last executing test programs: 6.349270834s ago: executing program 2 (id=1948): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40030002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x8801) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r5, 0x0, 0x0) 5.18213854s ago: executing program 3 (id=1959): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x4, 0x4) 5.037351684s ago: executing program 3 (id=1960): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 4.831706146s ago: executing program 3 (id=1961): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500080001000000060002404e20000008000500", @ANYRES16=r2], 0x4c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet(0x2, 0x1, 0x100) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) r7 = timerfd_create(0x6, 0x800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {r8, r9+10000000}}, &(0x7f00000001c0)) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) shutdown(r0, 0x1) socket$packet(0x11, 0x2, 0x300) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r10, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0x1a, 0x12, 0x87, &(0x7f0000000200)}) 4.477287263s ago: executing program 2 (id=1963): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 4.254290148s ago: executing program 0 (id=1964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 4.127616044s ago: executing program 4 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000002840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x3, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc7}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x7fa, 0x13500, 0x0, 0xfffffffd}, 0x0, 0x0) 3.994698408s ago: executing program 0 (id=1966): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 3.900192709s ago: executing program 2 (id=1967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0xc800) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x101881) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c890}, 0x20000010) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001100)={r4, 0x0, {0x0, 0x0, 0x0, 0x800, 0xffe, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b3980000e4d6000000de00100d07000000000000009d03740250ceaac594b1b3d741dda1b719b438ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0x1ff]}}) 3.711817582s ago: executing program 0 (id=1968): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x2}, 0x0, 0x0, 0x0}) 3.388284325s ago: executing program 1 (id=1970): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 3.1948732s ago: executing program 1 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 2.995814945s ago: executing program 1 (id=1972): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x4}}]}, 0x20}}, 0x8800) 2.730382685s ago: executing program 1 (id=1973): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x2688c3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x2000000085}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r3 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000980)={0xb, @win={{}, 0x8, 0x0, 0x0, 0x0, 0x0}}) 1.909608715s ago: executing program 3 (id=1974): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1.808083867s ago: executing program 2 (id=1975): r0 = socket(0x10, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000800) 1.675345283s ago: executing program 4 (id=1976): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.631956568s ago: executing program 3 (id=1977): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1.538508533s ago: executing program 4 (id=1978): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) 1.439352984s ago: executing program 3 (id=1979): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) 1.363910341s ago: executing program 4 (id=1980): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1.215757515s ago: executing program 2 (id=1981): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4, 0x122}]}, 0x18}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{0x0}], 0x1, 0x10c, 0x5) 1.193303249s ago: executing program 4 (id=1982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001900010900000000000000000218"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.084257122s ago: executing program 4 (id=1983): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 731.88612ms ago: executing program 2 (id=1984): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) open(0x0, 0x71b313e17c1fe7, 0x0) 655.482552ms ago: executing program 1 (id=1985): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 576.364463ms ago: executing program 0 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a", 0x33}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b961", 0x62}], 0x3, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 467.708829ms ago: executing program 0 (id=1987): r0 = creat(0x0, 0x100) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 307.767623ms ago: executing program 0 (id=1988): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000040)=[{0x9, 0x2000, 0x1, &(0x7f0000000100)="03"}], 0x1}) 0s ago: executing program 1 (id=1989): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) kernel console output (not intermixed with test programs): +0x10/0x10 [ 370.380158][ T8728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.380189][ T8728] ? __pfx__printk+0x10/0x10 [ 370.380217][ T8728] ? ref_tracker_alloc+0x318/0x460 [ 370.380249][ T8728] should_fail_ex+0x414/0x560 [ 370.380282][ T8728] should_failslab+0xa8/0x100 [ 370.380308][ T8728] kmem_cache_alloc_noprof+0x73/0x3c0 [ 370.380329][ T8728] ? skb_clone+0x212/0x3a0 [ 370.380358][ T8728] skb_clone+0x212/0x3a0 [ 370.380387][ T8728] __netlink_deliver_tap+0x404/0x850 [ 370.380421][ T8728] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.380444][ T8728] netlink_deliver_tap+0x19c/0x1b0 [ 370.380466][ T8728] netlink_unicast+0x72f/0x8d0 [ 370.380508][ T8728] netlink_sendmsg+0x805/0xb30 [ 370.380549][ T8728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.380574][ T8728] ? aa_sock_msg_perm+0x94/0x160 [ 370.380604][ T8728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.380632][ T8728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.380654][ T8728] __sock_sendmsg+0x219/0x270 [ 370.380686][ T8728] ____sys_sendmsg+0x505/0x830 [ 370.380715][ T8728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.380748][ T8728] ? import_iovec+0x74/0xa0 [ 370.380775][ T8728] ___sys_sendmsg+0x21f/0x2a0 [ 370.380800][ T8728] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.380863][ T8728] ? __fget_files+0x2a/0x420 [ 370.380886][ T8728] ? __fget_files+0x3a0/0x420 [ 370.380921][ T8728] __x64_sys_sendmsg+0x19b/0x260 [ 370.380946][ T8728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.380981][ T8728] ? __pfx_ksys_write+0x10/0x10 [ 370.380999][ T8728] ? rcu_is_watching+0x15/0xb0 [ 370.381024][ T8728] ? do_syscall_64+0xbe/0x3b0 [ 370.381057][ T8728] do_syscall_64+0xfa/0x3b0 [ 370.381084][ T8728] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.381110][ T8728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.381131][ T8728] ? clear_bhb_loop+0x60/0xb0 [ 370.381155][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.381176][ T8728] RIP: 0033:0x7f175158e929 [ 370.381194][ T8728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.381211][ T8728] RSP: 002b:00007f1752344038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.381233][ T8728] RAX: ffffffffffffffda RBX: 00007f17517b5fa0 RCX: 00007f175158e929 [ 370.381248][ T8728] RDX: 0000000004009894 RSI: 0000200000000400 RDI: 0000000000000004 [ 370.381262][ T8728] RBP: 00007f1752344090 R08: 0000000000000000 R09: 0000000000000000 [ 370.381274][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.381286][ T8728] R13: 0000000000000000 R14: 00007f17517b5fa0 R15: 00007f17518dfa28 [ 370.381317][ T8728] [ 370.694226][ T8726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.742'. [ 370.767695][ T5929] usb 2-1: config 0 has no interfaces? [ 371.064642][ T5929] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 371.080403][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.113309][ T8737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.120678][ T8737] IPv6: NLM_F_CREATE should be set when creating new route [ 371.162095][ T5929] usb 2-1: Product: syz [ 371.188284][ T5929] usb 2-1: Manufacturer: syz [ 371.198887][ T8736] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 371.234513][ T5929] usb 2-1: SerialNumber: syz [ 371.272594][ T5929] usb 2-1: config 0 descriptor?? [ 371.595922][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.611938][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.263775][ T5919] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 372.638133][ T5919] usb 4-1: config 0 has no interfaces? [ 372.653181][ T5919] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 372.666896][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.680031][ T5919] usb 4-1: Product: syz [ 372.685302][ T5919] usb 4-1: Manufacturer: syz [ 372.690313][ T5919] usb 4-1: SerialNumber: syz [ 372.711186][ T5919] usb 4-1: config 0 descriptor?? [ 373.060405][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.069723][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.714181][ T5890] usb 2-1: USB disconnect, device number 55 [ 375.233776][ T1217] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 375.479837][ T1217] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.497882][ T5890] usb 4-1: USB disconnect, device number 45 [ 375.510065][ T1217] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 375.525953][ T1217] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 375.565499][ T1217] usb 5-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.601838][ T1217] usb 5-1: config 1 interface 0 has no altsetting 0 [ 375.638625][ T1217] usb 5-1: string descriptor 0 read error: -22 [ 375.647506][ T1217] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.667112][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.702943][ T8767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 375.712055][ T8767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 375.722212][ T8767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 375.736387][ T1217] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 375.744960][ T5847] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 375.906461][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.923568][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.938789][ T5919] usb 5-1: USB disconnect, device number 47 [ 375.973621][ T5847] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 376.001590][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.026129][ T5847] usb 1-1: config 0 descriptor?? [ 376.539719][ T8790] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.761'. [ 376.550870][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 377.021774][ T8798] sctp: [Deprecated]: syz.2.763 (pid 8798) Use of int in max_burst socket option deprecated. [ 377.021774][ T8798] Use struct sctp_assoc_value instead [ 377.631117][ T8807] netlink: 10 bytes leftover after parsing attributes in process `syz.1.765'. [ 377.923839][ T8810] xt_hashlimit: max too large, truncated to 1048576 [ 378.203020][ T8815] FAULT_INJECTION: forcing a failure. [ 378.203020][ T8815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.264347][ T8815] CPU: 1 UID: 0 PID: 8815 Comm: syz.3.768 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 378.264380][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.264394][ T8815] Call Trace: [ 378.264400][ T8815] [ 378.264407][ T8815] dump_stack_lvl+0x189/0x250 [ 378.264436][ T8815] ? __pfx____ratelimit+0x10/0x10 [ 378.264456][ T8815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.264478][ T8815] ? __pfx__printk+0x10/0x10 [ 378.264494][ T8815] ? __might_fault+0xb0/0x130 [ 378.264517][ T8815] should_fail_ex+0x414/0x560 [ 378.264540][ T8815] _copy_from_user+0x2d/0xb0 [ 378.264557][ T8815] video_usercopy+0x354/0x14f0 [ 378.264579][ T8815] ? __pfx___video_do_ioctl+0x10/0x10 [ 378.264592][ T8815] ? __pfx_video_usercopy+0x10/0x10 [ 378.264614][ T8815] ? __fget_files+0x2a/0x420 [ 378.264633][ T8815] ? __fget_files+0x2a/0x420 [ 378.264648][ T8815] ? __fget_files+0x3a0/0x420 [ 378.264667][ T8815] v4l2_ioctl+0x18d/0x1e0 [ 378.264690][ T8815] ? __pfx_v4l2_ioctl+0x10/0x10 [ 378.264713][ T8815] __se_sys_ioctl+0xfc/0x170 [ 378.264736][ T8815] do_syscall_64+0xfa/0x3b0 [ 378.264756][ T8815] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.264774][ T8815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.264788][ T8815] ? clear_bhb_loop+0x60/0xb0 [ 378.264806][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.264821][ T8815] RIP: 0033:0x7f1d3638e929 [ 378.264834][ T8815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.264848][ T8815] RSP: 002b:00007f1d37297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.264864][ T8815] RAX: ffffffffffffffda RBX: 00007f1d365b5fa0 RCX: 00007f1d3638e929 [ 378.264875][ T8815] RDX: 00002000000000c0 RSI: 00000000c058565d RDI: 0000000000000003 [ 378.264885][ T8815] RBP: 00007f1d37297090 R08: 0000000000000000 R09: 0000000000000000 [ 378.264894][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.264903][ T8815] R13: 0000000000000000 R14: 00007f1d365b5fa0 R15: 00007f1d366dfa28 [ 378.264924][ T8815] [ 378.965781][ T5847] usbhid 1-1:0.0: can't add hid device: -71 [ 378.977018][ T5847] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 379.064562][ T5847] usb 1-1: USB disconnect, device number 35 [ 379.443591][ T44] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 379.593663][ T5847] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 379.633552][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 379.678059][ T44] usb 4-1: config 0 has no interfaces? [ 379.717904][ T44] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 379.734044][ T44] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 379.749308][ T44] usb 4-1: Product: syz [ 379.757785][ T44] usb 4-1: Manufacturer: syz [ 379.776069][ T44] usb 4-1: config 0 descriptor?? [ 379.828813][ T5847] usb 1-1: config 0 has no interfaces? [ 379.839551][ T5847] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 379.851093][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.863426][ T5847] usb 1-1: Product: syz [ 379.874764][ T5847] usb 1-1: Manufacturer: syz [ 379.879518][ T5847] usb 1-1: SerialNumber: syz [ 379.936212][ T5847] usb 1-1: config 0 descriptor?? [ 380.022447][ T5847] usb 4-1: USB disconnect, device number 46 [ 380.174850][ T8826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.183899][ T8826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.259927][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 380.403782][ T44] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 380.679870][ T44] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 380.696099][ T44] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 380.829981][ T44] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 380.851682][ T44] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 380.919822][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.214391][ T8844] dummy0: left allmulticast mode [ 381.219847][ T8844] bridge0: port 3(dummy0) entered disabled state [ 381.743802][ T8844] batman_adv: batadv0: Adding interface: dummy0 [ 381.751390][ T8844] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.788257][ T8844] batman_adv: batadv0: Interface activated: dummy0 [ 381.890211][ T8831] net_ratelimit: 11 callbacks suppressed [ 381.890228][ T8831] batadv0: mtu less than device minimum [ 382.035187][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.047399][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.059471][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.071547][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.083821][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.095922][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.108000][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.120074][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.132215][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 382.590096][ T44] usb 3-1: string descriptor 0 read error: -71 [ 382.690809][ T44] usb 3-1: USB disconnect, device number 33 [ 382.856285][ T8855] xt_hashlimit: max too large, truncated to 1048576 [ 382.883504][ T5890] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 383.072506][ T44] usb 1-1: USB disconnect, device number 36 [ 383.153447][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 383.198448][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.226583][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.272604][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.281893][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.290080][ T5890] usb 4-1: Product: syz [ 383.294305][ T5890] usb 4-1: Manufacturer: syz [ 383.298956][ T5890] usb 4-1: SerialNumber: syz [ 383.990091][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.996934][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.093485][ T5919] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 384.180117][ T5890] usb 4-1: 0:2 : does not exist [ 384.233589][ T5919] usb 3-1: device descriptor read/64, error -71 [ 384.243968][ T5890] usb 4-1: USB disconnect, device number 47 [ 384.383992][ T6421] udevd[6421]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.493845][ T5919] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 384.643501][ T5919] usb 3-1: device descriptor read/64, error -71 [ 384.753872][ T5919] usb usb3-port1: attempt power cycle [ 385.103608][ T5919] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 385.137897][ T5919] usb 3-1: device descriptor read/8, error -71 [ 385.386905][ T5919] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 385.420172][ T8893] misc userio: The device must be registered before sending interrupts [ 385.434384][ T5919] usb 3-1: device descriptor read/8, error -71 [ 385.586966][ T5919] usb usb3-port1: unable to enumerate USB device [ 385.753176][ T8896] xt_hashlimit: max too large, truncated to 1048576 [ 386.183609][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 386.237370][ T8911] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 386.411228][ T8911] FAULT_INJECTION: forcing a failure. [ 386.411228][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 386.497221][ T10] usb 1-1: config 0 has no interfaces? [ 386.576091][ T5929] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 386.932183][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 386.956269][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.981391][ T10] usb 1-1: Product: syz [ 386.993186][ T10] usb 1-1: Manufacturer: syz [ 386.998660][ T10] usb 1-1: SerialNumber: syz [ 387.010765][ T10] usb 1-1: config 0 descriptor?? [ 387.073544][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 387.079286][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.4.793 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 387.079316][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.079330][ T8911] Call Trace: [ 387.079338][ T8911] [ 387.079348][ T8911] dump_stack_lvl+0x189/0x250 [ 387.079386][ T8911] ? __pfx____ratelimit+0x10/0x10 [ 387.079413][ T8911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.079444][ T8911] ? __pfx__printk+0x10/0x10 [ 387.079474][ T8911] ? __pfx___might_resched+0x10/0x10 [ 387.079492][ T8911] ? fs_reclaim_acquire+0x7d/0x100 [ 387.079522][ T8911] should_fail_ex+0x414/0x560 [ 387.079555][ T8911] should_failslab+0xa8/0x100 [ 387.079579][ T8911] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 387.079603][ T8911] ? __alloc_skb+0x112/0x2d0 [ 387.079629][ T8911] __alloc_skb+0x112/0x2d0 [ 387.079654][ T8911] tcp_stream_alloc_skb+0x3d/0x340 [ 387.079689][ T8911] tcp_connect+0x1087/0x46f0 [ 387.079726][ T8911] ? tcp_fastopen_defer_connect+0xf0/0x370 [ 387.079757][ T8911] ? secure_tcp_ts_off+0xbd/0x180 [ 387.079782][ T8911] ? sk_setup_caps+0x850/0xac0 [ 387.079813][ T8911] tcp_v4_connect+0x10e7/0x19d0 [ 387.079868][ T8911] ? __pfx_tcp_v4_connect+0x10/0x10 [ 387.079912][ T8911] mptcp_connect+0x742/0xc10 [ 387.079947][ T8911] __inet_stream_connect+0x298/0xf10 [ 387.079993][ T8911] ? __pfx___inet_stream_connect+0x10/0x10 [ 387.080026][ T8911] ? __kasan_kmalloc+0x93/0xb0 [ 387.080047][ T8911] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 387.080067][ T8911] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 387.080100][ T8911] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 387.080145][ T8911] mptcp_sendmsg_fastopen+0x17d/0x580 [ 387.080184][ T8911] mptcp_sendmsg+0x176c/0x1970 [ 387.080211][ T8911] ? __pfx___might_resched+0x10/0x10 [ 387.080229][ T8911] ? __lock_acquire+0xab9/0xd20 [ 387.080283][ T8911] ? aa_sk_perm+0x81e/0x950 [ 387.080310][ T8911] ? is_bpf_text_address+0x26/0x2b0 [ 387.080332][ T8911] ? __pfx_aa_sk_perm+0x10/0x10 [ 387.080357][ T8911] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 387.080386][ T8911] ? sock_rps_record_flow+0x19/0x410 [ 387.080418][ T8911] ? inet_sendmsg+0x2f4/0x370 [ 387.080451][ T8911] __sock_sendmsg+0x19c/0x270 [ 387.080484][ T8911] ____sys_sendmsg+0x505/0x830 [ 387.080513][ T8911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.080545][ T8911] ? import_iovec+0x74/0xa0 [ 387.080572][ T8911] ___sys_sendmsg+0x21f/0x2a0 [ 387.080598][ T8911] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.080663][ T8911] ? __fget_files+0x2a/0x420 [ 387.080687][ T8911] ? __fget_files+0x3a0/0x420 [ 387.080724][ T8911] __x64_sys_sendmsg+0x19b/0x260 [ 387.080751][ T8911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.080786][ T8911] ? __pfx_ksys_write+0x10/0x10 [ 387.080804][ T8911] ? rcu_is_watching+0x15/0xb0 [ 387.080830][ T8911] ? do_syscall_64+0xbe/0x3b0 [ 387.080864][ T8911] do_syscall_64+0xfa/0x3b0 [ 387.080890][ T8911] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.080917][ T8911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.080938][ T8911] ? clear_bhb_loop+0x60/0xb0 [ 387.080964][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.080984][ T8911] RIP: 0033:0x7f1b5998e929 [ 387.081005][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.081023][ T8911] RSP: 002b:00007f1b5a82a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.081046][ T8911] RAX: ffffffffffffffda RBX: 00007f1b59bb5fa0 RCX: 00007f1b5998e929 [ 387.081061][ T8911] RDX: 0000000034004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 387.081075][ T8911] RBP: 00007f1b5a82a090 R08: 0000000000000000 R09: 0000000000000000 [ 387.081088][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.081100][ T8911] R13: 0000000000000000 R14: 00007f1b59bb5fa0 R15: 00007f1b59cdfa28 [ 387.081140][ T8911] [ 387.400007][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.468488][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.627637][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.790'. [ 387.722656][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.753449][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.817849][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.828918][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.849670][ T8917] netlink: 186232 bytes leftover after parsing attributes in process `syz.2.794'. [ 387.875918][ T5929] usb 4-1: Product: syz [ 387.883569][ T5929] usb 4-1: Manufacturer: syz [ 387.888497][ T5929] usb 4-1: SerialNumber: syz [ 388.967425][ T1217] usb 1-1: USB disconnect, device number 37 [ 389.069957][ T5929] usb 4-1: 0:2 : does not exist [ 389.075341][ T5890] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 389.137321][ T30] audit: type=1326 audit(1749208933.323:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.180942][ T5929] usb 4-1: USB disconnect, device number 48 [ 389.234313][ T30] audit: type=1326 audit(1749208933.343:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.257952][ T30] audit: type=1326 audit(1749208933.343:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.306373][ T30] audit: type=1326 audit(1749208933.343:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.332655][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 389.351103][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.367548][ T6421] udevd[6421]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.378184][ T30] audit: type=1326 audit(1749208933.343:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.410697][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.476867][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.553882][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.562098][ T30] audit: type=1326 audit(1749208933.343:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.584516][ T5890] usb 3-1: Product: syz [ 389.588748][ T5890] usb 3-1: Manufacturer: syz [ 389.603540][ T5890] usb 3-1: SerialNumber: syz [ 389.644763][ T30] audit: type=1326 audit(1749208933.343:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.673964][ T30] audit: type=1326 audit(1749208933.353:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.704972][ T30] audit: type=1326 audit(1749208933.433:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 389.755191][ T30] audit: type=1326 audit(1749208933.433:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf738e929 code=0x7ffc0000 [ 390.101365][ T8938] xt_connbytes: Forcing CT accounting to be enabled [ 391.036423][ T5890] usb 3-1: 0:2 : does not exist [ 391.108056][ T5890] usb 3-1: USB disconnect, device number 38 [ 391.210297][ T8947] xt_hashlimit: max too large, truncated to 1048576 [ 391.308380][ T6421] udevd[6421]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.633969][ T5929] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 391.833753][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 391.842677][ T5929] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 391.851917][ T5929] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.866769][ T5929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.892544][ T5929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.906054][ T5929] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.919521][ T5929] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.928689][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.158493][ T5929] usb 2-1: GET_CAPABILITIES returned 0 [ 392.166076][ T5929] usbtmc 2-1:16.0: can't read capabilities [ 392.253708][ T1217] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 392.361469][ T5919] usb 2-1: USB disconnect, device number 56 [ 392.408991][ T1217] usb 1-1: config 0 has no interfaces? [ 392.422180][ T1217] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 392.431776][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.447399][ T1217] usb 1-1: Product: syz [ 392.452162][ T1217] usb 1-1: Manufacturer: syz [ 392.457686][ T1217] usb 1-1: SerialNumber: syz [ 392.467935][ T1217] usb 1-1: config 0 descriptor?? [ 392.702604][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.713107][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.862948][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'. [ 394.021081][ T8988] xt_hashlimit: max too large, truncated to 1048576 [ 394.643024][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f9f800: rx timeout, send abort [ 394.862527][ T9001] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.819'. [ 395.053982][ T5919] usb 1-1: USB disconnect, device number 38 [ 395.152685][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f9f800: abort rx timeout. Force session deactivation [ 395.483665][ T44] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 395.623690][ T44] usb 3-1: device descriptor read/64, error -71 [ 395.863608][ T44] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 395.993622][ T44] usb 3-1: device descriptor read/64, error -71 [ 396.103965][ T44] usb usb3-port1: attempt power cycle [ 396.443661][ T44] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 396.464217][ T44] usb 3-1: device descriptor read/8, error -71 [ 396.720597][ T44] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 396.744498][ T44] usb 3-1: device descriptor read/8, error -71 [ 396.854865][ T44] usb usb3-port1: unable to enumerate USB device [ 445.427721][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.434330][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.066794][ T9019] loop2: detected capacity change from 0 to 7 [ 473.089199][ T9019] Dev loop2: unable to read RDB block 7 [ 473.105406][ T9019] loop2: unable to read partition table [ 473.111351][ T9019] loop2: partition table beyond EOD, truncated [ 473.139040][ T9019] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.352535][ T9032] netlink: 'syz.1.830': attribute type 63 has an invalid length. [ 473.793495][ T5890] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 473.966593][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 473.980882][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.004417][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.023648][ T5929] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 474.041778][ T5890] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 474.061456][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.115516][ T5890] usb 2-1: config 0 descriptor?? [ 474.204124][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 474.214872][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 474.250926][ T5929] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 474.277145][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.315916][ T5929] usb 1-1: Product: syz [ 474.320213][ T5929] usb 1-1: Manufacturer: syz [ 474.348119][ T5929] usb 1-1: SerialNumber: syz [ 474.374582][ T5929] usb 1-1: config 0 descriptor?? [ 474.395629][ T5929] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 474.423683][ T5929] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 474.574188][ T5890] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 474.581377][ T5890] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 474.609158][ T5890] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 474.623408][ T5890] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 474.641324][ T5890] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 474.662453][ T5890] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 474.809281][ T5890] usb 2-1: USB disconnect, device number 57 [ 475.007826][ T5929] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 475.383434][ T44] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 475.396598][ T1217] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 475.535307][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 475.629302][ T44] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 475.656639][ T5929] em28xx 1-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 475.673979][ T1217] usb 3-1: Using ep0 maxpacket: 32 [ 475.677011][ T5929] em28xx 1-1:0.0: board has no eeprom [ 475.681853][ T44] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 475.703653][ T44] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 475.716272][ T44] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 475.730164][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 475.737710][ T1217] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 475.747745][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.773223][ T44] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 475.782463][ T1217] usb 3-1: Product: syz [ 475.786967][ T1217] usb 3-1: Manufacturer: syz [ 475.791695][ T44] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 475.800302][ T1217] usb 3-1: SerialNumber: syz [ 475.806319][ T44] usb 4-1: Product: syz [ 475.811404][ T44] usb 4-1: Manufacturer: syz [ 475.817602][ T1217] usb 3-1: config 0 descriptor?? [ 475.822899][ T44] usb 4-1: SerialNumber: syz [ 475.851651][ T44] usb 4-1: config 0 descriptor?? [ 475.861041][ T44] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 475.928799][ T44] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 475.943431][ T5929] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 476.053633][ T5929] em28xx 1-1:0.0: dvb set to bulk mode. [ 476.059940][ T5890] em28xx 1-1:0.0: Binding DVB extension [ 476.078628][ T5929] usb 1-1: USB disconnect, device number 39 [ 476.086744][ T5929] em28xx 1-1:0.0: Disconnecting em28xx [ 476.098254][ T1542] usb 4-1: USB disconnect, device number 49 [ 476.109832][ T1542] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 476.206752][ T5890] em28xx 1-1:0.0: Registering input extension [ 476.242315][ T5929] em28xx 1-1:0.0: Closing input extension [ 476.297281][ T1217] snd-usb-6fire 3-1:0.0: unable to receive device firmware state. [ 476.323789][ T1217] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 476.352197][ T1217] usb 3-1: USB disconnect, device number 43 [ 476.366822][ T5929] em28xx 1-1:0.0: Freeing device [ 476.720104][ T9082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.733429][ T9082] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 476.884852][ T9082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 476.890847][ T9082] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 476.957426][ T9082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 476.984095][ T9082] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 477.030184][ T9082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.100587][ T9082] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 477.118593][ T9082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 477.133498][ T9082] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 477.949661][ T9110] SET target dimension over the limit! [ 478.546278][ T5929] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 478.730762][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 478.740325][ T5929] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 478.759765][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 478.778454][ T5929] usb 5-1: Product: syz [ 478.793006][ T5929] usb 5-1: Manufacturer: syz [ 478.797740][ T5929] usb 5-1: SerialNumber: syz [ 478.834614][ T5929] usb 5-1: config 0 descriptor?? [ 478.858603][ T5929] usb 5-1: selecting invalid altsetting 0 [ 479.067823][ T5929] usb 5-1: USB disconnect, device number 48 [ 481.109753][ T9155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.921752][ T9183] sctp: [Deprecated]: syz.0.878 (pid 9183) Use of int in max_burst socket option deprecated. [ 482.921752][ T9183] Use struct sctp_assoc_value instead [ 484.246863][ T9207] vivid-000: disconnect [ 484.289748][ T9207] vivid-000: reconnect [ 485.985481][ T9221] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 486.768857][ T9217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.842773][ T9230] syz_tun: entered allmulticast mode [ 487.191310][ T9216] syz_tun: left allmulticast mode [ 487.692230][ T9234] veth0_to_team: entered promiscuous mode [ 487.698319][ T9234] veth0_to_team: entered allmulticast mode [ 488.123561][ T9243] warning: `syz.3.896' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 488.713421][ T5929] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 488.877315][ T5929] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 488.905010][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.923434][ T5929] usb 2-1: Product: syz [ 488.927681][ T5929] usb 2-1: Manufacturer: syz [ 488.932317][ T5929] usb 2-1: SerialNumber: syz [ 488.954068][ T5929] usb 2-1: config 0 descriptor?? [ 488.964731][ T5929] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 489.375049][ T5929] gspca_sunplus: reg_r err -71 [ 489.388053][ T5929] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 489.419298][ T5929] usb 2-1: USB disconnect, device number 58 [ 489.463687][ T9271] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 489.470448][ T9271] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 489.488150][ T9271] vhci_hcd vhci_hcd.0: Device attached [ 489.542765][ T9271] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 489.549456][ T9271] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.563137][ T9271] vhci_hcd vhci_hcd.0: Device attached [ 489.569973][ T9279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.587182][ T9271] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 489.593860][ T9271] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 489.621698][ T9271] vhci_hcd vhci_hcd.0: Device attached [ 489.642103][ T9279] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 489.648784][ T9279] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 489.673404][ T1217] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 489.673524][ T5890] vhci_hcd: vhci_device speed not set [ 489.706834][ T9279] vhci_hcd vhci_hcd.0: Device attached [ 489.724284][ T9271] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.734105][ T9271] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.813621][ T9274] vhci_hcd: connection closed [ 489.816322][ T9280] vhci_hcd: connection closed [ 489.822704][ T9272] vhci_hcd: connection closed [ 489.825194][ T5890] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 489.840361][ T5021] vhci_hcd: stop threads [ 489.847914][ T5021] vhci_hcd: release socket [ 489.855832][ T1217] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 489.877021][ T5021] vhci_hcd: disconnect device [ 489.882155][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.902938][ T1217] usb 5-1: Product: syz [ 489.923583][ T5021] vhci_hcd: stop threads [ 489.930211][ T1217] usb 5-1: Manufacturer: syz [ 489.936303][ T5021] vhci_hcd: release socket [ 489.942040][ T1217] usb 5-1: SerialNumber: syz [ 489.954463][ T5021] vhci_hcd: disconnect device [ 489.973471][ T5021] vhci_hcd: stop threads [ 489.979903][ T5021] vhci_hcd: release socket [ 489.988533][ T1217] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 490.002871][ T5021] vhci_hcd: disconnect device [ 490.055268][ T5919] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 490.061742][ T9282] vhci_hcd: connection closed [ 490.083508][ T5021] vhci_hcd: stop threads [ 490.113373][ T5021] vhci_hcd: release socket [ 490.128485][ T5021] vhci_hcd: disconnect device [ 490.284158][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.910'. [ 490.303789][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.910'. [ 490.322634][ T9290] gretap0: entered promiscuous mode [ 490.344257][ T1217] usb 5-1: USB disconnect, device number 49 [ 490.361558][ T9291] xt_hashlimit: size too large, truncated to 1048576 [ 490.391132][ T9290] gretap0: left promiscuous mode [ 490.468714][ T9292] xt_hashlimit: size too large, truncated to 1048576 [ 491.103536][ T5919] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 491.123731][ T5919] ath9k_htc: Failed to initialize the device [ 491.131757][ T1217] usb 5-1: ath9k_htc: USB layer deinitialized [ 493.283790][ T9336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.939784][ T9338] lo: entered allmulticast mode [ 493.967964][ T9338] lo: left allmulticast mode [ 494.813594][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 495.093555][ T5890] vhci_hcd: vhci_device speed not set [ 495.942035][ T9365] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 495.982292][ T9365] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 496.023575][ T9365] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 498.461583][ T9393] netlink: 292 bytes leftover after parsing attributes in process `syz.3.938'. [ 500.394306][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 501.600936][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 502.299905][ T9449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.338949][ T9449] lo: entered allmulticast mode [ 502.557719][ T9430] lo: left allmulticast mode [ 503.844723][ T9466] bridge0: port 3(syz_tun) entered blocking state [ 503.867374][ T9466] bridge0: port 3(syz_tun) entered disabled state [ 503.886471][ T9466] syz_tun: entered allmulticast mode [ 503.931485][ T9466] syz_tun: entered promiscuous mode [ 504.452222][ T9477] net_ratelimit: 11 callbacks suppressed [ 504.452242][ T9477] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 505.523811][ T30] audit: type=1326 audit(1749209049.703:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 505.979165][ T30] audit: type=1326 audit(1749209049.703:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.053491][ T30] audit: type=1326 audit(1749209049.743:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.128752][ T30] audit: type=1326 audit(1749209049.743:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.203942][ T30] audit: type=1326 audit(1749209049.743:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.259212][ T30] audit: type=1326 audit(1749209050.143:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.348268][ T30] audit: type=1326 audit(1749209050.143:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.393491][ T30] audit: type=1326 audit(1749209050.143:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.421540][ T30] audit: type=1326 audit(1749209050.143:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.443854][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.522715][ T30] audit: type=1326 audit(1749209050.143:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 506.544924][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.867328][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.873839][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.268753][ T9517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.263624][ T5919] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 508.455977][ T5919] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 508.466751][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.485042][ T5919] usb 4-1: config 0 descriptor?? [ 508.501011][ T5919] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 509.591368][ T5919] gspca_cpia1: usb_control_msg 05, error -110 [ 509.619110][ T5919] gspca_cpia1: usb_control_msg 01, error -32 [ 509.642208][ T5919] gspca_cpia1: usb_control_msg 01, error -32 [ 509.672264][ T5919] gspca_cpia1: usb_control_msg 01, error -32 [ 509.694753][ T5919] gspca_cpia1: usb_control_msg 01, error -32 [ 509.712122][ T5919] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 509.788494][ T5919] usb 4-1: USB disconnect, device number 50 [ 511.208756][ T9567] bridge0: port 4(team0) entered blocking state [ 511.215368][ T9567] bridge0: port 4(team0) entered disabled state [ 511.222084][ T9567] team0: entered allmulticast mode [ 511.227413][ T9567] team_slave_0: entered allmulticast mode [ 511.233200][ T9567] team_slave_1: entered allmulticast mode [ 511.243555][ T9567] team0: entered promiscuous mode [ 511.248685][ T9567] team_slave_0: entered promiscuous mode [ 511.256049][ T9567] team_slave_1: entered promiscuous mode [ 512.513752][ T9573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 512.679483][ T9574] syz_tun: entered allmulticast mode [ 512.875154][ T9561] syz_tun: left allmulticast mode [ 513.368477][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 515.193539][ T5919] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 515.380805][ T5919] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.409353][ T5919] usb 5-1: config 0 has no interface number 0 [ 515.433423][ T5919] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.458532][ T5919] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.478771][ T5919] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 515.499152][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.530467][ T5919] usb 5-1: config 0 descriptor?? [ 516.093543][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 516.157496][ T9627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.273385][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 516.294982][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 516.323501][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.331576][ T10] usb 4-1: Product: syz [ 516.356386][ T10] usb 4-1: Manufacturer: syz [ 516.361063][ T10] usb 4-1: SerialNumber: syz [ 516.394237][ T10] usb 4-1: config 0 descriptor?? [ 516.820925][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 516.834457][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 516.854353][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 516.890217][ T10] usb 4-1: media controller created [ 517.005968][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.653454][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 517.704152][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 517.737496][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 517.761815][ T10] usb 4-1: USB disconnect, device number 51 [ 517.915694][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 517.953992][ T9641] tipc: Started in network mode [ 517.958983][ T9641] tipc: Node identity ac1414aa, cluster identity 4711 [ 518.054874][ T9641] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 518.069894][ T5919] usbhid 5-1:0.1: can't add hid device: -71 [ 518.079557][ T5919] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 518.088250][ T9641] tipc: Enabled bearer , priority 10 [ 518.133566][ T5919] usb 5-1: USB disconnect, device number 50 [ 518.195103][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 518.333580][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 518.473410][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 518.613410][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 518.753598][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 518.874167][ T9658] syz_tun: entered allmulticast mode [ 518.890623][ T9657] syz_tun: left allmulticast mode [ 518.895908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 519.033380][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 519.175341][ T5919] tipc: Node number set to 2886997162 [ 519.244052][ T5929] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 519.313511][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 519.488777][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.530224][ T5929] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.585289][ T5929] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 519.612426][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.627619][ T5929] usb 2-1: Product: syz [ 519.632615][ T5929] usb 2-1: Manufacturer: syz [ 519.672009][ T5929] usb 2-1: SerialNumber: syz [ 519.693261][ T5929] usb 2-1: config 0 descriptor?? [ 519.920959][ T10] usb 2-1: USB disconnect, device number 59 [ 520.683570][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 520.863745][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 520.898070][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 520.928960][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 520.963427][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 520.994967][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 521.034283][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.063469][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.071578][ T10] usb 5-1: Product: syz [ 521.093376][ T10] usb 5-1: Manufacturer: syz [ 521.157786][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 521.183614][ C1] net_ratelimit: 2 callbacks suppressed [ 521.183636][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 521.184225][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 521.222240][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 521.242221][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 521.431258][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1052'. [ 521.609926][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 521.663504][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 521.670395][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 521.676882][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 521.683531][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 521.689932][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 521.696573][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 521.703465][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 521.710126][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 521.716448][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 521.723063][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 521.731447][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 521.738111][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 521.744527][ T5890] usb 5-1: USB disconnect, device number 51 [ 522.224059][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 523.263585][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 523.460604][ T9764] batadv_slave_0: mtu less than device minimum [ 524.303504][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 525.343544][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 526.383595][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 526.595856][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 527.423576][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 527.886156][ T9835] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 528.464984][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 528.963513][ T5919] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 529.140011][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 529.163604][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.185064][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.204960][ T5919] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 529.215202][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.229832][ T5919] usb 4-1: config 0 descriptor?? [ 529.503589][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 529.672176][ T5919] saitek 0003:06A3:0CCB.0008: item fetching failed at offset 0/2 [ 529.701223][ T5919] saitek 0003:06A3:0CCB.0008: parse failed [ 529.714370][ T5919] saitek 0003:06A3:0CCB.0008: probe with driver saitek failed with error -22 [ 529.862873][ T5919] usb 4-1: USB disconnect, device number 52 [ 530.543593][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 531.352453][ T9902] vivid-003: disconnect [ 531.583371][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 531.906924][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 531.906941][ T30] audit: type=1326 audit(1749209076.093:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7fc00000 [ 531.914106][ T9894] vivid-003: reconnect [ 531.970364][ T30] audit: type=1326 audit(1749209076.093:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1b5998e929 code=0x7fc00000 [ 532.004002][ T30] audit: type=1326 audit(1749209076.183:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7fc00000 [ 532.623371][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 532.633591][ T5919] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 533.113440][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 533.144050][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 533.181835][ T5919] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 533.213611][ T5919] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 533.226376][ T5919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.235815][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.244379][ T5919] usb 5-1: Product: syz [ 533.248586][ T5919] usb 5-1: Manufacturer: syz [ 533.253232][ T5919] usb 5-1: SerialNumber: syz [ 533.265306][ T9919] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 533.272831][ T9919] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 533.574724][ T5919] usb 5-1: bad CDC descriptors [ 533.600967][ T5919] usb 5-1: USB disconnect, device number 52 [ 533.656361][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 533.663407][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 533.723901][ T9934] dummy0: left promiscuous mode [ 533.742464][ T9934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.563520][ T5890] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 534.703378][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 534.753778][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 534.771218][ T5890] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 534.799481][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.818985][ T5890] usb 5-1: config 0 descriptor?? [ 535.048244][ T5890] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 535.251632][ T5890] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 535.275104][ T5890] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 535.301371][ T5890] asix 5-1:0.0: probe with driver asix failed with error -32 [ 535.743366][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 535.801316][ T9981] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 536.783369][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 537.823408][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 537.998479][T10031] xt_hashlimit: size too large, truncated to 1048576 [ 538.108837][ T5919] usb 5-1: USB disconnect, device number 53 [ 538.633552][ T5919] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 538.805553][ T5919] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.835099][ T30] audit: type=1326 audit(1749209083.023:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 538.837269][ T5919] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 538.868037][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 538.919805][ T30] audit: type=1326 audit(1749209083.053:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 538.973590][ T30] audit: type=1326 audit(1749209083.053:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 539.004374][ T5919] usb 2-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.047858][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 539.058221][ T30] audit: type=1326 audit(1749209083.053:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 539.101446][ T30] audit: type=1326 audit(1749209083.053:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 539.115143][ T5919] usb 2-1: string descriptor 0 read error: -22 [ 539.150463][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.180194][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.181522][ T30] audit: type=1326 audit(1749209083.053:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 539.211979][T10037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.221726][ T5919] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 539.287430][ T30] audit: type=1326 audit(1749209083.053:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 539.353444][ T30] audit: type=1326 audit(1749209083.053:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 539.431678][ T5919] usb 2-1: USB disconnect, device number 60 [ 539.433391][ T30] audit: type=1326 audit(1749209083.053:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 539.503622][ T30] audit: type=1326 audit(1749209083.053:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 539.879590][T10056] macvtap1: entered allmulticast mode [ 539.903370][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 539.910378][T10056] veth0_macvtap: entered allmulticast mode [ 540.943368][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 541.983374][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 542.520103][T10085] binder_alloc: 10084: binder_alloc_buf, no vma [ 543.023371][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 544.063373][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 545.103374][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 545.376300][T10149] input: syz0 as /devices/virtual/input/input23 [ 545.783491][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 545.783511][ T30] audit: type=1326 audit(1749209089.903:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 545.862049][ T30] audit: type=1326 audit(1749209089.903:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 545.897276][ T30] audit: type=1326 audit(1749209089.903:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 545.965863][ T30] audit: type=1326 audit(1749209089.903:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 546.034678][ T30] audit: type=1326 audit(1749209089.903:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 546.083461][ T30] audit: type=1326 audit(1749209089.903:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 546.143370][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 546.163401][ T30] audit: type=1326 audit(1749209089.903:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 546.218748][ T30] audit: type=1326 audit(1749209089.903:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 546.283597][ T30] audit: type=1326 audit(1749209089.903:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 546.343615][ T30] audit: type=1326 audit(1749209089.903:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 547.183375][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 548.223373][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 549.263395][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 549.360489][T10238] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 550.303420][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 550.555685][T10269] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.563232][T10269] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.622898][T10269] batman_adv: batadv0: Interface deactivated: dummy0 [ 550.821444][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.848375][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.988081][T10269] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.013773][T10269] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.030681][T10269] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.043026][T10269] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.212593][T10269] vlan2: left allmulticast mode [ 551.241442][T10269] veth0_macvtap: left allmulticast mode [ 551.247649][T10269] macvtap1: left allmulticast mode [ 551.343365][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 551.365644][T10269] syz.4.1247 (10269) used greatest stack depth: 19928 bytes left [ 552.178947][T10306] capability: warning: `syz.2.1250' uses 32-bit capabilities (legacy support in use) [ 552.286029][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 552.383411][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 552.477024][ T5890] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 552.633603][ T5890] usb 3-1: device descriptor read/64, error -71 [ 552.958180][ T5890] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 553.093927][ T5890] usb 3-1: device descriptor read/64, error -71 [ 553.217763][ T5890] usb usb3-port1: attempt power cycle [ 553.423370][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 553.589093][ T5890] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 553.777002][ T5890] usb 3-1: device descriptor read/8, error -71 [ 554.110787][ T5890] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 554.162849][ T5890] usb 3-1: device descriptor read/8, error -71 [ 554.275924][ T5890] usb usb3-port1: unable to enumerate USB device [ 554.463414][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 555.503399][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 556.543378][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 557.583371][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 558.628448][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 559.334766][T10407] kvm: kvm [10406]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4500004000 [ 559.344868][T10407] kvm: kvm [10406]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x4500000000 [ 559.374276][T10407] kvm: kvm [10406]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4f00000000 [ 559.413461][T10407] kvm: kvm [10406]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x4f00004000 [ 559.478519][T10407] kvm: kvm [10406]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb300000000 [ 559.493581][T10407] kvm: kvm [10406]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xb300004000 [ 559.673388][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 560.116278][T10312] Set syz1 is full, maxelem 65536 reached [ 560.166893][T10422] binder: BINDER_SET_CONTEXT_MGR already set [ 560.195142][T10422] binder: 10408:10422 ioctl 4018620d 200000000040 returned -16 [ 560.703359][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 560.955295][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 561.535623][T10456] hub 8-0:1.0: USB hub found [ 561.583537][T10456] hub 8-0:1.0: 1 port detected [ 561.743384][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 561.923205][T10464] netlink: 'syz.2.1312': attribute type 13 has an invalid length. [ 561.988757][T10464] gretap0: refused to change device tx_queue_len [ 562.055993][T10464] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 562.606272][T10469] binder: BINDER_SET_CONTEXT_MGR already set [ 562.612348][T10469] binder: 10458:10469 ioctl 4018620d 200000000040 returned -16 [ 562.783358][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 563.823365][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 564.686124][T10466] hub 8-0:1.0: USB hub found [ 564.745084][T10466] hub 8-0:1.0: 1 port detected [ 564.863350][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 565.307420][T10486] input: syz0 as /devices/virtual/input/input24 [ 565.903356][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 566.943361][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 567.853770][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 567.853791][ T30] audit: type=1326 audit(1749209112.033:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 567.973365][ T30] audit: type=1326 audit(1749209112.033:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 567.995982][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 568.053404][ T30] audit: type=1326 audit(1749209112.043:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 568.137241][ T30] audit: type=1326 audit(1749209112.043:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 568.193441][ T30] audit: type=1326 audit(1749209112.043:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 568.283362][ T30] audit: type=1326 audit(1749209112.043:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 568.312144][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.318563][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.355566][ T30] audit: type=1326 audit(1749209112.043:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 568.479671][ T30] audit: type=1326 audit(1749209112.043:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 568.563414][ T30] audit: type=1326 audit(1749209112.043:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 568.633369][ T5890] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 568.677940][ T30] audit: type=1326 audit(1749209112.043:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3638e929 code=0x7ffc0000 [ 568.793659][ T5890] usb 3-1: device descriptor read/64, error -71 [ 569.023362][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 569.044631][ T5890] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 569.183749][ T5890] usb 3-1: device descriptor read/64, error -71 [ 569.303945][ T5890] usb usb3-port1: attempt power cycle [ 569.643546][ T5890] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 569.686219][ T5890] usb 3-1: device descriptor read/8, error -71 [ 569.933567][ T5890] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 569.967335][ T5890] usb 3-1: device descriptor read/8, error -71 [ 570.063359][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 570.093929][ T5890] usb usb3-port1: unable to enumerate USB device [ 571.103394][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 571.273894][ T5890] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 571.306957][T10596] team0: left allmulticast mode [ 571.311883][T10596] team_slave_0: left allmulticast mode [ 571.319198][T10596] team_slave_1: left allmulticast mode [ 571.329221][T10596] team0: left promiscuous mode [ 571.334511][T10596] team_slave_0: left promiscuous mode [ 571.340541][T10596] team_slave_1: left promiscuous mode [ 571.352706][T10596] bridge0: port 4(team0) entered disabled state [ 571.374894][T10596] syz_tun: left allmulticast mode [ 571.383050][T10596] syz_tun: left promiscuous mode [ 571.389244][T10596] bridge0: port 3(syz_tun) entered disabled state [ 571.405991][T10596] bridge_slave_1: left allmulticast mode [ 571.424837][T10596] bridge_slave_1: left promiscuous mode [ 571.430923][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.438149][ T5890] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1243, setting to 64 [ 571.449723][ T5890] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 571.459584][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.462138][T10596] bridge_slave_0: left allmulticast mode [ 571.477157][T10596] bridge_slave_0: left promiscuous mode [ 571.483099][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.484515][T10588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 572.103479][T10614] netlink: 'syz.3.1366': attribute type 16 has an invalid length. [ 572.135238][T10614] netlink: 'syz.3.1366': attribute type 17 has an invalid length. [ 572.153370][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 572.197398][T10614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.210563][T10614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.305265][T10623] fuse: Unknown parameter '0x0000000000000004' [ 572.316585][ T5890] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 572.340502][ T5890] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input25 [ 572.517877][ T1217] usb 2-1: USB disconnect, device number 61 [ 572.518008][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 572.771601][T10631] fuse: Bad value for 'fd' [ 573.183389][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 573.324267][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 573.324287][ T30] audit: type=1326 audit(1749209117.513:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10639 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 573.411064][ T30] audit: type=1326 audit(1749209117.553:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10639 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 573.475389][ T30] audit: type=1326 audit(1749209117.553:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10639 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 574.223455][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 574.264682][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'. [ 575.263350][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 575.428614][T10680] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1391'. [ 576.303483][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 576.593483][ T1217] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 576.793468][ T1217] usb 5-1: device descriptor read/64, error -71 [ 577.053379][ T1217] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 577.203385][ T1217] usb 5-1: device descriptor read/64, error -71 [ 577.343379][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 577.473700][ T1217] usb usb5-port1: attempt power cycle [ 577.953403][ T1217] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 577.997155][ T1217] usb 5-1: device descriptor read/8, error -71 [ 578.155610][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 578.243437][ T1217] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 578.277443][ T1217] usb 5-1: device descriptor read/8, error -71 [ 578.383394][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 578.406630][ T1217] usb usb5-port1: unable to enumerate USB device [ 579.423358][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 579.423419][ T30] audit: type=1326 audit(1749209123.603:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 579.528287][ T30] audit: type=1326 audit(1749209123.603:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 579.620553][ T30] audit: type=1326 audit(1749209123.603:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 579.669689][ T30] audit: type=1326 audit(1749209123.603:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 579.709370][ T30] audit: type=1326 audit(1749209123.603:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 579.845820][ T30] audit: type=1326 audit(1749209123.603:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 579.962126][ T30] audit: type=1326 audit(1749209123.603:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 580.030021][ T30] audit: type=1326 audit(1749209123.603:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 580.133467][ T30] audit: type=1326 audit(1749209123.603:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 580.203384][ T30] audit: type=1326 audit(1749209123.603:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.1.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 580.342331][T10785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.413832][T10785] batadv0: mtu less than device minimum [ 580.420983][T10785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 580.433424][T10785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 580.445372][T10785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 580.457787][T10785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 580.469811][T10785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 580.481817][T10785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 580.493869][T10785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 580.644287][T10785] batadv_slave_0: entered promiscuous mode [ 581.358322][T10803] tipc: New replicast peer: 10.1.1.2 [ 581.365446][T10803] tipc: Enabled bearer , priority 10 [ 581.766811][T10811] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1440'. [ 581.913482][ T5919] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 582.086441][ T5919] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 582.113607][ T5919] usb 4-1: too many endpoints for config 0 interface 0 altsetting 206: 246, using maximum allowed: 30 [ 582.167944][ T5919] usb 4-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 582.202024][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.219872][ T5919] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 582.256574][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.310304][ T5919] usb 4-1: config 0 descriptor?? [ 582.736267][ T5919] usb 4-1: string descriptor 0 read error: -71 [ 582.762978][ T5919] usb 4-1: USB disconnect, device number 53 [ 583.016616][T10827] bridge0: entered allmulticast mode [ 583.664602][ C1] net_ratelimit: 16 callbacks suppressed [ 583.664624][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 584.497423][T10864] netlink: 'syz.1.1463': attribute type 15 has an invalid length. [ 584.703392][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 585.536564][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 585.536584][ T30] audit: type=1326 audit(1749209129.723:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 585.616464][ T30] audit: type=1326 audit(1749209129.763:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 585.691841][ T30] audit: type=1326 audit(1749209129.763:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 585.743354][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 585.785037][ T30] audit: type=1326 audit(1749209129.763:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 585.807426][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.858055][T10900] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 585.885623][ T30] audit: type=1326 audit(1749209129.763:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 585.897004][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 585.908134][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.986730][ T30] audit: type=1326 audit(1749209129.763:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 586.009121][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.073394][ T30] audit: type=1326 audit(1749209129.763:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x7ffc0000 [ 586.783337][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 587.823349][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 588.863372][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 589.825417][ T30] audit: type=1326 audit(1749209134.013:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10961 comm="syz.4.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 589.903540][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 589.913568][ T30] audit: type=1326 audit(1749209134.033:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10961 comm="syz.4.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 589.981520][ T30] audit: type=1326 audit(1749209134.033:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10961 comm="syz.4.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 590.213399][ T5919] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 590.403468][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 590.415345][ T5919] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 590.453343][ T5919] usb 2-1: config 0 has no interface number 0 [ 590.480294][ T5919] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 590.502864][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.523326][ T5919] usb 2-1: Product: syz [ 590.527665][ T5919] usb 2-1: Manufacturer: syz [ 590.532310][ T5919] usb 2-1: SerialNumber: syz [ 590.578797][ T5919] usb 2-1: config 0 descriptor?? [ 590.600770][ T5919] smsc95xx v2.0.0 [ 590.953345][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 591.033712][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 591.083360][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 591.309428][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 591.353562][ T5919] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 591.404668][ T5919] usb 2-1: USB disconnect, device number 62 [ 591.983353][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 592.065316][T10993] fuse: Bad value for 'rootmode' [ 593.023349][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 594.063352][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 595.113412][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 595.565763][T11032] input: syz0 as /devices/virtual/input/input26 [ 595.598844][T11020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1516'. [ 596.143347][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 596.653470][ T44] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 596.816009][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.837335][ T44] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 596.859253][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.878894][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.901524][ T44] usb 2-1: Product: syz [ 596.906157][ T44] usb 2-1: Manufacturer: syz [ 596.927490][ T44] usb 2-1: SerialNumber: syz [ 596.987580][ T44] cdc_mbim 2-1:1.0: skipping garbage [ 597.168017][T11053] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 597.183412][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 597.758953][T11074] kvm: kvm [11072]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xc100000800 [ 597.771166][T11074] kvm: kvm [11072]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc200000000 [ 597.796380][T11053] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 597.819829][T11074] kvm: kvm [11072]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x11e00000000 [ 597.832662][ T44] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 597.856749][T11074] kvm: kvm [11072]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x18600000000 [ 597.877434][ T44] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 597.883604][T11074] kvm: kvm [11072]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x18700000800 [ 597.975721][ T44] wwan wwan0: port wwan0mbim0 attached [ 598.041954][ T44] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, aa:9b:49:de:33:b4 [ 598.165645][ T44] usb 2-1: USB disconnect, device number 63 [ 598.221841][ T44] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 598.230805][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 598.487049][ T44] wwan wwan0: port wwan0mbim0 disconnected [ 598.763490][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 598.763511][ T30] audit: type=1326 audit(1749209142.943:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 598.853530][ T30] audit: type=1326 audit(1749209142.943:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 599.012420][ T30] audit: type=1326 audit(1749209142.943:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 599.103644][ T30] audit: type=1326 audit(1749209142.943:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 599.206876][ T30] audit: type=1326 audit(1749209142.943:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 599.263372][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 599.304726][ T30] audit: type=1326 audit(1749209142.943:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 599.413395][ T30] audit: type=1326 audit(1749209142.943:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 599.543399][ T30] audit: type=1326 audit(1749209143.573:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 599.622969][T11112] syz_tun: entered allmulticast mode [ 599.630606][ T30] audit: type=1326 audit(1749209143.573:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 599.684591][T11111] syz_tun: left allmulticast mode [ 599.723369][ T30] audit: type=1326 audit(1749209143.573:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b5998e929 code=0x7ffc0000 [ 599.870269][T11118] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 599.887744][T11118] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 600.303449][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 600.343428][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 600.505789][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 600.515299][T11137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.527685][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 600.586188][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 600.612516][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 600.643662][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 600.683332][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 600.713473][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 600.759906][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 600.773664][ T1217] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 600.793523][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.823214][ T10] usb 5-1: config 0 descriptor?? [ 600.944342][ T1217] usb 4-1: Using ep0 maxpacket: 16 [ 600.965501][ T1217] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.984474][ T1217] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.006647][ T1217] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.024575][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.046404][ T1217] usb 4-1: Product: syz [ 601.053637][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 601.061785][ T1217] usb 4-1: Manufacturer: syz [ 601.082001][ T1217] usb 4-1: SerialNumber: syz [ 601.343397][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 601.574356][ T1217] usb 4-1: cannot find UAC_HEADER [ 601.657453][ T1217] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 601.732835][ T9026] udevd[9026]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.916032][ T1217] usb 4-1: USB disconnect, device number 54 [ 601.951825][T11161] lo: entered allmulticast mode [ 601.976720][T11160] lo: left allmulticast mode [ 602.383408][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 602.652352][T11177] fuse: Unknown parameter '0x0000000000000004' [ 603.117031][ T5929] usb 5-1: USB disconnect, device number 58 [ 603.159515][ T5929] usblp0: removed [ 603.423339][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 603.598449][T11195] syz_tun: entered allmulticast mode [ 603.660488][T11194] syz_tun: left allmulticast mode [ 603.673578][ T5929] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 603.778824][T11199] netlink: 'syz.2.1566': attribute type 12 has an invalid length. [ 603.856480][ T5929] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.878360][ T5929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.921200][ T5929] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.933450][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.952117][ T5929] usb 5-1: Product: syz [ 603.961967][ T5929] usb 5-1: Manufacturer: syz [ 603.972104][ T5929] usb 5-1: SerialNumber: syz [ 604.215457][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 604.463446][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 604.927931][T11227] syz_tun: entered allmulticast mode [ 605.005015][T11226] syz_tun: left allmulticast mode [ 605.503389][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 606.237435][T11248] netlink: 'syz.2.1590': attribute type 16 has an invalid length. [ 606.245623][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 606.245642][ T30] audit: type=1326 audit(1749209150.423:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.283914][T11248] netlink: 'syz.2.1590': attribute type 17 has an invalid length. [ 606.300221][ T30] audit: type=1326 audit(1749209150.423:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.332041][ T30] audit: type=1326 audit(1749209150.443:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.372347][ T30] audit: type=1326 audit(1749209150.443:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.416792][ T30] audit: type=1326 audit(1749209150.443:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.465315][T11248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 606.520822][ T5929] usb 5-1: 0:2 : does not exist [ 606.543401][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 606.571636][ T30] audit: type=1326 audit(1749209150.443:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.616956][ T5929] usb 5-1: USB disconnect, device number 59 [ 606.639985][ T30] audit: type=1326 audit(1749209150.443:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.708007][ T9026] udevd[9026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.758288][ T30] audit: type=1326 audit(1749209150.443:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.811291][ T30] audit: type=1326 audit(1749209150.443:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.853927][ T30] audit: type=1326 audit(1749209150.443:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 606.897696][T11261] syz_tun: entered allmulticast mode [ 606.967386][T11260] syz_tun: left allmulticast mode [ 607.447083][T11281] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 607.583490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 607.750780][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 608.135365][T11295] lo: entered allmulticast mode [ 608.155785][T11294] lo: left allmulticast mode [ 608.387518][T11305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.421451][T11305] batadv0: mtu less than device minimum [ 608.433858][T11305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 608.446074][T11305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 608.458038][T11305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 608.470015][T11305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 608.511299][T11305] batadv_slave_0: entered promiscuous mode [ 608.893523][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 609.043567][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 609.055154][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 609.075163][ T10] usb 2-1: config 2 has an invalid interface number: 69 but max is 0 [ 609.093708][ T10] usb 2-1: config 2 has no interface number 0 [ 609.113721][ T10] usb 2-1: config 2 interface 69 has no altsetting 0 [ 609.145143][ T10] usb 2-1: string descriptor 0 read error: -22 [ 609.163113][ T10] usb 2-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=9a.ea [ 609.194631][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.205674][T11320] fuse: Bad value for 'fd' [ 609.238666][ T10] cdc_acm 2-1:2.69: More than one union descriptor, skipping ... [ 609.452532][ T10] usb 2-1: USB disconnect, device number 64 [ 609.663366][ C1] net_ratelimit: 16 callbacks suppressed [ 609.663388][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 610.144485][T11334] syz_tun: entered allmulticast mode [ 610.207547][T11333] syz_tun: left allmulticast mode [ 610.703519][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 611.456119][T11366] syz_tun: entered allmulticast mode [ 611.677136][T11364] syz_tun: left allmulticast mode [ 611.743476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 612.474851][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 612.474869][ T30] audit: type=1326 audit(1749209156.663:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.543583][ T30] audit: type=1326 audit(1749209156.663:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.602573][ T30] audit: type=1326 audit(1749209156.663:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.650926][ T30] audit: type=1326 audit(1749209156.663:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.721276][ T30] audit: type=1326 audit(1749209156.663:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.783384][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 612.813049][ T30] audit: type=1326 audit(1749209156.663:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.813104][ T30] audit: type=1326 audit(1749209156.663:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.813149][ T30] audit: type=1326 audit(1749209156.663:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.813194][ T30] audit: type=1326 audit(1749209156.673:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.813950][ T30] audit: type=1326 audit(1749209156.673:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5993d8e929 code=0x7ffc0000 [ 612.825671][T11395] syz_tun: entered allmulticast mode [ 612.866104][T11394] syz_tun: left allmulticast mode [ 613.823502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 614.219208][T11427] fuse: Unknown parameter '0x0000000000000004' [ 614.238896][T11424] syz_tun: entered allmulticast mode [ 614.863501][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 615.903604][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 616.013656][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 616.183418][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 616.198589][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.233485][ T10] usb 5-1: config 0 has no interfaces? [ 616.265334][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 616.287336][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.313442][ T10] usb 5-1: Product: syz [ 616.317842][ T10] usb 5-1: Manufacturer: syz [ 616.322511][ T10] usb 5-1: SerialNumber: syz [ 616.359522][ T10] usb 5-1: config 0 descriptor?? [ 616.365111][T11461] capability: warning: `syz.0.1673' uses deprecated v2 capabilities in a way that may be insecure [ 616.943348][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 617.028613][T11476] fuse: Unknown parameter '0x0000000000000004' [ 617.983448][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 618.812543][ T5929] usb 5-1: USB disconnect, device number 60 [ 619.023339][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 619.926177][ T1217] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 620.063347][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 620.111216][ T1217] usb 5-1: Using ep0 maxpacket: 16 [ 620.137672][ T1217] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.169566][ T1217] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.188502][ T1217] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 620.198501][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.211998][ T1217] usb 5-1: Product: syz [ 620.230092][ T1217] usb 5-1: Manufacturer: syz [ 620.250347][ T1217] usb 5-1: SerialNumber: syz [ 620.284631][ T1217] usb 5-1: config 0 descriptor?? [ 621.103395][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 622.143372][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 622.468317][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 622.468336][ T30] audit: type=1326 audit(1749209166.653:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.2.1725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f175158e929 code=0x0 [ 622.730586][ T5919] usb 5-1: USB disconnect, device number 61 [ 623.074832][T11610] netlink: del zone limit has 4 unknown bytes [ 623.183391][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 623.298146][ T1217] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 623.586476][ T1217] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.657549][ T1217] usb 5-1: config 1 interface 0 has no altsetting 0 [ 623.678715][ T1217] usb 5-1: string descriptor 0 read error: -22 [ 623.689983][ T1217] usb 5-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 623.701278][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.941319][ T1217] usbhid 5-1:1.0: can't add hid device: -71 [ 623.970065][ T1217] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 624.028483][ T1217] usb 5-1: USB disconnect, device number 62 [ 624.203733][ T5847] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 624.223375][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 624.303592][ T44] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 624.378503][ T5847] usb 3-1: config 0 has no interfaces? [ 624.408381][ T5847] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 624.433573][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.456760][ T5847] usb 3-1: Product: syz [ 624.461374][ T5847] usb 3-1: Manufacturer: syz [ 624.466462][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 624.492168][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.513224][ T5847] usb 3-1: SerialNumber: syz [ 624.531054][ T5847] usb 3-1: config 0 descriptor?? [ 624.536553][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 624.575991][ T44] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 624.603394][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.619879][ T44] usb 2-1: Product: syz [ 624.641720][ T44] usb 2-1: Manufacturer: syz [ 624.647296][ T44] usb 2-1: SerialNumber: syz [ 624.658492][ T44] usb 2-1: config 0 descriptor?? [ 624.913177][ T44] usb 3-1: USB disconnect, device number 52 [ 625.168237][T11644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1744'. [ 625.263419][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 626.233602][ T5929] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 626.303387][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 626.416818][ T5929] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 626.446975][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.498571][ T5929] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 626.528263][ T5929] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 626.543616][ T5929] usb 3-1: Manufacturer: syz [ 626.556694][ T5929] usb 3-1: config 0 descriptor?? [ 626.683350][ T5929] rc_core: IR keymap rc-hauppauge not found [ 626.689603][ T5929] Registered IR keymap rc-empty [ 626.742189][ T5929] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 626.780063][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.798023][ T5929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 626.811081][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.875119][ T5929] usb 3-1: USB disconnect, device number 53 [ 627.093670][ T1217] usb 2-1: USB disconnect, device number 65 [ 627.343346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 628.153645][ T1217] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 628.170787][T11715] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 628.324448][ T1217] usb 3-1: Using ep0 maxpacket: 16 [ 628.340891][ T1217] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.363152][ T1217] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.383438][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 628.403438][ T1217] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 628.421267][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.447247][ T1217] usb 3-1: Product: syz [ 628.461842][ T1217] usb 3-1: Manufacturer: syz [ 628.479636][ T1217] usb 3-1: SerialNumber: syz [ 628.522531][ T1217] usb 3-1: config 0 descriptor?? [ 629.287615][T11747] syzkaller1: entered promiscuous mode [ 629.300851][T11747] syzkaller1: entered allmulticast mode [ 629.423481][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 629.749523][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.756122][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.944397][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'. [ 630.463421][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 630.626029][T11780] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 631.066214][ T44] usb 3-1: USB disconnect, device number 54 [ 631.503341][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 632.011446][T11816] input: syz0 as /devices/virtual/input/input28 [ 632.201390][T11823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.373341][ T5929] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 632.493577][ T44] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 632.543437][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 632.543530][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 632.568491][ T5929] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.585526][ T5929] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 632.598623][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.615593][ T5929] usb 2-1: Product: syz [ 632.624484][ T5929] usb 2-1: Manufacturer: syz [ 632.643343][ T5929] usb 2-1: SerialNumber: syz [ 632.654564][ T5929] usb 2-1: config 0 descriptor?? [ 632.668192][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 632.684217][ T44] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 632.713497][ T44] usb 3-1: config 0 has no interface number 0 [ 632.719700][ T44] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 632.744379][ T44] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 632.776087][ T44] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 632.823327][ T44] usb 3-1: config 0 interface 126 has no altsetting 0 [ 632.839927][ T44] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 632.852312][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.896953][ T44] usb 3-1: Product: syz [ 632.921854][ T44] usb 3-1: Manufacturer: syz [ 632.944152][ T44] usb 3-1: SerialNumber: syz [ 632.976900][ T44] usb 3-1: config 0 descriptor?? [ 632.999303][T11834] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 633.010473][T11825] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 633.040671][T11834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.048020][T11834] IPv6: NLM_F_CREATE should be set when creating new route [ 633.458084][ T44] ir_usb 3-1:0.126: IR Dongle converter detected [ 633.583462][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 633.650662][ T44] usb 3-1: IRDA class descriptor not found, device not bound [ 633.862701][ T44] usb 3-1: USB disconnect, device number 55 [ 634.623433][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 634.707073][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 635.180358][ T44] usb 2-1: USB disconnect, device number 66 [ 635.663379][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 636.713426][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 637.743338][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 638.783346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 639.823394][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 640.863396][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 641.361270][T11970] syz_tun: entered allmulticast mode [ 641.384813][T11969] syz_tun: left allmulticast mode [ 641.903564][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 642.943345][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 643.983357][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 645.023422][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 645.183919][T12025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.212573][T12025] batadv_slave_0: entered promiscuous mode [ 645.840509][T12042] syz_tun: entered allmulticast mode [ 645.877028][T12041] syz_tun: left allmulticast mode [ 646.063393][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 646.403211][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 646.427552][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 647.103332][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 647.593475][ T5919] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 647.783433][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 647.790879][ T5919] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 647.819847][ T5919] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 647.853315][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 647.903633][ T5919] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 647.931886][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 647.962408][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 647.995309][ T5919] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 648.016377][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.039056][ T5919] usb 3-1: Product: syz [ 648.049923][ T5919] usb 3-1: Manufacturer: syz [ 648.055183][ T5919] usb 3-1: SerialNumber: syz [ 648.065220][ T5919] usb 3-1: config 0 descriptor?? [ 648.074236][ T5919] hub 3-1:0.0: bad descriptor, ignoring hub [ 648.086999][ T5919] hub 3-1:0.0: probe with driver hub failed with error -5 [ 648.143412][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 648.163782][T12081] netlink: 'syz.0.1886': attribute type 10 has an invalid length. [ 648.224299][T12081] team0: Port device hsr_slave_0 added [ 648.393076][T12081] syz.0.1886 (12081) used greatest stack depth: 19544 bytes left [ 648.405459][ T5890] usb 3-1: USB disconnect, device number 56 [ 649.183386][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 650.225736][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 650.305836][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1904'. [ 651.263321][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 651.573484][ T5847] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 651.733458][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 651.753787][ T5847] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 651.753822][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.753845][ T5847] usb 4-1: Product: syz [ 651.753862][ T5847] usb 4-1: Manufacturer: syz [ 651.753880][ T5847] usb 4-1: SerialNumber: syz [ 651.757142][ T5847] usb 4-1: config 0 descriptor?? [ 652.188875][ T5847] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 652.219984][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.259767][ T5847] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 652.285673][ T5847] usb 4-1: media controller created [ 652.303342][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 652.376588][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 652.503405][ T5847] zl10353_read_register: readreg error (reg=127, ret==0) [ 652.526099][ T5847] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 652.555599][ T5847] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 652.598264][ T5847] usb 4-1: USB disconnect, device number 55 [ 652.745366][ T5847] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 653.343345][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 653.963785][ T5890] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 654.113739][T12167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.173508][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 654.205942][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 654.253749][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 654.284358][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.323415][ T5890] usb 4-1: Product: syz [ 654.337895][ T5890] usb 4-1: Manufacturer: syz [ 654.342671][ T5890] usb 4-1: SerialNumber: syz [ 654.379173][ T5890] usb 4-1: config 0 descriptor?? [ 654.383513][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 654.437463][ T5890] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 654.479596][ T5890] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 655.044800][ T5890] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 655.423341][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 655.474610][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.502784][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.463626][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 656.553678][ T5890] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 656.570729][ T5890] em28xx 4-1:0.0: board has no eeprom [ 656.577769][T12159] em28xx 4-1:0.0: writing to i2c device at 0x12 failed (error=-5) [ 656.604425][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 656.663427][ T5890] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 656.682988][ T5890] em28xx 4-1:0.0: dvb set to bulk mode. [ 656.688964][ T5929] em28xx 4-1:0.0: Binding DVB extension [ 656.726718][ T5890] usb 4-1: USB disconnect, device number 56 [ 656.764904][ T5890] em28xx 4-1:0.0: Disconnecting em28xx [ 656.854261][ T5929] em28xx 4-1:0.0: Registering input extension [ 656.867203][ T5890] em28xx 4-1:0.0: Closing input extension [ 656.917637][T12207] : entered promiscuous mode [ 656.925329][ T5890] em28xx 4-1:0.0: Freeing device [ 657.503429][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 658.543500][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 658.570463][T12242] syz_tun: entered allmulticast mode [ 658.606172][T12240] syz_tun: left allmulticast mode [ 658.733431][ T5919] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 658.903536][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 658.922659][ T5919] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 658.951996][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.972997][ T5919] usb 2-1: Product: syz [ 658.987849][ T5919] usb 2-1: Manufacturer: syz [ 658.998407][ T5919] usb 2-1: SerialNumber: syz [ 659.009051][ T5919] usb 2-1: config 0 descriptor?? [ 659.541654][ T5919] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 659.583644][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.636007][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.684456][ T5919] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 659.715980][ T5919] usb 2-1: media controller created [ 659.820816][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.862029][T12259] ip_vti0: Master is either lo or non-ether device [ 659.940129][ T5919] zl10353_read_register: readreg error (reg=127, ret==0) [ 659.964537][ T5919] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 659.993147][ T5919] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 660.042261][ T5919] usb 2-1: USB disconnect, device number 67 [ 660.185267][ T5919] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 660.482450][T12275] syz_tun: entered allmulticast mode [ 660.496824][T12274] syz_tun: left allmulticast mode [ 660.623629][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 661.009123][T12276] loop4: detected capacity change from 0 to 7 [ 661.047767][T12276] Dev loop4: unable to read RDB block 7 [ 661.085180][T12276] loop4: unable to read partition table [ 661.111072][T12276] loop4: partition table beyond EOD, truncated [ 661.141582][T12276] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 661.663763][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 662.670781][T12304] syz_tun: entered allmulticast mode [ 662.688760][T12303] syz_tun: left allmulticast mode [ 662.703423][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 662.798447][T12308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1982'. [ 662.823534][ T5929] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 662.971144][T12307] kvm: kvm [12305]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb900004000 [ 662.993409][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 663.012884][T12307] kvm: kvm [12305]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xb900000000 [ 663.013085][ T5929] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 663.062010][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.081227][ T5929] usb 4-1: Product: syz [ 663.093462][ T5929] usb 4-1: Manufacturer: syz [ 663.098153][ T5929] usb 4-1: SerialNumber: syz [ 663.116130][ T5929] usb 4-1: config 0 descriptor?? [ 663.483334][ T5847] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 663.551421][ T5929] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 663.618286][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 663.737067][ T5929] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 663.753404][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 663.795342][ T5847] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.809482][ T5847] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 663.834051][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.867454][ T5847] usb 3-1: config 0 descriptor?? [ 663.909151][ T5929] usb 4-1: media controller created [ 663.963667][T12327] ------------[ cut here ]------------ [ 663.969607][T12327] usb 4-1: BOGUS control dir, pipe 80003980 doesn't match bRequestType c0 [ 663.992317][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.003822][T12327] WARNING: CPU: 0 PID: 12327 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 664.013973][T12327] Modules linked in: [ 664.018497][T12327] CPU: 0 UID: 0 PID: 12327 Comm: syz.0.1988 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 664.030422][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 664.040653][T12327] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 664.046460][T12327] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 80 ec 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 54 5d 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 664.066834][T12327] RSP: 0018:ffffc9001bd77830 EFLAGS: 00010246 [ 664.072983][T12327] RAX: 995ae1d01a62a400 RBX: ffff88807dc38c00 RCX: 0000000000080000 [ 664.081208][T12327] RDX: ffffc9000bc3a000 RSI: 0000000000003737 RDI: 0000000000003738 [ 664.089362][T12327] RBP: 1ffff1100f1b3700 R08: 0000000000000003 R09: 0000000000000004 [ 664.098222][T12327] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff888078d9b800 [ 664.106868][T12327] R13: dffffc0000000000 R14: 0000000080003980 R15: ffff888033fcb420 [ 664.115503][T12327] FS: 00007fedf818c6c0(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 664.125104][T12327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.131744][T12327] CR2: 0000001b3031fffc CR3: 0000000027ea8000 CR4: 00000000003526f0 [ 664.139866][T12327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 664.148077][T12327] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 664.156238][T12327] Call Trace: [ 664.159583][T12327] [ 664.162568][T12327] usb_start_wait_urb+0x114/0x4c0 [ 664.168193][T12327] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 664.173904][T12327] usb_control_msg+0x232/0x3e0 [ 664.178769][T12327] dtv5100_i2c_msg+0x250/0x330 [ 664.183709][T12327] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 664.188643][T12327] __i2c_transfer+0x874/0x2170 [ 664.193551][T12327] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.198830][T12327] ? __pfx___i2c_transfer+0x10/0x10 [ 664.204163][T12327] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 664.209637][T12327] ? i2c_transfer+0x11d/0x3a0 [ 664.214475][T12327] i2c_transfer+0x25b/0x3a0 [ 664.219051][T12327] ? __pfx_i2c_transfer+0x10/0x10 [ 664.224240][T12327] ? _copy_from_user+0x94/0xb0 [ 664.229107][T12327] i2cdev_ioctl_rdwr+0x460/0x740 [ 664.234207][T12327] i2cdev_ioctl+0x64b/0x7f0 [ 664.238789][T12327] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 664.243986][T12327] ? __fget_files+0x3a0/0x420 [ 664.248820][T12327] ? __fget_files+0x2a/0x420 [ 664.253558][T12327] ? bpf_lsm_file_ioctl+0x9/0x20 [ 664.258579][T12327] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 664.263755][T12327] __se_sys_ioctl+0xfc/0x170 [ 664.268430][T12327] do_syscall_64+0xfa/0x3b0 [ 664.273001][T12327] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.278382][T12327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.284570][T12327] ? clear_bhb_loop+0x60/0xb0 [ 664.289325][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.295326][T12327] RIP: 0033:0x7fedf738e929 [ 664.299800][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.319719][T12327] RSP: 002b:00007fedf818c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.328281][T12327] RAX: ffffffffffffffda RBX: 00007fedf75b5fa0 RCX: 00007fedf738e929 [ 664.336416][T12327] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 664.344521][T12327] RBP: 00007fedf7410b39 R08: 0000000000000000 R09: 0000000000000000 [ 664.352556][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.360678][T12327] R13: 0000000000000000 R14: 00007fedf75b5fa0 R15: 00007fedf76dfa28 [ 664.368838][T12327] [ 664.371924][T12327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 664.379295][T12327] CPU: 0 UID: 0 PID: 12327 Comm: syz.0.1988 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 664.391053][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 664.401150][T12327] Call Trace: [ 664.404465][T12327] [ 664.407433][T12327] dump_stack_lvl+0x99/0x250 [ 664.412246][T12327] ? __asan_memcpy+0x40/0x70 [ 664.416879][T12327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.422390][T12327] ? __pfx__printk+0x10/0x10 [ 664.427030][T12327] panic+0x2db/0x790 [ 664.430988][T12327] ? __pfx_panic+0x10/0x10 [ 664.435468][T12327] __warn+0x31b/0x4b0 [ 664.439508][T12327] ? usb_submit_urb+0x115d/0x1890 [ 664.444626][T12327] ? usb_submit_urb+0x115d/0x1890 [ 664.449696][T12327] report_bug+0x2be/0x4f0 [ 664.454063][T12327] ? usb_submit_urb+0x115d/0x1890 [ 664.459130][T12327] ? usb_submit_urb+0x115d/0x1890 [ 664.464192][T12327] ? usb_submit_urb+0x115f/0x1890 [ 664.469266][T12327] handle_bug+0x84/0x160 [ 664.473551][T12327] exc_invalid_op+0x1a/0x50 [ 664.478110][T12327] asm_exc_invalid_op+0x1a/0x20 [ 664.482998][T12327] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 664.488677][T12327] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 80 ec 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 54 5d 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 664.508416][T12327] RSP: 0018:ffffc9001bd77830 EFLAGS: 00010246 [ 664.514557][T12327] RAX: 995ae1d01a62a400 RBX: ffff88807dc38c00 RCX: 0000000000080000 [ 664.522562][T12327] RDX: ffffc9000bc3a000 RSI: 0000000000003737 RDI: 0000000000003738 [ 664.530569][T12327] RBP: 1ffff1100f1b3700 R08: 0000000000000003 R09: 0000000000000004 [ 664.538564][T12327] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff888078d9b800 [ 664.546564][T12327] R13: dffffc0000000000 R14: 0000000080003980 R15: ffff888033fcb420 [ 664.554600][T12327] usb_start_wait_urb+0x114/0x4c0 [ 664.559679][T12327] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 664.565295][T12327] usb_control_msg+0x232/0x3e0 [ 664.570111][T12327] dtv5100_i2c_msg+0x250/0x330 [ 664.574911][T12327] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 664.579804][T12327] __i2c_transfer+0x874/0x2170 [ 664.584612][T12327] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.589854][T12327] ? __pfx___i2c_transfer+0x10/0x10 [ 664.595084][T12327] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 664.600623][T12327] ? i2c_transfer+0x11d/0x3a0 [ 664.605429][T12327] i2c_transfer+0x25b/0x3a0 [ 664.609967][T12327] ? __pfx_i2c_transfer+0x10/0x10 [ 664.615044][T12327] ? _copy_from_user+0x94/0xb0 [ 664.619855][T12327] i2cdev_ioctl_rdwr+0x460/0x740 [ 664.624842][T12327] i2cdev_ioctl+0x64b/0x7f0 [ 664.629551][T12327] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 664.634638][T12327] ? __fget_files+0x3a0/0x420 [ 664.639350][T12327] ? __fget_files+0x2a/0x420 [ 664.643998][T12327] ? bpf_lsm_file_ioctl+0x9/0x20 [ 664.648984][T12327] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 664.654051][T12327] __se_sys_ioctl+0xfc/0x170 [ 664.658682][T12327] do_syscall_64+0xfa/0x3b0 [ 664.663215][T12327] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.668497][T12327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.674601][T12327] ? clear_bhb_loop+0x60/0xb0 [ 664.679309][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.685229][T12327] RIP: 0033:0x7fedf738e929 [ 664.689678][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.709332][T12327] RSP: 002b:00007fedf818c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.717788][T12327] RAX: ffffffffffffffda RBX: 00007fedf75b5fa0 RCX: 00007fedf738e929 [ 664.725796][T12327] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 664.733817][T12327] RBP: 00007fedf7410b39 R08: 0000000000000000 R09: 0000000000000000 [ 664.741826][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.749829][T12327] R13: 0000000000000000 R14: 00007fedf75b5fa0 R15: 00007fedf76dfa28 [ 664.757854][T12327] [ 664.761191][T12327] Kernel Offset: disabled [ 664.765605][T12327] Rebooting in 86400 seconds..