last executing test programs: 9.889233959s ago: executing program 1 (id=4047): write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0x24000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.271531646s ago: executing program 1 (id=4049): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"5c33c91eec004034c4265677a957b03b7ed17bcef8705f782a51d8ac39718d0e"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, &(0x7f00000000c0)) 7.773150078s ago: executing program 1 (id=4055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0xf, 0x7fffffffffffe, 0x5, 0x5, 0x8000000000000001, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.628158937s ago: executing program 0 (id=4063): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(r1, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1000) 5.31303686s ago: executing program 0 (id=4070): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) 4.745468494s ago: executing program 1 (id=4074): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xfffffffe}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x82982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(r5, 0x1, &(0x7f0000000980)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f00000000c0), &(0x7f0000000540), 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00000000c0)=0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 4.504373361s ago: executing program 2 (id=4078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x10, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0xb, 0x1, 0xfffffffc, 0xffff, 0x3, 0x1, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24058081}, 0xc804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.192851361s ago: executing program 2 (id=4082): socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munlockall() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.143589382s ago: executing program 0 (id=4084): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x4}, 0xff2b) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x0, 0x99, {"b5b266b55e7b2a8d6c2465ffdb724a6c"}, 0xd, 0x6, 0x18}}}, 0xa0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x1d, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x3, 0x75b}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x3, 0x0, 0xf9, 0x1, 0x2, 0x3e, 0x5, 0x2b3, 0x38, 0xc0, 0x9, 0x9, 0x20, 0x1, 0xe, 0x7fff, 0x7}, [{0x60000000, 0x4, 0x557, 0x8da, 0x0, 0x8, 0x2, 0xfa}], "", ['\x00']}, 0x158) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x9}}, 0x20) 3.934924886s ago: executing program 2 (id=4085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vim2m(0x0, 0x94, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe91f1909eb81da05, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=']) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x40, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x4000000000000000, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) 3.569743599s ago: executing program 3 (id=4088): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) syz_create_resource$binfmt(0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0xfffdfffe, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) 3.473072543s ago: executing program 1 (id=4089): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open(0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xeecd, 0x0, 0x20000001, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x130c0}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 3.242942473s ago: executing program 0 (id=4090): socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x3, 0x401) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000000c001700020000000000000008000900", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.068657988s ago: executing program 0 (id=4091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x20, 0x2, 0x2, 0x903, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f00000000c0)={0x2, 0x1}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x390f04f8) close(r1) 2.836432834s ago: executing program 4 (id=4093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 2.597215601s ago: executing program 3 (id=4094): ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x1, 0x7, 0x7, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0xd3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4004001) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 2.425092197s ago: executing program 4 (id=4095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ppoll(&(0x7f0000000240)=[{r1, 0x8509}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.414942098s ago: executing program 3 (id=4096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xfffffffe}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x82982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(r5, 0x1, &(0x7f0000000980)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f00000000c0), &(0x7f0000000540), 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00000000c0)=0x2) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r10, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 2.291810836s ago: executing program 4 (id=4097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xe}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.981323088s ago: executing program 2 (id=4098): ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x1, 0x7, 0x7, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0xd3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000000020102fffd0000000000000700000224000a8008000140000000000800014000000000080001400000000008000140000000014c000a803800028006"], 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x80000001, 0x1, {{0x5, 0x4, 0x0, 0x21, 0x14, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf254400000008000d00fffeffff0400080108ce788f7c000000050019019f00000000000800a1000400000008002201d8"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 1.971248669s ago: executing program 4 (id=4099): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xfffffffe}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x82982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(r5, 0x1, &(0x7f0000000980)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f00000000c0), &(0x7f0000000540), 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00000000c0)=0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 1.600356008s ago: executing program 2 (id=4100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$vsock_stream(0x28, 0x1, 0x0) dup(r4) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) r5 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) 1.429260991s ago: executing program 3 (id=4101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 1.399166566s ago: executing program 1 (id=4102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x0) 956.864874ms ago: executing program 4 (id=4103): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$qrtr(0x2a, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0xb, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xa0}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 487.377718ms ago: executing program 3 (id=4104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 487.141847ms ago: executing program 2 (id=4105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba0102030109021200010000000009"], 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 485.231895ms ago: executing program 4 (id=4106): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000040)={0x58, 0x9, 0x4, 0x2, 0x2, {}, {0x5, 0x0, 0x7, 0x2, 0xf7, 0x6, "4e5ed31d"}, 0xfffffff9, 0x4, {}, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 368.39785ms ago: executing program 3 (id=4107): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000180)=0x84) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207200902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 0 (id=4108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3c0, 0x2e0, 0x2e0, 0x3c0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x0, 0x55}, {}, {}, {0x0, 0x0, 0x40, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfc}, {0x0, 0x0, 0x0, 0x4b6}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0xd73a}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x1}, {0x1}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r2, 0x8500}], 0x1, 0x0, 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x5) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x80400006}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000100)=':', 0x1}], 0x1}}], 0x2, 0x20000000) kernel console output (not intermixed with test programs): 6450][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3198'. [ 809.088245][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.280992][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 809.290674][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 809.325991][ T10] usb 4-1: USB disconnect, device number 56 [ 809.783860][T17430] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 809.908606][T17432] team0 (unregistering): Port device team_slave_0 removed [ 810.019926][T17432] team0 (unregistering): Port device team_slave_1 removed [ 810.166061][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'. [ 810.197792][T17441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.222513][T17441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.250755][T17441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.261294][T17441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.133287][T17452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.978498][ T5914] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 813.248798][ T5914] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 813.261337][ T5914] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 813.290625][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.373305][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 813.397038][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 813.429082][ T5914] usb 1-1: Product: syz [ 813.434510][ T5914] usb 1-1: Manufacturer: syz [ 813.442543][ T5914] usb 1-1: SerialNumber: syz [ 813.469154][ T5914] usb 1-1: config 0 descriptor?? [ 813.496820][ T5914] usb 1-1: selecting invalid altsetting 0 [ 813.688326][ T43] net_ratelimit: 138 callbacks suppressed [ 813.688354][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 813.738348][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 813.768262][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 813.789151][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 813.818428][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 813.851612][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 813.898799][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 813.917572][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 814.038347][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.046770][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 814.681197][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3212'. [ 814.712640][T17502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 815.208281][ T29] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 815.628892][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.642035][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 815.665618][ T29] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 815.684476][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.727435][ T29] usb 2-1: config 0 descriptor?? [ 815.828038][T17509] bond7: entered promiscuous mode [ 815.850462][T17509] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 815.872957][T17509] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 815.894131][T17509] bond7: (slave macvlan2): making interface the new active one [ 815.960461][T17509] macvlan2: entered promiscuous mode [ 815.977175][T17512] input: syz1 as /devices/virtual/input/input64 [ 815.986997][T17509] bond0: entered promiscuous mode [ 816.006340][T17509] bond_slave_0: entered promiscuous mode [ 816.042812][T17509] bond_slave_1: entered promiscuous mode [ 816.052228][T17509] bond7: (slave macvlan2): Enslaving as an active interface with an up link [ 816.061526][T17515] IPVS: set_ctl: invalid protocol: 94 10.1.5.1:256 [ 816.083113][T17513] bridge0: port 4(syz_tun) entered blocking state [ 816.097349][T17513] bridge0: port 4(syz_tun) entered disabled state [ 816.109563][T17513] syz_tun: entered allmulticast mode [ 816.135289][ T797] usb 1-1: USB disconnect, device number 40 [ 816.160580][T17513] syz_tun: entered promiscuous mode [ 816.192831][T17513] bridge0: port 4(syz_tun) entered blocking state [ 816.199411][T17513] bridge0: port 4(syz_tun) entered forwarding state [ 816.912419][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3214'. [ 816.950044][T17509] netlink: 'syz.3.3214': attribute type 10 has an invalid length. [ 816.970056][T17509] bridge0: port 4(syz_tun) entered disabled state [ 816.996563][T17509] bridge0: port 4(syz_tun) entered blocking state [ 817.003127][T17509] bridge0: port 4(syz_tun) entered forwarding state [ 817.045035][T17509] bridge0: entered promiscuous mode [ 817.062468][T17509] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 818.733484][ T5914] usb 2-1: USB disconnect, device number 54 [ 818.760282][ T152] net_ratelimit: 104 callbacks suppressed [ 818.760302][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 818.776930][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 818.888245][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 818.897999][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 819.008269][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.016084][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 819.138258][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.178376][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.198279][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.218343][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.723144][T17558] binder_alloc: 17551: binder_alloc_buf size 8 failed, no address space [ 819.735741][T17558] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 819.761858][T17558] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[17558] [ 820.211646][T17569] kAFS: unable to lookup cell 'ÿ' [ 820.317229][T17570] netlink: 'syz.2.3224': attribute type 4 has an invalid length. [ 822.410741][T17589] loop8: detected capacity change from 0 to 7 [ 822.432133][T17479] Dev loop8: unable to read RDB block 7 [ 822.437994][T17479] loop8: unable to read partition table [ 822.452354][T17479] loop8: partition table beyond EOD, truncated [ 822.508569][T17589] Dev loop8: unable to read RDB block 7 [ 822.522830][T17589] loop8: unable to read partition table [ 822.558476][T17589] loop8: partition table beyond EOD, truncated [ 822.571731][T17589] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 823.752608][T17571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.778485][ T13] net_ratelimit: 222 callbacks suppressed [ 823.778503][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 823.793545][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 823.858520][ T13] bond7: (slave dummy0): failed to get link speed/duplex [ 823.908289][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 823.929333][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 823.968308][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 824.058273][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 824.066297][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 824.118568][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 824.188443][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 825.478258][ T29] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 825.650372][ T29] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 825.668290][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.688535][ T29] usb 1-1: config 0 descriptor?? [ 826.081835][T17629] xt_TCPMSS: Only works on TCP SYN packets [ 827.623841][T17638] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3237'. [ 827.852680][T17638] bond0 (unregistering): left promiscuous mode [ 827.887545][T17638] bond_slave_0: left promiscuous mode [ 827.911079][T17638] bond_slave_1: left promiscuous mode [ 828.043951][T17638] veth0_to_hsr: left promiscuous mode [ 828.067497][T17638] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 828.256879][T17638] bond5: (slave macvlan3): Releasing active interface [ 828.264079][T17638] macvlan3 (unregistering): left promiscuous mode [ 828.457772][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 828.486314][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 828.522981][ T29] usb 1-1: USB disconnect, device number 41 [ 828.607503][T17638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.725077][T17638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.790164][ T1143] net_ratelimit: 142 callbacks suppressed [ 828.790181][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 828.828314][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 828.868483][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 828.908325][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 828.939165][T17638] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 828.961477][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 828.999994][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.028337][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.048857][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.068516][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.118247][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.209459][T17638] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 829.245890][T17638] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 829.268091][T17638] bridge0: port 3(syz_tun) entered disabled state [ 829.595880][T17638] bond0 (unregistering): Released all slaves [ 829.769920][T17654] delete_channel: no stack [ 829.980972][T17668] xt_hashlimit: max too large, truncated to 1048576 [ 830.188442][ T29] psmouse serio4: Failed to reset mouse on : -5 [ 830.378324][ T5909] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 830.912743][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 830.958374][ T5909] usb 3-1: New USB device found, idVendor=1713, idProduct=0037, bcdDevice= 0.00 [ 831.016992][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.066416][ T5909] usb 3-1: config 0 descriptor?? [ 832.009932][ T5909] hid-generic 0003:1713:0037.0039: collection stack underflow [ 832.078693][ T5909] hid-generic 0003:1713:0037.0039: item 0 1 0 12 parsing failed [ 832.108802][ T5909] hid-generic 0003:1713:0037.0039: probe with driver hid-generic failed with error -22 [ 833.401797][T17702] : renamed from bridge_slave_0 [ 833.826506][ T5835] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 833.838350][ T12] net_ratelimit: 127 callbacks suppressed [ 833.838364][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 833.851719][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 833.878435][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 833.895519][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 833.968262][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 834.008265][ T29] misc userio: Buffer overflowed, userio client isn't keeping up [ 834.016941][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 834.034241][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 834.078312][ T13] bond7: (slave dummy0): failed to get link speed/duplex [ 834.148263][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 834.163862][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 834.258316][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 834.424037][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.437194][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 834.450884][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.507286][ T10] usb 4-1: config 0 descriptor?? [ 834.531452][T17711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3251'. [ 834.556310][T17711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3251'. [ 834.706854][ T5909] usb 3-1: USB disconnect, device number 75 [ 834.858281][ T5901] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 835.016360][ T5901] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 835.044982][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.063463][ T29] input: PS/2 Generic Mouse as /devices/serio4/input/input65 [ 835.083048][ T5901] usb 1-1: config 0 has no interfaces? [ 835.127558][ T5901] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 835.161668][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.181624][ T5901] usb 1-1: config 0 descriptor?? [ 835.298252][ T29] psmouse serio4: Failed to enable mouse on [ 837.409324][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 837.433952][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 837.454315][ T10] usb 4-1: USB disconnect, device number 57 [ 837.579910][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'. [ 837.820460][T17742] fuse: Unknown parameter 'fd<0x00000000000000040xffffffffffffffff00000000000000000000' [ 838.256309][ T29] usb 1-1: USB disconnect, device number 42 [ 838.908294][ T13] net_ratelimit: 123 callbacks suppressed [ 838.908310][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 838.922766][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 838.929862][T16704] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 838.939416][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 838.947826][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3259'. [ 839.004787][T17755] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3259'. [ 839.076094][ T13] bond7: (slave dummy0): failed to get link speed/duplex [ 839.105927][T16704] usb 1-1: config 0 has no interfaces? [ 839.114271][T16704] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 839.123540][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.158717][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.172244][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 839.189654][T16704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.258405][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 839.308238][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.322133][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 839.332928][T17757] input: syz0 as /devices/virtual/input/input66 [ 839.356795][T16704] usb 1-1: config 0 descriptor?? [ 840.522339][T17771] rtc_cmos 00:00: Alarms can be up to one day in the future [ 841.819394][ T29] usb 1-1: USB disconnect, device number 43 [ 842.818270][T16704] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 843.103078][T16704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.128460][T16704] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 843.154029][T16704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.179482][T16704] usb 4-1: config 0 descriptor?? [ 843.948477][ T43] net_ratelimit: 118 callbacks suppressed [ 843.948493][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 843.962099][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 843.975083][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 844.058898][T16704] pwc: Askey VC010 type 2 USB webcam detected. [ 844.078539][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 844.098250][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 844.106210][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 844.188568][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 844.222201][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 844.234398][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 844.298696][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 845.739537][T17820] xt_TCPMSS: Only works on TCP SYN packets [ 845.774163][T17821] netlink: 'syz.4.3273': attribute type 5 has an invalid length. [ 845.801775][T16704] pwc: recv_control_msg error -71 req 02 val 2700 [ 845.811132][T16704] pwc: recv_control_msg error -71 req 02 val 2c00 [ 845.856217][T16704] pwc: recv_control_msg error -71 req 04 val 1000 [ 845.891356][T16704] pwc: recv_control_msg error -71 req 04 val 1300 [ 845.942984][T16704] pwc: recv_control_msg error -71 req 04 val 1400 [ 845.951998][T16704] pwc: recv_control_msg error -71 req 02 val 2000 [ 845.961307][T16704] pwc: recv_control_msg error -71 req 02 val 2100 [ 845.968318][T16704] pwc: recv_control_msg error -71 req 04 val 1500 [ 845.975955][T16704] pwc: recv_control_msg error -71 req 02 val 2500 [ 845.988450][T16704] pwc: recv_control_msg error -71 req 02 val 2400 [ 845.995870][T16704] pwc: recv_control_msg error -71 req 02 val 2600 [ 846.003232][T17816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3272'. [ 846.012365][T16704] pwc: recv_control_msg error -71 req 02 val 2900 [ 846.013143][T16704] pwc: recv_control_msg error -71 req 02 val 2800 [ 846.037295][T17824] bridge0: port 3(syz_tun) entered blocking state [ 846.043999][T17824] bridge0: port 3(syz_tun) entered forwarding state [ 846.069653][T16704] pwc: recv_control_msg error -71 req 04 val 1100 [ 846.102089][T16704] pwc: recv_control_msg error -71 req 04 val 1200 [ 846.182752][T16704] pwc: Registered as video103. [ 846.210641][T16704] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 846.262246][T16704] usb 4-1: USB disconnect, device number 58 [ 847.249393][T17836] tipc: Enabling of bearer rejected, already enabled [ 847.298716][T17835] input: syz0 as /devices/virtual/input/input68 [ 847.568226][ T5901] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 847.734013][ T5901] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 847.746670][ T5901] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 847.767368][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 847.804848][ T5901] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 847.837235][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 847.858282][ T5901] usb 4-1: Product: syz [ 847.863712][ T5901] usb 4-1: Manufacturer: syz [ 847.872655][ T5901] usb 4-1: SerialNumber: syz [ 847.919063][ T5901] usb 4-1: config 0 descriptor?? [ 847.946085][ T5901] usb 4-1: selecting invalid altsetting 0 [ 848.324099][T17833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.348523][T17833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.379646][ T5901] usb 4-1: USB disconnect, device number 59 [ 848.852938][T17847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3277'. [ 848.862215][T17847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3277'. [ 849.019324][ T13] net_ratelimit: 135 callbacks suppressed [ 849.019344][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.033073][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 849.050575][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 849.149459][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 849.168279][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.178788][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 849.234080][T17854] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3276'. [ 849.243155][T16704] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 849.269906][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 849.301506][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.321756][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 849.389065][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 849.421244][T16704] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 849.431580][T16704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.456308][T16704] usb 5-1: config 0 has no interfaces? [ 849.484193][T16704] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 849.521215][T16704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.555567][T16704] usb 5-1: config 0 descriptor?? [ 850.168410][T17867] input: syz1 as /devices/virtual/input/input69 [ 850.254061][T17870] IPVS: set_ctl: invalid protocol: 94 10.1.5.1:256 [ 851.617626][T17875] rtc_cmos 00:00: Alarms can be up to one day in the future [ 851.712426][ T5901] usb 5-1: USB disconnect, device number 75 [ 851.890353][ T29] rtc_cmos 00:00: Alarms can be up to one day in the future [ 851.910714][ T29] rtc_cmos 00:00: Alarms can be up to one day in the future [ 851.978802][ T29] rtc_cmos 00:00: Alarms can be up to one day in the future [ 851.986261][ T29] rtc_cmos 00:00: Alarms can be up to one day in the future [ 852.026966][ T29] rtc rtc0: __rtc_set_alarm: err=-22 [ 852.170174][ T5901] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 852.319108][T17891] fuse: Unknown parameter '0x000000000000000e' [ 852.380234][ T5901] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 852.403993][ T5901] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 852.444303][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.489469][ T5901] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 852.528449][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 852.543713][ T5901] usb 5-1: Product: syz [ 852.557437][ T5901] usb 5-1: Manufacturer: syz [ 852.562249][ T5901] usb 5-1: SerialNumber: syz [ 852.568892][ T5914] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 852.604713][ T5901] usb 5-1: config 0 descriptor?? [ 852.628715][ T5901] usb 5-1: selecting invalid altsetting 0 [ 852.828771][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 852.897129][ T5914] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 852.906595][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.916423][ T5914] usb 2-1: Product: syz [ 852.924357][ T5914] usb 2-1: Manufacturer: syz [ 852.929396][ T5914] usb 2-1: SerialNumber: syz [ 852.946079][ T5914] usb 2-1: config 0 descriptor?? [ 852.960827][ T5914] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 852.977194][ T5914] dvb-usb: bulk message failed: -22 (4/0) [ 852.989247][ T5914] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 853.008739][ T5914] dvb-usb: bulk message failed: -22 (5/0) [ 853.016448][ T5914] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 853.038980][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.055922][ T5914] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 853.065457][ T5914] usb 2-1: media controller created [ 853.124199][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.166256][ T5914] usb 2-1: selecting invalid altsetting 3 [ 853.182468][T17894] dvb-usb: bulk message failed: -22 (7/0) [ 853.208454][ T5914] ttusb2: set interface to alts=3 failed [ 853.214485][T17894] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 853.291122][T17894] ttusb2: i2c transfer failed. [ 853.320854][ T5914] DVB: Unable to find symbol tda10086_attach() [ 853.327112][ T5914] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 853.335933][ T5914] dvb-usb: bulk message failed: -22 (4/0) [ 853.341768][ T5914] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 853.355333][ T5914] dvb-usb: bulk message failed: -22 (5/0) [ 853.392450][ T5914] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 853.412727][ T5914] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 853.599091][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'. [ 854.033306][T17907] bridge0: port 1(veth7) entered blocking state [ 854.040634][ T1143] net_ratelimit: 126 callbacks suppressed [ 854.040652][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.045078][T17907] bridge0: port 1(veth7) entered disabled state [ 854.079713][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.108609][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.129612][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.132807][T17907] veth7: entered allmulticast mode [ 854.158324][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.178503][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.199033][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.207866][T17907] veth7: entered promiscuous mode [ 854.227244][T17909] bridge0: port 2(veth0_to_bond) entered blocking state [ 854.235640][T17909] bridge0: port 2(veth0_to_bond) entered disabled state [ 854.242777][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.260979][T17909] veth0_to_bond: entered promiscuous mode [ 854.268303][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.319814][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.539117][T17910] bridge0: port 3(veth9) entered blocking state [ 854.550046][T17910] bridge0: port 3(veth9) entered disabled state [ 854.582306][T17910] veth9: entered allmulticast mode [ 854.610127][T17910] veth9: entered promiscuous mode [ 855.403156][ T29] usb 2-1: USB disconnect, device number 55 [ 855.430967][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 857.051208][T16704] usb 5-1: USB disconnect, device number 76 [ 857.289206][T17939] input: syz1 as /devices/virtual/input/input70 [ 857.378582][T17940] IPVS: set_ctl: invalid protocol: 94 10.1.5.1:256 [ 858.461615][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 858.533305][T17949] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3297'. [ 858.648379][T16704] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 858.786810][T17957] blktrace: Concurrent blktraces are not allowed on nullb0 [ 858.798329][ T5914] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 859.019001][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 859.031640][ T5914] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 859.068460][ T5914] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 859.100361][ T5914] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 859.133835][ T5914] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 859.150410][ T43] net_ratelimit: 136 callbacks suppressed [ 859.150430][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 859.169846][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.183584][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 859.217929][ T5914] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 859.237160][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.278941][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 859.289946][ T5914] usb 1-1: Product: syz [ 859.310467][ T5914] usb 1-1: Manufacturer: syz [ 859.317317][ T5914] usb 1-1: SerialNumber: syz [ 859.358705][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 859.368493][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.379246][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 859.437073][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 859.458111][ T5914] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input71 [ 859.511478][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.520139][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 859.529699][T17959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3299'. [ 859.578248][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 859.608346][ T5914] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 859.618575][ T5914] (id 0x00) [ 859.659241][T16704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.699946][T16704] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 859.732250][T16704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.770020][T16704] usb 5-1: config 0 descriptor?? [ 859.788615][ T5914] rc_core: IR keymap rc-imon-pad not found [ 859.799289][ T5914] Registered IR keymap rc-empty [ 859.828350][ T5914] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 859.858427][ T5914] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 859.989387][ T5914] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 860.033401][ T5914] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input72 [ 860.061774][ T5914] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:44> initialized [ 860.238728][T16704] usbhid 5-1:0.0: can't add hid device: -71 [ 860.244764][T16704] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 860.252694][ T30] audit: type=1326 audit(1771238840.235:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.298102][T16704] usb 5-1: USB disconnect, device number 77 [ 860.304404][ T30] audit: type=1326 audit(1771238840.235:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.344597][ T30] audit: type=1326 audit(1771238840.235:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.377866][ T30] audit: type=1326 audit(1771238840.235:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.400506][ T30] audit: type=1326 audit(1771238840.235:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.422809][ T30] audit: type=1326 audit(1771238840.235:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.458386][ T30] audit: type=1326 audit(1771238840.235:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.534367][ T30] audit: type=1326 audit(1771238840.235:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.583578][T17975] sg_read: process 2401 (syz.3.3303) changed security contexts after opening file descriptor, this is not allowed. [ 860.617324][ T30] audit: type=1326 audit(1771238840.255:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 860.646492][ T30] audit: type=1326 audit(1771238840.255:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17969 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 861.085498][ T5901] usb 1-1: USB disconnect, device number 44 [ 861.101304][T17981] imon:send_packet: packet tx failed (-71) [ 861.128538][T17981] imon:vfd_write: send packet #1 failed [ 862.152948][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 862.818379][ T5901] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 862.993258][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 863.030530][ T5901] usb 5-1: config 0 has no interfaces? [ 863.058222][ T5901] usb 5-1: config 0 has no interfaces? [ 863.075156][ T5901] usb 5-1: config 0 has no interfaces? [ 863.085043][ T5901] usb 5-1: config 0 has no interfaces? [ 863.129877][ T5901] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 863.171845][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.218017][ T5901] usb 5-1: config 0 descriptor?? [ 863.708364][ T5914] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 863.886847][ T5914] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 863.920568][ T5914] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 863.956522][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 863.989712][ T5914] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 864.015062][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 864.043187][ T5914] usb 4-1: Product: syz [ 864.058558][ T5914] usb 4-1: Manufacturer: syz [ 864.067004][ T5914] usb 4-1: SerialNumber: syz [ 864.087990][ T5914] usb 4-1: config 0 descriptor?? [ 864.112904][ T5914] usb 4-1: selecting invalid altsetting 0 [ 864.178796][T13624] net_ratelimit: 122 callbacks suppressed [ 864.178814][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.213465][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 864.258801][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 864.348268][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.362960][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 864.410711][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 864.519142][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.538293][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 864.566749][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 864.668526][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 865.048746][ T5914] usb 5-1: USB disconnect, device number 78 [ 865.276418][T18027] qrtr: Invalid version 0 [ 865.434354][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 866.603829][T18037] blktrace: Concurrent blktraces are not allowed on nullb0 [ 866.865220][ T30] audit: type=1326 audit(1771238846.845:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 866.930346][ T29] usb 4-1: USB disconnect, device number 60 [ 867.054556][ T30] audit: type=1326 audit(1771238846.855:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c572b code=0x7ffc0000 [ 867.177805][ T30] audit: type=1326 audit(1771238846.855:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 867.272940][ T30] audit: type=1326 audit(1771238846.855:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 867.364477][ T30] audit: type=1326 audit(1771238846.855:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 867.444044][ T30] audit: type=1326 audit(1771238846.855:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 867.501963][ T30] audit: type=1326 audit(1771238846.855:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 867.558396][ T30] audit: type=1326 audit(1771238846.855:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 867.628583][ T30] audit: type=1326 audit(1771238846.855:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 867.657910][ T30] audit: type=1326 audit(1771238846.855:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f6c code=0x7ffc0000 [ 867.787479][T18047] bond0 (unregistering): Released all slaves [ 869.298311][T13624] net_ratelimit: 142 callbacks suppressed [ 869.298334][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.311895][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 869.347216][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 869.468649][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 869.493001][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.517481][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 869.586518][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 869.638285][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.646172][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 869.699525][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 869.744031][T18074] xt_bpf: check failed: parse error [ 870.125383][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.133053][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.811210][T18089] input: syz1 as /devices/virtual/input/input73 [ 871.128341][T16704] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 871.278965][T16704] usb 2-1: Using ep0 maxpacket: 8 [ 871.291717][T16704] usb 2-1: config 0 has no interfaces? [ 871.328990][T16704] usb 2-1: config 0 has no interfaces? [ 871.409822][T16704] usb 2-1: config 0 has no interfaces? [ 871.424752][T16704] usb 2-1: config 0 has no interfaces? [ 871.499574][T16704] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 871.510703][T16704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.592261][T16704] usb 2-1: config 0 descriptor?? [ 871.658450][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3324'. [ 872.047201][T18100] fuse: Unknown parameter '0x000000000000000e' [ 873.509781][T18105] loop8: detected capacity change from 0 to 7 [ 873.517713][T17479] Dev loop8: unable to read RDB block 7 [ 873.523552][ T5914] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 873.531933][T17479] loop8: unable to read partition table [ 873.541338][T17479] loop8: partition table beyond EOD, truncated [ 873.560490][T18105] Dev loop8: unable to read RDB block 7 [ 873.566141][T18105] loop8: unable to read partition table [ 873.576603][T18105] loop8: partition table beyond EOD, truncated [ 873.584038][T18105] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 873.699923][ T5914] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 873.720600][ T5914] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 873.751873][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 873.766327][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 873.775926][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 873.785147][ T5914] usb 3-1: Product: syz [ 873.789908][ T5914] usb 3-1: Manufacturer: syz [ 873.801526][ T5914] usb 3-1: SerialNumber: syz [ 873.816113][ T5914] usb 3-1: config 0 descriptor?? [ 873.833341][ T5914] usb 3-1: selecting invalid altsetting 0 [ 874.145556][ T5914] usb 2-1: USB disconnect, device number 56 [ 874.378308][ T43] net_ratelimit: 140 callbacks suppressed [ 874.378324][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 874.391882][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.418271][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.429622][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 874.511211][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 874.548276][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.571190][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 874.663334][T18118] sctp: [Deprecated]: syz.1.3327 (pid 18118) Use of int in maxseg socket option. [ 874.663334][T18118] Use struct sctp_assoc_value instead [ 874.679479][T15455] bond7: (slave dummy0): failed to get link speed/duplex [ 874.688362][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.697837][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 876.206373][T18136] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3330'. [ 876.297367][T18136] bond2: (slave macvlan2): Releasing active interface [ 876.452959][T18136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.550208][T18136] bond_slave_0: left promiscuous mode [ 876.595536][T18136] bond_slave_0: left allmulticast mode [ 876.627247][T18144] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3331'. [ 876.848534][T18136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.178053][T18136] bond_slave_1: left promiscuous mode [ 877.184301][T18136] bond_slave_1: left allmulticast mode [ 877.270310][T18136] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 877.334203][T18136] bridge0: left promiscuous mode [ 877.340034][T18136] bridge0: left allmulticast mode [ 877.355762][T18136] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.364544][T18136] bridge0: port 1() entered disabled state [ 877.430340][T18136] bond0 (unregistering): Released all slaves [ 877.631610][ T5914] usb 3-1: USB disconnect, device number 76 [ 878.319059][ T29] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 878.608347][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 878.629993][ T29] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 878.651668][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.670853][ T29] usb 3-1: Product: syz [ 878.683880][ T29] usb 3-1: Manufacturer: syz [ 878.692229][ T29] usb 3-1: SerialNumber: syz [ 878.706861][ T29] usb 3-1: config 0 descriptor?? [ 878.716734][ T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 878.745945][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 878.752356][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 878.765079][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 878.782947][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 878.815407][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3335'. [ 878.832573][T18165] input: syz1 as /devices/virtual/input/input74 [ 878.840377][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 878.891728][ T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 878.904825][ T29] usb 3-1: media controller created [ 878.920009][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 878.976880][ T29] usb 3-1: selecting invalid altsetting 3 [ 878.996064][ T29] ttusb2: set interface to alts=3 failed [ 879.083244][T18158] dvb-usb: bulk message failed: -22 (7/0) [ 879.133111][T18158] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 879.183983][ T29] DVB: Unable to find symbol tda10086_attach() [ 879.207660][ T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 879.227246][T18158] ttusb2: i2c transfer failed. [ 879.281763][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 879.298234][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 879.347998][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 879.377098][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 879.388276][ T1143] net_ratelimit: 157 callbacks suppressed [ 879.388294][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.460162][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 879.488275][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.518220][T15455] bond7: (slave dummy0): failed to get link speed/duplex [ 879.541192][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.561698][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 879.670437][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 879.707506][T18180] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3339'. [ 879.720098][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.739248][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 879.823169][T18181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3339'. [ 879.833478][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 879.868348][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 881.661507][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 881.682523][T18186] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 881.699175][T18186] gretap2: entered promiscuous mode [ 881.704403][T18186] gretap2: entered allmulticast mode [ 882.204345][T16704] usb 3-1: USB disconnect, device number 77 [ 882.312431][T16704] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 882.458251][ T5901] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 882.533417][T18204] fuse: Unknown parameter 'ft' [ 882.628318][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 882.654903][ T5901] usb 1-1: config 0 has no interfaces? [ 882.674297][ T5901] usb 1-1: config 0 has no interfaces? [ 882.714415][ T5901] usb 1-1: config 0 has no interfaces? [ 882.733277][ T5901] usb 1-1: config 0 has no interfaces? [ 882.751632][ T5901] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 882.787114][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.824033][ T5901] usb 1-1: config 0 descriptor?? [ 883.740694][T18212] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3346'. [ 884.408527][T13624] net_ratelimit: 121 callbacks suppressed [ 884.408550][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 884.441104][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 884.449057][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 884.547488][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 884.571290][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 884.579577][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 884.668285][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 884.698281][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 884.706209][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 884.788317][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 884.885228][T18222] bridge3: entered promiscuous mode [ 885.303406][ T5909] usb 1-1: USB disconnect, device number 45 [ 885.698772][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 886.204247][T18241] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 887.081708][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 887.081720][ T30] audit: type=1326 audit(1771238867.075:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3348" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x0 [ 887.240726][T18249] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3352'. [ 888.529188][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3353'. [ 888.687211][T18265] bridge0: port 4(syz_tun) entered disabled state [ 888.761917][T18265] bond0: left promiscuous mode [ 888.766872][T18265] bond_slave_0: left promiscuous mode [ 888.773187][T18265] bond_slave_1: left promiscuous mode [ 888.807785][T18265] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 889.116454][T18270] bridge5: port 1(veth7) entered blocking state [ 889.135262][T18270] bridge5: port 1(veth7) entered disabled state [ 889.172811][T18270] veth7: entered allmulticast mode [ 889.235531][T18270] veth7: entered promiscuous mode [ 889.428282][T15455] net_ratelimit: 139 callbacks suppressed [ 889.428301][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.484724][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.515223][T18268] bridge5: port 2(veth9) entered blocking state [ 889.525552][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.543173][T18268] bridge5: port 2(veth9) entered disabled state [ 889.557397][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.568195][T18268] veth9: entered allmulticast mode [ 889.588505][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.610014][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.610900][T18268] veth9: entered promiscuous mode [ 889.638619][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.648364][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 889.658308][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 889.758467][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.837336][T18279] netlink: 'syz.3.3357': attribute type 21 has an invalid length. [ 889.846248][T18279] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3357'. [ 889.865986][T18279] netlink: 'syz.3.3357': attribute type 4 has an invalid length. [ 889.876895][T18279] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3357'. [ 889.909899][T18281] batadv2: entered promiscuous mode [ 889.924551][T18281] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 890.638677][ T5835] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 892.348254][T16704] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 892.397206][T18323] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3365'. [ 892.529281][T18323] libceph: resolve '0..' (ret=-3): failed [ 892.566515][ T5914] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 892.662435][T16704] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 892.671413][T16704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.687760][T16704] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 892.697035][T16704] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 892.716771][T16704] usb 4-1: Manufacturer: syz [ 892.743761][T16704] usb 4-1: config 0 descriptor?? [ 892.803348][ T5914] usb 5-1: config 1 has an invalid interface number: 148 but max is 0 [ 892.817377][ T5914] usb 5-1: config 1 has no interface number 0 [ 892.854442][ T5914] usb 5-1: config 1 interface 148 has no altsetting 0 [ 892.874484][ T5914] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a7a, bcdDevice=b3.5e [ 892.884483][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.909510][T16704] rc_core: IR keymap rc-hauppauge not found [ 892.915440][T16704] Registered IR keymap rc-empty [ 892.929355][T16704] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 893.011968][T16704] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input75 [ 893.036744][T16704] usb 4-1: USB disconnect, device number 61 [ 893.111189][ T5914] usb 5-1: string descriptor 0 read error: -71 [ 893.183427][ T5914] usb 5-1: USB disconnect, device number 79 [ 894.151274][T18347] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 894.418299][ T5909] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 894.468947][T13624] net_ratelimit: 135 callbacks suppressed [ 894.468963][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 894.482584][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 894.491760][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 894.578906][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 894.585400][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.599380][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 894.616472][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.628336][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 894.636605][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 894.646350][ T5909] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 894.664753][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.715132][ T5909] usb 4-1: config 0 descriptor?? [ 894.748284][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 894.858279][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 894.868247][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 894.888850][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 894.913882][T18340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.065125][T18352] fuse: Unknown parameter '' [ 895.283010][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 895.322345][ T5909] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 895.460028][T18367] fuse: Unknown parameter 'group_id00000000000000000000' [ 895.729369][ T5909] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 895.858309][ T5901] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 895.988999][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 896.005053][ T5909] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 896.030411][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.041996][ T5909] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.056995][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 896.072826][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 896.086017][ T5901] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 896.101679][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.114913][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.132770][ T5909] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.152008][ T5901] usb 2-1: config 0 descriptor?? [ 896.183085][ T5901] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 896.192168][ T5909] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 896.210005][ T5901] dvb-usb: bulk message failed: -22 (3/0) [ 896.218360][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.233164][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 896.281925][ T5901] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 896.300113][ T5901] usb 2-1: media controller created [ 896.316068][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 896.357284][ T5901] dvb-usb: bulk message failed: -22 (6/0) [ 896.377056][ T5901] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 896.404990][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76 [ 896.443737][ T5901] dvb-usb: schedule remote query interval to 150 msecs. [ 896.468676][ T5901] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 896.480149][ T5909] usb 1-1: GET_CAPABILITIES returned 0 [ 896.499340][ T5909] usbtmc 1-1:16.0: can't read capabilities [ 896.564948][T18352] loop6: detected capacity change from 0 to 2640 [ 896.611009][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.621256][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.630910][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 896.636820][ T5909] dvb-usb: error while querying for an remote control event. [ 896.653385][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.663460][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.676721][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.692602][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.712685][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.746821][ T29] usb 1-1: USB disconnect, device number 46 [ 896.760849][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.778304][ T5901] usb 4-1: reset high-speed USB device number 62 using dummy_hcd [ 896.787386][T18304] ldm_validate_partition_table(): Disk read failed. [ 896.815476][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.833130][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 896.854274][T18304] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.862071][ T797] dvb-usb: error while querying for an remote control event. [ 896.905141][T18304] Dev loop6: unable to read RDB block 0 [ 896.933869][T18304] loop6: unable to read partition table [ 896.984646][T18352] ldm_validate_partition_table(): Disk read failed. [ 897.018347][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 897.034373][ T29] dvb-usb: error while querying for an remote control event. [ 897.062251][T18352] Dev loop6: unable to read RDB block 0 [ 897.141638][T18352] loop6: unable to read partition table [ 897.179971][T18352] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 897.228386][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 897.234163][ T29] dvb-usb: error while querying for an remote control event. [ 897.397982][T18382] xt_TCPMSS: Only works on TCP SYN packets [ 897.408220][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 897.428676][ T29] dvb-usb: error while querying for an remote control event. [ 897.580906][ T5909] usb 4-1: USB disconnect, device number 62 [ 897.603201][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 897.609722][ T5901] dvb-usb: error while querying for an remote control event. [ 897.778801][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 897.785219][ T5901] dvb-usb: error while querying for an remote control event. [ 897.948219][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 897.959049][ T5901] dvb-usb: error while querying for an remote control event. [ 898.128325][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 898.148333][ T5901] dvb-usb: error while querying for an remote control event. [ 898.308255][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 898.319450][ T5901] dvb-usb: error while querying for an remote control event. [ 898.508314][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 898.514385][ T5901] dvb-usb: error while querying for an remote control event. [ 898.547378][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 898.689042][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 898.698312][ T5901] dvb-usb: error while querying for an remote control event. [ 898.858237][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 898.868318][ T5901] dvb-usb: error while querying for an remote control event. [ 899.028321][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 899.037666][ T5901] dvb-usb: error while querying for an remote control event. [ 899.218261][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 899.224038][ T5909] dvb-usb: error while querying for an remote control event. [ 899.245505][ T5909] usb 2-1: USB disconnect, device number 57 [ 899.411913][ T5909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 899.548310][ T43] net_ratelimit: 127 callbacks suppressed [ 899.548331][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 899.562240][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 899.589013][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 899.688227][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 899.708501][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 899.716690][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 899.798404][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 899.857643][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 899.887852][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 899.908275][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 900.442391][T18414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 900.449734][T18414] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 900.492433][T18414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 900.500062][T18414] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 900.525336][T18414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 900.531768][T18414] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 900.563540][T18408] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 900.851208][T18423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 901.937079][T18447] netlink: 'syz.0.3399': attribute type 21 has an invalid length. [ 901.951722][T18447] IPv6: NLM_F_CREATE should be specified when creating new route [ 902.303978][T18460] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3402'. [ 902.479367][T18460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.668395][T18460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.684594][T18460] bond0 (unregistering): Released all slaves [ 902.788618][ T5901] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 902.818289][ T5914] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 902.951105][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.961929][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 903.012382][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.040374][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 903.074153][ T5914] usb 2-1: config 1 has no interface number 0 [ 903.089365][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.106714][ T5914] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.152646][ T5914] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 903.153547][ T5901] usb 3-1: config 0 descriptor?? [ 903.217294][ T5914] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 903.275770][ T5914] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 903.297396][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.333200][ T5914] usb 2-1: Product: syz [ 903.354445][ T5914] usb 2-1: Manufacturer: syz [ 903.378628][ T5914] usb 2-1: SerialNumber: syz [ 903.409689][T18463] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 904.100397][ T5914] cdc_ncm 2-1:1.1: bind() failure [ 904.169361][ T5914] usb 2-1: USB disconnect, device number 58 [ 904.356987][T18485] netlink: 'syz.0.3408': attribute type 5 has an invalid length. [ 904.579104][ T43] net_ratelimit: 129 callbacks suppressed [ 904.579126][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 904.611266][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 904.648315][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 904.674451][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 904.738472][T15455] bond7: (slave dummy0): failed to get link speed/duplex [ 904.826832][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 904.848298][ T43] bond7: (slave dummy0): failed to get link speed/duplex [ 904.878319][ T43] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 904.895060][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 904.969447][T15455] bond7: (slave dummy0): failed to get link speed/duplex [ 905.522989][T18476] binder: 18462:18476 ioctl c0306201 80000040 returned -11 [ 905.871170][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 905.877886][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 905.897294][ T5901] usb 3-1: USB disconnect, device number 78 [ 907.823901][T18509] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3409'. [ 907.973241][T18522] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3416'. [ 908.008665][ T5909] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 908.027327][T18525] netlink: 'syz.0.3423': attribute type 10 has an invalid length. [ 908.058588][T18522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.068014][T18522] bond_slave_0: left allmulticast mode [ 908.079217][T18522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.095723][T18522] bond_slave_1: left allmulticast mode [ 908.106694][T18522] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 908.120296][T18522] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 908.135788][T18522] bond0 (unregistering): Released all slaves [ 908.160460][ T5909] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 908.169559][T18525] team0: Device veth1_vlan failed to register rx_handler [ 908.177105][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.203508][ T5909] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 908.217788][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.231260][ T5909] usb 5-1: Product: syz [ 908.243889][ T5909] usb 5-1: Manufacturer: syz [ 908.250644][ T5909] usb 5-1: SerialNumber: syz [ 908.277069][ T5909] usb 5-1: config 0 descriptor?? [ 908.294358][ T5909] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 908.490873][T18531] program syz.3.3426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 908.710561][T18539] netlink: 'syz.3.3430': attribute type 12 has an invalid length. [ 908.759659][ T5909] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 908.766765][ T5909] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 908.796751][ T5909] usb 5-1: USB disconnect, device number 80 [ 909.112936][ T1143] bond0: (slave bond_slave_0): interface is now down [ 909.123069][ T1143] bond0: (slave bond_slave_1): interface is now down [ 909.138240][ T1143] bond0: (slave netdevsim0): interface is now down [ 909.141191][T18557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.155228][ T1143] bond0: (slave bridge0): interface is now down [ 909.201318][ T1143] bond0: now running without any active interface! [ 909.263645][T18561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3440'. [ 909.461160][T18571] netlink: 'syz.0.3446': attribute type 6 has an invalid length. [ 909.618282][ T1143] net_ratelimit: 125 callbacks suppressed [ 909.618305][ T1143] bond7: (slave dummy0): failed to get link speed/duplex [ 909.624072][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 909.639047][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 909.670343][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 909.688529][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 909.778834][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 909.828371][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 909.845661][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 909.888336][ T5914] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 909.988312][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.008646][T13624] bond7: (slave dummy0): failed to get link speed/duplex [ 910.039781][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 910.060356][ T5914] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 910.069974][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.077984][ T5914] usb 5-1: Product: syz [ 910.092726][ T5914] usb 5-1: Manufacturer: syz [ 910.097373][ T5914] usb 5-1: SerialNumber: syz [ 910.133808][ T5914] usb 5-1: config 0 descriptor?? [ 910.151015][ T5914] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 910.170340][ T5914] usb 5-1: Detected FT232H [ 910.381568][ T30] audit: type=1326 audit(1771238890.375:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 910.410728][ T30] audit: type=1326 audit(1771238890.405:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 910.439105][ T30] audit: type=1326 audit(1771238890.435:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 910.470154][ T5914] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 910.485319][ T5914] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 910.492581][ T30] audit: type=1326 audit(1771238890.435:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 910.522375][ T5914] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 910.538587][ T5914] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 910.562939][ T5914] usb 5-1: USB disconnect, device number 81 [ 910.581383][ T30] audit: type=1326 audit(1771238890.435:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 910.617512][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 910.632086][ T5914] ftdi_sio 5-1:0.0: device disconnected [ 910.639689][ T30] audit: type=1326 audit(1771238890.435:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 910.708404][ T30] audit: type=1326 audit(1771238890.435:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 910.744793][ T30] audit: type=1326 audit(1771238890.435:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 910.805932][ T30] audit: type=1326 audit(1771238890.435:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 910.876487][ T30] audit: type=1326 audit(1771238890.435:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 911.074242][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3465'. [ 911.384344][T18627] IPVS: Error connecting to the multicast addr [ 911.788340][T16703] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 911.975444][T16703] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 911.991315][T16703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.008653][T16703] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 912.023695][T16703] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 912.034311][T16703] usb 5-1: Manufacturer: syz [ 912.042927][T16703] usb 5-1: config 0 descriptor?? [ 912.149704][T16703] rc_core: IR keymap rc-hauppauge not found [ 912.156672][T16703] Registered IR keymap rc-empty [ 912.180429][T16703] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 912.212715][T16703] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input77 [ 912.559915][ T5909] usb 5-1: USB disconnect, device number 82 [ 913.243986][T18667] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 913.312451][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 913.334416][T18669] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3483'. [ 913.586129][T18677] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3485'. [ 913.598239][ T5914] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 913.774407][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 913.789743][ T5914] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 913.802280][ T5914] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 913.817900][ T5914] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.838276][ T5914] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 913.919848][ T5914] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 913.929546][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.937744][ T5914] usb 5-1: Product: syz [ 913.948008][ T5914] usb 5-1: Manufacturer: syz [ 913.957132][ T5914] usb 5-1: SerialNumber: syz [ 913.974136][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 913.983069][ T5914] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input78 [ 914.038061][T18677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3485'. [ 914.208312][ T5914] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 914.221816][ T5914] (id 0x00) [ 914.329625][ T5914] rc_core: IR keymap rc-imon-pad not found [ 914.360319][ T5914] Registered IR keymap rc-empty [ 914.373520][ T5914] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 914.402446][ T5914] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 914.459052][ T5914] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 914.489966][ T5914] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input79 [ 914.534940][ T5914] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:83> initialized [ 914.552042][T18705] bridge7: entered promiscuous mode [ 914.638876][ T152] net_ratelimit: 133 callbacks suppressed [ 914.638894][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 914.652642][ T33] bond7: (slave dummy0): failed to get link speed/duplex [ 914.712901][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 914.778936][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 914.840104][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 914.875832][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 914.929747][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 915.008295][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.016058][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 915.058469][T15455] bond7: (slave dummy0): failed to get link speed/duplex [ 915.524120][T18718] imon:send_packet: packet tx failed (-71) [ 915.530396][ T5914] usb 5-1: USB disconnect, device number 83 [ 915.564825][T18718] imon:vfd_write: send packet #2 failed [ 916.371998][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3505'. [ 916.428740][ T29] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 916.478303][T16704] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 916.598632][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 916.606899][ T29] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 916.628302][T16704] usb 1-1: Using ep0 maxpacket: 8 [ 916.638197][ T29] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 916.656559][T16704] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 916.668404][ T29] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 916.692984][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 916.693948][T16704] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 916.726612][ T29] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 916.735836][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.753928][ T29] usb 4-1: Product: syz [ 916.763937][T16704] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 916.776260][T16704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.785708][ T29] usb 4-1: Manufacturer: syz [ 916.796809][ T29] usb 4-1: SerialNumber: syz [ 916.877824][ T29] usb 4-1: config 0 descriptor?? [ 917.020372][T16704] usb 1-1: USB disconnect, device number 47 [ 917.165036][ T29] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input80 [ 917.193241][ T5176] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 917.203894][ T5176] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 917.218024][ T5176] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 917.227322][T16703] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 917.252457][ T5176] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 917.282959][T18335] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 917.317376][T18727] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 917.338780][ T5176] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 917.355094][T16704] usb 4-1: USB disconnect, device number 63 [ 919.145849][T18771] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3514'. [ 919.669258][T15455] net_ratelimit: 123 callbacks suppressed [ 919.669273][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 919.691664][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 919.703765][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 919.808286][ T33] bond7: (slave dummy0): failed to get link speed/duplex [ 919.828289][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 919.848986][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 919.948267][T15455] bond7: (slave dummy0): failed to get link speed/duplex [ 919.991993][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.041561][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 920.078568][T15455] bond7: (slave dummy0): failed to get link speed/duplex [ 921.221207][T18802] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3527'. [ 921.618520][T16704] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 921.744650][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'. [ 921.798056][T16704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.836780][T16704] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 921.852792][T16704] usb 4-1: config 1 has no interface number 0 [ 921.889086][T16704] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 921.951321][T16704] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 921.991224][T16704] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 922.020728][T16704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.030748][T16704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.045668][T16704] usb 4-1: Product: syz [ 922.053209][T16704] usb 4-1: Manufacturer: syz [ 922.066174][T16704] usb 4-1: SerialNumber: syz [ 922.101127][T18817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 922.231074][T18841] bridge_slave_1: default FDB implementation only supports local addresses [ 922.441373][T16704] cdc_ncm 4-1:1.1: bind() failure [ 922.458400][ T5909] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 922.477726][T16704] usb 4-1: USB disconnect, device number 64 [ 922.604177][T18849] binder: 18816:18849 ioctl c0306201 80000040 returned -11 [ 922.653321][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 922.680614][ T5909] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 922.705404][ T5909] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 922.732917][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.773117][ T5909] usb 5-1: Product: syz [ 922.812403][ T5909] usb 5-1: Manufacturer: syz [ 922.820158][ T5909] usb 5-1: SerialNumber: syz [ 922.840478][ T5909] usb 5-1: config 0 descriptor?? [ 922.863253][ T5909] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 922.907668][ T5909] usb 5-1: setting power ON [ 922.929920][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 922.974644][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 923.013899][ T5909] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 923.048240][ T5909] usb 5-1: media controller created [ 923.094614][T18843] dvb-usb: bulk message failed: -22 (3/0) [ 923.103298][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 923.114462][T18843] cxusb: i2c wr: len=78 is too big! [ 923.114462][T18843] [ 923.197666][ T5909] usb 5-1: selecting invalid altsetting 6 [ 923.205822][ T5909] usb 5-1: digital interface selection failed (-22) [ 923.212667][ T5909] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 923.229612][ T5909] usb 5-1: setting power OFF [ 923.236658][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 923.243421][ T5909] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 923.258186][ T5909] (NULL device *): no alternate interface [ 923.309041][ T5909] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 923.390408][ T5909] usb 5-1: USB disconnect, device number 84 [ 923.622963][T18874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3557'. [ 923.711970][T18874] libceph: resolve '0..' (ret=-3): failed [ 924.268948][T18878] bridge_slave_1: default FDB implementation only supports local addresses [ 924.699490][ T33] net_ratelimit: 122 callbacks suppressed [ 924.699512][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 924.713242][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 924.720804][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 924.828268][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 924.838650][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 924.856674][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 924.948269][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 924.988266][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.006324][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 925.068286][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 925.119416][T18889] ip6tnl0: Caught tx_queue_len zero misconfig [ 925.715476][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3570'. [ 925.754511][T18892] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.761683][T18892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.769214][T18892] bridge0: port 1() entered blocking state [ 925.775191][T18892] bridge0: port 1() entered forwarding state [ 925.851155][T18908] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3570'. [ 925.874140][T18908] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3570'. [ 926.081664][T18917] netlink: 'syz.3.3573': attribute type 5 has an invalid length. [ 927.375293][T18945] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3582'. [ 927.730104][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3589'. [ 927.832618][T18964] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 928.001046][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.020614][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.028036][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.036126][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.054773][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.064169][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.074946][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.085083][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.094506][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.113251][T16703] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 928.157201][T16703] hid-generic 00A0:0006:0003.003B: hidraw0: HID v0.05 Device [syz0] on syz0 [ 928.278545][T16704] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 928.443733][T16704] usb 1-1: config 0 has no interfaces? [ 928.449618][T16704] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 928.467023][T16704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.492021][T16704] usb 1-1: config 0 descriptor?? [ 928.717437][T16704] usb 1-1: USB disconnect, device number 48 [ 929.580423][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'. [ 929.798738][ T33] net_ratelimit: 136 callbacks suppressed [ 929.798761][ T33] bond7: (slave dummy0): failed to get link speed/duplex [ 929.811699][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 929.838529][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 929.909775][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 929.970726][ T29] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 929.988304][ T152] bond7: (slave dummy0): failed to get link speed/duplex [ 930.055536][T19012] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 930.062036][T19012] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 930.089917][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 930.117431][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 930.149176][ T33] bond7: (slave dummy0): failed to get link speed/duplex [ 930.207727][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.228230][ T29] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 930.237303][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.270366][ T29] usb 1-1: config 0 descriptor?? [ 930.360855][T19023] bridge7: entered promiscuous mode [ 930.694515][ T29] playstation 0003:054C:0BA0.003C: collection stack underflow [ 930.724426][ T29] playstation 0003:054C:0BA0.003C: item 0 4 0 12 parsing failed [ 930.747085][ T29] playstation 0003:054C:0BA0.003C: Parse failed [ 930.774846][ T29] playstation 0003:054C:0BA0.003C: probe with driver playstation failed with error -22 [ 930.932410][ T29] usb 1-1: USB disconnect, device number 49 [ 930.979714][T19018] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3607'. [ 931.561351][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.567723][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.289933][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3618'. [ 932.396585][T19048] netlink: 'syz.2.3611': attribute type 5 has an invalid length. [ 934.808640][ T33] net_ratelimit: 165 callbacks suppressed [ 934.808656][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 934.839061][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 934.862831][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 934.888507][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 934.908321][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 934.929918][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 934.948391][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 934.970033][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 934.991416][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.018504][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.441077][T19053] tipc: Resetting bearer [ 935.461471][T15455] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.488463][T15455] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.497433][T15455] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.508319][T15455] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.517442][T15455] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.548784][T15455] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.590409][T19074] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3626'. [ 935.655567][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3629'. [ 935.734345][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'. [ 935.762638][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'. [ 936.018335][ T29] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 936.172296][ T29] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 936.182130][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.230726][ T29] usb 2-1: Product: syz [ 936.234963][ T29] usb 2-1: Manufacturer: syz [ 936.239739][ T29] usb 2-1: SerialNumber: syz [ 936.248207][ T29] usb 2-1: config 0 descriptor?? [ 936.521273][ T29] usb 2-1: USB disconnect, device number 60 [ 938.069348][ T29] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 938.094602][T19180] bond7: (slave dummy0): Releasing active interface [ 938.230501][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 938.247673][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.294767][ T29] usb 4-1: config 0 descriptor?? [ 938.335686][ T29] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 938.601165][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 938.601182][ T30] audit: type=1326 audit(1771238918.595:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19174 comm="syz.0.3673" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x0 [ 939.159985][ T29] usb 4-1: USB disconnect, device number 65 [ 939.868579][ T152] net_ratelimit: 135 callbacks suppressed [ 939.868599][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 939.868622][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 939.902457][T16703] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 939.979838][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.004895][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 940.080682][T16703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.091118][T16703] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 940.101337][T16703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.126488][T16703] usb 2-1: config 0 descriptor?? [ 940.131622][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.131649][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 940.238466][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.246586][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 940.358322][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.367767][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 940.612736][T16703] waltop 0003:172F:0501.003D: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 940.830318][T16703] usb 2-1: USB disconnect, device number 61 [ 941.848338][T16703] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 941.998471][T16703] usb 2-1: Using ep0 maxpacket: 8 [ 942.016175][T16703] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 942.044857][T16703] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 942.057854][T16703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.083692][T16703] usb 2-1: Product: syz [ 942.103441][T16703] usb 2-1: Manufacturer: syz [ 942.108715][T16703] usb 2-1: SerialNumber: syz [ 942.142916][T16703] usb 2-1: config 0 descriptor?? [ 942.162779][T16703] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 942.178382][T16703] usb 2-1: setting power ON [ 942.194836][T16703] dvb-usb: bulk message failed: -22 (2/0) [ 942.258908][T16703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 942.301792][T19286] netlink: 'syz.3.3715': attribute type 3 has an invalid length. [ 942.352784][T16703] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 942.407612][T16703] usb 2-1: media controller created [ 942.481995][T16703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 942.531800][T19279] dvb-usb: bulk message failed: -22 (3/0) [ 942.537530][T19279] cxusb: i2c wr: len=78 is too big! [ 942.537530][T19279] [ 942.796058][T16703] usb 2-1: selecting invalid altsetting 6 [ 942.816682][T16703] usb 2-1: digital interface selection failed (-22) [ 942.859667][T16703] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 942.882419][T16703] usb 2-1: setting power OFF [ 942.887044][T16703] dvb-usb: bulk message failed: -22 (2/0) [ 942.920116][T16703] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 942.941765][T16703] (NULL device *): no alternate interface [ 943.048583][T16703] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 943.098802][T16703] usb 2-1: USB disconnect, device number 62 [ 943.186297][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 944.370958][T16703] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 944.478753][T16704] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 944.541750][T16703] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 944.561736][T16703] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 944.584950][T16703] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 944.594418][T16703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.618899][T19362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 944.630991][T16703] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 944.639850][T16704] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 944.672809][T16704] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 944.704445][T16704] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 944.724192][T16704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.755048][T19366] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 944.777318][T16704] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 944.850107][T16703] usb 4-1: USB disconnect, device number 66 [ 944.949837][ T13] net_ratelimit: 82 callbacks suppressed [ 944.949858][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 944.964958][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 944.984573][ T29] usb 5-1: USB disconnect, device number 85 [ 945.099633][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.117842][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 945.238466][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.247205][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 945.368280][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.376104][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 945.498290][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.506113][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 946.407644][T19432] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 946.581682][T19438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3784'. [ 946.943583][T16703] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 947.064496][T19458] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 947.074279][T19458] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 947.098294][T16703] usb 3-1: Using ep0 maxpacket: 8 [ 947.105422][T16703] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.117607][T16703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.137820][T16703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 947.156382][T16703] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.170696][T16703] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 947.180224][T16703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.401512][T16703] usb 3-1: GET_CAPABILITIES returned 0 [ 947.407063][T16703] usbtmc 3-1:16.0: can't read capabilities [ 947.560257][T19481] tls_set_device_offload: netdev not found [ 947.603618][T16703] usb 3-1: USB disconnect, device number 79 [ 948.068271][T16703] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 948.218308][T16703] usb 2-1: Using ep0 maxpacket: 16 [ 948.248437][T16703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.286633][T16703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.298497][T16703] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 948.320445][T16703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.348756][T16703] usb 2-1: config 0 descriptor?? [ 948.428600][ T29] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 948.598807][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 948.614063][ T29] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 948.630059][ T29] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 948.641969][ T29] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 948.666726][ T29] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 948.702920][T19527] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3821'. [ 948.710185][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 948.712874][T19527] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3821'. [ 948.734625][ T29] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 948.753791][ T29] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 948.762734][ T29] usb 3-1: Product: syz [ 948.767047][ T29] usb 3-1: Manufacturer: syz [ 948.772201][ T29] usb 3-1: SerialNumber: syz [ 948.787685][ T29] usb 3-1: config 0 descriptor?? [ 948.791151][T16703] hid_parser_main: 5 callbacks suppressed [ 948.791172][T16703] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 948.802866][ T29] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 948.834239][T16703] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 948.834656][ T29] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 948.847749][T16703] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 948.892600][T16703] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 948.905447][T16703] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 948.919734][T16703] cm6533_jd 0003:0D8C:0022.003E: hiddev1,hidraw0: USB HID va6.05 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 949.011195][ T29] usb 2-1: USB disconnect, device number 63 [ 949.073869][T19536] fido_id[19536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 949.144516][T16453] usb 3-1: USB disconnect, device number 80 [ 949.154447][T16453] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 949.989113][ T13] net_ratelimit: 80 callbacks suppressed [ 949.989128][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 950.018870][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 950.138319][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 950.146407][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 950.258375][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 950.266374][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 950.378560][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 950.386552][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 950.498322][ T152] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 950.507432][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 950.534404][T19580] netlink: 'syz.1.3843': attribute type 3 has an invalid length. [ 951.528797][T16453] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 951.668477][ T29] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 951.690904][T16453] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 951.703439][T16453] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 951.713531][T16453] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 951.723139][T16453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.733738][T19608] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 951.751507][T16453] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 951.859008][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 951.881676][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 951.904563][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.937053][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 951.956865][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 951.968576][ T29] usb 4-1: Product: syz [ 951.972748][ T29] usb 4-1: Manufacturer: syz [ 951.981016][ T29] usb 4-1: SerialNumber: syz [ 952.002675][T16703] usb 3-1: USB disconnect, device number 81 [ 952.194940][ T29] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 952.400130][ T29] usb 4-1: USB disconnect, device number 67 [ 952.416895][ T29] usblp0: removed [ 952.667994][T19634] netlink: 'syz.1.3865': attribute type 3 has an invalid length. [ 953.278319][T16704] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 953.438921][T16704] usb 3-1: Using ep0 maxpacket: 8 [ 953.454520][T16704] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 953.463278][T16704] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 953.476594][T16704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 953.488290][T16704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 953.505737][T16704] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.528425][T16704] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 953.537745][T16704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.829477][T16704] usb 3-1: GET_CAPABILITIES returned 0 [ 953.865519][T16704] usbtmc 3-1:16.0: can't read capabilities [ 954.190052][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.199571][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.208692][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.217796][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.250235][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.259366][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.272560][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.302236][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.311363][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.320438][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.329545][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.342465][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.351592][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.360695][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.369807][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 954.382029][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 954.412562][T16704] usb 3-1: USB disconnect, device number 82 [ 954.578303][ T29] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 954.728296][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 954.736833][ T29] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 954.746391][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.754502][ T29] usb 5-1: Product: syz [ 954.759623][ T29] usb 5-1: Manufacturer: syz [ 954.764264][ T29] usb 5-1: SerialNumber: syz [ 954.771126][ T29] usb 5-1: config 0 descriptor?? [ 954.988576][ T29] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 086 [ 954.999883][T15455] net_ratelimit: 83 callbacks suppressed [ 954.999902][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.022313][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 955.148463][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.156360][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 955.268280][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.276115][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 955.388238][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.396785][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 955.509399][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.519276][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 955.844339][ T29] usb 5-1: USB disconnect, device number 86 [ 956.507945][T19715] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3898'. [ 956.519115][T19715] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3898'. [ 957.398645][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3911'. [ 957.553250][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3915'. [ 958.336569][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 958.347936][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 958.360782][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 960.088279][T13624] net_ratelimit: 81 callbacks suppressed [ 960.088299][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.152555][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 960.288272][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.331199][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 960.459081][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.466887][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 960.598600][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.606439][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 960.718313][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.726997][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 960.918302][T16704] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 961.089880][T16704] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 961.098241][T16704] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 961.115909][T16704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 961.135553][T16704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 961.153627][T16704] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 961.167830][T16704] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 961.177347][T16704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.190257][T16704] usb 5-1: config 0 descriptor?? [ 961.202251][T19830] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 961.416504][T19830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.425939][T19830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.640778][T16704] plantronics 0003:047F:FFFF.003F: reserved main item tag 0xd [ 961.685046][T16704] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 961.892563][T19868] netlink: 'syz.2.3956': attribute type 4 has an invalid length. [ 962.039955][T19873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3958'. [ 962.062942][T19873] syzkaller0: left promiscuous mode [ 962.075196][T19873] syzkaller0: left allmulticast mode [ 962.472673][T16453] usb 5-1: USB disconnect, device number 87 [ 963.132499][T19907] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3970'. [ 965.158569][ T13] net_ratelimit: 78 callbacks suppressed [ 965.158584][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.203532][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 965.226256][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'. [ 965.299860][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'. [ 965.319820][T13624] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.330272][T13624] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 965.377883][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'. [ 965.441136][T19953] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=3 (24 ns) > initial count (8 ns). Using initial count to start timer. [ 965.469190][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.483164][T19953] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=3045449589 (48727193424 ns) > initial count (41231103376 ns). Using initial count to start timer. [ 965.519052][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 965.658443][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.674379][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 965.808225][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.820187][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 966.426806][T19982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 967.348283][T16453] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 967.510361][T16453] usb 3-1: Using ep0 maxpacket: 16 [ 967.552242][T16453] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.584807][T16453] usb 3-1: config 0 has no interfaces? [ 967.598754][T16453] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 967.613396][T16453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.642701][T16453] usb 3-1: config 0 descriptor?? [ 967.972808][T16453] usb 3-1: USB disconnect, device number 83 [ 968.566625][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4007'. [ 970.240291][ T1143] net_ratelimit: 79 callbacks suppressed [ 970.240313][ T1143] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 970.286520][ T1143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 970.418690][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 970.428173][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 970.548421][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 970.558445][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 970.668822][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 970.701063][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 970.838716][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 970.847094][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 971.908281][T16704] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 972.081696][T16704] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 972.092424][T16704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.105915][T16704] usb 5-1: config 0 has no interface number 0 [ 972.113860][T16704] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 972.128182][T16704] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 972.140710][T16704] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 972.155340][T16704] usb 5-1: config 0 interface 52 has no altsetting 0 [ 972.167820][T16704] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 972.178250][T16704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 972.188077][T16704] usb 5-1: SerialNumber: syz [ 972.196095][T16704] usb 5-1: config 0 descriptor?? [ 972.406908][T16704] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 972.428671][T16704] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 972.441101][T20094] random: crng reseeded on system resumption [ 972.488722][T20096] syzkaller0: entered promiscuous mode [ 972.494616][T20096] syzkaller0: entered allmulticast mode [ 972.622717][ T29] usb 5-1: USB disconnect, device number 88 [ 973.211484][T20116] tipc: Enabled bearer , priority 0 [ 973.221849][T20116] syzkaller0: entered promiscuous mode [ 973.228276][T20116] syzkaller0: entered allmulticast mode [ 973.276860][T20116] tipc: Resetting bearer [ 973.288799][T20114] tipc: Resetting bearer [ 973.317326][T20114] tipc: Disabling bearer [ 973.531920][T20123] bond_slave_1: entered promiscuous mode [ 973.544070][T20123] bond_slave_1: left promiscuous mode [ 974.495421][T20142] netlink: 'syz.1.4047': attribute type 4 has an invalid length. [ 975.258703][ T13] net_ratelimit: 90 callbacks suppressed [ 975.258725][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.305572][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 975.365130][T20159] input: syz1 as /devices/virtual/input/input83 [ 975.371653][T16704] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 975.458511][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.491980][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 975.548226][T16704] usb 4-1: Using ep0 maxpacket: 16 [ 975.618521][T16704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 975.628619][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.639690][T16704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.650775][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 975.661387][T16704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 975.703967][T16704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.731559][T16704] usb 4-1: Product: syz [ 975.754229][T16704] usb 4-1: Manufacturer: syz [ 975.780959][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.800877][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 975.822277][T16704] usb 4-1: SerialNumber: syz [ 975.948478][T15455] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.962891][T15455] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 976.086877][T16704] cdc_ncm 4-1:1.0: skipping garbage [ 976.108539][T16704] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 976.146299][T16704] cdc_ncm 4-1:1.0: bind() failure [ 976.233443][T16704] usb 4-1: USB disconnect, device number 68 [ 976.894182][T20178] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 976.917672][T20178] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 976.930880][T20178] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 976.939297][T20178] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 976.949418][T20178] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 976.960103][T20178] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 976.973323][T20178] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 976.983840][T20178] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 977.864618][T20206] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4066'. [ 978.644358][T20213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4068'. [ 979.622388][T20240] tipc: Enabled bearer , priority 0 [ 979.633691][T20240] syzkaller0: entered promiscuous mode [ 979.639910][T20240] syzkaller0: entered allmulticast mode [ 979.669926][T20240] tipc: Resetting bearer [ 979.713546][T20238] tipc: Resetting bearer [ 979.799672][T20238] tipc: Disabling bearer [ 979.989225][T20251] dummy0: entered promiscuous mode [ 979.994556][T20251] vlan2: entered promiscuous mode [ 980.288385][ T33] net_ratelimit: 83 callbacks suppressed [ 980.288399][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.303881][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 980.418615][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.432431][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 980.548237][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.566944][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 980.698404][ T33] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.716647][ T33] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 980.848285][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.856123][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 980.907592][T20273] netlink: 'syz.0.4090': attribute type 23 has an invalid length. [ 981.507585][T20282] veth11: entered allmulticast mode [ 981.524812][T20281] veth11: left allmulticast mode [ 981.832940][T20294] tipc: Enabled bearer , priority 0 [ 981.856212][T20294] syzkaller0: entered promiscuous mode [ 981.862077][T20294] syzkaller0: entered allmulticast mode [ 981.929106][T20294] tipc: Resetting bearer [ 981.939422][T20293] tipc: Resetting bearer [ 981.982158][T20293] tipc: Disabling bearer [ 983.228573][T20318] syzkaller0: entered promiscuous mode [ 983.240936][T20318] syzkaller0: entered allmulticast mode [ 983.918224][T16703] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 984.078523][T16703] usb 3-1: Using ep0 maxpacket: 16 [ 984.108922][ T33] [ 984.111286][ T33] ============================================ [ 984.117432][ T33] WARNING: possible recursive locking detected [ 984.123592][ T33] syzkaller #0 Tainted: G L [ 984.129581][ T33] -------------------------------------------- [ 984.135722][ T33] kworker/u8:2/33 is trying to acquire lock: [ 984.141704][ T33] ffff888032a46c60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 984.151034][ T33] [ 984.151034][ T33] but task is already holding lock: [ 984.158391][ T33] ffff888032a46c60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 984.167983][ T33] [ 984.167983][ T33] other info that might help us debug this: [ 984.176045][ T33] Possible unsafe locking scenario: [ 984.176045][ T33] [ 984.183502][ T33] CPU0 [ 984.186780][ T33] ---- [ 984.190052][ T33] lock(k-sk_lock-AF_INET6); [ 984.194731][ T33] lock(k-sk_lock-AF_INET6); [ 984.199413][ T33] [ 984.199413][ T33] *** DEADLOCK *** [ 984.199413][ T33] [ 984.207546][ T33] May be due to missing lock nesting notation [ 984.207546][ T33] [ 984.215862][ T33] 4 locks held by kworker/u8:2/33: [ 984.220974][ T33] #0: ffff88804e59d148 ((wq_completion)krds_cp_wq#15/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 984.232708][ T33] #1: ffffc90000a97c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 984.245481][ T33] #2: ffff888032a46c60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 984.255472][ T33] #3: ffff888032a46e08 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 984.265458][ T33] [ 984.265458][ T33] stack backtrace: [ 984.271341][ T33] CPU: 1 UID: 0 PID: 33 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.271358][ T33] Tainted: [L]=SOFTLOCKUP [ 984.271362][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 984.271369][ T33] Workqueue: krds_cp_wq#15/0 rds_send_worker [ 984.271389][ T33] Call Trace: [ 984.271396][ T33] [ 984.271402][ T33] dump_stack_lvl+0xe8/0x150 [ 984.271417][ T33] print_deadlock_bug+0x279/0x290 [ 984.271433][ T33] __lock_acquire+0x253f/0x2cf0 [ 984.271448][ T33] ? unwind_next_frame+0xa5/0x23c0 [ 984.271465][ T33] lock_acquire+0xf0/0x2e0 [ 984.271476][ T33] ? inet6_getname+0x15d/0x650 [ 984.271491][ T33] lock_sock_nested+0x48/0x100 [ 984.271503][ T33] ? inet6_getname+0x15d/0x650 [ 984.271530][ T33] inet6_getname+0x15d/0x650 [ 984.271543][ T33] rds_tcp_conn_slots_available+0x288/0x470 [ 984.271557][ T33] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 984.271572][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 984.271587][ T33] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 984.271600][ T33] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 984.271614][ T33] ? process_scheduled_works+0xb02/0x1830 [ 984.271626][ T33] ? worker_thread+0xa50/0xfc0 [ 984.271637][ T33] ? kthread+0x388/0x470 [ 984.271648][ T33] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 984.271668][ T33] rds_recv_incoming+0x9f6/0x12d0 [ 984.271684][ T33] ? __pfx_rds_recv_incoming+0x10/0x10 [ 984.271697][ T33] ? skb_copy_bits+0x7e5/0x8f0 [ 984.271713][ T33] rds_tcp_data_recv+0x7f1/0xa40 [ 984.271729][ T33] __tcp_read_sock+0x196/0x970 [ 984.271742][ T33] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 984.271755][ T33] rds_tcp_data_ready+0x369/0x9a0 [ 984.271767][ T33] ? lockdep_hardirqs_on+0x7a/0x110 [ 984.271776][ T33] ? __pfx_sock_def_readable+0x10/0x10 [ 984.271788][ T33] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 984.271803][ T33] tcp_rcv_established+0x19f4/0x2740 [ 984.271822][ T33] ? __pfx_tcp_rcv_established+0x10/0x10 [ 984.271832][ T33] ? ip6_dst_check+0x50/0x7e0 [ 984.271847][ T33] ? ip6_dst_check+0xe2/0x7e0 [ 984.271860][ T33] ? ip6_dst_check+0x5e3/0x7e0 [ 984.271872][ T33] ? __pfx_ip6_dst_check+0x10/0x10 [ 984.271886][ T33] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 984.271900][ T33] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 984.271910][ T33] __release_sock+0x1b8/0x3a0 [ 984.271922][ T33] release_sock+0x5f/0x1f0 [ 984.271935][ T33] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 984.271948][ T33] rds_send_xmit+0x207e/0x28d0 [ 984.271969][ T33] ? __pfx_rds_send_xmit+0x10/0x10 [ 984.271984][ T33] rds_send_worker+0x7d/0x2e0 [ 984.271993][ T33] ? process_scheduled_works+0xa25/0x1830 [ 984.272005][ T33] process_scheduled_works+0xb02/0x1830 [ 984.272022][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 984.272034][ T33] ? assign_work+0x3d5/0x5e0 [ 984.272046][ T33] worker_thread+0xa50/0xfc0 [ 984.272062][ T33] kthread+0x388/0x470 [ 984.272071][ T33] ? __pfx_worker_thread+0x10/0x10 [ 984.272082][ T33] ? __pfx_kthread+0x10/0x10 [ 984.272091][ T33] ret_from_fork+0x51e/0xb90 [ 984.272104][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 984.272115][ T33] ? __switch_to+0xc7d/0x1450 [ 984.272126][ T33] ? __pfx_kthread+0x10/0x10 [ 984.272135][ T33] ret_from_fork_asm+0x1a/0x30 [ 984.272152][ T33] [ 984.588970][ T33] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 984.597720][ T33] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 33, name: kworker/u8:2 [ 984.606766][ T33] preempt_count: 201, expected: 0 [ 984.611800][ T33] RCU nest depth: 0, expected: 0 [ 984.616710][ T33] INFO: lockdep is turned off. [ 984.621496][ T33] Preemption disabled at: [ 984.621502][ T33] [<0000000000000000>] 0x0 [ 984.630214][ T33] CPU: 1 UID: 0 PID: 33 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.630231][ T33] Tainted: [L]=SOFTLOCKUP [ 984.630235][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 984.630242][ T33] Workqueue: krds_cp_wq#15/0 rds_send_worker [ 984.630257][ T33] Call Trace: [ 984.630263][ T33] [ 984.630268][ T33] dump_stack_lvl+0xe8/0x150 [ 984.630283][ T33] __might_resched+0x378/0x4d0 [ 984.630299][ T33] lock_sock_nested+0x5d/0x100 [ 984.630313][ T33] inet6_getname+0x15d/0x650 [ 984.630327][ T33] rds_tcp_conn_slots_available+0x288/0x470 [ 984.630342][ T33] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 984.630358][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 984.630374][ T33] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 984.630386][ T33] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 984.630400][ T33] ? process_scheduled_works+0xb02/0x1830 [ 984.630413][ T33] ? worker_thread+0xa50/0xfc0 [ 984.630425][ T33] ? kthread+0x388/0x470 [ 984.630435][ T33] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 984.630451][ T33] rds_recv_incoming+0x9f6/0x12d0 [ 984.630466][ T33] ? __pfx_rds_recv_incoming+0x10/0x10 [ 984.630479][ T33] ? skb_copy_bits+0x7e5/0x8f0 [ 984.630495][ T33] rds_tcp_data_recv+0x7f1/0xa40 [ 984.630511][ T33] __tcp_read_sock+0x196/0x970 [ 984.630525][ T33] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 984.630538][ T33] rds_tcp_data_ready+0x369/0x9a0 [ 984.630550][ T33] ? lockdep_hardirqs_on+0x7a/0x110 [ 984.630560][ T33] ? __pfx_sock_def_readable+0x10/0x10 [ 984.630572][ T33] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 984.630587][ T33] tcp_rcv_established+0x19f4/0x2740 [ 984.630601][ T33] ? __pfx_tcp_rcv_established+0x10/0x10 [ 984.630611][ T33] ? ip6_dst_check+0x50/0x7e0 [ 984.630625][ T33] ? ip6_dst_check+0xe2/0x7e0 [ 984.630638][ T33] ? ip6_dst_check+0x5e3/0x7e0 [ 984.630651][ T33] ? __pfx_ip6_dst_check+0x10/0x10 [ 984.630664][ T33] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 984.630678][ T33] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 984.630688][ T33] __release_sock+0x1b8/0x3a0 [ 984.630700][ T33] release_sock+0x5f/0x1f0 [ 984.630713][ T33] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 984.630726][ T33] rds_send_xmit+0x207e/0x28d0 [ 984.630747][ T33] ? __pfx_rds_send_xmit+0x10/0x10 [ 984.630762][ T33] rds_send_worker+0x7d/0x2e0 [ 984.630771][ T33] ? process_scheduled_works+0xa25/0x1830 [ 984.630783][ T33] process_scheduled_works+0xb02/0x1830 [ 984.630799][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 984.630812][ T33] ? assign_work+0x3d5/0x5e0 [ 984.630824][ T33] worker_thread+0xa50/0xfc0 [ 984.630840][ T33] kthread+0x388/0x470 [ 984.630853][ T33] ? __pfx_worker_thread+0x10/0x10 [ 984.630865][ T33] ? __pfx_kthread+0x10/0x10 [ 984.630874][ T33] ret_from_fork+0x51e/0xb90 [ 984.630887][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 984.630899][ T33] ? __switch_to+0xc7d/0x1450 [ 984.630910][ T33] ? __pfx_kthread+0x10/0x10 [ 984.630918][ T33] ret_from_fork_asm+0x1a/0x30 [ 984.630935][ T33] [ 984.630943][ T33] BUG: scheduling while atomic: kworker/u8:2/33/0x00000202 [ 984.932573][ T33] INFO: lockdep is turned off. [ 984.937325][ T33] Modules linked in: [ 984.941208][ T33] Preemption disabled at: [ 984.941214][ T33] [<0000000000000000>] 0x0 [ 984.949955][ T33] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 984.958703][ T33] CPU: 1 UID: 0 PID: 33 Comm: kworker/u8:2 Tainted: G W L syzkaller #0 PREEMPT(full) [ 984.969892][ T33] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 984.975068][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 984.985107][ T33] Workqueue: krds_cp_wq#15/0 rds_send_worker [ 984.991078][ T33] Call Trace: [ 984.994341][ T33] [ 984.997250][ T33] vpanic+0x56c/0xa60 [ 985.001216][ T33] ? __pfx_vpanic+0x10/0x10 [ 985.005788][ T33] ? rcu_is_watching+0x15/0xb0 [ 985.010627][ T33] panic+0xc5/0xd0 [ 985.014331][ T33] ? __pfx_panic+0x10/0x10 [ 985.018730][ T33] ? __pfx__printk+0x10/0x10 [ 985.023302][ T33] ? vprintk_emit+0x4eb/0x560 [ 985.027958][ T33] ? __pfx_vprintk_emit+0x10/0x10 [ 985.032962][ T33] check_panic_on_warn+0x89/0xb0 [ 985.037877][ T33] __schedule_bug+0xf6/0x150 [ 985.042444][ T33] __schedule+0x16a9/0x5340 [ 985.046929][ T33] ? __wake_up_klogd+0xe6/0x120 [ 985.051756][ T33] ? vprintk_emit+0x4eb/0x560 [ 985.056413][ T33] ? rcu_is_watching+0x15/0xb0 [ 985.061163][ T33] ? __pfx_vprintk_emit+0x10/0x10 [ 985.066182][ T33] ? unwind_next_frame+0xa5/0x23c0 [ 985.071286][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 985.076313][ T33] ? __pfx___schedule+0x10/0x10 [ 985.081152][ T33] ? rcu_is_watching+0x15/0xb0 [ 985.085900][ T33] ? rcu_is_watching+0x15/0xb0 [ 985.090655][ T33] ? lock_release+0x4b/0x3d0 [ 985.095232][ T33] ? schedule+0x90/0x360 [ 985.099466][ T33] ? wq_worker_sleeping+0x63/0x250 [ 985.104556][ T33] schedule+0x164/0x360 [ 985.108699][ T33] __lock_sock+0x161/0x2c0 [ 985.113108][ T33] ? __pfx___lock_sock+0x10/0x10 [ 985.118034][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 985.123038][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 985.129086][ T33] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 985.134436][ T33] ? lock_acquire+0x57/0x2e0 [ 985.139007][ T33] ? dump_stack_lvl+0x135/0x150 [ 985.143841][ T33] ? lock_sock_nested+0x6a/0x100 [ 985.148759][ T33] lock_sock_nested+0x9f/0x100 [ 985.153504][ T33] inet6_getname+0x15d/0x650 [ 985.158076][ T33] rds_tcp_conn_slots_available+0x288/0x470 [ 985.163951][ T33] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 985.170359][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 985.176147][ T33] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 985.182547][ T33] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 985.187645][ T33] ? process_scheduled_works+0xb02/0x1830 [ 985.193348][ T33] ? worker_thread+0xa50/0xfc0 [ 985.198112][ T33] ? kthread+0x388/0x470 [ 985.202343][ T33] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 985.207960][ T33] rds_recv_incoming+0x9f6/0x12d0 [ 985.212966][ T33] ? __pfx_rds_recv_incoming+0x10/0x10 [ 985.218413][ T33] ? skb_copy_bits+0x7e5/0x8f0 [ 985.223162][ T33] rds_tcp_data_recv+0x7f1/0xa40 [ 985.228082][ T33] __tcp_read_sock+0x196/0x970 [ 985.232828][ T33] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 985.238277][ T33] rds_tcp_data_ready+0x369/0x9a0 [ 985.243300][ T33] ? lockdep_hardirqs_on+0x7a/0x110 [ 985.248473][ T33] ? __pfx_sock_def_readable+0x10/0x10 [ 985.253910][ T33] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 985.259439][ T33] tcp_rcv_established+0x19f4/0x2740 [ 985.264702][ T33] ? __pfx_tcp_rcv_established+0x10/0x10 [ 985.270308][ T33] ? ip6_dst_check+0x50/0x7e0 [ 985.275051][ T33] ? ip6_dst_check+0xe2/0x7e0 [ 985.279707][ T33] ? ip6_dst_check+0x5e3/0x7e0 [ 985.284451][ T33] ? __pfx_ip6_dst_check+0x10/0x10 [ 985.289543][ T33] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 985.294203][ T33] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 985.299305][ T33] __release_sock+0x1b8/0x3a0 [ 985.303966][ T33] release_sock+0x5f/0x1f0 [ 985.308374][ T33] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 985.314594][ T33] rds_send_xmit+0x207e/0x28d0 [ 985.319350][ T33] ? __pfx_rds_send_xmit+0x10/0x10 [ 985.324444][ T33] rds_send_worker+0x7d/0x2e0 [ 985.329096][ T33] ? process_scheduled_works+0xa25/0x1830 [ 985.334794][ T33] process_scheduled_works+0xb02/0x1830 [ 985.340331][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 985.346291][ T33] ? assign_work+0x3d5/0x5e0 [ 985.350857][ T33] worker_thread+0xa50/0xfc0 [ 985.355430][ T33] kthread+0x388/0x470 [ 985.359484][ T33] ? __pfx_worker_thread+0x10/0x10 [ 985.364602][ T33] ? __pfx_kthread+0x10/0x10 [ 985.369170][ T33] ret_from_fork+0x51e/0xb90 [ 985.373739][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 985.378887][ T33] ? __switch_to+0xc7d/0x1450 [ 985.383543][ T33] ? __pfx_kthread+0x10/0x10 [ 985.388106][ T33] ret_from_fork_asm+0x1a/0x30 [ 985.392864][ T33] [ 985.396206][ T33] Kernel Offset: disabled [ 985.400515][ T33] Rebooting in 86400 seconds..