last executing test programs: 10.844542996s ago: executing program 2 (id=404): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0xfffffffe, 0x1, 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x41448000) 10.632071475s ago: executing program 0 (id=407): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0xfffffffe, 0x1, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x41448000) 9.431373541s ago: executing program 3 (id=410): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000280)="935a69") 7.426091606s ago: executing program 2 (id=412): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0xf, 0x20, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x6715, 0xfc}, {0x6, 0x24, 0x1a, 0x4, 0x32}, [@acm={0x4, 0x24, 0x2, 0xc}, @country_functional={0xc, 0x24, 0x7, 0xf7, 0x26a6, [0x6e, 0x3, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x5, 0x84}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x30, 0x8, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x3, 0xfd}}}}}}}]}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x127, 0x80000000, 0x4, 0x200, 0x0, 0x6, 0x7fff}, 0x1c) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r7, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f00000000c0)={0x5, 0x6, 0x5, 0x1ff, '\x00', 0xc7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.742945444s ago: executing program 3 (id=413): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x40, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x40}}, 0x4000800) 6.475680251s ago: executing program 3 (id=414): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000083097855000b93bf0280"], 0x0}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5, '\x00'}}}, 0x0) 5.856500845s ago: executing program 3 (id=417): r0 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) 5.435529792s ago: executing program 3 (id=423): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0xfffffffe, 0x1, 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x41448000) 4.840962736s ago: executing program 1 (id=424): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) 4.592708936s ago: executing program 0 (id=425): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x7fffffff, 0x1b) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 4.4558537s ago: executing program 1 (id=426): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private0, 0x800, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x20) 4.197266828s ago: executing program 1 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.161718979s ago: executing program 0 (id=428): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf", 0x1}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) recvfrom$inet(r0, &(0x7f0000000040)=""/60, 0x3c, 0x10040, 0x0, 0x0) 3.664403542s ago: executing program 1 (id=429): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 3.528619496s ago: executing program 1 (id=430): modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) socket(0xa, 0x3, 0x3a) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000000c0)={'geneve1\x00', {0x2, 0x4e19, @broadcast}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r4, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x3, 0x401, 0x0, 0x92, 0x55, 0x2, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x3, 0x180502) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x40010, r6, 0xaffb000) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x40, &(0x7f0000000240)={0x0, 0x0, 0xf, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.781274807s ago: executing program 0 (id=431): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2.623229982s ago: executing program 0 (id=432): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) 2.022660523s ago: executing program 4 (id=433): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 2.014511215s ago: executing program 2 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 1.760391774s ago: executing program 0 (id=435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0xfffffffe, 0x1, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x41448000) 1.627893163s ago: executing program 4 (id=436): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.359675372s ago: executing program 3 (id=437): syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) 1.320469902s ago: executing program 2 (id=438): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x17}) 1.286301528s ago: executing program 4 (id=439): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.111258372s ago: executing program 4 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x1d}, {0xffe6, 0xb}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0x7672, 0x8, 0x401}, 0x6, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 420.168166ms ago: executing program 2 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) 266.495556ms ago: executing program 4 (id=442): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x60}) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 173.3406ms ago: executing program 2 (id=443): r0 = socket(0x3, 0xf, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 169.569517ms ago: executing program 1 (id=444): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0xb125, 0x4) 0s ago: executing program 4 (id=445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) kernel console output (not intermixed with test programs): 0 [ 102.978901][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.993130][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.003974][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.024984][ T5846] veth1_vlan: entered promiscuous mode [ 103.042201][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.077254][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.086766][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.104879][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.138338][ T5848] veth0_macvtap: entered promiscuous mode [ 103.145969][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.154966][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.185857][ T5848] veth1_macvtap: entered promiscuous mode [ 103.193370][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.223159][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.233435][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.287995][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.299390][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.304404][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.316775][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.343994][ T5846] veth0_macvtap: entered promiscuous mode [ 103.367691][ T5846] veth1_macvtap: entered promiscuous mode [ 103.377044][ T3017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.386026][ T3017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.418476][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.428420][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.451345][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.459303][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.462421][ T5849] veth0_vlan: entered promiscuous mode [ 103.527122][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.539613][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.550953][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.553496][ T5849] veth1_vlan: entered promiscuous mode [ 103.561696][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.610428][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.634193][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.654255][ T3017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.664677][ T3017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.673989][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.683033][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.718682][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.729152][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.757329][ T52] Bluetooth: hci0: command tx timeout [ 103.762289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.810812][ T52] Bluetooth: hci3: command tx timeout [ 103.816107][ T5849] veth0_macvtap: entered promiscuous mode [ 103.816263][ T52] Bluetooth: hci1: command tx timeout [ 103.877070][ T5849] veth1_macvtap: entered promiscuous mode [ 103.891323][ T52] Bluetooth: hci2: command tx timeout [ 103.915474][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.941649][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.971581][ T52] Bluetooth: hci4: command tx timeout [ 103.992213][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.000175][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.028994][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.080024][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.166614][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.197650][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.210109][ T1334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.237344][ T5926] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 104.269645][ T1334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.315829][ T5927] use of bytesused == 0 is deprecated and will be removed in the future, [ 104.324542][ T5927] use the actual size instead. [ 104.360365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.368717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.440475][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.571492][ T1334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.667728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.770219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.872461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.037843][ T1334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.083668][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.127219][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.218556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.260716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.269941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.281871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.322706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.480671][ T5938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 105.681379][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.725224][ T5923] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.731094][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.810800][ T52] Bluetooth: hci0: command tx timeout [ 105.890904][ T52] Bluetooth: hci1: command tx timeout [ 105.897513][ T5832] Bluetooth: hci3: command tx timeout [ 105.952540][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 105.971553][ T52] Bluetooth: hci2: command tx timeout [ 105.979606][ T5923] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 105.990552][ T5923] usb 1-1: config 0 has no interface number 0 [ 106.062695][ T52] Bluetooth: hci4: command tx timeout [ 106.341382][ T5923] usb 1-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 106.366869][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.377991][ T5923] usb 1-1: Product: syz [ 106.385338][ T5923] usb 1-1: Manufacturer: syz [ 106.412579][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.451643][ T5923] usb 1-1: SerialNumber: syz [ 106.492606][ T5923] usb 1-1: config 0 descriptor?? [ 106.535115][ T5947] team0: Port device batadv1 added [ 106.792227][ T5957] binder: 5950:5957 ioctl c0306201 0 returned -14 [ 106.924510][ T5949] hub 9-0:1.0: USB hub found [ 106.931653][ T5949] hub 9-0:1.0: 1 port detected [ 107.134403][ T5960] vim2m vim2m.0: vidioc_s_fmt queue busy [ 107.269671][ T5959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.002125][ T5923] cp210x 1-1:0.79: cp210x converter detected [ 111.009271][ T5923] cp210x 1-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 111.088504][ T5923] cp210x 1-1:0.79: querying part number failed [ 111.146043][ T5923] usb 1-1: cp210x converter now attached to ttyUSB0 [ 111.316141][ T5923] usb 1-1: USB disconnect, device number 2 [ 111.339440][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.545971][ T5923] cp210x 1-1:0.79: device disconnected [ 112.109086][ T5991] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 112.234377][ T5991] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 112.536713][ T5991] bond1 (unregistering): Released all slaves [ 113.071357][ T6001] Zero length message leads to an empty skb [ 113.154581][ T6001] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10'. [ 113.512744][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.700441][ T5911] usb 2-1: device descriptor read/64, error -71 [ 113.960986][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.130571][ T5911] usb 2-1: device descriptor read/64, error -71 [ 114.427831][ T5911] usb usb2-port1: attempt power cycle [ 114.840648][ T5911] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.223364][ T6009] netlink: 'syz.0.15': attribute type 21 has an invalid length. [ 115.231725][ T6009] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15'. [ 116.331097][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 116.352018][ T6017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.480439][ T5911] usb 2-1: device descriptor read/8, error -71 [ 117.745255][ T30] audit: type=1804 audit(1761271309.851:2): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.17" name="/newroot/2/file0" dev="fuse" ino=1 res=1 errno=0 [ 118.134582][ T6031] capability: warning: `syz.2.18' uses deprecated v2 capabilities in a way that may be insecure [ 119.120615][ T6040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20'. [ 119.441310][ T5923] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 119.776599][ T5923] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 119.789115][ T5923] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 119.859442][ T5923] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 119.984207][ T5923] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 119.995419][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 120.023467][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 120.036370][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 120.089547][ T5923] usb 1-1: string descriptor 0 read error: -22 [ 120.102599][ T5923] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 120.124017][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.218218][ T5923] usb 1-1: config 0 descriptor?? [ 120.299065][ T5923] hub 1-1:0.0: bad descriptor, ignoring hub [ 120.435296][ T5923] hub 1-1:0.0: probe with driver hub failed with error -5 [ 120.676823][ T5923] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 122.301770][ T6074] program syz.3.27 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.677955][ T6078] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.380098][ T6084] random: crng reseeded on system resumption [ 123.572098][ T6078] mmap: syz.4.26 (6078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.446890][ T6074] syz.3.27 (6074): drop_caches: 2 [ 125.054731][ T5842] usb 1-1: USB disconnect, device number 3 [ 125.693085][ T6105] netlink: 'syz.3.31': attribute type 27 has an invalid length. [ 126.237898][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.246107][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.460421][ T980] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.660563][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 126.766360][ T980] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.797099][ T980] usb 4-1: config 0 has no interface number 0 [ 126.892685][ T980] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 126.902072][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.910101][ T980] usb 4-1: Product: syz [ 127.070408][ T980] usb 4-1: Manufacturer: syz [ 127.085418][ T980] usb 4-1: SerialNumber: syz [ 127.511097][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 127.676823][ T980] usb 4-1: config 0 descriptor?? [ 127.901777][ T980] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 128.451589][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.471329][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.606247][ T980] gspca_spca1528: reg_w err -110 [ 128.650726][ T980] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 129.440221][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.452342][ T6106] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.469465][ T6106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.788540][ T6136] input: syz1 as /devices/virtual/input/input6 [ 129.838315][ T1334] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.880431][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 129.884418][ T1334] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.979727][ T6136] binder: BINDER_SET_CONTEXT_MGR already set [ 129.986156][ T6136] binder: 6131:6136 ioctl 4018620d 200000000040 returned -16 [ 130.008777][ T6136] binder: 6131:6136 ioctl c0306201 0 returned -14 [ 130.056838][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.071062][ T24] usb 2-1: config 0 has no interface number 0 [ 130.107252][ T1334] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.120883][ T1334] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.606680][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 130.634989][ T5838] usb 4-1: USB disconnect, device number 2 [ 130.647424][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.410880][ T24] usb 2-1: config 0 descriptor?? [ 131.552629][ T24] usb 2-1: selecting invalid altsetting 1 [ 131.559155][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 131.718981][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 131.795366][ T6135] loop8: detected capacity change from 0 to 7 [ 131.824285][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 131.833761][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 131.859380][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 131.868653][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 131.908938][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 131.918218][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 131.927173][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 131.936458][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 132.039833][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 132.049035][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 132.270694][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 132.279891][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 132.290803][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 132.300060][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 132.308193][ T6135] ldm_validate_partition_table(): Disk read failed. [ 132.344064][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 132.353301][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 132.370406][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 132.379623][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 132.400241][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 132.409523][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 132.418769][ T6135] Dev loop8: unable to read RDB block 0 [ 132.985590][ T6135] loop8: unable to read partition table [ 133.016591][ T24] DVB: Unable to find symbol cx22700_attach() [ 133.043897][ T6135] loop8: partition table beyond EOD, truncated [ 133.059574][ T6135] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.355216][ T6153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.568193][ T24] DVB: Unable to find symbol tda10046_attach() [ 133.575995][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 133.965520][ T6136] syz.0.36 (6136): drop_caches: 2 [ 134.205472][ T30] audit: type=1326 audit(1761271326.451:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 134.269850][ T30] audit: type=1326 audit(1761271326.481:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 134.436335][ T30] audit: type=1326 audit(1761271326.481:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 134.542489][ T5838] usb 2-1: USB disconnect, device number 6 [ 134.660583][ T30] audit: type=1326 audit(1761271326.481:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 134.807940][ T30] audit: type=1326 audit(1761271326.481:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 135.148883][ T30] audit: type=1326 audit(1761271326.481:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca9f98d810 code=0x7ffc0000 [ 135.268624][ T6176] input: syz1 as /devices/virtual/input/input7 [ 135.338902][ T30] audit: type=1326 audit(1761271326.481:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 135.475181][ T6176] program syz.1.41 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.635936][ T30] audit: type=1326 audit(1761271326.481:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 135.964913][ T30] audit: type=1326 audit(1761271326.481:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 136.004453][ T6192] fuse: Unknown parameter 'group_i00000000000000000000' [ 136.490668][ T30] audit: type=1326 audit(1761271326.481:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 136.690988][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.732004][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.842690][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.851519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.876554][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.888292][ T1322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.910515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.928988][ T6206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.937522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.940416][ T5842] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.454096][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.470816][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 138.638360][ T5842] usb 3-1: config 0 has no interfaces? [ 138.760723][ T5842] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.134962][ T5842] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.151618][ T5842] usb 3-1: Manufacturer: syz [ 139.433695][ T5842] usb 3-1: config 0 descriptor?? [ 139.696218][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.702887][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.801888][ T6224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.46'. [ 139.928887][ T6225] : renamed from bridge_slave_0 (while UP) [ 140.414638][ T6222] xt_CT: No such helper "pptp" [ 141.150029][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 142.007991][ T5842] usb 3-1: USB disconnect, device number 2 [ 142.153547][ T6231] net_ratelimit: 5 callbacks suppressed [ 142.153573][ T6231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.168673][ T6231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.177942][ T6231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.196451][ T6236] trusted_key: syz.2.51 sent an empty control message without MSG_MORE. [ 142.210768][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.403462][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.820397][ T980] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.974314][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.997690][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.035350][ T980] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.046132][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.055096][ T980] usb 5-1: SerialNumber: syz [ 143.250745][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.491271][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.018006][ T6260] netlink: 64 bytes leftover after parsing attributes in process `syz.2.55'. [ 144.314366][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.459327][ T6259] netlink: 'syz.0.56': attribute type 20 has an invalid length. [ 144.467147][ T6259] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.352923][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.000118][ T980] usb 5-1: 0:2 : does not exist [ 146.039033][ T6230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.071552][ T980] usb 5-1: unit 5: unexpected type 0x0e [ 146.239939][ T980] usb 5-1: USB disconnect, device number 2 [ 146.389524][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.412851][ T24] net_ratelimit: 3 callbacks suppressed [ 147.412957][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.443224][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 147.667324][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 147.667462][ T30] audit: type=1326 audit(1761271339.911:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 147.820709][ T30] audit: type=1326 audit(1761271340.021:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 147.899261][ T30] audit: type=1326 audit(1761271340.021:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 147.967860][ T30] audit: type=1326 audit(1761271340.021:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 147.995657][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.169852][ T30] audit: type=1326 audit(1761271340.041:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 148.301785][ T6278] sctp: [Deprecated]: syz.3.59 (pid 6278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.301785][ T6278] Use struct sctp_sack_info instead [ 148.468367][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.627564][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.639925][ T30] audit: type=1326 audit(1761271340.061:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 148.662157][ T30] audit: type=1326 audit(1761271340.111:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 148.896918][ T30] audit: type=1326 audit(1761271340.111:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 148.976814][ T30] audit: type=1326 audit(1761271340.121:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 149.193060][ T30] audit: type=1326 audit(1761271340.121:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 149.490787][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.571915][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.541031][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.663594][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.672094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.210503][ T6310] netlink: 'syz.0.63': attribute type 15 has an invalid length. [ 151.218363][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 151.592721][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.236783][ T6316] vim2m vim2m.0: vidioc_s_fmt queue busy [ 152.331711][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 153.161476][ T24] net_ratelimit: 1 callbacks suppressed [ 153.161505][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.183803][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.320163][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 153.320185][ T30] audit: type=1326 audit(1761271345.561:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 153.564902][ T30] audit: type=1326 audit(1761271345.561:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 153.690849][ T30] audit: type=1326 audit(1761271345.561:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 153.840168][ T30] audit: type=1326 audit(1761271345.561:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 153.965447][ T30] audit: type=1326 audit(1761271345.561:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 154.034797][ T30] audit: type=1326 audit(1761271345.601:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 154.130526][ T30] audit: type=1326 audit(1761271345.601:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 154.233091][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.452293][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.490518][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.657694][ T30] audit: type=1326 audit(1761271345.601:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 154.658325][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.704822][ T30] audit: type=1326 audit(1761271345.601:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 154.785425][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.815948][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.902007][ T30] audit: type=1326 audit(1761271345.601:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 154.931938][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.323370][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.352766][ T980] IPVS: starting estimator thread 0... [ 155.460585][ T6335] IPVS: using max 29 ests per chain, 69600 per kthread [ 155.497453][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 155.530556][ T6336] syzkaller0: entered promiscuous mode [ 155.547503][ T6336] syzkaller0: entered allmulticast mode [ 155.592680][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 155.631191][ T6337] libceph: resolve '0..' (ret=-3): failed [ 155.669826][ T6343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 155.882231][ T6345] netlink: 44 bytes leftover after parsing attributes in process `syz.1.70'. [ 156.961344][ T6350] syzkaller0: entered promiscuous mode [ 156.971590][ T6350] syzkaller0: entered allmulticast mode [ 157.633094][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 157.757149][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 158.211879][ T980] net_ratelimit: 3 callbacks suppressed [ 158.211901][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.409811][ T6359] x_tables: ip_tables: osf match: only valid for protocol 6 [ 158.538318][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.571129][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.630077][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.030741][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 160.614851][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.680969][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 160.716591][ T5945] usb 4-1: no configurations [ 160.723029][ T5945] usb 4-1: can't read configurations, error -22 [ 161.030592][ T5945] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.045305][ T6371] hub 9-0:1.0: USB hub found [ 161.074798][ T6371] hub 9-0:1.0: 1 port detected [ 161.351436][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 161.505708][ T5945] usb 4-1: no configurations [ 161.540505][ T5945] usb 4-1: can't read configurations, error -22 [ 161.557379][ T5945] usb usb4-port1: attempt power cycle [ 161.651218][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.950512][ T5945] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.972712][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 162.699828][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.831692][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.920501][ T5942] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.967205][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 163.040237][ T6396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.049083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.134299][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 163.260805][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 163.323274][ T5942] usb 2-1: config 0 has no interfaces? [ 163.364619][ T5942] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 163.487158][ T5942] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.650528][ T5942] usb 2-1: Manufacturer: syz [ 163.705900][ T5942] usb 2-1: config 0 descriptor?? [ 163.809162][ T5945] usb 4-1: device descriptor read/8, error -71 [ 163.890883][ T5838] net_ratelimit: 1 callbacks suppressed [ 163.890903][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.980764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.121265][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 164.506528][ T6411] vim2m vim2m.0: vidioc_s_fmt queue busy [ 164.593534][ T6412] netlink: 72 bytes leftover after parsing attributes in process `syz.3.82'. [ 164.890515][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.948538][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.976443][ T6391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.270599][ T6404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.414112][ T6408] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 165.775456][ T6422] syzkaller0: entered promiscuous mode [ 165.802233][ T6422] syzkaller0: entered allmulticast mode [ 165.975173][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.374698][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 166.440827][ T6429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.476032][ T6429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.580144][ T6429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.960397][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.184833][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 167.395764][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 167.404136][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.414078][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.442563][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.520359][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.557738][ T5942] usb 2-1: USB disconnect, device number 7 [ 167.664632][ T6437] input: syz1 as /devices/virtual/input/input8 [ 167.867137][ T6437] program syz.0.87 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.054137][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.142106][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.803430][ T24] usb 5-1: usb_control_msg returned -32 [ 168.813590][ T24] usbtmc 5-1:16.0: can't read capabilities [ 169.095211][ T5838] net_ratelimit: 129 callbacks suppressed [ 169.095239][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.181704][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.255249][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 169.255270][ T30] audit: type=1326 audit(1761271361.501:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 169.391493][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 169.402788][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 169.525324][ T30] audit: type=1326 audit(1761271361.501:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 169.599307][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 169.635302][ T30] audit: type=1326 audit(1761271361.531:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 169.660989][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 169.674978][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.675024][ T24] usb 2-1: Product: syz [ 169.675042][ T24] usb 2-1: Manufacturer: syz [ 169.713720][ T30] audit: type=1326 audit(1761271361.531:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 169.851136][ T24] usb 2-1: SerialNumber: syz [ 169.858232][ T6433] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 169.914022][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.930427][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.950072][ T24] usb 2-1: config 0 descriptor?? [ 170.076186][ T24] mcba_usb 2-1:0.0: Can't find endpoints [ 170.130885][ T30] audit: type=1326 audit(1761271361.561:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 170.131996][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.253881][ T30] audit: type=1326 audit(1761271361.561:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 170.304994][ T6450] netlink: 'syz.1.88': attribute type 5 has an invalid length. [ 170.381399][ T6450] ip6erspan0: entered promiscuous mode [ 170.410836][ T6457] bridge0: port 3(macsec0) entered blocking state [ 170.424721][ T6457] bridge0: port 3(macsec0) entered disabled state [ 170.448037][ T6457] macsec0: entered allmulticast mode [ 170.453776][ T6457] veth1_macvtap: entered allmulticast mode [ 170.495413][ T30] audit: type=1326 audit(1761271361.561:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 170.558688][ T30] audit: type=1326 audit(1761271361.561:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 170.590667][ T6457] macsec0: entered promiscuous mode [ 170.598494][ T6457] bridge0: port 3(macsec0) entered blocking state [ 170.605394][ T6457] bridge0: port 3(macsec0) entered forwarding state [ 170.681922][ T30] audit: type=1326 audit(1761271361.561:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 170.993220][ T30] audit: type=1326 audit(1761271361.561:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 171.104640][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.170547][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.210619][ T6474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.275464][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.578839][ T5838] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 172.931819][ T1615] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.960374][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 172.999369][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.019272][ T5838] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.041409][ T5838] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 173.082646][ T5942] usb 5-1: USB disconnect, device number 3 [ 173.103002][ T1615] usb 4-1: Using ep0 maxpacket: 16 [ 173.243868][ T1615] usb 4-1: no configurations [ 173.248676][ T1615] usb 4-1: can't read configurations, error -22 [ 173.255226][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.330969][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.341086][ T6427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.352079][ T5838] usb 1-1: config 0 descriptor?? [ 173.403677][ T6427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.499473][ T1615] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.640823][ T6427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.710395][ T1615] usb 4-1: Using ep0 maxpacket: 16 [ 173.766233][ T1615] usb 4-1: no configurations [ 173.825077][ T1615] usb 4-1: can't read configurations, error -22 [ 173.852315][ T5838] usb 2-1: USB disconnect, device number 8 [ 173.936030][ T1615] usb usb4-port1: attempt power cycle [ 174.074814][ T6484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.142697][ T5942] net_ratelimit: 1 callbacks suppressed [ 174.142718][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.242066][ T6485] syzkaller0: entered promiscuous mode [ 174.248414][ T6485] syzkaller0: entered allmulticast mode [ 174.374678][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.780560][ T1615] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.351038][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.429576][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.500485][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.812236][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 175.812373][ T980] usb 1-1: USB disconnect, device number 4 [ 175.857937][ T24] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 175.918631][ T6493] tipc: Started in network mode [ 175.924344][ T6493] tipc: Node identity 26cf061557a4, cluster identity 4711 [ 175.940772][ T6493] tipc: Enabled bearer , priority 0 [ 175.951888][ T6493] syzkaller0: entered promiscuous mode [ 175.957495][ T6493] syzkaller0: entered allmulticast mode [ 176.004089][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.067008][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.308548][ T6495] tipc: Resetting bearer [ 176.417943][ T24] usb 2-1: USB disconnect, device number 9 [ 176.451183][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.646421][ T6488] tipc: Resetting bearer [ 176.733789][ T6488] tipc: Disabling bearer [ 176.776500][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.792293][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.940455][ T5945] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.969802][ T1615] usb 4-1: device descriptor read/8, error -71 [ 177.102304][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 177.173777][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.184976][ T5945] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.205879][ T5945] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 177.215287][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.223697][ T5945] usb 1-1: Product: syz [ 177.229882][ T5945] usb 1-1: Manufacturer: syz [ 177.244004][ T5945] usb 1-1: SerialNumber: syz [ 177.490610][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.604776][ T5945] usb 1-1: config 0 descriptor?? [ 177.661305][ T6511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.274208][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.101'. [ 178.569961][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.578278][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.570560][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.072675][ T5945] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.340447][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 180.354529][ T5945] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 180.366174][ T5945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.393905][ T5945] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 180.431990][ T5945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.510523][ T5945] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 180.535691][ T5945] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 180.611145][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.632955][ T5945] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.650562][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.809897][ T5945] usb 4-1: SerialNumber: syz [ 180.891468][ T5945] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 181.068419][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 181.068438][ T30] audit: type=1326 audit(1761271373.311:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.139363][ T6523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.194837][ T30] audit: type=1326 audit(1761271373.311:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.228501][ T30] audit: type=1326 audit(1761271373.311:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.254846][ T30] audit: type=1326 audit(1761271373.311:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.297857][ T980] usb 1-1: USB disconnect, device number 5 [ 181.349247][ T30] audit: type=1326 audit(1761271373.311:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.374442][ T30] audit: type=1326 audit(1761271373.311:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.399671][ T30] audit: type=1326 audit(1761271373.311:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.424475][ T30] audit: type=1326 audit(1761271373.311:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.456402][ T30] audit: type=1326 audit(1761271373.311:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.482334][ T30] audit: type=1326 audit(1761271373.311:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f98efc9 code=0x7ffc0000 [ 181.571299][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.659971][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.834386][ T6540] loop6: detected capacity change from 0 to 524288000 [ 182.474523][ T6543] support for the xor transformation has been removed. [ 182.768859][ T5945] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.944774][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.102335][ T5945] usb 1-1: device descriptor read/64, error -71 [ 183.385321][ T5945] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.621024][ T5945] usb 1-1: device descriptor read/64, error -71 [ 183.730842][ T5945] usb usb1-port1: attempt power cycle [ 183.788350][ T6556] usb usb8: usbfs: process 6556 (syz.1.107) did not claim interface 0 before use [ 183.973217][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.032840][ T5942] usb 4-1: USB disconnect, device number 11 [ 184.110369][ T5945] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 184.356397][ T5945] usb 1-1: device descriptor read/8, error -71 [ 184.616474][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.662215][ T6568] input: syz1 as /devices/virtual/input/input9 [ 184.802540][ T5945] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.929852][ T6568] gretap1: entered allmulticast mode [ 185.101813][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.799406][ T5945] usb 1-1: device descriptor read/8, error -71 [ 185.922473][ T5945] usb usb1-port1: unable to enumerate USB device [ 186.136613][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.371833][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.585571][ T6581] netlink: 'syz.4.111': attribute type 10 has an invalid length. [ 186.942463][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.952882][ T6581] team0: Port device bond0 added [ 187.197866][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.301287][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.660767][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.210598][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.239807][ T5945] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.399744][ T6593] netlink: 96 bytes leftover after parsing attributes in process `syz.3.113'. [ 188.479927][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 188.494745][ T5945] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.508999][ T5945] usb 2-1: config 8 has an invalid interface number: 132 but max is 0 [ 188.517780][ T5945] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 188.528776][ T5945] usb 2-1: config 8 has no interface number 0 [ 188.546765][ T5945] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.718992][ T5945] usb 2-1: config 8 interface 132 has no altsetting 0 [ 188.955137][ T5945] usb 2-1: string descriptor 0 read error: -22 [ 188.974786][ T5945] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 189.030652][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.290467][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.332901][ T5945] usb-storage 2-1:8.132: USB Mass Storage device detected [ 189.900965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.909982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.918449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.005306][ T5945] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a [ 190.370909][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.525804][ T1615] usb 2-1: USB disconnect, device number 10 [ 190.691571][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.107185][ T6621] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 191.200509][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 191.200530][ T30] audit: type=1326 audit(1761271383.411:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 191.264478][ T30] audit: type=1326 audit(1761271383.411:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 191.454093][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.885456][ T6629] xt_l2tp: missing protocol rule (udp|l2tpip) [ 191.931147][ T30] audit: type=1326 audit(1761271383.411:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 191.953837][ T6638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.110352][ T30] audit: type=1326 audit(1761271383.411:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 192.280440][ T30] audit: type=1326 audit(1761271383.411:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 192.451223][ T6638] vim2m vim2m.0: vidioc_s_fmt queue busy [ 192.652182][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.806772][ T30] audit: type=1326 audit(1761271383.411:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 192.848951][ T30] audit: type=1326 audit(1761271383.411:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 193.051889][ T30] audit: type=1326 audit(1761271383.411:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 193.151044][ T6643] input: syz1 as /devices/virtual/input/input10 [ 193.221212][ T6643] program syz.2.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.367911][ T30] audit: type=1326 audit(1761271383.411:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 193.464089][ T30] audit: type=1326 audit(1761271383.421:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d318d810 code=0x7ffc0000 [ 193.730899][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.740522][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.737150][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.124'. [ 194.755231][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 194.871871][ T5945] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.918298][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'. [ 195.249456][ T5945] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.281475][ T5945] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.295800][ T5945] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.351130][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.580364][ T6654] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.612923][ T5945] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.813006][ T1615] net_ratelimit: 1 callbacks suppressed [ 195.813023][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.932256][ T6676] : renamed from bridge_slave_0 [ 196.612263][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.809720][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.850987][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.312767][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 197.379790][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 197.920892][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.096050][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.129'. [ 198.745858][ T5945] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 198.842007][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'. [ 199.028838][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.160597][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 199.331589][ T5945] usb 3-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 199.370666][ T5945] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.404882][ T5945] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 199.414408][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.423009][ T5945] usb 3-1: Product: syz [ 199.437596][ T5945] usb 3-1: Manufacturer: syz [ 199.503179][ T5945] usb 3-1: SerialNumber: syz [ 199.520382][ T5945] usb 3-1: config 0 descriptor?? [ 199.921593][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.038606][ T5838] usb 5-1: USB disconnect, device number 4 [ 200.070278][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.096250][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.102785][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.103208][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.185575][ T6717] vlan2: entered promiscuous mode [ 201.204461][ T6717] bridge0: entered promiscuous mode [ 201.210639][ T6717] vlan2: entered allmulticast mode [ 201.215917][ T6717] bridge0: entered allmulticast mode [ 201.537010][ T5942] usb 3-1: USB disconnect, device number 3 [ 202.427759][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 202.447635][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.870792][ T5838] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 202.920386][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 202.920408][ T30] audit: type=1804 audit(1761271395.091:276): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.136" name="/newroot/32/file0" dev="fuse" ino=1 res=1 errno=0 [ 202.964353][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.050421][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 203.059448][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 203.069276][ T5838] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 203.092828][ T5838] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 203.110230][ T5838] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 203.119699][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.128070][ T5838] usb 1-1: Product: syz [ 203.133922][ T5838] usb 1-1: Manufacturer: syz [ 203.138571][ T5838] usb 1-1: SerialNumber: syz [ 203.481425][ T5838] usb 1-1: config 0 descriptor?? [ 203.492181][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.599657][ T6731] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.713201][ T5838] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 203.730725][ T5838] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 203.737266][ T5838] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 203.763919][ T5838] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 203.791255][ T5838] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 203.942995][ T6731] netlink: 'syz.0.137': attribute type 5 has an invalid length. [ 203.969119][ T6731] ip6erspan0: entered promiscuous mode [ 203.985819][ T6731] bridge0: port 3(macsec0) entered blocking state [ 203.999390][ T6731] bridge0: port 3(macsec0) entered disabled state [ 204.006981][ T6731] macsec0: entered allmulticast mode [ 204.012517][ T6731] veth1_macvtap: entered allmulticast mode [ 204.026115][ T6731] macsec0: entered promiscuous mode [ 204.033232][ T6731] bridge0: port 3(macsec0) entered blocking state [ 204.039844][ T6731] bridge0: port 3(macsec0) entered forwarding state [ 204.530616][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.025628][ T6740] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 205.157004][ T6740] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 205.585969][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.980695][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.222525][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.638766][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.682979][ T5945] usb 1-1: USB disconnect, device number 10 [ 206.709183][ T5945] mcba_usb 1-1:0.0 can0: device disconnected [ 207.650557][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.966286][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 208.691386][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.034881][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.427156][ T6791] fuse: Bad value for 'fd' [ 209.740797][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.770722][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.811994][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.051102][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.500461][ T980] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 212.860677][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.039245][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 213.103372][ T980] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.155349][ T980] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 213.331112][ T980] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 213.382786][ T980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.604165][ T6836] netlink: 52 bytes leftover after parsing attributes in process `syz.4.150'. [ 213.671813][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.686146][ T6840] tipc: Can't bind to reserved service type 2 [ 213.893733][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.922213][ T980] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.994718][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.091173][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.117212][ T980] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 215.171847][ T980] usb 3-1: USB disconnect, device number 4 [ 215.930504][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.058510][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.093866][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.179861][ T30] audit: type=1326 audit(1761271409.421:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 217.513220][ T6861] program syz.1.155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.750407][ T30] audit: type=1326 audit(1761271409.421:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 217.800401][ T30] audit: type=1326 audit(1761271409.421:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 218.130833][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.140878][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.149331][ T30] audit: type=1326 audit(1761271409.421:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 218.225309][ T30] audit: type=1326 audit(1761271409.421:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 218.311601][ T6872] netlink: 'syz.2.157': attribute type 12 has an invalid length. [ 219.387185][ T1615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.392346][ T30] audit: type=1326 audit(1761271409.421:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 219.543530][ T6878] fuse: Bad value for 'fd' [ 219.660385][ T30] audit: type=1326 audit(1761271409.421:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 219.726244][ T30] audit: type=1326 audit(1761271409.421:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 219.795834][ T30] audit: type=1326 audit(1761271409.421:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 219.895946][ T30] audit: type=1326 audit(1761271409.421:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f84d4b8efc9 code=0x7ffc0000 [ 221.397379][ T6899] input: syz1 as /devices/virtual/input/input11 [ 221.463665][ T6899] binder: 6892:6899 ioctl c0306201 0 returned -14 [ 221.498302][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 221.509228][ T6902] team0: Port device batadv2 added [ 221.577576][ T980] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 221.714265][ T6905] hub 9-0:1.0: USB hub found [ 221.719514][ T5911] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 221.730021][ T6905] hub 9-0:1.0: 1 port detected [ 221.956501][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 222.142140][ T1615] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 222.300377][ T1615] usb 5-1: Using ep0 maxpacket: 16 [ 222.309893][ T1615] usb 5-1: config 0 has no interfaces? [ 222.318546][ T1615] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.330543][ T1615] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.338724][ T1615] usb 5-1: Manufacturer: syz [ 222.351339][ T1615] usb 5-1: config 0 descriptor?? [ 222.418276][ T980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 222.475481][ T5911] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.500379][ T5911] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 222.528572][ T5911] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.687302][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.729653][ T980] usb 4-1: can't read configurations, error -61 [ 222.779982][ T6903] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.841349][ T5911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.000371][ T980] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 223.162575][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 223.191564][ T980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 223.199677][ T980] usb 4-1: can't read configurations, error -61 [ 223.230625][ T980] usb usb4-port1: attempt power cycle [ 223.253004][ T6899] syz.1.163 (6899): drop_caches: 2 [ 223.600386][ T980] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 223.624549][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 223.738384][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 223.747521][ T6907] Bluetooth: hci0: command 0x0406 tx timeout [ 223.753970][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 223.754981][ T6907] Bluetooth: hci4: command 0x0405 tx timeout [ 223.768303][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 224.914434][ T980] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 225.012206][ T980] usb 4-1: can't read configurations, error -71 [ 225.161029][ T1615] usb 5-1: USB disconnect, device number 5 [ 225.206419][ T6925] fuse: Bad value for 'user_id' [ 225.211501][ T6925] fuse: Bad value for 'user_id' [ 225.446797][ T6926] netlink: 'syz.2.165': attribute type 27 has an invalid length. [ 226.386442][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.394606][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.930873][ T1615] usb 1-1: USB disconnect, device number 11 [ 227.660456][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.701149][ T6937] hub 9-0:1.0: USB hub found [ 227.706379][ T6937] hub 9-0:1.0: 1 port detected [ 227.758167][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.963929][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.989075][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.013156][ T6929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.103940][ T6940] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 229.280112][ T6940] team0: Port device batadv1 added [ 229.289522][ T6943] @: renamed from vlan0 [ 229.297113][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.311596][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.456228][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.479416][ T3017] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.198184][ T5911] IPVS: starting estimator thread 0... [ 230.385755][ T5945] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.498258][ T6972] IPVS: using max 27 ests per chain, 64800 per kthread [ 231.528286][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 231.551994][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 231.602830][ T5945] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 231.684644][ T5945] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 231.752433][ T5945] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 231.786923][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.862561][ T5945] usb 3-1: Product: syz [ 231.874221][ T5945] usb 3-1: Manufacturer: syz [ 231.906099][ T5945] usb 3-1: SerialNumber: syz [ 231.944054][ T5945] usb 3-1: config 0 descriptor?? [ 231.970056][ T6970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 232.007784][ T5945] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 232.045538][ T5945] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 232.072239][ T5945] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 232.103938][ T5945] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 232.132404][ T5945] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 232.202948][ T6970] netlink: 'syz.2.174': attribute type 5 has an invalid length. [ 232.398280][ T6970] ip6erspan0: entered promiscuous mode [ 232.506677][ T6981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'. [ 232.617301][ T6970] bridge0: port 3(macsec0) entered blocking state [ 232.624762][ T6970] bridge0: port 3(macsec0) entered disabled state [ 232.650468][ T6970] macsec0: entered allmulticast mode [ 232.673567][ T6970] macsec0: entered promiscuous mode [ 233.662155][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.180'. [ 233.772442][ T7001] hub 9-0:1.0: USB hub found [ 233.780477][ T7001] hub 9-0:1.0: 1 port detected [ 233.930456][ T5945] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 234.162633][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 234.183610][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 234.193996][ T5945] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 234.210783][ T5945] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 234.270029][ T5945] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 234.289570][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.350462][ T5945] usb 1-1: Product: syz [ 234.365071][ T5945] usb 1-1: Manufacturer: syz [ 234.369720][ T5945] usb 1-1: SerialNumber: syz [ 234.416210][ T5945] usb 1-1: config 0 descriptor?? [ 234.437165][ T7005] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 234.474142][ T5945] mcba_usb 1-1:0.0 can1: failed tx_urb -90 [ 234.484096][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 234.616144][ T5945] mcba_usb 1-1:0.0 can1: Failed to send cmd (169) [ 234.667515][ T7005] netlink: 'syz.0.179': attribute type 5 has an invalid length. [ 234.703139][ T5945] mcba_usb 1-1:0.0 can1: failed tx_urb -90 [ 234.727177][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 234.950393][ T5945] mcba_usb 1-1:0.0 can1: Failed to send cmd (169) [ 234.970375][ T5945] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 235.399590][ T5942] usb 3-1: USB disconnect, device number 5 [ 235.407197][ T5942] mcba_usb 3-1:0.0 can0: device disconnected [ 235.867242][ T5942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 235.892104][ T5942] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.367732][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 236.380532][ T980] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 236.502362][ T7028] team0: Port device batadv3 added [ 236.612643][ T7028] hub 9-0:1.0: USB hub found [ 236.620606][ T7028] hub 9-0:1.0: 1 port detected [ 236.955093][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 237.150380][ T1615] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 237.250370][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.313994][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.342975][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.360404][ T1615] usb 2-1: Using ep0 maxpacket: 16 [ 237.414058][ T1615] usb 2-1: config 0 has no interfaces? [ 237.438216][ T980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 237.470499][ T1615] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.532035][ T1615] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.560400][ T1615] usb 2-1: Manufacturer: syz [ 237.566777][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.611374][ T1615] usb 2-1: config 0 descriptor?? [ 237.645171][ T980] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.655406][ T980] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.719397][ T980] usb 5-1: Manufacturer: syz [ 237.735500][ T980] usb 5-1: config 0 descriptor?? [ 238.232197][ T980] rc_core: IR keymap rc-hauppauge not found [ 238.254107][ T980] Registered IR keymap rc-empty [ 238.268801][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.399512][ T5911] usb 1-1: USB disconnect, device number 12 [ 238.411217][ T5911] mcba_usb 1-1:0.0 can1: device disconnected [ 238.461641][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.672994][ T980] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 238.713725][ T980] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 238.841759][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.900706][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.922263][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.002765][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.056154][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.101037][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.154697][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 239.231099][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.240125][ T7051] libceph: resolve '0..' (ret=-3): failed [ 239.396064][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.440422][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.467784][ T7059] fuse: Bad value for 'fd' [ 239.479244][ T980] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.741386][ T980] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 239.786060][ T980] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.812845][ T980] usb 5-1: USB disconnect, device number 6 [ 240.558067][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 241.246096][ T5911] usb 2-1: USB disconnect, device number 11 [ 241.875616][ T7076] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 241.883545][ T7076] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 243.184137][ T1615] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 243.518512][ T1615] usb 3-1: config 0 has no interfaces? [ 243.609133][ T1615] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 243.635858][ T1615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.656207][ T1615] usb 3-1: Product: syz [ 243.663979][ T1615] usb 3-1: Manufacturer: syz [ 243.685609][ T1615] usb 3-1: SerialNumber: syz [ 243.715204][ T1615] usb 3-1: config 0 descriptor?? [ 244.240836][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 244.981932][ T7105] netlink: 'syz.1.192': attribute type 4 has an invalid length. [ 245.081095][ T7106] netlink: 'syz.1.192': attribute type 4 has an invalid length. [ 245.612550][ T1615] usb 3-1: USB disconnect, device number 6 [ 246.460170][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 246.460193][ T30] audit: type=1326 audit(1761271438.611:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 246.650610][ T30] audit: type=1326 audit(1761271438.621:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 246.871328][ T30] audit: type=1326 audit(1761271438.621:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 246.893946][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.900399][ T30] audit: type=1326 audit(1761271438.621:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 247.062793][ T30] audit: type=1326 audit(1761271438.621:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 247.086756][ T30] audit: type=1326 audit(1761271438.621:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 247.112457][ T30] audit: type=1326 audit(1761271438.621:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 247.208984][ T30] audit: type=1326 audit(1761271438.621:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 247.231220][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.293456][ T30] audit: type=1326 audit(1761271438.621:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 247.315757][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.390465][ T30] audit: type=1326 audit(1761271438.621:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25d318efc9 code=0x7ffc0000 [ 247.412673][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.820739][ T1615] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 248.470621][ T5911] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 248.511927][ T1615] usb 1-1: Using ep0 maxpacket: 16 [ 248.527843][ T1615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 248.546375][ T1615] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 248.564078][ T1615] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 248.650343][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 248.671197][ T5911] usb 4-1: config 0 has no interfaces? [ 248.737695][ T1615] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 248.801317][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.840457][ T1615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.877507][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 248.900486][ T1615] usb 1-1: Product: syz [ 248.912098][ T5911] usb 4-1: Manufacturer: syz [ 248.923181][ T1615] usb 1-1: Manufacturer: syz [ 248.980627][ T1615] usb 1-1: SerialNumber: syz [ 249.017761][ T5911] usb 4-1: config 0 descriptor?? [ 249.064875][ T1615] usb 1-1: config 0 descriptor?? [ 249.073219][ T7135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.262085][ T1615] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 249.297236][ T1615] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 249.340659][ T7135] netlink: 'syz.0.195': attribute type 5 has an invalid length. [ 249.459954][ T1615] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 249.472227][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 249.495356][ T1615] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 249.522325][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 249.533045][ T1615] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 251.424234][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 251.813972][ T7175] netlink: 'syz.2.203': attribute type 5 has an invalid length. [ 251.920523][ T1615] usb 1-1: USB disconnect, device number 13 [ 251.928510][ T1615] mcba_usb 1-1:0.0 can0: device disconnected [ 253.039390][ T980] usb 4-1: USB disconnect, device number 16 [ 253.850585][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 254.024303][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 254.032505][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.041700][ T24] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 254.050177][ T24] usb 4-1: config 5 has no interface number 0 [ 254.082411][ T24] usb 4-1: config 5 interface 215 has no altsetting 0 [ 254.102166][ T24] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 254.139242][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.179958][ T24] usb 4-1: Product: syz [ 254.209752][ T24] usb 4-1: Manufacturer: syz [ 254.224765][ T24] usb 4-1: SerialNumber: syz [ 254.340960][ T980] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 254.501852][ T24] cypress_m8 4-1:5.215: DeLorme Earthmate USB converter detected [ 254.513275][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 254.526376][ T24] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 254.540883][ T980] usb 5-1: too many configurations: 14, using maximum allowed: 8 [ 254.563214][ T24] usb 4-1: USB disconnect, device number 17 [ 254.620358][ T980] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 254.632788][ T24] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 254.660808][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.669415][ T24] cypress_m8 4-1:5.215: device disconnected [ 254.677593][ T980] usb 5-1: Product: syz [ 254.692763][ T980] usb 5-1: Manufacturer: syz [ 254.697430][ T980] usb 5-1: SerialNumber: syz [ 254.740184][ T980] usb 5-1: config 0 descriptor?? [ 255.710453][ T980] usb 5-1: USB disconnect, device number 7 [ 256.821461][ T980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 256.985257][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 257.003548][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 257.015110][ T980] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 257.103160][ T7231] capability: warning: `syz.4.218' uses 32-bit capabilities (legacy support in use) [ 257.139896][ T980] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 257.388404][ T980] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 257.398192][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.934734][ T980] usb 3-1: Product: syz [ 257.940350][ T980] usb 3-1: Manufacturer: syz [ 257.946344][ T980] usb 3-1: SerialNumber: syz [ 257.973268][ T980] usb 3-1: config 0 descriptor?? [ 257.988248][ T7221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 258.008175][ T980] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 258.015132][ T980] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 258.031612][ T980] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 258.044175][ T980] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 258.058205][ T980] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 258.066213][ T5942] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 258.231337][ T7221] netlink: 'syz.2.214': attribute type 5 has an invalid length. [ 258.280349][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 258.290877][ T5942] usb 4-1: config 0 has no interfaces? [ 258.361510][ T5942] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 258.384047][ T5942] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 258.437443][ T5942] usb 4-1: Manufacturer: syz [ 258.483721][ T5942] usb 4-1: config 0 descriptor?? [ 259.042176][ T5942] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 259.593789][ T7245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.858183][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 259.867489][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 262.207198][ T24] usb 3-1: USB disconnect, device number 7 [ 262.259912][ T24] mcba_usb 3-1:0.0 can0: device disconnected [ 262.299611][ T5497] mcba_usb 3-1:0.0 can0: bit-timing not yet defined [ 262.567142][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.575682][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.636986][ T5911] usb 4-1: USB disconnect, device number 18 [ 262.780665][ T7273] vivid-007: ================= START STATUS ================= [ 262.790091][ T7273] vivid-007: Enable Output Cropping: true [ 262.808182][ T7273] vivid-007: Enable Output Composing: true [ 262.818520][ T7273] vivid-007: Enable Output Scaler: true [ 262.825153][ T7273] vivid-007: Tx RGB Quantization Range: Automatic [ 262.860848][ T7273] vivid-007: Transmit Mode: HDMI [ 262.883702][ T7273] vivid-007: Hotplug Present: 0x00000000 [ 262.984219][ T7273] vivid-007: RxSense Present: 0x00000000 [ 263.056054][ T7273] vivid-007: EDID Present: 0x00000000 [ 263.150483][ T7273] vivid-007: ================== END STATUS ================== [ 263.467874][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 263.551874][ T7289] team0: Port device batadv1 added [ 263.671559][ T7289] hub 9-0:1.0: USB hub found [ 263.697243][ T7289] hub 9-0:1.0: 1 port detected [ 264.452643][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 264.480400][ T5942] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 264.501678][ T5942] usb 2-1: chopping to 0 config(s) [ 264.506969][ T5942] usb 2-1: can't read configurations, error -32 [ 264.720533][ T5942] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 264.870975][ T5942] usb 2-1: device descriptor read/64, error -32 [ 265.094413][ T5942] usb usb2-port1: attempt power cycle [ 265.444135][ T7315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.695167][ T7323] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 265.861003][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 265.864213][ T30] audit: type=1326 audit(1761271458.101:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 265.910501][ T30] audit: type=1326 audit(1761271458.101:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 266.156486][ T7329] fuse: Bad value for 'fd' [ 266.345229][ T30] audit: type=1326 audit(1761271458.101:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 266.427097][ T30] audit: type=1326 audit(1761271458.101:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 266.900689][ T30] audit: type=1326 audit(1761271458.101:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 267.132725][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 267.209925][ T30] audit: type=1326 audit(1761271458.111:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 267.340351][ T30] audit: type=1326 audit(1761271458.111:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 267.980396][ T30] audit: type=1326 audit(1761271458.111:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 268.220404][ T30] audit: type=1326 audit(1761271458.111:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 268.482612][ T30] audit: type=1326 audit(1761271458.111:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6445b8efc9 code=0x7ffc0000 [ 269.098390][ T7360] x_tables: duplicate underflow at hook 4 [ 269.760738][ T5942] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 270.048296][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 270.082407][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 270.093137][ T5942] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 270.135494][ T5942] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 270.162132][ T5942] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 270.171545][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.218467][ T5942] usb 4-1: Product: syz [ 270.240528][ T5942] usb 4-1: Manufacturer: syz [ 270.248784][ T5942] usb 4-1: SerialNumber: syz [ 270.322775][ T5942] usb 4-1: config 0 descriptor?? [ 270.786989][ T7368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 270.805628][ T5942] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 270.813651][ T5942] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 270.820168][ T5942] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 270.830024][ T5942] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 270.844611][ T5942] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 271.033591][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 271.033610][ T30] audit: type=1326 audit(1761271463.271:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 271.079308][ T7382] fuse: Bad value for 'fd' [ 271.155501][ T30] audit: type=1326 audit(1761271463.281:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 271.360090][ T30] audit: type=1326 audit(1761271463.321:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbcebd8d717 code=0x7ffc0000 [ 271.529696][ T30] audit: type=1326 audit(1761271463.321:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbcebd9076a code=0x7ffc0000 [ 271.553545][ T30] audit: type=1326 audit(1761271463.331:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 271.638272][ T30] audit: type=1326 audit(1761271463.331:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 271.811806][ T30] audit: type=1326 audit(1761271463.331:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 271.884643][ T30] audit: type=1326 audit(1761271463.331:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 272.060314][ T30] audit: type=1326 audit(1761271463.331:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 272.145487][ T30] audit: type=1326 audit(1761271463.331:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcebd8efc9 code=0x7ffc0000 [ 272.818186][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.331741][ T7427] SET target dimension over the limit! [ 273.549741][ T7433] bond0: (slave bond_slave_1): Releasing backup interface [ 273.736036][ T7436] netlink: 'syz.1.264': attribute type 5 has an invalid length. [ 274.665526][ T5497] mcba_usb 4-1:0.0 can0: bit-timing not yet defined [ 275.278805][ T980] usb 4-1: USB disconnect, device number 19 [ 275.288171][ T980] mcba_usb 4-1:0.0 can0: device disconnected [ 276.533434][ T7464] netlink: 'syz.3.271': attribute type 4 has an invalid length. [ 276.780600][ T7465] netlink: 'syz.3.271': attribute type 4 has an invalid length. [ 278.230549][ T7485] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 278.241016][ T7485] team0: Port device batadv4 added [ 278.282204][ T7485] hub 9-0:1.0: USB hub found [ 278.290517][ T7485] hub 9-0:1.0: 1 port detected [ 278.374079][ T7487] netlink: 'syz.4.276': attribute type 2 has an invalid length. [ 279.917096][ T7506] program syz.3.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.263672][ T7516] netlink: 'syz.4.283': attribute type 4 has an invalid length. [ 280.314503][ T7513] netlink: 'syz.4.283': attribute type 4 has an invalid length. [ 280.683508][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 282.121224][ T7532] tipc: Enabling of bearer rejected, failed to enable media [ 282.323073][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 282.610620][ T24] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 282.648056][ T7552] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 282.680811][ T7551] program syz.0.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.934044][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.946696][ T24] usb 5-1: config 0 has no interface number 0 [ 282.966392][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.981750][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 282.992761][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 283.004867][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 283.018075][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 283.029670][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.043826][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 283.056861][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.611709][ T7551] syz.0.293 (7551): drop_caches: 2 [ 283.618679][ T24] usb 5-1: config 0 descriptor?? [ 283.676790][ T7539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 283.684897][ T7539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 283.828202][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 283.921771][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.301'. [ 284.069523][ T5942] usb 5-1: USB disconnect, device number 8 [ 284.096378][ T5942] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 284.740330][ T5942] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 284.960305][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 284.967587][ T5942] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 284.983782][ T5942] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 285.016589][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.024398][ T7589] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 285.061591][ T5942] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 285.077413][ T7590] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 285.090391][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.105817][ T5942] usb 3-1: Product: syz [ 285.118894][ T5942] usb 3-1: Manufacturer: syz [ 285.126358][ T5942] usb 3-1: SerialNumber: syz [ 285.148549][ T5942] usb 3-1: config 0 descriptor?? [ 285.385776][ T5942] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 285.734488][ T980] usb 3-1: USB disconnect, device number 8 [ 285.742405][ T5829] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 286.470478][ T5942] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 286.693073][ T5942] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.702029][ T5942] usb 4-1: config 0 has no interface number 0 [ 286.713141][ T5942] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 286.766890][ T5942] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 286.809210][ T7636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.332'. [ 286.821547][ T5942] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.853710][ T7636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.332'. [ 286.858409][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.321493][ T5942] usb 4-1: config 0 descriptor?? [ 287.377135][ T7621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 287.404156][ T5942] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 287.610725][ T24] usb 4-1: USB disconnect, device number 20 [ 287.667764][ T7645] vlan2: entered promiscuous mode [ 287.685129][ T7645] bridge0: entered promiscuous mode [ 287.787114][ T7645] vlan2: entered allmulticast mode [ 287.793825][ T7645] bridge0: entered allmulticast mode [ 287.840334][ T1615] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 288.162899][ T1615] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 288.175126][ T1615] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.190054][ T1615] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 288.211365][ T1615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.227609][ T1615] usb 3-1: config 0 descriptor?? [ 288.236516][ T7647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 288.688827][ T1615] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 288.743928][ T1615] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 288.766475][ T1615] konepure 0003:1E7D:2DBE.0002: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.2-1/input0 [ 288.924317][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 288.943991][ T1615] usb 3-1: USB disconnect, device number 9 [ 289.052599][ T7658] hub 9-0:1.0: USB hub found [ 289.060393][ T7658] hub 9-0:1.0: 1 port detected [ 289.454651][ T7659] fido_id[7659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 290.052734][ T7674] batadv3: entered promiscuous mode [ 290.058475][ T7674] batadv4: entered promiscuous mode [ 290.165528][ T7671] vivid-007: ================= START STATUS ================= [ 290.173402][ T7671] vivid-007: Enable Output Cropping: true [ 290.179226][ T7671] vivid-007: Enable Output Composing: true [ 290.185186][ T7671] vivid-007: Enable Output Scaler: true [ 290.190857][ T7671] vivid-007: Tx RGB Quantization Range: Automatic [ 290.197402][ T7671] vivid-007: Transmit Mode: HDMI [ 290.202453][ T7671] vivid-007: Hotplug Present: 0x00000000 [ 290.208181][ T7671] vivid-007: RxSense Present: 0x00000000 [ 290.214165][ T7671] vivid-007: EDID Present: 0x00000000 [ 290.220165][ T7671] vivid-007: ================== END STATUS ================== [ 291.061047][ T7686] macvlan2: entered allmulticast mode [ 291.068128][ T7686] bridge0: port 3(macvlan2) entered blocking state [ 291.090948][ T7686] bridge0: port 3(macvlan2) entered disabled state [ 291.466611][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 291.492738][ T7695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.116786][ T5911] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 292.380300][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 292.460425][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 292.547491][ T5911] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 292.732598][ T5911] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 292.881725][ T5911] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 292.891514][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.918222][ T5911] usb 1-1: Product: syz [ 292.927432][ T5911] usb 1-1: Manufacturer: syz [ 292.956422][ T5911] usb 1-1: SerialNumber: syz [ 293.060056][ T5911] usb 1-1: config 0 descriptor?? [ 293.260465][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 293.269216][ T7696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.381959][ T5911] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 293.392039][ T5911] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 293.401831][ T5911] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 293.410132][ T5911] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 293.422083][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.431976][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 293.442775][ T5911] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 293.454783][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.484017][ T24] usb 5-1: config 0 descriptor?? [ 293.530827][ T7696] netlink: 'syz.0.349': attribute type 5 has an invalid length. [ 293.759432][ T7709] netlink: 'syz.1.353': attribute type 20 has an invalid length. [ 293.767774][ T7709] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.065802][ T24] magicmouse 0003:05AC:0265.0003: unbalanced collection at end of report description [ 294.322956][ T24] magicmouse 0003:05AC:0265.0003: magicmouse hid parse failed [ 294.467378][ T24] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -22 [ 294.496242][ T24] usb 5-1: USB disconnect, device number 9 [ 295.057232][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 295.075381][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 295.242580][ T7723] hub 9-0:1.0: USB hub found [ 295.250397][ T7723] hub 9-0:1.0: 1 port detected [ 295.491601][ T24] usb 1-1: USB disconnect, device number 14 [ 295.499646][ T24] mcba_usb 1-1:0.0 can0: device disconnected [ 296.760353][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 296.913191][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 296.959371][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 296.995030][ T24] usb 5-1: config 179 has no interface number 0 [ 297.035653][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 297.115185][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 297.208650][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.249588][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 297.310565][ T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 297.380337][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 297.437135][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.480392][ T5838] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 297.512805][ T7764] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 297.656530][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.700373][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.783358][ T5911] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input14 [ 297.800254][ T5838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.828422][ T5838] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.865658][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.890728][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 297.927006][ T5838] usb 2-1: config 0 descriptor?? [ 298.052358][ T5911] usb 5-1: USB disconnect, device number 10 [ 298.052424][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 298.052489][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 298.113117][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 298.133746][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.158834][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.176465][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.239837][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 298.252565][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.268438][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.279146][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.287335][ T24] usb 3-1: Manufacturer: syz [ 298.297832][ T24] usb 3-1: config 0 descriptor?? [ 298.374129][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.408782][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.431257][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.438747][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.460543][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.480410][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.491463][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.499110][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.506691][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.515574][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 298.534996][ T5838] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 298.628211][ T1615] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 298.860544][ T24] rc_core: IR keymap rc-hauppauge not found [ 298.866642][ T24] Registered IR keymap rc-empty [ 298.873703][ T5838] usb 2-1: USB disconnect, device number 15 [ 298.883324][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 298.911681][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 298.970364][ T1615] usb 4-1: Using ep0 maxpacket: 8 [ 298.978767][ T1615] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 298.981275][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.4.384'. [ 299.012085][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 299.035911][ T1615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.075926][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 299.092659][ T1615] pvrusb2: Hardware description: Terratec Grabster AV400 [ 299.141284][ T1615] pvrusb2: ********** [ 299.160948][ T1615] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 299.196179][ T1615] pvrusb2: Important functionality might not be entirely working. [ 299.205823][ T1615] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 299.218775][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.258498][ T1615] pvrusb2: ********** [ 299.284718][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.354219][ T2347] pvrusb2: Invalid write control endpoint [ 299.381068][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.396868][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 299.467784][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.530390][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.555546][ T7801] pvrusb2: Invalid write control endpoint [ 299.565039][ T1615] usb 4-1: USB disconnect, device number 21 [ 299.604401][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.639049][ T2347] pvrusb2: Invalid write control endpoint [ 299.650555][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.658975][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 299.690407][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.697659][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 299.723111][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 299.758706][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.782835][ T2347] pvrusb2: Device being rendered inoperable [ 299.792531][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 299.799894][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 299.816139][ T2347] pvrusb2: Attached sub-driver cx25840 [ 299.850452][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 299.872836][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 299.888457][ T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 299.913979][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 299.930145][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 300.117677][ T24] usb 3-1: USB disconnect, device number 10 [ 300.403099][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'. [ 300.416279][ T7837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.582254][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 300.591874][ T7840] team0: Port device batadv2 added [ 300.643274][ T7840] hub 9-0:1.0: USB hub found [ 300.648967][ T7840] hub 9-0:1.0: 1 port detected [ 302.332253][ T7859] netlink: 'syz.4.399': attribute type 16 has an invalid length. [ 302.431130][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 302.506117][ T7859] hub 9-0:1.0: USB hub found [ 302.512436][ T7859] hub 9-0:1.0: 1 port detected [ 302.561173][ T7860] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 303.907269][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 304.073534][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 304.110330][ T24] usb 3-1: config 0 has no interfaces? [ 304.342834][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 304.352946][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 304.361422][ T24] usb 3-1: Manufacturer: syz [ 304.375444][ T24] usb 3-1: config 0 descriptor?? [ 304.567461][ T5942] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 304.828927][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 304.850762][ T5942] usb 1-1: config 0 has no interfaces? [ 304.869427][ T5942] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 304.902569][ T5942] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 304.944502][ T5942] usb 1-1: Manufacturer: syz [ 304.968041][ T5942] usb 1-1: config 0 descriptor?? [ 305.061373][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 305.172503][ T7900] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 305.182559][ T7900] team0: Port device batadv2 added [ 305.254725][ T7900] hub 9-0:1.0: USB hub found [ 305.260386][ T7900] hub 9-0:1.0: 1 port detected [ 305.322462][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 305.381938][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.424109][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 305.479582][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.571336][ T24] usb 4-1: config 0 descriptor?? [ 306.034908][ T24] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 306.372965][ T24] usb 3-1: USB disconnect, device number 11 [ 306.470917][ T5838] usb 4-1: USB disconnect, device number 22 [ 306.947552][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 307.283010][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.636632][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 308.666720][ T7932] team0: Port device batadv3 added [ 309.024161][ T7933] hub 9-0:1.0: USB hub found [ 309.183479][ T1615] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 309.214343][ T5838] usb 1-1: USB disconnect, device number 15 [ 309.279537][ T7933] hub 9-0:1.0: 1 port detected [ 309.340931][ T1615] usb 4-1: Using ep0 maxpacket: 16 [ 309.351501][ T1615] usb 4-1: config 0 has no interfaces? [ 309.359746][ T1615] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 309.370528][ T1615] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 309.392077][ T1615] usb 4-1: Manufacturer: syz [ 309.409314][ T1615] usb 4-1: config 0 descriptor?? [ 311.771854][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.818644][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 311.926157][ T24] usb 3-1: can't read configurations, error -71 [ 312.327059][ T5923] usb 4-1: USB disconnect, device number 23 [ 313.200351][ T5942] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 313.248934][ T7986] syzkaller0: entered promiscuous mode [ 313.254898][ T7986] syzkaller0: entered allmulticast mode [ 313.350911][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 313.417555][ T5923] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 313.461380][ T5942] usb 1-1: config 0 has no interfaces? [ 313.471179][ T5942] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 313.482860][ T5942] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 313.492037][ T5942] usb 1-1: Manufacturer: syz [ 313.513571][ T5942] usb 1-1: config 0 descriptor?? [ 313.623407][ T5923] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 313.632463][ T5923] usb 4-1: config 0 has no interface number 0 [ 313.638580][ T5923] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 313.673442][ T5923] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 313.715553][ T5923] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 313.799465][ T5923] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 313.809212][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 313.844153][ T5923] usb 4-1: Product: syz [ 313.860586][ T5923] usb 4-1: SerialNumber: syz [ 313.877158][ T5923] usb 4-1: config 0 descriptor?? [ 313.887033][ T5923] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 313.899952][ T5923] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input16 [ 314.043878][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 314.052526][ T8000] batadv6: entered promiscuous mode [ 314.059436][ T8000] team0: Port device batadv6 added [ 314.104742][ T8000] hub 9-0:1.0: USB hub found [ 314.110396][ T8000] hub 9-0:1.0: 1 port detected [ 314.207816][ T5923] ------------[ cut here ]------------ [ 314.207905][ T5923] URB ffff888145310300 submitted while active [ 314.208907][ T5923] WARNING: CPU: 0 PID: 5923 at drivers/usb/core/urb.c:380 usb_submit_urb+0xf8c/0x18b0 [ 314.208977][ T5923] Modules linked in: [ 314.209113][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 314.209153][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.209172][ T5923] Workqueue: usb_hub_wq hub_event [ 314.209221][ T5923] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 314.209255][ T5923] Code: 00 00 00 e8 76 11 cd fa e9 25 f1 ff ff e8 6c 11 cd fa c6 05 88 fd 73 08 01 90 48 c7 c7 c0 07 11 8c 48 89 de e8 e5 2d 90 fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 46 11 cd fa c6 05 97 33 8a 08 01 41 [ 314.209278][ T5923] RSP: 0018:ffffc9000a716b10 EFLAGS: 00010246 [ 314.209300][ T5923] RAX: 6e3cf3ba2650c400 RBX: ffff888145310300 RCX: 0000000000100000 [ 314.209320][ T5923] RDX: ffffc90018876000 RSI: 0000000000027cc3 RDI: 0000000000027cc4 [ 314.209337][ T5923] RBP: 000000000000000f R08: ffff8880b8824293 R09: 1ffff11017104852 [ 314.209355][ T5923] R10: dffffc0000000000 R11: ffffed1017104853 R12: 0000000000000cc0 [ 314.209374][ T5923] R13: ffff88807ca9f848 R14: ffff888145310308 R15: dffffc0000000000 [ 314.209393][ T5923] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 314.209414][ T5923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.209431][ T5923] CR2: 0000200000000000 CR3: 000000007e944000 CR4: 00000000003526f0 [ 314.209454][ T5923] Call Trace: [ 314.209465][ T5923] [ 314.209482][ T5923] ? __pfx___mutex_lock+0x10/0x10 [ 314.209532][ T5923] ? __pm_runtime_resume+0x129/0x180 [ 314.209574][ T5923] cm109_input_open+0x1fe/0x4b0 [ 314.209612][ T5923] input_open_device+0x1d3/0x390 [ 314.209659][ T5923] kbd_connect+0xed/0x140 [ 314.209701][ T5923] input_register_device+0xd00/0x1140 [ 314.209740][ T5923] cm109_usb_probe+0x118c/0x1690 [ 314.209797][ T5923] usb_probe_interface+0x668/0xc30 [ 314.209838][ T5923] ? __pfx_usb_probe_interface+0x10/0x10 [ 314.209864][ T5923] really_probe+0x26d/0x9e0 [ 314.209905][ T5923] __driver_probe_device+0x18c/0x2f0 [ 314.209940][ T5923] driver_probe_device+0x4f/0x430 [ 314.209976][ T5923] __device_attach_driver+0x2ce/0x530 [ 314.210014][ T5923] bus_for_each_drv+0x251/0x2e0 [ 314.210058][ T5923] ? __pfx___device_attach_driver+0x10/0x10 [ 314.210090][ T5923] ? __pfx_bus_for_each_drv+0x10/0x10 [ 314.210141][ T5923] __device_attach+0x2b8/0x400 [ 314.210183][ T5923] ? __pfx___device_attach+0x10/0x10 [ 314.210570][ T5923] ? do_raw_spin_unlock+0x122/0x240 [ 314.210618][ T5923] bus_probe_device+0x185/0x260 [ 314.210647][ T5923] device_add+0x7b6/0xb50 [ 314.210680][ T5923] usb_set_configuration+0x1a87/0x20e0 [ 314.210742][ T5923] usb_generic_driver_probe+0x8d/0x150 [ 314.210785][ T5923] usb_probe_device+0x1c4/0x390 [ 314.210816][ T5923] ? __pfx_usb_probe_device+0x10/0x10 [ 314.210839][ T5923] really_probe+0x26d/0x9e0 [ 314.210879][ T5923] __driver_probe_device+0x18c/0x2f0 [ 314.210915][ T5923] driver_probe_device+0x4f/0x430 [ 314.210952][ T5923] __device_attach_driver+0x2ce/0x530 [ 314.210989][ T5923] bus_for_each_drv+0x251/0x2e0 [ 314.211029][ T5923] ? __pfx___device_attach_driver+0x10/0x10 [ 314.211062][ T5923] ? __pfx_bus_for_each_drv+0x10/0x10 [ 314.211114][ T5923] __device_attach+0x2b8/0x400 [ 314.211156][ T5923] ? __pfx___device_attach+0x10/0x10 [ 314.211195][ T5923] ? do_raw_spin_unlock+0x122/0x240 [ 314.211236][ T5923] bus_probe_device+0x185/0x260 [ 314.211266][ T5923] device_add+0x7b6/0xb50 [ 314.211301][ T5923] usb_new_device+0xa39/0x16f0 [ 314.211353][ T5923] ? __pfx_usb_new_device+0x10/0x10 [ 314.211390][ T5923] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.211419][ T5923] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.211452][ T5923] hub_event+0x2958/0x4a20 [ 314.585731][ T5923] ? __pfx_hub_event+0x10/0x10 [ 314.585786][ T5923] ? process_scheduled_works+0x9ef/0x17b0 [ 314.585827][ T5923] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.585858][ T5923] ? process_scheduled_works+0x9ef/0x17b0 [ 314.585886][ T5923] ? process_scheduled_works+0x9ef/0x17b0 [ 314.585916][ T5923] process_scheduled_works+0xae1/0x17b0 [ 314.585983][ T5923] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.586034][ T5923] worker_thread+0x8a0/0xda0 [ 314.586066][ T5923] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.586129][ T5923] ? __kthread_parkme+0x7b/0x200 [ 314.586182][ T5923] kthread+0x711/0x8a0 [ 314.586231][ T5923] ? __pfx_worker_thread+0x10/0x10 [ 314.586266][ T5923] ? __pfx_kthread+0x10/0x10 [ 314.586307][ T5923] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.586341][ T5923] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.586382][ T5923] ? __pfx_kthread+0x10/0x10 [ 314.586425][ T5923] ret_from_fork+0x4bc/0x870 [ 314.586464][ T5923] ? __pfx_ret_from_fork+0x10/0x10 [ 314.586509][ T5923] ? __switch_to_asm+0x39/0x70 [ 314.586536][ T5923] ? __switch_to_asm+0x33/0x70 [ 314.586562][ T5923] ? __pfx_kthread+0x10/0x10 [ 314.586609][ T5923] ret_from_fork_asm+0x1a/0x30 [ 314.586663][ T5923] [ 314.586677][ T5923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.586705][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 314.586739][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.586761][ T5923] Workqueue: usb_hub_wq hub_event [ 314.586813][ T5923] Call Trace: [ 314.586828][ T5923] [ 314.586837][ T5923] dump_stack_lvl+0x99/0x250 [ 314.586882][ T5923] ? __asan_memcpy+0x40/0x70 [ 314.586922][ T5923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.586965][ T5923] ? __pfx__printk+0x10/0x10 [ 314.587014][ T5923] vpanic+0x237/0x6d0 [ 314.587059][ T5923] ? __pfx_vpanic+0x10/0x10 [ 314.587150][ T5923] panic+0xb9/0xc0 [ 314.587194][ T5923] ? __pfx_panic+0x10/0x10 [ 314.587260][ T5923] __warn+0x31b/0x4b0 [ 314.587301][ T5923] ? usb_submit_urb+0xf8c/0x18b0 [ 314.587342][ T5923] ? usb_submit_urb+0xf8c/0x18b0 [ 314.587384][ T5923] report_bug+0x2be/0x4f0 [ 314.587421][ T5923] ? usb_submit_urb+0xf8c/0x18b0 [ 314.587462][ T5923] ? usb_submit_urb+0xf8c/0x18b0 [ 314.587499][ T5923] ? usb_submit_urb+0xf8e/0x18b0 [ 314.587540][ T5923] handle_bug+0x84/0x160 [ 314.587584][ T5923] exc_invalid_op+0x1a/0x50 [ 314.587626][ T5923] asm_exc_invalid_op+0x1a/0x20 [ 314.587658][ T5923] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 314.587695][ T5923] Code: 00 00 00 e8 76 11 cd fa e9 25 f1 ff ff e8 6c 11 cd fa c6 05 88 fd 73 08 01 90 48 c7 c7 c0 07 11 8c 48 89 de e8 e5 2d 90 fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 46 11 cd fa c6 05 97 33 8a 08 01 41 [ 314.587724][ T5923] RSP: 0018:ffffc9000a716b10 EFLAGS: 00010246 [ 314.587750][ T5923] RAX: 6e3cf3ba2650c400 RBX: ffff888145310300 RCX: 0000000000100000 [ 314.587774][ T5923] RDX: ffffc90018876000 RSI: 0000000000027cc3 RDI: 0000000000027cc4 [ 314.587794][ T5923] RBP: 000000000000000f R08: ffff8880b8824293 R09: 1ffff11017104852 [ 314.587814][ T5923] R10: dffffc0000000000 R11: ffffed1017104853 R12: 0000000000000cc0 [ 314.587837][ T5923] R13: ffff88807ca9f848 R14: ffff888145310308 R15: dffffc0000000000 [ 314.587881][ T5923] ? __pfx___mutex_lock+0x10/0x10 [ 314.587930][ T5923] ? __pm_runtime_resume+0x129/0x180 [ 314.587973][ T5923] cm109_input_open+0x1fe/0x4b0 [ 314.588015][ T5923] input_open_device+0x1d3/0x390 [ 314.588082][ T5923] kbd_connect+0xed/0x140 [ 314.588134][ T5923] input_register_device+0xd00/0x1140 [ 314.588177][ T5923] cm109_usb_probe+0x118c/0x1690 [ 314.588245][ T5923] usb_probe_interface+0x668/0xc30 [ 314.588291][ T5923] ? __pfx_usb_probe_interface+0x10/0x10 [ 314.588317][ T5923] really_probe+0x26d/0x9e0 [ 314.588368][ T5923] __driver_probe_device+0x18c/0x2f0 [ 314.588410][ T5923] driver_probe_device+0x4f/0x430 [ 314.588456][ T5923] __device_attach_driver+0x2ce/0x530 [ 314.588500][ T5923] bus_for_each_drv+0x251/0x2e0 [ 314.588552][ T5923] ? __pfx___device_attach_driver+0x10/0x10 [ 314.588591][ T5923] ? __pfx_bus_for_each_drv+0x10/0x10 [ 314.588657][ T5923] __device_attach+0x2b8/0x400 [ 314.588698][ T5923] ? __pfx___device_attach+0x10/0x10 [ 314.588742][ T5923] ? do_raw_spin_unlock+0x122/0x240 [ 314.588793][ T5923] bus_probe_device+0x185/0x260 [ 314.588829][ T5923] device_add+0x7b6/0xb50 [ 314.588872][ T5923] usb_set_configuration+0x1a87/0x20e0 [ 314.588934][ T5923] usb_generic_driver_probe+0x8d/0x150 [ 314.588989][ T5923] usb_probe_device+0x1c4/0x390 [ 314.589023][ T5923] ? __pfx_usb_probe_device+0x10/0x10 [ 314.589054][ T5923] really_probe+0x26d/0x9e0 [ 314.589114][ T5923] __driver_probe_device+0x18c/0x2f0 [ 314.589157][ T5923] driver_probe_device+0x4f/0x430 [ 314.589203][ T5923] __device_attach_driver+0x2ce/0x530 [ 314.589248][ T5923] bus_for_each_drv+0x251/0x2e0 [ 314.589302][ T5923] ? __pfx___device_attach_driver+0x10/0x10 [ 314.589340][ T5923] ? __pfx_bus_for_each_drv+0x10/0x10 [ 314.589406][ T5923] __device_attach+0x2b8/0x400 [ 314.589448][ T5923] ? __pfx___device_attach+0x10/0x10 [ 314.589491][ T5923] ? do_raw_spin_unlock+0x122/0x240 [ 314.589540][ T5923] bus_probe_device+0x185/0x260 [ 314.589572][ T5923] device_add+0x7b6/0xb50 [ 314.589613][ T5923] usb_new_device+0xa39/0x16f0 [ 314.589674][ T5923] ? __pfx_usb_new_device+0x10/0x10 [ 314.589721][ T5923] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.589757][ T5923] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.589799][ T5923] hub_event+0x2958/0x4a20 [ 314.589914][ T5923] ? __pfx_hub_event+0x10/0x10 [ 314.589965][ T5923] ? process_scheduled_works+0x9ef/0x17b0 [ 314.590003][ T5923] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.590040][ T5923] ? process_scheduled_works+0x9ef/0x17b0 [ 314.590070][ T5923] ? process_scheduled_works+0x9ef/0x17b0 [ 314.590114][ T5923] process_scheduled_works+0xae1/0x17b0 [ 314.590187][ T5923] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.590239][ T5923] worker_thread+0x8a0/0xda0 [ 314.590277][ T5923] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.590325][ T5923] ? __kthread_parkme+0x7b/0x200 [ 314.590371][ T5923] kthread+0x711/0x8a0 [ 314.590418][ T5923] ? __pfx_worker_thread+0x10/0x10 [ 314.590452][ T5923] ? __pfx_kthread+0x10/0x10 [ 314.590493][ T5923] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.590526][ T5923] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.590563][ T5923] ? __pfx_kthread+0x10/0x10 [ 314.590604][ T5923] ret_from_fork+0x4bc/0x870 [ 314.590639][ T5923] ? __pfx_ret_from_fork+0x10/0x10 [ 314.590681][ T5923] ? __switch_to_asm+0x39/0x70 [ 314.590707][ T5923] ? __switch_to_asm+0x33/0x70 [ 314.590731][ T5923] ? __pfx_kthread+0x10/0x10 [ 314.590775][ T5923] ret_from_fork_asm+0x1a/0x30 [ 314.590826][ T5923] [ 314.591045][ T5923] Kernel Offset: disabled