last executing test programs: 9.450250097s ago: executing program 2 (id=1780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a09040000000004000000020000060900020073797a32000000000900010073797a30000000005c0004805800018007000100637400004c000280080001400000001308000240000024"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x884) 9.327388822s ago: executing program 2 (id=1781): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) 9.180695668s ago: executing program 2 (id=1783): r0 = syz_io_uring_setup(0x6f21, &(0x7f0000000540)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12, 0x1}) io_uring_enter(r0, 0x2def, 0xb80c, 0xe, 0x0, 0x0) 9.091159107s ago: executing program 2 (id=1784): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000712eb600000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 8.99980239s ago: executing program 2 (id=1786): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000d042abd70000000000200000000", @ANYRES32=r3, @ANYBLOB="60c000000c02040024001280110001006272696467655f736c617665000000000c0005800500200001"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@random="8a2819bb0b8f", @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @rand_addr=0x64010101, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty=0xac1414bb}}}}, 0x0) 8.827488699s ago: executing program 2 (id=1788): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.191885723s ago: executing program 0 (id=1864): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="32d2e7deecdb0bed06f89c7385019f466e7b7bb245aae00a", 0x18, 0x0, 0x0, 0x0) 2.118351247s ago: executing program 0 (id=1865): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x8020000000}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 1.990719122s ago: executing program 0 (id=1867): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/56, 0x38}], 0x1, 0x6, 0x6) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x900) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) 1.82464524s ago: executing program 3 (id=1868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.5075822s ago: executing program 3 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.383982647s ago: executing program 3 (id=1872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.287046387s ago: executing program 0 (id=1874): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 1.206781142s ago: executing program 0 (id=1875): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x6, 0x40, 0x1}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40020) 1.205904016s ago: executing program 4 (id=1876): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) 1.086972677s ago: executing program 4 (id=1877): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) 990.097579ms ago: executing program 4 (id=1879): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x4840) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 520.517832ms ago: executing program 1 (id=1883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb92}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x400}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {0x0, 0x2c00}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x4, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4000bf}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x100}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe6f1}, {}, {0x0, 0x0, 0x0, 0x0, 0x3e0d905c, 0x6}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x57, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x8, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x2}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {0x0, 0x1}, {}, {0x523e, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x10}, {0x2}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 495.318466ms ago: executing program 3 (id=1884): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 489.849747ms ago: executing program 1 (id=1885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 418.017723ms ago: executing program 1 (id=1886): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) 320.736718ms ago: executing program 4 (id=1887): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) 320.442496ms ago: executing program 3 (id=1888): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000004140)=[{{&(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000000580)="12", 0x1}], 0x1}}], 0x1, 0x1) 278.035657ms ago: executing program 1 (id=1889): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0], &(0x7f0000000180)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x75066b4f7277ef64, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0), 0x10, 0x3, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x80000000, 0x10001, 0x0) 248.852358ms ago: executing program 4 (id=1890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) membarrier(0x10, 0x0) 124.596092ms ago: executing program 1 (id=1891): syz_emit_ethernet(0xd2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff00009c1101fe8000000000000000000000000000bbff02000000000000000000000000000100004e22009c90780100000002000000775d6fda3c2b4abf3775c333"], 0x0) 117.181111ms ago: executing program 3 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x884) 79.274237ms ago: executing program 4 (id=1893): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x68040200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f000200"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 761.123µs ago: executing program 1 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) 0s ago: executing program 0 (id=1895): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 122.408586][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 122.441260][ T30] audit: type=1326 audit(1744879173.574:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 122.466170][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.492938][ T5901] usb 3-1: config 0 descriptor?? [ 122.524004][ T5901] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 122.524249][ T30] audit: type=1326 audit(1744879173.574:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 122.590577][ T30] audit: type=1326 audit(1744879173.574:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 122.640674][ T30] audit: type=1326 audit(1744879173.574:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 123.733190][ T6453] xt_nat: multiple ranges no longer supported [ 124.073254][ T5901] usb 3-1: USB disconnect, device number 5 [ 124.461552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.133546][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 125.922678][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 125.989127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.024735][ T6484] netlink: 168 bytes leftover after parsing attributes in process `syz.1.220'. [ 126.696452][ T974] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.062110][ T6504] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.066827][ T974] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 127.109828][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.119517][ T974] usb 3-1: Product: syz [ 127.127715][ T974] usb 3-1: Manufacturer: syz [ 127.132432][ T974] usb 3-1: SerialNumber: syz [ 127.144608][ T974] usb 3-1: config 0 descriptor?? [ 127.548452][ T6510] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 127.576575][ T974] usb 3-1: Firmware: major: 238, minor: 4, hardware type: UNKNOWN (149) [ 127.636683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 127.778876][ T974] usb 3-1: failed to fetch extended address, random address set [ 127.788505][ T974] usb 3-1: atusb_probe: initialization failed, error = -524 [ 127.796340][ T974] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 127.814648][ T974] usb 3-1: USB disconnect, device number 6 [ 128.046258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 128.733960][ T6520] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 128.759521][ T6521] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 128.948592][ T6521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.171895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.283371][ T6525] bond1: (slave veth3): Enslaving as an active interface with a down link [ 129.313859][ T6526] ip6gretap1: entered promiscuous mode [ 129.323246][ T6526] bond1: (slave ip6gretap1): making interface the new active one [ 129.333472][ T6526] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 130.687362][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 131.554658][ T6563] netlink: 'syz.1.244': attribute type 10 has an invalid length. [ 131.635963][ T6563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.781217][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.475633][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.248'. [ 132.852434][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.862337][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.244481][ T6584] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 133.845683][ T6605] fuse: Bad value for 'fd' [ 134.396700][ T30] audit: type=1326 audit(1744879185.814:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x0 [ 134.477195][ T6625] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 134.955036][ T6635] hub 2-0:1.0: USB hub found [ 135.034929][ T6635] hub 2-0:1.0: 1 port detected [ 135.190573][ T6632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.197611][ T6632] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 135.316497][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.482116][ T24] usb 4-1: device descriptor read/64, error -71 [ 135.874756][ T6632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.911978][ T6632] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 135.946181][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.990112][ T6651] fuse: Bad value for 'fd' [ 136.061002][ T6632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.076160][ T24] usb 4-1: device descriptor read/64, error -71 [ 136.085245][ T6632] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 136.118959][ T6632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.124990][ T6632] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 136.209252][ T24] usb usb4-port1: attempt power cycle [ 136.576166][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.686148][ T24] usb 4-1: device descriptor read/8, error -71 [ 136.946132][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.999884][ T24] usb 4-1: device descriptor read/8, error -71 [ 137.156886][ T24] usb usb4-port1: unable to enumerate USB device [ 137.632669][ T6688] fuse: Bad value for 'fd' [ 138.144351][ T6700] netlink: 252 bytes leftover after parsing attributes in process `syz.0.280'. [ 138.436491][ T5901] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 138.628751][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.658781][ T5901] usb 3-1: not running at top speed; connect to a high speed hub [ 138.703754][ T5901] usb 3-1: config 253 has an invalid interface number: 140 but max is 0 [ 138.725588][ T5901] usb 3-1: config 253 has no interface number 0 [ 138.758347][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 138.786161][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.814631][ T5901] usb 3-1: Product: syz [ 138.828541][ T5901] usb 3-1: Manufacturer: syz [ 138.855094][ T5901] usb 3-1: SerialNumber: syz [ 139.092757][ T5901] usbtest 3-1:253.140: Linux gadget zero [ 139.110237][ T5901] usbtest 3-1:253.140: full-speed {control in/out int-out} tests (+alt) [ 139.140514][ T5901] usb 3-1: USB disconnect, device number 7 [ 140.552893][ T6748] syz.1.301 (6748) used greatest stack depth: 18616 bytes left [ 141.385486][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 141.885162][ T6810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.182589][ T6819] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.191705][ T6819] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.200615][ T6819] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.209382][ T6819] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.269855][ T6819] vxlan0: entered promiscuous mode [ 142.275035][ T6819] vxlan0: entered allmulticast mode [ 142.331374][ T6819] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.340469][ T6819] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.349537][ T6819] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.358663][ T6819] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.046481][ T6819] Zero length message leads to an empty skb [ 144.146625][ T6862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.231605][ T6864] xt_connbytes: Forcing CT accounting to be enabled [ 144.266419][ T6864] --map-set only usable from mangle table [ 145.643097][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'. [ 146.562435][ T6909] loop1: detected capacity change from 0 to 524287999 [ 146.597366][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.605528][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.668795][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.741699][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.781107][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.826684][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.835798][ T6916] loop2: detected capacity change from 0 to 5 [ 146.855978][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.866316][ T6916] Dev loop2: unable to read RDB block 5 [ 146.874423][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.891348][ T6916] loop2: AHDI p1 p2 p3 [ 146.897095][ T6909] ldm_validate_partition_table(): Disk read failed. [ 146.903789][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.920249][ T6916] loop2: partition table partially beyond EOD, truncated [ 146.943267][ T6916] loop2: p1 start 1601398130 is beyond EOD, truncated [ 146.950724][ T6909] Buffer I/O error on dev loop1, logical block 0, async page read [ 146.963683][ T6916] loop2: p2 start 1702059890 is beyond EOD, truncated [ 146.974273][ T6909] Dev loop1: unable to read RDB block 0 [ 146.990380][ T6909] loop1: unable to read partition table [ 147.048354][ T6909] loop_reread_partitions: partition scan of loop1 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 147.059931][ T5867] ldm_validate_partition_table(): Disk read failed. [ 147.094184][ T5867] Dev loop1: unable to read RDB block 0 [ 147.125173][ T5867] loop1: unable to read partition table [ 147.162296][ T6913] ldm_validate_partition_table(): Disk read failed. [ 147.196925][ T6913] Dev loop1: unable to read RDB block 0 [ 147.203161][ T6913] loop1: unable to read partition table [ 147.216508][ T6913] loop_reread_partitions: partition scan of loop1 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 148.416410][ T24] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 148.592325][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 148.603172][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.620411][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.652858][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.686966][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.725029][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 148.756874][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.796168][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.819567][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.836099][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.867319][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 148.875091][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.896674][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.916123][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.947015][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.978349][ T24] usb 2-1: string descriptor 0 read error: -22 [ 148.986289][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 149.005929][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.087381][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 149.350211][ T974] usb 2-1: USB disconnect, device number 2 [ 149.633504][ T6959] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 151.226185][ T5904] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.388212][ T5904] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.418006][ T5904] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.456870][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.488003][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.530912][ T5904] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.569472][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.599258][ T5904] usb 4-1: Product: syz [ 151.603478][ T5904] usb 4-1: Manufacturer: syz [ 151.685833][ T5904] cdc_wdm 4-1:1.0: skipping garbage [ 151.709986][ T5904] cdc_wdm 4-1:1.0: skipping garbage [ 151.754685][ T5904] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 151.762134][ T5904] cdc_wdm 4-1:1.0: Unknown control protocol [ 151.898752][ T5904] usb 4-1: USB disconnect, device number 7 [ 152.573310][ T6994] vivid-000: ================= START STATUS ================= [ 152.581482][ T6994] vivid-000: Generate PTS: true [ 152.629850][ T6994] vivid-000: Generate SCR: true [ 152.683675][ T6994] tpg source WxH: 640x360 (Y'CbCr) [ 152.692295][ T6994] tpg field: 1 [ 152.695812][ T6994] tpg crop: (0,0)/640x360 [ 152.718214][ T6994] tpg compose: (0,0)/640x360 [ 152.723931][ T6994] tpg colorspace: 8 [ 152.729943][ T6994] tpg transfer function: 0/0 [ 152.734754][ T6994] tpg Y'CbCr encoding: 0/0 [ 152.744898][ T6994] tpg quantization: 0/0 [ 152.755026][ T6994] tpg RGB range: 0/2 [ 152.759091][ T6994] vivid-000: ================== END STATUS ================== [ 153.546211][ T5904] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.746303][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 153.781363][ T5904] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 153.829738][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.829768][ T5904] usb 3-1: Product: syz [ 153.829785][ T5904] usb 3-1: Manufacturer: syz [ 153.829801][ T5904] usb 3-1: SerialNumber: syz [ 153.841204][ T5904] usb 3-1: config 0 descriptor?? [ 153.853560][ T5904] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 153.908251][ T5904] usb 3-1: setting power ON [ 153.908763][ T5904] dvb-usb: bulk message failed: -22 (2/0) [ 153.976239][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.979642][ T5904] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 153.979712][ T5904] usb 3-1: media controller created [ 154.051662][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.069125][ T7004] dvb-usb: bulk message failed: -22 (3/0) [ 154.085509][ T7004] usb 3-1: gpio_write failed. [ 154.125924][ T7004] dvb-usb: bulk message failed: -22 (4/0) [ 154.157304][ T7004] cxusb: i2c read failed [ 154.214265][ T7019] dvb-usb: bulk message failed: -22 (4/0) [ 154.246210][ T7019] cxusb: i2c read failed [ 154.274594][ T5904] usb 3-1: selecting invalid altsetting 6 [ 154.321813][ T5904] usb 3-1: digital interface selection failed (-22) [ 154.336430][ T5904] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 154.357310][ T5904] usb 3-1: setting power OFF [ 154.362246][ T5904] dvb-usb: bulk message failed: -22 (2/0) [ 154.376183][ T5904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 154.413236][ T5904] (NULL device *): no alternate interface [ 154.677307][ T7025] netlink: 100 bytes leftover after parsing attributes in process `syz.0.390'. [ 155.073871][ T5904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 155.156475][ T5904] usb 3-1: USB disconnect, device number 8 [ 155.525404][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 156.468281][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.676421][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 156.776351][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 156.888833][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 157.021838][ T5904] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 157.099415][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.245808][ T5904] usb 3-1: config 0 descriptor?? [ 158.233237][ T5904] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 158.366273][ T5901] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.520548][ T5904] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 158.537061][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 158.537907][ T5904] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 158.555800][ T5904] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 158.565646][ T5901] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 158.584122][ T5904] usb 3-1: USB disconnect, device number 9 [ 158.585196][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 158.626313][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.649883][ T5901] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.680078][ T5901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.703346][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.931410][ T5901] usb 5-1: GET_CAPABILITIES returned 0 [ 158.938172][ T5901] usbtmc 5-1:16.0: can't read capabilities [ 159.182885][ T24] usb 5-1: USB disconnect, device number 2 [ 159.218929][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 160.313048][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 160.322348][ T7089] bridge_slave_1: left allmulticast mode [ 160.328157][ T7089] bridge_slave_1: left promiscuous mode [ 160.335599][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.578259][ T7089] bridge_slave_0: left allmulticast mode [ 160.584081][ T7089] bridge_slave_0: left promiscuous mode [ 160.650925][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.458712][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 162.472376][ T30] audit: type=1804 audit(1744879213.884:51): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.418" name="/newroot/86/file0" dev="tmpfs" ino=457 res=1 errno=0 [ 163.106225][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.406138][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 163.419277][ T47] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.452514][ T47] usb 5-1: config 179 has no interface number 0 [ 163.502733][ T47] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.657176][ T7140] capability: warning: `syz.2.424' uses deprecated v2 capabilities in a way that may be insecure [ 163.674111][ T47] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.728475][ T47] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.770719][ T47] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 163.829045][ T47] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.897794][ T47] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.936200][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.979547][ T7126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 164.422410][ T5904] usb 5-1: USB disconnect, device number 3 [ 164.422472][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 164.436810][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 164.466403][ T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.636109][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 164.645697][ T47] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.666004][ T47] usb 3-1: config 1 interface 0 has no altsetting 0 [ 164.679403][ T47] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 164.688742][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.698391][ T47] usb 3-1: Product: syz [ 164.702602][ T47] usb 3-1: Manufacturer: syz [ 164.708567][ T47] usb 3-1: SerialNumber: syz [ 164.757781][ T974] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.921866][ T974] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.936808][ T974] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.948580][ T974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.970443][ T47] usbhid 3-1:1.0: can't add hid device: -71 [ 164.976914][ T47] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 164.995895][ T47] usb 3-1: USB disconnect, device number 10 [ 165.010113][ T974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 165.054432][ T974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 165.082266][ T974] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.122416][ T974] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.136508][ T974] usb 4-1: Product: syz [ 165.140780][ T974] usb 4-1: Manufacturer: syz [ 165.161547][ T974] cdc_wdm 4-1:1.0: skipping garbage [ 165.175163][ T974] cdc_wdm 4-1:1.0: skipping garbage [ 165.198080][ T974] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 165.214650][ T974] cdc_wdm 4-1:1.0: Unknown control protocol [ 165.375059][ T974] usb 4-1: USB disconnect, device number 8 [ 165.846291][ T5904] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.040782][ T5904] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.054349][ T5904] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.108000][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.127265][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 166.146771][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.170578][ T5904] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.186741][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.205002][ T5904] usb 3-1: Product: syz [ 166.219978][ T5904] usb 3-1: Manufacturer: syz [ 166.255285][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 166.270024][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 166.298606][ T5904] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 166.304577][ T5904] cdc_wdm 3-1:1.0: Unknown control protocol [ 167.043532][ T24] usb 3-1: USB disconnect, device number 11 [ 167.050056][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xc6df [ 167.094647][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa60c [ 167.135843][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5176 [ 167.165985][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x79aa [ 167.218480][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xdb06 [ 167.229279][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xba78 [ 167.240686][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5176 [ 167.252427][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x79aa [ 167.327866][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xdb06 [ 167.345725][ T7190] kvm: kvm [7188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xba78 [ 169.808143][ T30] audit: type=1326 audit(1744879221.214:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.3.467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f256898e169 code=0x0 [ 170.837459][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.472'. [ 171.436162][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.676124][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 171.696923][ T47] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 171.728887][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.940698][ T47] usb 5-1: Product: syz [ 171.950072][ T47] usb 5-1: Manufacturer: syz [ 171.965687][ T47] usb 5-1: SerialNumber: syz [ 171.988807][ T47] usb 5-1: config 0 descriptor?? [ 172.006842][ T47] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 172.035327][ T47] usb 5-1: setting power ON [ 172.042116][ T47] dvb-usb: bulk message failed: -22 (2/0) [ 172.057835][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.120072][ T47] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 172.139039][ T47] usb 5-1: media controller created [ 172.280490][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.346583][ T47] usb 5-1: selecting invalid altsetting 6 [ 172.362756][ T47] usb 5-1: digital interface selection failed (-22) [ 172.372864][ T47] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 172.398070][ T47] usb 5-1: setting power OFF [ 172.416479][ T47] dvb-usb: bulk message failed: -22 (2/0) [ 172.429525][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.484'. [ 172.436122][ T47] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 172.466135][ T47] (NULL device *): no alternate interface [ 172.556961][ T47] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 172.755869][ T47] usb 5-1: USB disconnect, device number 4 [ 172.796702][ T5953] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 172.988674][ T5953] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.002829][ T5953] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 173.014783][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.035367][ T5953] usb 4-1: config 0 descriptor?? [ 173.506769][ T5953] elo 0003:04E7:0030.0006: hidraw0: USB HID v80.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 173.676810][ T974] usb 4-1: USB disconnect, device number 9 [ 173.766343][ T5901] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 173.926164][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 173.933511][ T5901] usb 3-1: config index 0 descriptor too short (expected 21028, got 36) [ 173.948066][ T5901] usb 3-1: config 15 has too many interfaces: 74, using maximum allowed: 32 [ 173.974499][ T5901] usb 3-1: config 15 has an invalid interface number: 251 but max is 73 [ 174.066482][ T5901] usb 3-1: config 15 has 1 interface, different from the descriptor's value: 74 [ 174.075802][ T5901] usb 3-1: config 15 has no interface number 0 [ 174.083450][ T5901] usb 3-1: config 15 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 174.094074][ T5901] usb 3-1: config 15 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 174.107475][ T5901] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 174.200986][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.226236][ T5901] usb 3-1: Product: syz [ 174.230529][ T5901] usb 3-1: Manufacturer: syz [ 174.235167][ T5901] usb 3-1: SerialNumber: syz [ 174.245706][ T7309] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.253296][ T7309] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.543158][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.497'. [ 174.668310][ T7309] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.675974][ T7309] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 175.095085][ T5901] asix 3-1:15.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 175.126177][ T5901] asix 3-1:15.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 175.152230][ T5901] asix 3-1:15.251: probe with driver asix failed with error -71 [ 175.513580][ T5901] usb 3-1: USB disconnect, device number 12 [ 176.033912][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.508'. [ 177.802671][ T5901] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 177.999591][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 178.019554][ T5901] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 178.090678][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 178.147074][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.211327][ T5901] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.255115][ T5901] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.291490][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.789152][ T5901] usb 3-1: GET_CAPABILITIES returned 0 [ 178.815453][ T5901] usbtmc 3-1:16.0: can't read capabilities [ 179.008868][ T5901] usb 3-1: USB disconnect, device number 13 [ 179.334159][ T7422] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 179.351951][ T7422] bond0: (slave wlan1): Opening slave failed [ 179.582924][ T7421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.030523][ T7454] fuse: Bad value for 'fd' [ 181.044130][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 181.301232][ T7465] netlink: 68 bytes leftover after parsing attributes in process `syz.3.547'. [ 182.035585][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.553'. [ 182.215428][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 182.470204][ T7497] netlink: 68 bytes leftover after parsing attributes in process `syz.4.559'. [ 182.619278][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 182.734208][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 182.773527][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 182.827108][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 182.874222][ T7508] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 183.035758][ T7516] netlink: 560 bytes leftover after parsing attributes in process `syz.2.566'. [ 183.437773][ T7523] mmap: syz.2.569 (7523) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.087490][ T5953] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.246210][ T5953] usb 5-1: device descriptor read/64, error -71 [ 184.306241][ T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 184.478098][ T47] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.496755][ T47] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.500177][ T5953] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.515237][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.534828][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 184.556393][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 184.588021][ T47] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.601829][ T47] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.620368][ T47] usb 2-1: Product: syz [ 184.624595][ T47] usb 2-1: Manufacturer: syz [ 184.657487][ T5953] usb 5-1: device descriptor read/64, error -71 [ 184.670169][ T47] cdc_wdm 2-1:1.0: skipping garbage [ 184.675473][ T47] cdc_wdm 2-1:1.0: skipping garbage [ 184.698077][ T47] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 184.714660][ T47] cdc_wdm 2-1:1.0: Unknown control protocol [ 184.778932][ T5953] usb usb5-port1: attempt power cycle [ 184.885892][ T974] usb 2-1: USB disconnect, device number 3 [ 185.126439][ T5953] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 185.147289][ T5953] usb 5-1: device descriptor read/8, error -71 [ 185.386965][ T5953] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 185.437523][ T5953] usb 5-1: device descriptor read/8, error -71 [ 185.548787][ T5953] usb usb5-port1: unable to enumerate USB device [ 186.807107][ T5953] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.990996][ T5953] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.001456][ T5953] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 187.035090][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.049929][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 187.065305][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 187.079695][ T5953] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.095178][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.106391][ T5953] usb 2-1: Product: syz [ 187.110864][ T5953] usb 2-1: Manufacturer: syz [ 187.143666][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 187.151783][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 187.166208][ T5953] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 187.179102][ T5953] cdc_wdm 2-1:1.0: Unknown control protocol [ 187.344615][ T5953] usb 2-1: USB disconnect, device number 4 [ 187.508223][ T7614] netlink: 'syz.0.607': attribute type 11 has an invalid length. [ 187.520300][ T7614] __nla_validate_parse: 11 callbacks suppressed [ 187.520320][ T7614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.607'. [ 189.956140][ T5838] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.136363][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 190.154766][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.180154][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.203428][ T5838] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.225715][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.259926][ T5838] usb 5-1: config 0 descriptor?? [ 190.283406][ T5838] hub 5-1:0.0: USB hub found [ 190.521626][ T5838] hub 5-1:0.0: 1 port detected [ 191.119190][ T5838] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 191.314361][ T5838] hid-generic 8000:0003:001F.0007: item fetching failed at offset 1/2 [ 191.345912][ T5838] hid-generic 8000:0003:001F.0007: probe with driver hid-generic failed with error -22 [ 191.496456][ T5838] usb 5-1: USB disconnect, device number 9 [ 192.981887][ T7720] netlink: 52 bytes leftover after parsing attributes in process `syz.1.650'. [ 193.180677][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 193.289929][ T7732] process 'syz.1.656' launched './file1' with NULL argv: empty string added [ 193.780961][ T7746] x_tables: duplicate underflow at hook 3 [ 193.846456][ T7751] netlink: 52 bytes leftover after parsing attributes in process `syz.3.663'. [ 194.292712][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299195][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.486396][ T7766] netlink: 'syz.2.670': attribute type 10 has an invalid length. [ 194.494958][ T7766] bond0: (slave wlan1): Opening slave failed [ 197.864483][ T7827] capability: warning: `syz.4.686' uses 32-bit capabilities (legacy support in use) [ 199.724046][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.708'. [ 199.767393][ T7869] fuse: Bad value for 'fd' [ 199.906299][ T5838] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 200.087037][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 200.106108][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 200.140962][ T5838] usb 2-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 200.156104][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.174389][ T5838] usb 2-1: Product: syz [ 200.186111][ T5838] usb 2-1: Manufacturer: syz [ 200.190765][ T5838] usb 2-1: SerialNumber: syz [ 200.238928][ T5838] usb 2-1: config 0 descriptor?? [ 200.457066][ T5838] usb 2-1: USB disconnect, device number 5 [ 201.456709][ T5838] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 201.474488][ T7894] netlink: 'syz.1.720': attribute type 10 has an invalid length. [ 201.659436][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.678487][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.709357][ T5838] usb 4-1: New USB device found, idVendor=28bd, idProduct=0051, bcdDevice= 0.00 [ 201.731560][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.740137][ T5953] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 201.788800][ T5838] usb 4-1: config 0 descriptor?? [ 201.797609][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.906434][ T5953] usb 5-1: device descriptor read/64, error -71 [ 201.992792][ T7900] fuse: Bad value for 'fd' [ 202.146280][ T5953] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 202.218924][ T5838] hid-generic 0003:28BD:0051.0008: collection stack underflow [ 202.251332][ T5838] hid-generic 0003:28BD:0051.0008: item 0 0 0 12 parsing failed [ 202.266174][ T5838] hid-generic 0003:28BD:0051.0008: probe with driver hid-generic failed with error -22 [ 202.305090][ T5953] usb 5-1: device descriptor read/64, error -71 [ 202.420052][ T5838] usb 4-1: USB disconnect, device number 10 [ 202.426762][ T5953] usb usb5-port1: attempt power cycle [ 202.786158][ T5953] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 202.831137][ T5953] usb 5-1: device descriptor read/8, error -71 [ 202.906241][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.068693][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.086477][ T5953] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.096086][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.105972][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.127053][ T5953] usb 5-1: device descriptor read/8, error -71 [ 203.136395][ T5904] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.145474][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.168826][ T5904] usb 2-1: config 0 descriptor?? [ 203.236582][ T5953] usb usb5-port1: unable to enumerate USB device [ 203.597777][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.628132][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.649201][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.679081][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.716818][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.751375][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.789011][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.897881][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.905351][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.936104][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.956125][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 203.985026][ T5904] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 204.022171][ T5904] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 204.079732][ T5904] usb 2-1: USB disconnect, device number 6 [ 205.246903][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 205.330565][ T7948] fuse: Bad value for 'user_id' [ 205.341388][ T7935] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 205.346220][ T7948] fuse: Bad value for 'user_id' [ 205.364512][ T7934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.484075][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 206.522497][ T7973] netlink: 'syz.0.752': attribute type 10 has an invalid length. [ 206.557013][ T7973] bond0: (slave wlan1): Opening slave failed [ 206.592482][ T7978] fuse: Bad value for 'user_id' [ 206.597614][ T7978] fuse: Bad value for 'user_id' [ 206.615544][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 206.966275][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'. [ 208.224658][ T8010] fuse: Bad value for 'user_id' [ 208.245476][ T8010] fuse: Bad value for 'user_id' [ 208.273101][ T7998] netlink: 'syz.2.763': attribute type 10 has an invalid length. [ 208.329900][ T7998] bond0: (slave wlan1): Opening slave failed [ 208.347996][ T7995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.514967][ T8021] netlink: 6 bytes leftover after parsing attributes in process `syz.4.773'. [ 209.344805][ T8041] fuse: Bad value for 'fd' [ 209.565875][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.783'. [ 209.606349][ T5901] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 209.777662][ T5901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.790269][ T5901] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.824453][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.854207][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.875756][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.908103][ T5901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.926153][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.936242][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 209.944406][ T5901] usb 3-1: Product: syz [ 209.954524][ T5901] usb 3-1: Manufacturer: syz [ 209.980737][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 209.997721][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 210.018042][ T5901] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 210.034656][ T5901] cdc_wdm 3-1:1.0: Unknown control protocol [ 210.099068][ T24] usb 5-1: device descriptor read/64, error -71 [ 210.197805][ T5904] usb 3-1: USB disconnect, device number 14 [ 210.366232][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 210.506520][ T24] usb 5-1: device descriptor read/64, error -71 [ 210.618106][ T24] usb usb5-port1: attempt power cycle [ 210.899511][ T8073] fuse: Bad value for 'fd' [ 211.186109][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.246824][ T24] usb 5-1: device descriptor read/8, error -71 [ 211.616139][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.636796][ T24] usb 5-1: device descriptor read/8, error -71 [ 211.747090][ T24] usb usb5-port1: unable to enumerate USB device [ 212.027124][ T8099] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 212.045846][ T8099] bond0: (slave wlan1): Opening slave failed [ 212.133644][ T8101] fuse: Bad value for 'fd' [ 212.490878][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 212.820932][ T8115] wireguard0: entered promiscuous mode [ 212.870055][ T8115] wireguard0: entered allmulticast mode [ 213.819698][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 213.986243][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.166181][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 214.174370][ T24] usb 2-1: config 0 has an invalid interface number: 162 but max is 0 [ 214.183010][ T24] usb 2-1: config 0 has no interface number 0 [ 214.202998][ T24] usb 2-1: config 0 interface 162 has no altsetting 0 [ 214.225131][ T24] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=bb.f8 [ 214.236116][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.244171][ T24] usb 2-1: Product: syz [ 214.263339][ T8141] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 214.271267][ T24] usb 2-1: Manufacturer: syz [ 214.275897][ T24] usb 2-1: SerialNumber: syz [ 214.308383][ T8141] bond0: (slave wlan1): Opening slave failed [ 214.319047][ T24] usb 2-1: config 0 descriptor?? [ 214.353305][ T24] usb 2-1: unsupported MDLM descriptors [ 214.371260][ T8140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.546495][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 214.568967][ T24] usb 2-1: USB disconnect, device number 7 [ 215.416205][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 215.424014][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 215.443040][ T8169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.831'. [ 216.309129][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 216.310088][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.843'. [ 217.095055][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 217.387791][ T8211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.850'. [ 217.864305][ T8225] __nla_validate_parse: 1 callbacks suppressed [ 217.864327][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 218.263920][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 218.473110][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 218.975400][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.873'. [ 219.626420][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 219.910858][ T8292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.886'. [ 220.196862][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 222.093010][ T8326] netlink: 892 bytes leftover after parsing attributes in process `syz.4.898'. [ 222.273220][ T30] audit: type=1326 audit(1744879273.664:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.335816][ T8328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.899'. [ 222.370124][ T30] audit: type=1326 audit(1744879273.664:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.392169][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.441967][ T30] audit: type=1326 audit(1744879273.664:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.470356][ T30] audit: type=1326 audit(1744879273.664:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.492381][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.538108][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.900'. [ 222.646557][ T30] audit: type=1326 audit(1744879273.664:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.696094][ T30] audit: type=1326 audit(1744879273.664:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.783928][ T30] audit: type=1326 audit(1744879273.664:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.806073][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.809224][ T8341] bond0: option ad_select: unable to set because the bond device is up [ 222.856128][ T30] audit: type=1326 audit(1744879273.664:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.936271][ T30] audit: type=1326 audit(1744879273.664:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 222.958548][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.023006][ T30] audit: type=1326 audit(1744879273.664:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 223.219187][ T8354] __nla_validate_parse: 1 callbacks suppressed [ 223.219209][ T8354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.912'. [ 224.428088][ T8384] netlink: 32 bytes leftover after parsing attributes in process `syz.2.924'. [ 225.713153][ T8415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.935'. [ 225.896466][ T8422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.156151][ T5953] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 226.164576][ T47] IPVS: starting estimator thread 0... [ 226.307219][ T8428] IPVS: using max 25 ests per chain, 60000 per kthread [ 226.337087][ T5953] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.345836][ T5953] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 226.356448][ T5953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.365755][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 226.386235][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 226.446481][ T5953] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.496145][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.528488][ T5953] usb 5-1: Product: syz [ 226.532718][ T5953] usb 5-1: Manufacturer: syz [ 226.588450][ T5953] cdc_wdm 5-1:1.0: skipping garbage [ 226.593726][ T5953] cdc_wdm 5-1:1.0: skipping garbage [ 226.651245][ T5953] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 226.666385][ T5953] cdc_wdm 5-1:1.0: Unknown control protocol [ 226.795480][ T5838] usb 5-1: USB disconnect, device number 18 [ 227.218468][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 227.698744][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.951'. [ 228.536326][ T8470] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 228.567397][ T8470] bond0: (slave wlan1): Opening slave failed [ 228.659328][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 228.690540][ T8459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.876495][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 228.947505][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 229.048251][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.076251][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.106110][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.146140][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 229.173343][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 229.197520][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.238851][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.266263][ T24] usb 3-1: Product: syz [ 229.270600][ T24] usb 3-1: Manufacturer: syz [ 229.326899][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 229.338988][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 229.365125][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 229.371882][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 229.519813][ T5904] usb 3-1: USB disconnect, device number 15 [ 229.638771][ T8496] netlink: 'syz.3.966': attribute type 4 has an invalid length. [ 229.656180][ T8496] netlink: 152 bytes leftover after parsing attributes in process `syz.3.966'. [ 229.688411][ T8496] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 230.816229][ T8515] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 230.823101][ T8515] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 230.838320][ T8517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.974'. [ 230.859138][ T8515] vhci_hcd vhci_hcd.0: Device attached [ 230.877137][ T8521] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 230.883815][ T8521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.906170][ T8521] vhci_hcd vhci_hcd.0: Device attached [ 230.923021][ T8515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.958688][ T8515] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 230.965364][ T8515] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.021448][ T8515] vhci_hcd vhci_hcd.0: Device attached [ 231.046192][ T5838] vhci_hcd: vhci_device speed not set [ 231.061346][ T8521] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 231.068030][ T8521] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.106454][ T8531] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(25) [ 231.113137][ T8531] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.121583][ T5838] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 231.138622][ T8515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.182583][ T8521] vhci_hcd vhci_hcd.0: Device attached [ 231.197118][ T8515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.239808][ T8531] vhci_hcd vhci_hcd.0: Device attached [ 231.291049][ T8527] vhci_hcd: connection closed [ 231.293155][ T991] vhci_hcd: stop threads [ 231.304363][ T8522] vhci_hcd: connection closed [ 231.304959][ T8518] vhci_hcd: connection reset by peer [ 231.316914][ T8525] vhci_hcd: connection closed [ 231.347662][ T991] vhci_hcd: release socket [ 231.377216][ T8532] vhci_hcd: connection closed [ 231.377730][ T991] vhci_hcd: disconnect device [ 231.417636][ T991] vhci_hcd: stop threads [ 231.421953][ T991] vhci_hcd: release socket [ 231.433328][ T991] vhci_hcd: disconnect device [ 231.448519][ T991] vhci_hcd: stop threads [ 231.456250][ T991] vhci_hcd: release socket [ 231.463223][ T991] vhci_hcd: disconnect device [ 231.483658][ T991] vhci_hcd: stop threads [ 231.496227][ T991] vhci_hcd: release socket [ 231.503632][ T991] vhci_hcd: disconnect device [ 231.736485][ T991] vhci_hcd: stop threads [ 231.740801][ T991] vhci_hcd: release socket [ 231.756946][ T991] vhci_hcd: disconnect device [ 233.720751][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.987'. [ 234.632763][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 235.416671][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.999'. [ 235.591513][ T5904] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 235.776284][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 235.790153][ T5904] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.803510][ T8595] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 235.816843][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.840252][ T5904] usb 3-1: Product: syz [ 235.848969][ T5904] usb 3-1: Manufacturer: syz [ 235.858120][ T5904] usb 3-1: SerialNumber: syz [ 235.877260][ T5904] usb 3-1: config 0 descriptor?? [ 235.936524][ T8590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.196677][ T5904] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.285532][ T5838] vhci_hcd: vhci_device speed not set [ 237.325210][ T8637] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1009'. [ 237.342911][ T8637] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 237.351544][ T8637] wlan1: mtu less than device minimum [ 237.362920][ T8637] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 237.657934][ T5904] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 237.702204][ T5904] usb 3-1: USB disconnect, device number 16 [ 237.931665][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 237.942285][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 238.042051][ T8652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1016'. [ 238.351035][ T8665] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1021'. [ 238.381640][ T8667] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1022'. [ 238.392988][ T8665] bridge1: entered promiscuous mode [ 238.410028][ T8665] bridge1: entered allmulticast mode [ 238.859763][ T8670] kvm_pr_unimpl_wrmsr: 31 callbacks suppressed [ 238.859785][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8080 [ 238.883648][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x68fb [ 238.902629][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8080 [ 238.955468][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x68fb [ 239.028578][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8080 [ 239.124416][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x68fb [ 239.135584][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8080 [ 239.229985][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x68fb [ 239.283665][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8080 [ 239.326946][ T8670] kvm: kvm [8669]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x68fb [ 240.235215][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 240.269138][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 240.696205][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.857141][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 240.901903][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.928544][ T24] usb 3-1: config 0 has no interfaces? [ 241.028543][ T24] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 241.045668][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.132767][ T24] usb 3-1: Product: syz [ 241.165476][ T24] usb 3-1: Manufacturer: syz [ 241.262227][ T24] usb 3-1: SerialNumber: syz [ 241.283805][ T24] usb 3-1: config 0 descriptor?? [ 241.537024][ T24] usb 3-1: USB disconnect, device number 17 [ 242.390582][ T8715] futex_wake_op: syz.3.1033 tries to shift op by -33; fix this program [ 242.509997][ T8715] netdevsim netdevsim3: Direct firmware load for . [ 242.509997][ T8715] failed with error -2 [ 242.522318][ T8715] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 242.522318][ T8715] [ 243.860032][ T8742] input: syz1 as /devices/virtual/input/input8 [ 244.067870][ T8744] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1049'. [ 244.082229][ T8744] netlink: 'syz.1.1049': attribute type 10 has an invalid length. [ 244.426186][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.616183][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 244.632301][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.686784][ T5838] usb 2-1: config 0 has no interfaces? [ 244.709549][ T5838] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 244.775094][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.805510][ T5838] usb 2-1: Product: syz [ 244.809938][ T5838] usb 2-1: Manufacturer: syz [ 244.814586][ T5838] usb 2-1: SerialNumber: syz [ 244.849430][ T5838] usb 2-1: config 0 descriptor?? [ 245.096072][ T5904] usb 2-1: USB disconnect, device number 8 [ 245.231729][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1053'. [ 246.186250][ T5953] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 246.316580][ T5953] usb 4-1: device descriptor read/64, error -71 [ 246.321812][ T8766] syz.1.1057 uses obsolete (PF_INET,SOCK_PACKET) [ 246.525819][ T8768] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1058'. [ 246.576198][ T5953] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 246.673647][ T8772] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1059'. [ 246.725723][ T5953] usb 4-1: device descriptor read/64, error -71 [ 246.856511][ T5953] usb usb4-port1: attempt power cycle [ 247.144197][ T8783] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1065'. [ 247.246175][ T5953] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 247.286974][ T8783] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 247.306883][ T5953] usb 4-1: device descriptor read/8, error -71 [ 247.318008][ T8783] bond0: (slave wlan1): Opening slave failed [ 247.706264][ T5953] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 247.762282][ T5953] usb 4-1: device descriptor read/8, error -71 [ 247.907698][ T5953] usb usb4-port1: unable to enumerate USB device [ 247.956103][ T5904] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 248.526187][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 248.543994][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.576096][ T5904] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.653431][ T5904] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 248.673853][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.695653][ T5904] usb 3-1: Product: syz [ 248.702795][ T5904] usb 3-1: Manufacturer: syz [ 248.716715][ T5904] usb 3-1: SerialNumber: syz [ 248.744156][ T5904] usb 3-1: config 0 descriptor?? [ 248.964152][ T47] usb 3-1: USB disconnect, device number 18 [ 249.101677][ T8801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1071'. [ 249.763130][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 250.116329][ T8825] veth7: entered promiscuous mode [ 251.586735][ T8840] netlink: 772 bytes leftover after parsing attributes in process `syz.1.1082'. [ 251.643919][ T8841] netlink: 'syz.1.1082': attribute type 10 has an invalid length. [ 251.957060][ T8848] fuse: Unknown parameter '00000000000000000003' [ 252.776202][ T5953] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 252.957858][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 252.968635][ T5953] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.984766][ T5953] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 253.004534][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.163091][ T5953] usb 2-1: Product: syz [ 253.177668][ T5953] usb 2-1: Manufacturer: syz [ 253.182433][ T5953] usb 2-1: SerialNumber: syz [ 253.218997][ T5953] usb 2-1: config 0 descriptor?? [ 253.453819][ T5953] usb 2-1: USB disconnect, device number 9 [ 253.836342][ T5904] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 253.904700][ T8871] netlink: 772 bytes leftover after parsing attributes in process `syz.3.1094'. [ 253.921237][ T8871] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 253.929769][ T8871] wlan1: mtu less than device minimum [ 253.935396][ T8871] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 253.998218][ T5904] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 254.009319][ T5904] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 254.031264][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.048809][ T5904] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 254.064361][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.094059][ T5904] usb 5-1: Product: syz [ 254.104179][ T5904] usb 5-1: Manufacturer: syz [ 254.113485][ T5904] usb 5-1: SerialNumber: syz [ 254.146873][ T5904] usb 5-1: config 0 descriptor?? [ 254.159655][ T8866] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.167918][ T8866] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.447107][ T5953] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.534635][ T8880] fuse: Unknown parameter '00000000000000000003' [ 254.601371][ T5904] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 254.652620][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.663503][ T5953] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 254.675949][ T5953] usb 4-1: config 6 has no interface number 0 [ 254.705012][ T5953] usb 4-1: config 6 interface 200 has no altsetting 0 [ 254.731885][ T5953] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 254.756381][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.770753][ T5953] usb 4-1: Product: syz [ 254.775201][ T5953] usb 4-1: Manufacturer: syz [ 254.782714][ T5953] usb 4-1: SerialNumber: syz [ 255.037675][ T5904] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 255.093107][ T5904] usb 5-1: USB disconnect, device number 19 [ 255.729553][ T5953] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 255.746737][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.753152][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.829464][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.872972][ T5953] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 255.892847][ T5953] usb 4-1: media controller created [ 255.960647][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.020677][ T5953] dvb-usb: recv bulk message failed: -22 [ 256.222547][ T5953] dvb-usb: bulk message failed: -71 (6/0) [ 256.246515][ T5953] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 256.272280][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 256.299316][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 256.306617][ T5953] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 256.330377][ T5953] usb 4-1: USB disconnect, device number 15 [ 256.603279][ T5953] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 257.006866][ T8910] fuse: Unknown parameter '00000000000000000003' [ 257.343996][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 257.387868][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 257.470407][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 257.480458][ T8919] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 257.926238][ T5953] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 258.093298][ T5953] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.112383][ T5953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.129193][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.145523][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.241886][ T8935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1119'. [ 258.241906][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 258.241920][ T8935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1119'. [ 258.241945][ T8935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1119'. [ 258.249076][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.254454][ T5953] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.254478][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.254494][ T5953] usb 2-1: Product: syz [ 258.254505][ T5953] usb 2-1: Manufacturer: syz [ 258.260124][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 258.260141][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 258.292120][ T5953] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 258.292147][ T5953] cdc_wdm 2-1:1.0: Unknown control protocol [ 258.469791][ T8925] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 258.473824][ T5953] usb 2-1: USB disconnect, device number 10 [ 258.860480][ T8939] netlink: 'syz.2.1120': attribute type 10 has an invalid length. [ 258.879185][ T8939] bond0: (slave wlan1): Opening slave failed [ 259.107714][ T8936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.515042][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 259.570202][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 259.659644][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 259.691893][ T8953] netlink: 'syz.1.1126': attribute type 10 has an invalid length. [ 260.519630][ T8966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.908511][ T8991] netlink: 'syz.3.1136': attribute type 4 has an invalid length. [ 261.956283][ T8991] netlink: 'syz.3.1136': attribute type 4 has an invalid length. [ 261.998041][ T8993] macvlan0: entered allmulticast mode [ 262.010216][ T8993] veth1_vlan: entered allmulticast mode [ 262.663472][ T9011] fuse: Bad value for 'fd' [ 266.049835][ T9061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.571712][ T9066] fuse: Unknown parameter 'fd00000000000000000003' [ 269.615001][ T9102] fuse: Unknown parameter 'fd00000000000000000003' [ 269.998413][ T9108] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 271.156157][ T47] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 271.346297][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 271.359794][ T47] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.403078][ T47] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 271.421637][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.439035][ T47] usb 5-1: Product: syz [ 271.454039][ T47] usb 5-1: Manufacturer: syz [ 271.468506][ T47] usb 5-1: SerialNumber: syz [ 271.494850][ T47] usb 5-1: config 0 descriptor?? [ 271.766561][ T5904] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 271.931167][ T24] usb 5-1: USB disconnect, device number 20 [ 272.009910][ T5904] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.028329][ T5904] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 272.060876][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.108357][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 272.296120][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 272.344996][ T5904] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.354629][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.373578][ T5904] usb 3-1: Product: syz [ 272.382966][ T5904] usb 3-1: Manufacturer: syz [ 272.402539][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 272.416063][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 272.444011][ T5904] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 272.619383][ T5904] usb 3-1: USB disconnect, device number 19 [ 273.569368][ T9143] netlink: 'syz.2.1190': attribute type 72 has an invalid length. [ 273.578052][ T9143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1190'. [ 275.257355][ T5953] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 275.544946][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 275.571946][ T5953] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 275.581785][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.600316][ T5953] usb 5-1: Product: syz [ 275.649917][ T5953] usb 5-1: Manufacturer: syz [ 275.654576][ T5953] usb 5-1: SerialNumber: syz [ 275.663578][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 275.685733][ T5953] usb 5-1: config 0 descriptor?? [ 275.702725][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 275.731416][ T5953] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 275.749225][ T5953] usb 5-1: setting power ON [ 275.762035][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 275.811965][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.846213][ T5953] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 275.885362][ T5953] usb 5-1: media controller created [ 276.002510][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.156694][ T5953] usb 5-1: selecting invalid altsetting 6 [ 276.192145][ T5953] usb 5-1: digital interface selection failed (-22) [ 276.207614][ T5953] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 276.264606][ T5953] usb 5-1: setting power OFF [ 276.286936][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 276.313053][ T5953] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 276.364535][ T5953] (NULL device *): no alternate interface [ 276.527589][ T9178] syzkaller0: entered promiscuous mode [ 276.543290][ T9178] syzkaller0: entered allmulticast mode [ 276.568225][ T5953] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 276.621186][ T5953] usb 5-1: USB disconnect, device number 21 [ 276.663546][ T9181] netlink: 'syz.4.1202': attribute type 10 has an invalid length. [ 277.495127][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1206'. [ 278.941440][ T9181] bond0: (slave wlan1): Opening slave failed [ 280.494393][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1222'. [ 282.244587][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1235'. [ 282.546259][ T5953] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 282.729205][ T5953] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.749147][ T5953] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 282.772868][ T5953] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.805545][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.839983][ T9268] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.900463][ T5953] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.258870][ T5953] usb 2-1: USB disconnect, device number 11 [ 284.273202][ T9306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1248'. [ 288.728858][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'. [ 289.901821][ T9397] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 289.940660][ T9398] netlink: 'syz.0.1276': attribute type 10 has an invalid length. [ 290.033200][ T9397] bond1: entered promiscuous mode [ 290.053927][ T9397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.102067][ T9386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.165369][ T9405] bond1: (slave bridge2): making interface the new active one [ 290.174724][ T9405] bridge2: entered promiscuous mode [ 290.186996][ T9405] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 290.196704][ T9398] bond0: (slave wlan1): Opening slave failed [ 291.628882][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c1c9400: rx timeout, send abort [ 292.129809][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bed2000: rx timeout, send abort [ 292.138210][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c1c9400: abort rx timeout. Force session deactivation [ 292.622723][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c1cbc00: rx timeout, send abort [ 292.638137][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bed2000: abort rx timeout. Force session deactivation [ 293.131035][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c1cbc00: abort rx timeout. Force session deactivation [ 293.632250][ T9470] netlink: 828 bytes leftover after parsing attributes in process `syz.2.1308'. [ 293.953212][ T9467] kvm_pr_unimpl_wrmsr: 51 callbacks suppressed [ 293.953235][ T9467] kvm: kvm [9462]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 294.045318][ T9467] kvm: kvm [9462]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 294.070547][ T9467] kvm: kvm [9462]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 294.137738][ T9467] kvm: kvm [9462]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 294.154312][ T9467] kvm: kvm [9462]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 295.173444][ T9497] netlink: 828 bytes leftover after parsing attributes in process `syz.4.1317'. [ 295.187866][ T9497] netlink: 'syz.4.1317': attribute type 10 has an invalid length. [ 295.200619][ T9497] bond0: (slave wlan1): Opening slave failed [ 296.331516][ T9522] input: syz1 as /devices/virtual/input/input11 [ 298.288041][ T9536] netlink: 'syz.1.1329': attribute type 72 has an invalid length. [ 298.304195][ T9536] netlink: 'syz.1.1329': attribute type 8 has an invalid length. [ 298.506798][ T9538] netlink: 828 bytes leftover after parsing attributes in process `syz.1.1330'. [ 298.517501][ T9538] netlink: 'syz.1.1330': attribute type 10 has an invalid length. [ 300.937481][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1344'. [ 301.306602][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 301.760593][ T9593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1350'. [ 302.210544][ T9604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'. [ 302.475428][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 303.873604][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 304.838984][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 306.073310][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 306.127209][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 307.262237][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1390'. [ 308.949269][ T9718] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1399'. [ 308.976259][ T5901] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 308.977251][ T9718] netlink: 'syz.1.1399': attribute type 10 has an invalid length. [ 309.228598][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.311109][ T5901] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 309.338419][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.372732][ T5901] usb 4-1: config 0 descriptor?? [ 309.406859][ T5901] pwc: Askey VC010 type 2 USB webcam detected. [ 309.421139][ T9723] kvm: pic: level sensitive irq not supported [ 309.735443][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1402'. [ 310.649797][ T5953] IPVS: starting estimator thread 0... [ 310.766537][ T9741] IPVS: using max 24 ests per chain, 57600 per kthread [ 312.190421][ T9746] input: syz1 as /devices/virtual/input/input13 [ 312.542407][ T5901] pwc: send_video_command error -71 [ 312.586085][ T5901] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 312.617485][ T5901] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 312.660156][ T5901] usb 4-1: USB disconnect, device number 16 [ 312.844789][ T9753] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1410'. [ 313.117055][ T9759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1413'. [ 314.347342][ T9773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.017982][ T5901] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 315.188254][ T5901] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.206185][ T5901] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.254066][ T5901] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.302628][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.348757][ T5901] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.372168][ T5901] usb 2-1: invalid MIDI out EP 0 [ 315.486251][ T5904] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 315.605737][ T5901] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 315.646329][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 315.650739][ T5901] usb 2-1: USB disconnect, device number 12 [ 315.689470][ T5904] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 315.731246][ T5904] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 315.872909][ T5904] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 315.883276][ T5904] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 315.893802][ T5904] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.908772][ T5904] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.918246][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.930888][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.967346][ T5904] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 316.423372][ T9798] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 316.454717][ T9798] bond0: (slave wlan1): Opening slave failed [ 317.230792][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.237379][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.466095][ T9817] xt_nat: multiple ranges no longer supported [ 317.665565][ T9817] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 317.672154][ T9817] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 317.711380][ T9817] vhci_hcd vhci_hcd.0: Device attached [ 317.976460][ T5901] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 317.986384][ T5953] usb 42-1: SetAddress Request (2) to port 0 [ 318.010730][ T5953] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 318.146184][ T5901] usb 5-1: device descriptor read/64, error -71 [ 318.412356][ T5901] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 318.548912][ T5838] usb 4-1: USB disconnect, device number 17 [ 318.595192][ T5901] usb 5-1: device descriptor read/64, error -71 [ 318.722404][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 318.722426][ T30] audit: type=1326 audit(1744879370.044:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 318.754762][ T5901] usb usb5-port1: attempt power cycle [ 319.011717][ T30] audit: type=1326 audit(1744879370.164:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.034553][ T30] audit: type=1326 audit(1744879370.204:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.057405][ T30] audit: type=1326 audit(1744879370.204:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.083737][ T30] audit: type=1326 audit(1744879370.204:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.096419][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 319.106898][ T30] audit: type=1326 audit(1744879370.224:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.136653][ T30] audit: type=1326 audit(1744879370.224:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.159449][ T30] audit: type=1326 audit(1744879370.224:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.185129][ T30] audit: type=1326 audit(1744879370.224:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.217397][ T5901] usb 5-1: device descriptor read/8, error -71 [ 319.238512][ T30] audit: type=1326 audit(1744879370.254:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 319.456397][ T5901] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 319.489695][ T5901] usb 5-1: device descriptor read/8, error -71 [ 319.594531][ T9818] vhci_hcd: connection reset by peer [ 319.600347][ T3570] vhci_hcd: stop threads [ 319.604782][ T3570] vhci_hcd: release socket [ 319.609710][ T5901] usb usb5-port1: unable to enumerate USB device [ 319.653295][ T3570] vhci_hcd: disconnect device [ 319.671977][ T9842] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 319.814902][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1439'. [ 320.476261][ T5904] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 320.516738][ T974] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 320.535323][ T9865] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 320.726627][ T5904] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 320.735165][ T5904] usb 5-1: config 0 has no interface number 0 [ 320.748417][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.876237][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 320.883599][ T974] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 320.915150][ T974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 320.943204][ T974] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 320.980408][ T974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 321.036172][ T974] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.109336][ T974] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.190111][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.251709][ T5904] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 321.262782][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 321.264608][ T974] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 321.285554][ T5904] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 321.297114][ T5904] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 321.308325][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 321.321758][ T5904] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 321.356505][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.384200][ T5904] usb 5-1: config 0 descriptor?? [ 321.414580][ T9852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.423378][ T9852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.440922][ T5904] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 321.667370][ T974] usb 5-1: USB disconnect, device number 26 [ 321.680021][ T974] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 321.755349][ T9876] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 322.543246][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 323.086449][ T5953] usb 42-1: device descriptor read/8, error -110 [ 323.229535][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028f47400: rx timeout, send abort [ 323.270039][ T24] usb 3-1: USB disconnect, device number 20 [ 323.332719][ T9907] netlink: 'syz.2.1463': attribute type 10 has an invalid length. [ 323.341418][ T9907] bond0: (slave wlan1): Opening slave failed [ 323.507009][ T5953] usb usb42-port1: attempt power cycle [ 323.737950][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028f47400: abort rx timeout. Force session deactivation [ 324.101394][ T5953] usb usb42-port1: unable to enumerate USB device [ 325.167106][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1478'. [ 326.026252][ T5953] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 326.192024][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022795800: rx timeout, send abort [ 326.200803][ T5953] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 326.214049][ T5953] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 326.225291][ T5953] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 326.236686][ T5953] usb 3-1: config 220 has no interface number 2 [ 326.246603][ T5953] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 326.261351][ T5953] usb 3-1: config 220 interface 0 has no altsetting 0 [ 326.273260][ T5953] usb 3-1: config 220 interface 76 has no altsetting 0 [ 326.281708][ T5953] usb 3-1: config 220 interface 1 has no altsetting 0 [ 326.297676][ T5953] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 326.310372][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.320125][ T5953] usb 3-1: Product: syz [ 326.324611][ T5953] usb 3-1: Manufacturer: syz [ 326.333214][ T5953] usb 3-1: SerialNumber: syz [ 326.569358][ T5953] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 326.579929][ T5953] usb 3-1: No valid video chain found. [ 326.602686][ T5953] usb 3-1: selecting invalid altsetting 0 [ 326.649364][ T5953] usb 3-1: selecting invalid altsetting 0 [ 326.682518][ T5953] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 326.700378][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022795800: abort rx timeout. Force session deactivation [ 326.867112][ T5953] usb 3-1: USB disconnect, device number 21 [ 326.955863][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1491'. [ 327.616819][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 327.856663][T10005] warning: `syz.0.1500' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 328.201676][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1503'. [ 328.496212][ T5901] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 328.656182][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 328.671215][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 328.682330][ T5901] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 328.708363][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 328.737317][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.760167][ T5901] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.795597][ T5901] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.824906][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.049407][ T5901] usb 3-1: GET_CAPABILITIES returned 0 [ 329.073561][ T5901] usbtmc 3-1:16.0: can't read capabilities [ 329.416939][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079ba7800: rx timeout, send abort [ 329.458106][ T5904] usb 3-1: USB disconnect, device number 22 [ 329.925243][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079ba7800: abort rx timeout. Force session deactivation [ 330.484365][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 330.998723][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 331.266398][T10060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1520'. [ 332.252567][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'. [ 332.407233][T10089] netlink: 'syz.4.1532': attribute type 10 has an invalid length. [ 332.436750][T10089] bond0: (slave wlan1): Opening slave failed [ 335.407049][T10136] netlink: 'syz.1.1543': attribute type 10 has an invalid length. [ 337.656812][ T5901] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 337.818438][ T5901] usb 3-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 337.837106][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.876121][ T5901] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 337.903933][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.927355][ T5901] usb 3-1: config 0 descriptor?? [ 338.168543][ T5901] ath6kl: Failed to submit usb control message: -71 [ 338.175447][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 338.192742][ T5901] ath6kl: Unable to send get target info: -71 [ 338.223261][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 338.253219][ T5901] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 338.304301][ T5901] usb 3-1: USB disconnect, device number 23 [ 341.320601][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 341.320621][ T30] audit: type=1326 audit(1744879392.734:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 341.466841][ T30] audit: type=1326 audit(1744879392.734:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 341.539177][ T30] audit: type=1326 audit(1744879392.774:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 341.628465][ T30] audit: type=1326 audit(1744879392.774:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 341.725623][ T30] audit: type=1326 audit(1744879392.774:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 341.786082][ T30] audit: type=1326 audit(1744879392.774:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 341.846104][ T30] audit: type=1326 audit(1744879392.774:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 341.920852][ T30] audit: type=1326 audit(1744879392.774:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 341.984204][ T30] audit: type=1326 audit(1744879392.774:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 342.049632][ T30] audit: type=1326 audit(1744879392.784:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 342.133962][T10230] netlink: 'syz.0.1581': attribute type 10 has an invalid length. [ 342.173985][T10230] bond0: (slave wlan1): Opening slave failed [ 342.294780][T10229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.396202][ T5901] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 342.546264][ T5901] usb 2-1: device descriptor read/64, error -71 [ 342.566130][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 342.720470][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 342.736150][ T24] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 342.744213][ T24] usb 4-1: Product: syz [ 342.757805][ T24] usb 4-1: SerialNumber: syz [ 342.773962][ T24] usb 4-1: config 0 descriptor?? [ 342.787503][ T5901] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 342.936198][ T5901] usb 2-1: device descriptor read/64, error -71 [ 342.993753][ T24] hso 4-1:0.0: Failed to find BULK IN ep [ 343.076508][ T5901] usb usb2-port1: attempt power cycle [ 343.196561][T10251] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1590'. [ 343.212208][ T24] usb 4-1: USB disconnect, device number 18 [ 343.355263][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 343.369708][T10277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.419547][ T5901] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 343.489027][T10277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.508900][ T5901] usb 2-1: device descriptor read/8, error -71 [ 343.746094][ T5901] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 343.766885][ T5901] usb 2-1: device descriptor read/8, error -71 [ 343.859806][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1603'. [ 343.874366][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1603'. [ 343.886774][ T5901] usb usb2-port1: unable to enumerate USB device [ 347.292282][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034349800: rx timeout, send abort [ 347.800682][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034349800: abort rx timeout. Force session deactivation [ 347.959051][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 348.120522][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 348.120542][ T30] audit: type=1326 audit(1744879399.534:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.149438][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.163074][ T30] audit: type=1326 audit(1744879399.534:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.189006][ T30] audit: type=1326 audit(1744879399.574:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.277749][ T30] audit: type=1326 audit(1744879399.574:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.300230][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.380297][ T30] audit: type=1326 audit(1744879399.574:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.480814][ T30] audit: type=1326 audit(1744879399.604:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.536878][ T30] audit: type=1326 audit(1744879399.604:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.594668][ T30] audit: type=1326 audit(1744879399.604:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.617218][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.661672][ T30] audit: type=1326 audit(1744879399.724:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 348.684042][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.737699][ T30] audit: type=1326 audit(1744879399.724:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017438e169 code=0x7ffc0000 [ 350.372054][T10392] fuse: Bad value for 'fd' [ 351.092351][T10401] netlink: zone id is out of range [ 351.106056][T10401] netlink: zone id is out of range [ 351.120804][T10401] netlink: zone id is out of range [ 351.134755][T10401] netlink: zone id is out of range [ 351.154159][T10401] netlink: zone id is out of range [ 351.172242][T10401] netlink: zone id is out of range [ 351.181216][T10401] netlink: zone id is out of range [ 351.189124][T10401] netlink: zone id is out of range [ 351.194581][T10401] netlink: zone id is out of range [ 351.604377][T10421] fuse: Bad value for 'fd' [ 352.136537][ T5904] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 352.184548][T10436] bridge3: entered promiscuous mode [ 352.199814][T10436] bridge3: entered allmulticast mode [ 352.306236][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 352.321544][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.344387][ T5904] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 352.372720][ T5904] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 352.389432][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.500182][ T5904] usb 2-1: Product: syz [ 352.504422][ T5904] usb 2-1: Manufacturer: syz [ 352.536147][ T5904] usb 2-1: SerialNumber: syz [ 352.567138][ T5904] usb 2-1: config 0 descriptor?? [ 352.579459][ T5904] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 352.788061][ T5901] usb 2-1: USB disconnect, device number 17 [ 353.476233][ T5904] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 353.655645][ T5904] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 353.664345][ T5904] usb 3-1: config 0 has no interface number 0 [ 353.688239][ T5904] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 353.702778][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.711717][ T5904] usb 3-1: Product: syz [ 353.721909][ T5904] usb 3-1: Manufacturer: syz [ 353.734577][ T5904] usb 3-1: SerialNumber: syz [ 353.750547][ T5904] usb 3-1: config 0 descriptor?? [ 353.767506][ T5904] hub 3-1:0.132: bad descriptor, ignoring hub [ 353.773824][ T5904] hub 3-1:0.132: probe with driver hub failed with error -5 [ 353.792325][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input14 [ 354.078955][ T5904] usb 3-1: USB disconnect, device number 24 [ 354.376770][ T5904] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 354.404156][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 354.419125][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4080 [ 354.431455][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 354.456367][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4080 [ 354.481903][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 354.506423][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4080 [ 354.516911][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 354.525810][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4080 [ 354.544494][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c08e000: rx timeout, send abort [ 354.581512][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 354.592267][ T5904] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 354.601354][ T5904] usb 3-1: config 0 has no interface number 0 [ 354.612682][ T5904] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 354.624155][T10477] kvm: kvm [10476]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4080 [ 354.633357][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.642169][ T5904] usb 3-1: Product: syz [ 354.652204][ T5904] usb 3-1: Manufacturer: syz [ 354.666114][ T5904] usb 3-1: SerialNumber: syz [ 354.688949][ T5904] usb 3-1: config 0 descriptor?? [ 354.713684][ T5904] hub 3-1:0.132: bad descriptor, ignoring hub [ 354.731053][ T5904] hub 3-1:0.132: probe with driver hub failed with error -5 [ 354.762541][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input15 [ 355.052800][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c08e000: abort rx timeout. Force session deactivation [ 355.816795][ T5953] raw-gadget.0 gadget.2: failed to queue suspend event [ 357.452270][T10490] raw-gadget.0 gadget.2: failed to queue disconnect event [ 357.556367][ T24] usb 3-1: USB disconnect, device number 25 [ 358.457734][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c0f9400: rx timeout, send abort [ 358.668099][T10524] syzkaller0: entered promiscuous mode [ 358.673786][T10524] syzkaller0: entered allmulticast mode [ 358.860317][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 358.957859][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c0f8000: rx timeout, send abort [ 358.966372][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c0f9400: abort rx timeout. Force session deactivation [ 359.466304][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c0f8000: abort rx timeout. Force session deactivation [ 360.494265][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 360.494286][ T30] audit: type=1326 audit(1744879411.904:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.538239][ T30] audit: type=1326 audit(1744879411.944:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.572352][T10553] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 360.611169][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 360.623728][ T30] audit: type=1326 audit(1744879411.944:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.682971][ T30] audit: type=1326 audit(1744879411.954:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.706103][ T30] audit: type=1326 audit(1744879411.954:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.736632][ T30] audit: type=1326 audit(1744879411.954:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.781568][ T30] audit: type=1326 audit(1744879411.954:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.804131][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.834970][ T30] audit: type=1326 audit(1744879411.954:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.861977][ T30] audit: type=1326 audit(1744879411.954:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 360.888887][ T30] audit: type=1326 audit(1744879411.954:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa3e1d8e169 code=0x7ffc0000 [ 361.031277][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 361.083886][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1704'. [ 361.260431][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880249d2800: rx timeout, send abort [ 361.760563][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880249d3000: rx timeout, send abort [ 361.769056][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880249d2800: abort rx timeout. Force session deactivation [ 362.268941][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880249d3000: abort rx timeout. Force session deactivation [ 363.036185][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 363.216241][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 363.238447][ T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 363.261938][ T24] usb 2-1: config 0 has no interface number 0 [ 363.268739][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.280468][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 363.293526][ T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 363.305767][ T24] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 363.326631][ T24] usb 2-1: Product: syz [ 363.330852][ T24] usb 2-1: SerialNumber: syz [ 363.349372][ T24] usb 2-1: config 0 descriptor?? [ 363.370276][ T24] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 363.381718][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 363.505419][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029252800: rx timeout, send abort [ 364.005540][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029251c00: rx timeout, send abort [ 364.014121][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029252800: abort rx timeout. Force session deactivation [ 364.513890][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029251c00: abort rx timeout. Force session deactivation [ 365.325210][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079089c00: rx timeout, send abort [ 365.662699][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 365.825327][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079088000: rx timeout, send abort [ 365.833851][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079089c00: abort rx timeout. Force session deactivation [ 365.893849][T10647] bridge0: port 2(bridge_slave_1) entered learning state [ 365.905553][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.333727][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079088000: abort rx timeout. Force session deactivation [ 366.511730][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 366.513104][ T5953] usb 2-1: USB disconnect, device number 18 [ 366.518973][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 366.568405][ T5953] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 367.262926][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 369.383343][T10710] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 369.579581][T10717] program syz.1.1763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.732281][T10722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.797478][T10722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.834462][T10722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.900637][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 369.900657][ T30] audit: type=1326 audit(1744879421.304:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cfb58e169 code=0x0 [ 370.597369][T10755] netlink: 'syz.2.1777': attribute type 39 has an invalid length. [ 371.156575][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'. [ 371.182226][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'. [ 371.573615][T10784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.614971][T10784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.713911][T10784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.753439][T10784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.582102][T10807] netlink: 'syz.1.1799': attribute type 25 has an invalid length. [ 372.796854][ T5849] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 372.966336][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.005016][ T5849] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.048905][ T5849] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.111817][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.151593][ T5849] usb 5-1: config 0 descriptor?? [ 373.410343][ T5849] usb 5-1: USB disconnect, device number 27 [ 373.842780][T10830] netlink: 'syz.3.1809': attribute type 12 has an invalid length. [ 373.861407][T10830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1809'. [ 374.362627][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.370109][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.468473][T10855] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1818'. [ 374.533262][T10838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.551502][T10838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.641031][T10838] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.650086][T10838] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.659179][T10838] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.669084][T10838] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.977783][T10855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.993510][T10855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.005726][T10855] bond0 (unregistering): Released all slaves [ 375.183068][ T30] audit: type=1326 audit(1744879426.594:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.206475][T10868] netlink: 'syz.4.1825': attribute type 72 has an invalid length. [ 375.215577][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 375.228012][ T30] audit: type=1326 audit(1744879426.594:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.239362][T10867] batman_adv: batadv0: Adding interface: dummy0 [ 375.252538][ T30] audit: type=1326 audit(1744879426.624:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.274782][T10867] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.304752][ T30] audit: type=1326 audit(1744879426.624:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.304824][ T30] audit: type=1326 audit(1744879426.624:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.361550][T10867] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 375.391182][ T30] audit: type=1326 audit(1744879426.624:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.424859][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 375.469503][ T30] audit: type=1326 audit(1744879426.624:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.540808][ T30] audit: type=1326 audit(1744879426.624:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.583497][ T30] audit: type=1326 audit(1744879426.624:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.606333][ T30] audit: type=1326 audit(1744879426.624:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3286f8e169 code=0x7ffc0000 [ 375.936943][T10891] ALSA: seq fatal error: cannot create timer (-22) [ 376.043740][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 376.348927][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 376.920408][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 378.097222][ T974] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 378.271946][ T974] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.282613][ T974] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 378.314695][ T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.334263][ T974] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 378.361943][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 378.408304][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 378.442367][ T974] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.465436][ T974] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.473895][ T974] usb 2-1: Product: syz [ 378.491607][ T974] usb 2-1: Manufacturer: syz [ 378.505375][ T974] cdc_wdm 2-1:1.0: skipping garbage [ 378.513943][ T974] cdc_wdm 2-1:1.0: skipping garbage [ 378.522785][ T974] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 378.611588][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.618068][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.731960][ T5904] usb 2-1: USB disconnect, device number 19 [ 380.302596][T11027] [ 380.304987][T11027] ====================================================== [ 380.312032][T11027] WARNING: possible circular locking dependency detected [ 380.319092][T11027] 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 Not tainted [ 380.326229][T11027] ------------------------------------------------------ [ 380.333273][T11027] syz.4.1893/11027 is trying to acquire lock: [ 380.339364][T11027] ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 380.348359][T11027] [ 380.348359][T11027] but task is already holding lock: [ 380.355729][T11027] ffff88807d6d2d28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 380.365867][T11027] [ 380.365867][T11027] which lock already depends on the new lock. [ 380.365867][T11027] [ 380.376283][T11027] [ 380.376283][T11027] the existing dependency chain (in reverse order) is: [ 380.385304][T11027] [ 380.385304][T11027] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 380.393926][T11027] lock_acquire+0x116/0x2f0 [ 380.398966][T11027] __mutex_lock+0x1a5/0x10c0 [ 380.404087][T11027] smc_switch_to_fallback+0x35/0xda0 [ 380.409897][T11027] smc_sendmsg+0x11f/0x530 [ 380.414840][T11027] __sock_sendmsg+0x221/0x270 [ 380.420046][T11027] __sys_sendto+0x365/0x4c0 [ 380.425068][T11027] __x64_sys_sendto+0xde/0x100 [ 380.430354][T11027] do_syscall_64+0xf3/0x230 [ 380.435386][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.441803][T11027] [ 380.441803][T11027] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 380.449460][T11027] lock_acquire+0x116/0x2f0 [ 380.454489][T11027] lock_sock_nested+0x48/0x100 [ 380.459783][T11027] do_ip_setsockopt+0x17e9/0x39c0 [ 380.465335][T11027] ip_setsockopt+0x63/0x100 [ 380.470366][T11027] do_sock_setsockopt+0x3b1/0x710 [ 380.475915][T11027] __x64_sys_setsockopt+0x1ee/0x280 [ 380.481641][T11027] do_syscall_64+0xf3/0x230 [ 380.486671][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.493096][T11027] [ 380.493096][T11027] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 380.500319][T11027] validate_chain+0xa69/0x24e0 [ 380.505608][T11027] __lock_acquire+0xad5/0xd80 [ 380.510812][T11027] lock_acquire+0x116/0x2f0 [ 380.515840][T11027] __mutex_lock+0x1a5/0x10c0 [ 380.520958][T11027] start_sync_thread+0xde/0x2d60 [ 380.526446][T11027] do_ip_vs_set_ctl+0x48e/0xe50 [ 380.531827][T11027] nf_setsockopt+0x295/0x2c0 [ 380.536959][T11027] smc_setsockopt+0x25c/0xd50 [ 380.542162][T11027] do_sock_setsockopt+0x3b1/0x710 [ 380.547714][T11027] __x64_sys_setsockopt+0x1ee/0x280 [ 380.553437][T11027] do_syscall_64+0xf3/0x230 [ 380.558467][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.564884][T11027] [ 380.564884][T11027] other info that might help us debug this: [ 380.564884][T11027] [ 380.575287][T11027] Chain exists of: [ 380.575287][T11027] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 380.575287][T11027] [ 380.589314][T11027] Possible unsafe locking scenario: [ 380.589314][T11027] [ 380.596767][T11027] CPU0 CPU1 [ 380.602128][T11027] ---- ---- [ 380.607491][T11027] lock(&smc->clcsock_release_lock); [ 380.612876][T11027] lock(sk_lock-AF_INET); [ 380.619820][T11027] lock(&smc->clcsock_release_lock); [ 380.627743][T11027] lock(rtnl_mutex); [ 380.631753][T11027] [ 380.631753][T11027] *** DEADLOCK *** [ 380.631753][T11027] [ 380.639921][T11027] 1 lock held by syz.4.1893/11027: [ 380.645039][T11027] #0: ffff88807d6d2d28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 380.655597][T11027] [ 380.655597][T11027] stack backtrace: [ 380.661523][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.4.1893 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 380.661548][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.661559][T11027] Call Trace: [ 380.661568][T11027] [ 380.661576][T11027] dump_stack_lvl+0x241/0x360 [ 380.661607][T11027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.661632][T11027] ? __pfx__printk+0x10/0x10 [ 380.661658][T11027] ? print_lock+0x171/0x1a0 [ 380.661680][T11027] print_circular_bug+0x2e1/0x300 [ 380.661704][T11027] check_noncircular+0x142/0x160 [ 380.661729][T11027] validate_chain+0xa69/0x24e0 [ 380.661752][T11027] ? get_page_from_freelist+0x360a/0x37a0 [ 380.661778][T11027] __lock_acquire+0xad5/0xd80 [ 380.661798][T11027] lock_acquire+0x116/0x2f0 [ 380.661814][T11027] ? start_sync_thread+0xde/0x2d60 [ 380.661842][T11027] __mutex_lock+0x1a5/0x10c0 [ 380.661863][T11027] ? start_sync_thread+0xde/0x2d60 [ 380.661893][T11027] ? sched_clock_cpu+0x77/0x4d0 [ 380.661915][T11027] ? start_sync_thread+0xde/0x2d60 [ 380.661938][T11027] ? __pfx___mutex_lock+0x10/0x10 [ 380.661966][T11027] start_sync_thread+0xde/0x2d60 [ 380.661990][T11027] ? lockdep_hardirqs_on+0x9d/0x150 [ 380.662012][T11027] ? rcu_is_watching+0x15/0xb0 [ 380.662033][T11027] ? trace_sched_exit_tp+0x3c/0x120 [ 380.662049][T11027] ? __schedule+0x1ba6/0x5240 [ 380.662072][T11027] ? __pfx_start_sync_thread+0x10/0x10 [ 380.662104][T11027] ? read_word_at_a_time+0xe/0x20 [ 380.662126][T11027] ? sized_strscpy+0x9a/0x2b0 [ 380.662149][T11027] do_ip_vs_set_ctl+0x48e/0xe50 [ 380.662167][T11027] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 380.662188][T11027] ? __mutex_unlock_slowpath+0x229/0x800 [ 380.662213][T11027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 380.662236][T11027] ? __pfx___mutex_lock+0x10/0x10 [ 380.662260][T11027] nf_setsockopt+0x295/0x2c0 [ 380.662286][T11027] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 380.662312][T11027] smc_setsockopt+0x25c/0xd50 [ 380.662334][T11027] ? __pfx_aa_sk_perm+0x10/0x10 [ 380.662357][T11027] ? __pfx_smc_setsockopt+0x10/0x10 [ 380.662378][T11027] ? aa_sock_opt_perm+0x79/0x120 [ 380.662403][T11027] ? __pfx_smc_setsockopt+0x10/0x10 [ 380.662422][T11027] do_sock_setsockopt+0x3b1/0x710 [ 380.662442][T11027] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 380.662458][T11027] ? __fget_files+0x2a/0x420 [ 380.662475][T11027] ? __fget_files+0x39d/0x420 [ 380.662488][T11027] ? __fget_files+0x2a/0x420 [ 380.662506][T11027] __x64_sys_setsockopt+0x1ee/0x280 [ 380.662525][T11027] do_syscall_64+0xf3/0x230 [ 380.662547][T11027] ? clear_bhb_loop+0x45/0xa0 [ 380.662567][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.662590][T11027] RIP: 0033:0x7f1cfb58e169 [ 380.662612][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.662627][T11027] RSP: 002b:00007f1cfc33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 380.662647][T11027] RAX: ffffffffffffffda RBX: 00007f1cfb7b5fa0 RCX: 00007f1cfb58e169 [ 380.662660][T11027] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 380.662670][T11027] RBP: 00007f1cfb610a68 R08: 0000000000000018 R09: 0000000000000000 [ 380.662681][T11027] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.662692][T11027] R13: 0000000000000000 R14: 00007f1cfb7b5fa0 R15: 00007f1cfb8dfa28 [ 380.662710][T11027] [ 381.030024][T11032] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 381.057919][T11027] IPVS: stopping master sync thread 11032 ...