension [ 278.262363][ T5818] em28xx 4-1:0.0: Closing input extension [ 278.378609][ T5818] em28xx 4-1:0.0: Freeing device [ 278.610474][ T7689] fuse: Bad value for 'fd' [ 278.801392][ T5826] IPVS: starting estimator thread 0... [ 278.931272][ T7693] IPVS: using max 19 ests per chain, 45600 per kthread [ 279.147712][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 279.306933][ T7705] fuse: Unknown parameter '0x0000000000000004' [ 279.318851][ T7702] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7702] [ 279.331377][ T5818] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 279.364917][ T28] audit: type=1326 audit(1786946969.606:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.1.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86559e0d9 code=0x0 [ 280.997218][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.014872][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.047048][ T5818] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 281.088924][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.148097][ T5818] usb 3-1: config 0 descriptor?? [ 281.184295][ T5818] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 281.651374][ T5818] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 281.867044][ T7714] fuse: Unknown parameter 'group_id00000000000000000000' [ 281.903045][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.923592][ T5818] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 281.960473][ T5818] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 281.991458][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.248659][ T5818] qmi_wwan: probe of 2-1:1.0 failed with error -22 [ 282.297204][ T5818] usb 2-1: USB disconnect, device number 15 [ 282.512153][ T5816] usb 3-1: USB disconnect, device number 17 [ 282.651785][ T7721] fuse: Bad value for 'fd' [ 283.256588][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.523'. [ 283.332418][ T7733] fuse: Unknown parameter '0x0000000000000004' [ 283.351136][ T28] audit: type=1326 audit(1786946973.626:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93099e0d9 code=0x0 [ 285.533269][ T7741] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7741] [ 288.521820][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'. [ 288.597782][ T7762] fuse: Unknown parameter 'group_id00000000000000000000' [ 290.683514][ T7771] fuse: Unknown parameter '0x0000000000000004' [ 290.732543][ T28] audit: type=1326 audit(1786946981.016:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93099e0d9 code=0x0 [ 291.230404][ T7772] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7772] [ 291.900482][ T7780] fuse: Unknown parameter '0x0000000000000003' [ 293.177513][ T7785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.544'. [ 297.283321][ T7828] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7828] [ 298.451524][ T7806] fuse: Bad value for 'user_id' [ 298.856266][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 298.940278][ T28] audit: type=1326 audit(1786946989.216:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfbf9e0d9 code=0x7ffc0000 [ 298.965190][ T7831] syz.2.551 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 299.036177][ T28] audit: type=1326 audit(1786946989.246:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfbf9e0d9 code=0x7ffc0000 [ 299.151193][ T28] audit: type=1326 audit(1786946989.246:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfbf9e0d9 code=0x7ffc0000 [ 299.221360][ T28] audit: type=1326 audit(1786946989.246:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f1dfbf9e0d9 code=0x7ffc0000 [ 299.286476][ T28] audit: type=1326 audit(1786946989.276:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfbf9e0d9 code=0x7ffc0000 [ 299.505081][ T28] audit: type=1326 audit(1786946989.276:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1dfbf9e0d9 code=0x7ffc0000 [ 300.237660][ T28] audit: type=1326 audit(1786946989.276:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1dfbf9e0d9 code=0x7ffc0000 [ 302.836060][ T7851] fuse: Unknown parameter '0x0000000000000004' [ 302.847630][ T28] audit: type=1326 audit(1786946993.126:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.1.548" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86559e0d9 code=0x0 [ 302.917365][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.555'. [ 303.943605][ T7858] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7858] [ 305.174318][ T7861] fuse: Bad value for 'user_id' [ 307.820654][ T7871] fuse: Unknown parameter '0x0000000000000003' [ 313.113353][ T7913] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7913] [ 316.041746][ T175] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 316.255746][ T175] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.266837][ T175] usb 3-1: not running at top speed; connect to a high speed hub [ 316.286535][ T175] usb 3-1: config 3 has an invalid interface number: 170 but max is 0 [ 316.304107][ T175] usb 3-1: config 3 has no interface number 0 [ 316.310285][ T175] usb 3-1: config 3 interface 170 has no altsetting 0 [ 316.344272][ T175] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=92.51 [ 316.361394][ T175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.379727][ T175] usb 3-1: Product: syz [ 316.389293][ T175] usb 3-1: Manufacturer: syz [ 316.394599][ T175] usb 3-1: SerialNumber: syz [ 316.662514][ T175] kvaser_usb 3-1:3.170: Cannot get usb endpoint(s) [ 316.695111][ T175] usb 3-1: USB disconnect, device number 18 [ 317.232166][ T7928] fuse: Unknown parameter '0x0000000000000004' [ 317.262862][ T28] audit: type=1326 audit(1786947007.546:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.3.568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93099e0d9 code=0x0 [ 317.334876][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.346443][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.472969][ T7933] fuse: Bad value for 'user_id' [ 317.478858][ T7935] fuse: Unknown parameter '0x0000000000000003' [ 317.618062][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 318.443210][ T7947] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7947] [ 319.919280][ T7958] fuse: Unknown parameter '0x0000000000000003' [ 320.011608][ T175] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 320.061175][ T5818] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 320.104938][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'. [ 321.843017][ T175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.853258][ T175] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.863827][ T175] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.874222][ T175] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.877552][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.897023][ T5818] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 321.902486][ T175] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 321.906289][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.927564][ T5818] usb 1-1: config 0 descriptor?? [ 321.951095][ T175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.951479][ T5818] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 322.419057][ T175] gud 4-1:1.0: No supported pixel formats found [ 322.431394][ T175] gud: probe of 4-1:1.0 failed with error -22 [ 322.635719][ T5818] usb 4-1: USB disconnect, device number 21 [ 323.323285][ T7974] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7974] [ 324.445985][ T175] usb 1-1: USB disconnect, device number 20 [ 324.550418][ T5790] Bluetooth: hci0: unexpected event for opcode 0x041b [ 324.843765][ T7981] fuse: Bad value for 'fd' [ 325.031854][ T7984] fuse: Unknown parameter '0x0000000000000003' [ 325.319859][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'. [ 325.726931][ T7995] fuse: Unknown parameter '0x0000000000000004' [ 326.263467][ T7998] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7998] [ 327.321476][ T28] audit: type=1326 audit(1786947016.046:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86559e0d9 code=0x0 [ 327.471306][ T175] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 327.688783][ T175] usb 3-1: Using ep0 maxpacket: 16 [ 327.723345][ T175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.781266][ T175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.792977][ T175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.823532][ T175] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.845914][ T175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.882983][ T175] usb 3-1: config 0 descriptor?? [ 327.951216][ T5816] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 328.171217][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 328.219758][ T5816] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 328.261250][ T5816] usb 4-1: config 0 has no interface number 0 [ 328.363665][ T5816] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 328.439532][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.492342][ T5816] usb 4-1: config 0 descriptor?? [ 328.628229][ T175] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input10 [ 328.661742][ T5816] viperboard 4-1:0.143: version 0.00 found at bus 004 address 022 [ 328.792578][ T5816] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 328.824082][ T175] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 328.854424][ T5816] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 328.905266][ T175] usb 3-1: USB disconnect, device number 19 [ 328.984781][ T5816] usb 4-1: USB disconnect, device number 22 [ 329.206220][ T8008] fido_id[8008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 330.037162][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.603'. [ 330.046958][ T8020] fuse: Unknown parameter '0x0000000000000003' [ 330.593510][ T8023] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8023] [ 331.736861][ T8026] fuse: Bad value for 'fd' [ 333.601797][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 333.872003][ T8051] fuse: Unknown parameter 'fd0x0000000000000004' [ 333.905283][ T28] audit: type=1326 audit(1786947024.176:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93099e0d9 code=0x0 [ 334.560070][ T8054] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8054] [ 335.461291][ T789] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 335.686108][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 335.741904][ T789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 335.799440][ T789] usb 4-1: can't read configurations, error -61 [ 336.031945][ T789] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 336.049259][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 336.255726][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 336.285099][ T789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 336.331290][ T175] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 336.341209][ T789] usb 4-1: can't read configurations, error -61 [ 336.349384][ T789] usb usb4-port1: attempt power cycle [ 336.561175][ T175] usb 1-1: Using ep0 maxpacket: 8 [ 336.575205][ T175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 145, changing to 11 [ 336.602402][ T175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 58512, setting to 1024 [ 336.632504][ T175] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 336.656380][ T175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.695667][ T175] usb 1-1: config 0 descriptor?? [ 336.701621][ T8084] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 336.831238][ T789] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 336.891837][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 336.914902][ T789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 336.943063][ T789] usb 4-1: can't read configurations, error -61 [ 336.967448][ T175] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 337.013772][ T175] usb 1-1: USB disconnect, device number 21 [ 337.121201][ T789] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 337.191854][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 337.203032][ T789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 337.236995][ T789] usb 4-1: can't read configurations, error -61 [ 337.254245][ T789] usb usb4-port1: unable to enumerate USB device [ 340.571162][ T789] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 340.826845][ T789] usb 1-1: Using ep0 maxpacket: 16 [ 340.866521][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.891149][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.921355][ T789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.977160][ T789] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 341.014948][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.036314][ T789] usb 1-1: config 0 descriptor?? [ 341.146700][ T8102] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8102] [ 341.679651][ T789] usbhid 1-1:0.0: can't add hid device: -71 [ 341.701227][ T789] usbhid: probe of 1-1:0.0 failed with error -71 [ 341.738308][ T789] usb 1-1: USB disconnect, device number 22 [ 342.813646][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.637'. [ 343.813967][ T5790] Bluetooth: hci3: unexpected event for opcode 0x041b [ 345.141155][ T789] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 345.371196][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 345.380201][ T789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 345.389473][ T789] usb 4-1: can't read configurations, error -61 [ 345.552662][ T789] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 345.613058][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'. [ 345.741247][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 345.776525][ T789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 345.835100][ T789] usb 4-1: can't read configurations, error -61 [ 345.864975][ T789] usb usb4-port1: attempt power cycle [ 346.051190][ T8142] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8142] [ 346.321138][ T789] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 346.398431][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 346.408474][ T789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 346.435334][ T789] usb 4-1: can't read configurations, error -61 [ 346.621225][ T789] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 346.699288][ T789] usb 4-1: device descriptor read/8, error -71 [ 346.846941][ T789] usb usb4-port1: unable to enumerate USB device [ 346.868223][ T8152] warning: `syz.0.645' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 349.301850][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 349.453660][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.657'. [ 352.031258][ T5817] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 352.234523][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 352.273541][ T5817] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 352.291245][ T5817] usb 4-1: can't read configurations, error -61 [ 352.511148][ T5817] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 352.773633][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 352.793393][ T5817] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 352.813394][ T5817] usb 4-1: can't read configurations, error -61 [ 352.832948][ T5817] usb usb4-port1: attempt power cycle [ 354.437730][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 355.039149][ T8192] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 355.343613][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'. [ 355.397502][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 355.426967][ T8202] ip6gre1: entered promiscuous mode [ 355.439303][ T8202] ip6gre1: entered allmulticast mode [ 355.460857][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.667'. [ 355.474253][ T6671] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.491397][ T6671] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.501411][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.571592][ T789] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.248528][ T5790] Bluetooth: hci2: unexpected event for opcode 0x041b [ 357.276579][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.321205][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.461355][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 359.691165][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 359.733402][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.772383][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.801967][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 359.825195][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 359.847755][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.874214][ T9] usb 4-1: config 0 descriptor?? [ 359.932019][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 359.947215][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 361.891317][ T23] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 362.090538][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 362.097533][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input11 [ 362.121360][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.129551][ T23] usb 1-1: Product: syz [ 362.148032][ T23] usb 1-1: Manufacturer: syz [ 362.158289][ T23] usb 1-1: SerialNumber: syz [ 362.180667][ T23] usb 1-1: config 0 descriptor?? [ 362.236519][ T9] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 362.274486][ T9] usb 4-1: USB disconnect, device number 34 [ 362.281381][ T789] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 362.412572][ T23] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 362.491087][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 362.503716][ T789] usb 2-1: config 0 has no interfaces? [ 362.523927][ T789] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 362.535193][ T8240] fido_id[8240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 362.562510][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.600132][ T789] usb 2-1: config 0 descriptor?? [ 362.975106][ T5790] Bluetooth: hci2: unexpected event for opcode 0x041b [ 363.006001][ T5816] usb 2-1: USB disconnect, device number 16 [ 364.461568][ T23] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 364.573655][ T5816] usb 1-1: USB disconnect, device number 23 [ 365.422339][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 365.829029][ T5790] Bluetooth: hci0: unexpected event for opcode 0x041b [ 367.241302][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.614860][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 367.887293][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 367.905782][ T9] usb 3-1: config 0 has no interfaces? [ 367.918100][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 367.955098][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.284470][ T8300] fuse: Unknown parameter 'allow_ouser' [ 368.517026][ T8299] syz.3.683 (8299) used greatest stack depth: 17352 bytes left [ 369.123754][ T9] usb 3-1: config 0 descriptor?? [ 369.696677][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.698'. [ 369.727449][ T9] usb 3-1: USB disconnect, device number 20 [ 369.931727][ T5790] Bluetooth: hci2: unexpected event for opcode 0x041b [ 370.091212][ T23] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 370.286850][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 370.387608][ T23] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 370.462249][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.523128][ T23] usb 1-1: Product: syz [ 370.571226][ T23] usb 1-1: Manufacturer: syz [ 370.604312][ T23] usb 1-1: SerialNumber: syz [ 370.970836][ T23] ems_usb 1-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 371.003534][ T23] ems_usb: probe of 1-1:91.0 failed with error -22 [ 371.026569][ T23] usb 1-1: USB disconnect, device number 24 [ 371.199776][ T8323] loop8: detected capacity change from 0 to 7 [ 371.207516][ T8323] Dev loop8: unable to read RDB block 7 [ 371.213869][ T8323] loop8: unable to read partition table [ 371.220991][ T8323] loop8: partition table beyond EOD, truncated [ 371.227536][ T8323] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 371.437808][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.709'. [ 371.559162][ T5790] Bluetooth: hci2: unexpected event for opcode 0x041b [ 371.659898][ T8336] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.669111][ T8336] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.678214][ T8336] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.687717][ T8336] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.728417][ T8336] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.737572][ T8336] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.746666][ T8336] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.755706][ T8336] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.863875][ T8339] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.873263][ T8339] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.882196][ T8339] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.891503][ T8339] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.913730][ T8339] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.922738][ T8339] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.931723][ T8339] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.940590][ T8339] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.991189][ T5818] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 372.201147][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 372.218375][ T5818] usb 3-1: config 0 has no interfaces? [ 372.243603][ T5818] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.265313][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.304157][ T5818] usb 3-1: config 0 descriptor?? [ 372.333195][ T8348] loop8: detected capacity change from 0 to 7 [ 372.351781][ T8348] Dev loop8: unable to read RDB block 7 [ 372.368967][ T8348] loop8: unable to read partition table [ 372.392385][ T8348] loop8: partition table beyond EOD, truncated [ 372.406981][ T8348] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 372.551731][ T5818] usb 3-1: USB disconnect, device number 21 [ 373.348121][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.720'. [ 374.975780][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 375.405530][ T5818] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 375.591239][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 375.612738][ T5818] usb 4-1: config 0 has no interfaces? [ 375.618384][ T5818] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 375.670334][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.759002][ T5818] usb 4-1: config 0 descriptor?? [ 376.072691][ T5818] usb 4-1: USB disconnect, device number 35 [ 378.076684][ T8395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'. [ 378.765846][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.772483][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.590290][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 382.601224][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.962025][ T8423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.744'. [ 384.436469][ T8439] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 385.886409][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.753'. [ 386.691447][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 386.771240][ T789] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 387.824413][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 387.846111][ T8] usb 2-1: config 0 has no interfaces? [ 387.865800][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.890537][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.901507][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 387.908296][ T8] usb 2-1: config 0 descriptor?? [ 387.925670][ T789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 387.945992][ T789] usb 4-1: can't read configurations, error -61 [ 388.013466][ T8477] ================================================================== [ 388.021720][ T8477] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 388.029716][ T8477] Read of size 8 at addr ffff888141b9a818 by task syz.0.761/8477 [ 388.037515][ T8477] [ 388.039924][ T8477] CPU: 1 PID: 8477 Comm: syz.0.761 Not tainted syzkaller #0 [ 388.047274][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.057379][ T8477] Call Trace: [ 388.060743][ T8477] [ 388.063779][ T8477] dump_stack_lvl+0x18c/0x250 [ 388.068619][ T8477] ? read_lock_is_recursive+0x20/0x20 [ 388.074153][ T8477] ? show_regs_print_info+0x20/0x20 [ 388.079393][ T8477] ? load_image+0x420/0x420 [ 388.083979][ T8477] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 388.089566][ T8477] ? __virt_addr_valid+0x10c/0x380 [ 388.094741][ T8477] ? __virt_addr_valid+0x10c/0x380 [ 388.099891][ T8477] ? __virt_addr_valid+0x10c/0x380 [ 388.105039][ T8477] print_report+0xa8/0x210 [ 388.109544][ T8477] ? dvb_device_open+0xc9/0x360 [ 388.114465][ T8477] kasan_report+0x117/0x150 [ 388.119075][ T8477] ? chrdev_open+0x385/0x600 [ 388.123719][ T8477] ? dvb_device_open+0xc9/0x360 [ 388.128617][ T8477] dvb_device_open+0xc9/0x360 [ 388.133348][ T8477] chrdev_open+0x58c/0x600 [ 388.137842][ T8477] ? cd_forget+0x160/0x160 [ 388.142303][ T8477] ? fsnotify_perm+0x3ed/0x5e0 [ 388.147174][ T8477] do_dentry_open+0x880/0x14b0 [ 388.152007][ T8477] ? cd_forget+0x160/0x160 [ 388.156466][ T8477] path_openat+0x284f/0x3270 [ 388.161105][ T8477] ? do_sys_openat2+0xda/0x1d0 [ 388.165933][ T8477] ? __x64_sys_openat+0x139/0x160 [ 388.171038][ T8477] ? verify_lock_unused+0x140/0x140 [ 388.176286][ T8477] ? do_filp_open+0x430/0x430 [ 388.181013][ T8477] do_filp_open+0x1f2/0x430 [ 388.185564][ T8477] ? vfs_tmpfile+0x620/0x620 [ 388.190201][ T8477] ? _raw_spin_unlock+0x28/0x40 [ 388.195089][ T8477] ? alloc_fd+0x590/0x640 [ 388.199483][ T8477] do_sys_openat2+0x134/0x1d0 [ 388.204194][ T8477] ? do_sys_open+0xe0/0xe0 [ 388.208643][ T8477] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 388.214660][ T8477] ? lock_chain_count+0x20/0x20 [ 388.219574][ T8477] __x64_sys_openat+0x139/0x160 [ 388.224468][ T8477] do_syscall_64+0x55/0xb0 [ 388.229001][ T8477] ? clear_bhb_loop+0x40/0x90 [ 388.233780][ T8477] ? clear_bhb_loop+0x40/0x90 [ 388.238500][ T8477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.244448][ T8477] RIP: 0033:0x7f13a195e90e [ 388.248962][ T8477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.268655][ T8477] RSP: 002b:00007f13a2923b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.277184][ T8477] RAX: ffffffffffffffda RBX: 00007f13a29246c0 RCX: 00007f13a195e90e [ 388.285197][ T8477] RDX: 0000000000040002 RSI: 00007f13a2923c00 RDI: ffffffffffffff9c [ 388.293211][ T8477] RBP: 00007f13a2923c00 R08: 0000000000000000 R09: 0000000000000000 [ 388.301216][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 388.309238][ T8477] R13: 00007f13a1c26128 R14: 00007f13a1c26090 R15: 00007ffdf0a3a398 [ 388.317258][ T8477] [ 388.320336][ T8477] [ 388.322697][ T8477] Allocated by task 1: [ 388.326871][ T8477] kasan_set_track+0x4e/0x70 [ 388.331504][ T8477] __kasan_kmalloc+0x8f/0xa0 [ 388.336138][ T8477] dvb_register_device+0x309/0x1df0 [ 388.341405][ T8477] dvb_register_frontend+0x62d/0x900 [ 388.346732][ T8477] vidtv_bridge_probe+0x9d6/0xf60 [ 388.351909][ T8477] platform_probe+0x13b/0x1c0 [ 388.356666][ T8477] really_probe+0x247/0xae0 [ 388.361202][ T8477] __driver_probe_device+0x1f5/0x390 [ 388.366543][ T8477] driver_probe_device+0x4f/0x420 [ 388.371621][ T8477] __driver_attach+0x444/0x6d0 [ 388.376454][ T8477] bus_for_each_dev+0x235/0x2b0 [ 388.381357][ T8477] bus_add_driver+0x340/0x630 [ 388.386074][ T8477] driver_register+0x23a/0x310 [ 388.390872][ T8477] vidtv_bridge_init+0x49/0x80 [ 388.395803][ T8477] do_one_initcall+0x242/0x790 [ 388.400627][ T8477] do_initcall_level+0x13d/0x1f0 [ 388.405668][ T8477] do_initcalls+0x69/0xd0 [ 388.410034][ T8477] kernel_init_freeable+0x3d9/0x560 [ 388.415303][ T8477] kernel_init+0x1d/0x1c0 [ 388.419690][ T8477] ret_from_fork+0x48/0x80 [ 388.424142][ T8477] ret_from_fork_asm+0x11/0x20 [ 388.428963][ T8477] [ 388.431311][ T8477] Freed by task 8439: [ 388.435318][ T8477] kasan_set_track+0x4e/0x70 [ 388.439949][ T8477] kasan_save_free_info+0x28/0x40 [ 388.445010][ T8477] ____kasan_slab_free+0x126/0x1f0 [ 388.450164][ T8477] slab_free_freelist_hook+0x130/0x1a0 [ 388.455658][ T8477] __kmem_cache_free+0xba/0x1f0 [ 388.460550][ T8477] dvb_device_open+0x2d9/0x360 [ 388.465359][ T8477] chrdev_open+0x58c/0x600 [ 388.469913][ T8477] do_dentry_open+0x880/0x14b0 [ 388.474741][ T8477] path_openat+0x284f/0x3270 [ 388.479372][ T8477] do_filp_open+0x1f2/0x430 [ 388.483907][ T8477] do_sys_openat2+0x134/0x1d0 [ 388.488618][ T8477] __x64_sys_openat+0x139/0x160 [ 388.493496][ T8477] do_syscall_64+0x55/0xb0 [ 388.497949][ T8477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.503871][ T8477] [ 388.506249][ T8477] The buggy address belongs to the object at ffff888141b9a800 [ 388.506249][ T8477] which belongs to the cache kmalloc-256 of size 256 [ 388.520490][ T8477] The buggy address is located 24 bytes inside of [ 388.520490][ T8477] freed 256-byte region [ffff888141b9a800, ffff888141b9a900) [ 388.534258][ T8477] [ 388.536612][ T8477] The buggy address belongs to the physical page: [ 388.543232][ T8477] page:ffffea000506e680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141b9a [ 388.553501][ T8477] head:ffffea000506e680 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 388.562461][ T8477] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 388.570567][ T8477] page_type: 0xffffffff() [ 388.574941][ T8477] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 388.583561][ T8477] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 388.592217][ T8477] page dumped because: kasan: bad access detected [ 388.598757][ T8477] page_owner tracks the page as allocated [ 388.604494][ T8477] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18923761915, free_ts 0 [ 388.624241][ T8477] post_alloc_hook+0x1c1/0x200 [ 388.629115][ T8477] get_page_from_freelist+0x2181/0x22a0 [ 388.634692][ T8477] __alloc_pages+0x1f0/0x460 [ 388.639308][ T8477] alloc_page_interleave+0x24/0x1e0 [ 388.644546][ T8477] alloc_slab_page+0x5d/0x180 [ 388.649263][ T8477] new_slab+0x87/0x2d0 [ 388.653367][ T8477] ___slab_alloc+0xc5c/0x12f0 [ 388.658080][ T8477] __kmem_cache_alloc_node+0x11f/0x250 [ 388.663576][ T8477] kmalloc_trace+0x2a/0xe0 [ 388.668048][ T8477] bus_add_driver+0x162/0x630 [ 388.672785][ T8477] driver_register+0x23a/0x310 [ 388.677581][ T8477] do_one_initcall+0x242/0x790 [ 388.682401][ T8477] do_initcall_level+0x13d/0x1f0 [ 388.687391][ T8477] do_initcalls+0x69/0xd0 [ 388.691761][ T8477] kernel_init_freeable+0x3d9/0x560 [ 388.697004][ T8477] kernel_init+0x1d/0x1c0 [ 388.701378][ T8477] page_owner free stack trace missing [ 388.706787][ T8477] [ 388.709152][ T8477] Memory state around the buggy address: [ 388.714832][ T8477] ffff888141b9a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 388.722927][ T8477] ffff888141b9a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 388.731093][ T8477] >ffff888141b9a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 388.739179][ T8477] ^ [ 388.744058][ T8477] ffff888141b9a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 388.752166][ T8477] ffff888141b9a900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 388.760250][ T8477] ================================================================== [ 388.886320][ T8477] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 388.893589][ T8477] CPU: 1 PID: 8477 Comm: syz.0.761 Not tainted syzkaller #0 [ 388.900909][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.910995][ T8477] Call Trace: [ 388.914309][ T8477] [ 388.917272][ T8477] dump_stack_lvl+0x18c/0x250 [ 388.922040][ T8477] ? show_regs_print_info+0x20/0x20 [ 388.927273][ T8477] ? load_image+0x420/0x420 [ 388.931834][ T8477] panic+0x2ca/0x720 [ 388.935799][ T8477] ? bpf_jit_dump+0xd0/0xd0 [ 388.940341][ T8477] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 388.946017][ T8477] ? dvb_device_open+0xc9/0x360 [ 388.950915][ T8477] ? check_panic_on_warn+0x70/0xa0 [ 388.956099][ T8477] ? dvb_device_open+0xc9/0x360 [ 388.961047][ T8477] check_panic_on_warn+0x84/0xa0 [ 388.966027][ T8477] ? dvb_device_open+0xc9/0x360 [ 388.970919][ T8477] end_report+0x6f/0x130 [ 388.975210][ T8477] kasan_report+0x128/0x150 [ 388.979751][ T8477] ? chrdev_open+0x385/0x600 [ 388.984369][ T8477] ? dvb_device_open+0xc9/0x360 [ 388.989265][ T8477] dvb_device_open+0xc9/0x360 [ 388.993994][ T8477] chrdev_open+0x58c/0x600 [ 388.998451][ T8477] ? cd_forget+0x160/0x160 [ 389.002925][ T8477] ? fsnotify_perm+0x3ed/0x5e0 [ 389.007752][ T8477] do_dentry_open+0x880/0x14b0 [ 389.012556][ T8477] ? cd_forget+0x160/0x160 [ 389.017007][ T8477] path_openat+0x284f/0x3270 [ 389.021648][ T8477] ? do_sys_openat2+0xda/0x1d0 [ 389.026460][ T8477] ? __x64_sys_openat+0x139/0x160 [ 389.031526][ T8477] ? verify_lock_unused+0x140/0x140 [ 389.036775][ T8477] ? do_filp_open+0x430/0x430 [ 389.041497][ T8477] do_filp_open+0x1f2/0x430 [ 389.046041][ T8477] ? vfs_tmpfile+0x620/0x620 [ 389.050678][ T8477] ? _raw_spin_unlock+0x28/0x40 [ 389.055569][ T8477] ? alloc_fd+0x590/0x640 [ 389.059942][ T8477] do_sys_openat2+0x134/0x1d0 [ 389.064664][ T8477] ? do_sys_open+0xe0/0xe0 [ 389.069128][ T8477] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 389.075144][ T8477] ? lock_chain_count+0x20/0x20 [ 389.080043][ T8477] __x64_sys_openat+0x139/0x160 [ 389.084953][ T8477] do_syscall_64+0x55/0xb0 [ 389.089416][ T8477] ? clear_bhb_loop+0x40/0x90 [ 389.094150][ T8477] ? clear_bhb_loop+0x40/0x90 [ 389.098869][ T8477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.104797][ T8477] RIP: 0033:0x7f13a195e90e [ 389.109263][ T8477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 389.129080][ T8477] RSP: 002b:00007f13a2923b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 389.137533][ T8477] RAX: ffffffffffffffda RBX: 00007f13a29246c0 RCX: 00007f13a195e90e [ 389.145544][ T8477] RDX: 0000000000040002 RSI: 00007f13a2923c00 RDI: ffffffffffffff9c [ 389.153558][ T8477] RBP: 00007f13a2923c00 R08: 0000000000000000 R09: 0000000000000000 [ 389.161568][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 389.169589][ T8477] R13: 00007f13a1c26128 R14: 00007f13a1c26090 R15: 00007ffdf0a3a398 [ 389.177605][ T8477] [ 389.181229][ T8477] Kernel Offset: disabled [ 389.185565][ T8477] Rebooting in 86400 seconds..