last executing test programs: 8.529676306s ago: executing program 2 (id=2737): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) 7.630222139s ago: executing program 1 (id=2741): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 7.509770481s ago: executing program 1 (id=2742): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/25) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r1 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x7278, 0x400, 0x1, 0x385}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x2, 0xa0700) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r1, 0x26c8, 0x0, 0x1, 0x0, 0x10) 7.467000802s ago: executing program 2 (id=2743): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000516000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 6.909769472s ago: executing program 3 (id=2744): ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20400, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.397110168s ago: executing program 4 (id=2745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000003000c00018008"], 0x30}}, 0x0) 6.233693795s ago: executing program 4 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000009d5a935df56dbcd29781822867e51b94ea0b6fb42fa22b6113712cb9a25304e67519192fef70e59d223b326cfa3dd3b7dd1738611b58d795021f6c7f0b2fbd0359a0fac6593cc48e32104af6071574c7a3b6eb0ef4ccfebc8166e0e696047fe162", @ANYRES16=r1, @ANYBLOB="00022bbd70000000000002000000080061001000000005005900c0000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="f4afd3ba3168e81d4044d28feb7998e58c644daf91735990752a75af97dd10706b82106394e352b768b4a0267477faeda014b3f13d15b3de65c99eacee53923b81e8206a6b10797615d20978f16ec0d785e41a709dd8a1a398fa026a7d322f84f2574f97619dbab72e04bb80aad44b3ae6ad37659ee2a41621fcacfbe812844b38dbf0bf6229403c"], 0x28}}, 0x0) 5.285910746s ago: executing program 2 (id=2747): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) getpeername$unix(r0, 0x0, 0x0) 5.146029205s ago: executing program 2 (id=2748): socket$inet6(0xa, 0x2, 0x3a) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffff40, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000000040)=0x45) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.129889551s ago: executing program 3 (id=2749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$unix(0x1, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) lseek(r2, 0xa, 0x4) 5.005754914s ago: executing program 0 (id=2750): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 4.525814546s ago: executing program 0 (id=2751): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) 4.216493973s ago: executing program 1 (id=2752): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 3.865593601s ago: executing program 4 (id=2753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r2}}, 0x48) 3.864505527s ago: executing program 3 (id=2754): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x3e00, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x10, 0x66, 0xfb, 0x20, 0x7fa, 0x847, 0xb92f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x8, 0x80, 0x4, [{{0x9, 0x4, 0x59, 0x7, 0x1, 0x8c, 0x9a, 0x79, 0x32, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4e, 0x8, 0xff}}]}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) 3.630884179s ago: executing program 0 (id=2755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 3.00586334s ago: executing program 4 (id=2756): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="363c8f3f8a5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.93532791s ago: executing program 4 (id=2757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 2.795204523s ago: executing program 2 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2.365970734s ago: executing program 1 (id=2759): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) dup2(r1, r0) 2.271243783s ago: executing program 1 (id=2760): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(0x0, 0x2, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0xa, 0x3, 0x0, "bc08000020da00ca00ae2400", 0x50424752}) 2.191467166s ago: executing program 3 (id=2761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), 0x0}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x9, 0xfffffffffffffffd, 0x81, 0x7fffffff, 0x100000000}, 0x0, 0x0) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2.093422312s ago: executing program 0 (id=2762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xfdef) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @ldst={0x0, 0x2, 0x5, 0xc61ccdf0c1e4e132, 0xa, 0x6, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0xffffffffffffffff, 0x4, 0x27, &(0x7f0000000280)=""/39, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xa, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfef0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) readv(r5, &(0x7f00000000c0), 0x9) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f00000000c0)) 1.256234243s ago: executing program 1 (id=2763): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 637.699644ms ago: executing program 2 (id=2764): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0xfffc, 0x0, 0x0, 0x81, 0xfffffffb}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000100), 0x9) r4 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) chroot(&(0x7f0000000200)='./file0\x00') 310.841657ms ago: executing program 4 (id=2765): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000f900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0xd, r5, 0x2}, 0x10) 265.78721ms ago: executing program 0 (id=2766): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 264.659845ms ago: executing program 3 (id=2767): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='ne default user:syz '], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 29.769091ms ago: executing program 3 (id=2768): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x3, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x2, 0x5, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0x1ed40, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x201, 0x4, 0x1, 0x3, 0x3, 0x1, 0x20000000000, 0xc, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x6, 0x201, 0x77d, 0xb3, 0x5, 0xffffffff00000001, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x67fffffffffe, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0xc9cd, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000005, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) 0s ago: executing program 0 (id=2769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x7) kernel console output (not intermixed with test programs): [ 554.085107][T16900] dump_stack_lvl+0x189/0x250 [ 554.085134][T16900] ? __pfx____ratelimit+0x10/0x10 [ 554.085159][T16900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.085182][T16900] ? __pfx__printk+0x10/0x10 [ 554.085204][T16900] ? __pfx___might_resched+0x10/0x10 [ 554.085221][T16900] ? fs_reclaim_acquire+0x7d/0x100 [ 554.085240][T16900] should_fail_ex+0x414/0x560 [ 554.085261][T16900] should_failslab+0xa8/0x100 [ 554.085278][T16900] __kmalloc_noprof+0xcb/0x4f0 [ 554.085293][T16900] ? sock_kmalloc+0xd6/0x160 [ 554.085316][T16900] sock_kmalloc+0xd6/0x160 [ 554.085336][T16900] ipv6_sock_ac_join+0x257/0x6c0 [ 554.085363][T16900] do_ipv6_setsockopt+0x1f8c/0x2fb0 [ 554.085393][T16900] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 554.085412][T16900] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 554.085457][T16900] ? __pfx___might_resched+0x10/0x10 [ 554.085479][T16900] ? rcu_read_lock_any_held+0xb3/0x120 [ 554.085495][T16900] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 554.085515][T16900] ? vfs_write+0x8d8/0xa90 [ 554.085541][T16900] ? aa_sk_perm+0x81e/0x950 [ 554.085564][T16900] ? __pfx_aa_sk_perm+0x10/0x10 [ 554.085579][T16900] ? __lock_acquire+0xab9/0xd20 [ 554.085611][T16900] ipv6_setsockopt+0x59/0x170 [ 554.085631][T16900] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 554.085655][T16900] do_sock_setsockopt+0x25a/0x3e0 [ 554.085677][T16900] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 554.085700][T16900] ? __fget_files+0x2a/0x420 [ 554.085726][T16900] __x64_sys_setsockopt+0x18b/0x220 [ 554.085759][T16900] do_syscall_64+0xfa/0x3b0 [ 554.085778][T16900] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.085798][T16900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.085813][T16900] ? clear_bhb_loop+0x60/0xb0 [ 554.085832][T16900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.085846][T16900] RIP: 0033:0x7ff7b7f8e929 [ 554.085862][T16900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.085875][T16900] RSP: 002b:00007ff7b8e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 554.085893][T16900] RAX: ffffffffffffffda RBX: 00007ff7b81b5fa0 RCX: 00007ff7b7f8e929 [ 554.085909][T16900] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 554.085919][T16900] RBP: 00007ff7b8e76090 R08: 0000000000000014 R09: 0000000000000000 [ 554.085930][T16900] R10: 0000200000004c40 R11: 0000000000000246 R12: 0000000000000001 [ 554.085942][T16900] R13: 0000000000000000 R14: 00007ff7b81b5fa0 R15: 00007ff7b82dfa28 [ 554.085971][T16900] [ 554.739844][T16920] netlink: 'syz.2.2221': attribute type 21 has an invalid length. [ 554.756687][T16920] netlink: 'syz.2.2221': attribute type 6 has an invalid length. [ 554.775255][T16920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2221'. [ 554.842488][T16928] netlink: 'syz.2.2223': attribute type 27 has an invalid length. [ 554.954952][T16928] netlink: 'syz.2.2223': attribute type 3 has an invalid length. [ 554.972175][T16928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2223'. [ 555.001069][T16933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2222'. [ 555.324083][ T43] usb 2-1: USB disconnect, device number 96 [ 556.292711][ T43] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 556.457549][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 556.603736][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.627297][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.646880][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.656239][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.676480][ T43] usb 5-1: Product: syz [ 556.681730][ T43] usb 5-1: Manufacturer: syz [ 556.686435][ T43] usb 5-1: SerialNumber: syz [ 556.929402][T16969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.941186][T16969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.963412][T17016] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.971785][T16969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2232'. [ 556.991594][T17016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.153705][ T43] usb 5-1: 0:2 : does not exist [ 557.209002][ T43] usb 5-1: USB disconnect, device number 109 [ 557.332822][T11433] udevd[11433]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.732717][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2238'. [ 557.773013][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2237'. [ 557.782391][T17042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2237'. [ 557.965708][T17058] input: syz0 as /devices/virtual/input/input44 [ 558.571292][T17076] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2246'. [ 559.318719][T17125] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 559.427539][ T5924] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 559.662805][ T5924] usb 4-1: Invalid ep0 maxpacket: 16 [ 559.827330][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 559.837254][ T5924] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 559.977486][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 559.993588][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 560.025591][ T24] usb 2-1: config 7 has an invalid interface number: 111 but max is 0 [ 560.037361][ T5924] usb 4-1: Invalid ep0 maxpacket: 16 [ 560.044134][ T5924] usb usb4-port1: attempt power cycle [ 560.085850][ T24] usb 2-1: config 7 has no interface number 0 [ 560.099712][ T24] usb 2-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 560.110137][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.119451][ T24] usb 2-1: Product: syz [ 560.123674][ T24] usb 2-1: Manufacturer: syz [ 560.128840][ T24] usb 2-1: SerialNumber: syz [ 560.437764][ T5924] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 560.471624][T17135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.482511][T17135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.542170][ T5924] usb 4-1: Invalid ep0 maxpacket: 16 [ 560.900004][T17159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2258'. [ 560.909807][ T5924] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 560.957668][ T5924] usb 4-1: Invalid ep0 maxpacket: 16 [ 560.963279][ T5924] usb usb4-port1: unable to enumerate USB device [ 561.467131][T17196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2262'. [ 561.867491][ T5925] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 561.987345][ T5924] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 562.018576][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 562.024948][ T5925] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 562.035665][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 562.043743][ T5925] usb 3-1: can't read configurations, error -61 [ 562.161183][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.174857][ T5924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 562.185102][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 562.193619][ T5924] usb 1-1: Product: syz [ 562.198071][ T5925] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 562.206537][ T5924] usb 1-1: Manufacturer: syz [ 562.211942][ T5924] usb 1-1: SerialNumber: syz [ 562.357370][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 562.358113][ T5925] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 562.359394][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 562.359415][ T5925] usb 3-1: can't read configurations, error -61 [ 562.359936][ T5925] usb usb3-port1: attempt power cycle [ 562.525016][ T24] usb 2-1: bad CDC descriptors [ 562.544384][ T24] usb 2-1: USB disconnect, device number 97 [ 562.787489][ T5925] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 562.808460][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 562.814137][ T5925] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 562.824882][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 562.833300][ T5925] usb 3-1: can't read configurations, error -61 [ 563.097567][ T5925] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 563.119771][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.134492][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.164118][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 563.177380][ T5925] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 563.318375][T17253] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.2265'. [ 563.365634][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 563.367019][ T30] audit: type=1326 audit(1751331953.089:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 563.440671][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 563.452701][ T5925] usb 3-1: can't read configurations, error -61 [ 563.464797][ T5925] usb usb3-port1: unable to enumerate USB device [ 563.482548][ T30] audit: type=1326 audit(1751331953.089:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 563.575115][ T30] audit: type=1326 audit(1751331953.089:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 563.597982][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.723099][T17263] ip6t_srh: unknown srh invflags 7863 [ 563.731400][T17263] fuse: Unknown parameter 'fd0x000000000000000c' [ 563.926777][ T30] audit: type=1326 audit(1751331953.089:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff944f8d290 code=0x7ffc0000 [ 563.949278][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.143478][ T30] audit: type=1326 audit(1751331953.089:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 564.166183][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.204763][T17269] netlink: 'syz.3.2274': attribute type 1 has an invalid length. [ 564.244107][ T30] audit: type=1326 audit(1751331953.089:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 564.267140][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.274487][ T30] audit: type=1326 audit(1751331953.089:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 564.296894][T17269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.297466][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.299534][ T30] audit: type=1326 audit(1751331953.089:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 564.333630][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.340612][ T30] audit: type=1326 audit(1751331953.089:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 564.363710][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.449671][T17291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.494333][T17291] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 564.575196][T17291] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 564.672734][T17269] gretap2: entered promiscuous mode [ 564.681792][T17269] bond4: (slave gretap2): making interface the new active one [ 564.720959][T17269] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 564.877796][ T5974] usb 1-1: USB disconnect, device number 87 [ 564.911490][ T30] audit: type=1326 audit(1751331953.099:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 564.935171][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.995661][T17303] macvlan4: entered promiscuous mode [ 565.005689][T17303] macvlan4: entered allmulticast mode [ 565.029371][T17303] bond4: entered promiscuous mode [ 565.036656][T17303] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 565.052507][T17303] bond4: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 565.080642][T17303] bond4: left promiscuous mode [ 565.377408][ T5974] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 565.416302][T17346] xt_CT: You must specify a L4 protocol and not use inversions on it [ 565.527384][ T5974] usb 1-1: Using ep0 maxpacket: 16 [ 565.549717][ T5974] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 565.560168][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.568561][ T5974] usb 1-1: Product: syz [ 565.572830][ T5974] usb 1-1: Manufacturer: syz [ 565.580257][ T5974] usb 1-1: SerialNumber: syz [ 565.586868][ T5974] usb 1-1: config 0 descriptor?? [ 565.748858][ T5925] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 565.937478][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 565.945394][ T5925] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 565.954489][ T5925] usb 2-1: config 0 has no interface number 0 [ 565.964345][ T5925] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 565.976007][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.985858][ T5925] usb 2-1: Product: syz [ 565.994184][ T5925] usb 2-1: Manufacturer: syz [ 566.002171][ T5925] usb 2-1: SerialNumber: syz [ 566.002419][ T5974] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 566.016747][ T5925] usb 2-1: config 0 descriptor?? [ 566.018571][ T5974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.035681][ T5974] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 566.036967][ T5925] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 566.044236][ T5974] usb 1-1: media controller created [ 566.071376][ T5974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.127534][ T5924] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 566.211917][ T5974] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 566.220443][ T5974] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 566.269236][ T5925] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 566.297623][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 566.332894][ T5924] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.349945][ T5925] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 566.365191][ T5924] usb 4-1: config 0 has no interface number 0 [ 566.376476][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 566.401843][ T5925] usb 2-1: USB disconnect, device number 98 [ 566.435961][ T5924] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 566.455717][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.464564][ T5924] usb 4-1: Product: syz [ 566.475368][ T5925] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 566.503391][ T5924] usb 4-1: Manufacturer: syz [ 566.521367][ T5924] usb 4-1: SerialNumber: syz [ 566.534353][ T5925] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 566.549570][ T5924] usb 4-1: config 0 descriptor?? [ 566.562409][ T5924] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 566.571317][ T5925] quatech2 2-1:0.51: device disconnected [ 566.951839][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2288'. [ 567.162167][ T5974] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 567.319471][ T5974] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 567.331383][ T5974] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 567.345505][ T5974] usb 3-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 567.438390][ T5924] gspca_spca1528: reg_w err -71 [ 567.455957][ T5924] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 567.496864][ T5924] usb 4-1: USB disconnect, device number 95 [ 567.648681][ T5974] usb 3-1: config 1 interface 0 has no altsetting 0 [ 567.838151][ T5974] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.886153][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.895639][ T5974] usb 3-1: Product: 㐉 [ 567.909009][ T5974] usb 3-1: Manufacturer: Г [ 568.183797][ T5974] usb 3-1: SerialNumber: ဖ [ 568.235544][T17429] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 568.243535][T17429] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 568.257352][T17429] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 568.706329][ T5974] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 568.896991][ T5836] usb 1-1: USB disconnect, device number 88 [ 569.092508][ T5836] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 569.313449][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 569.313466][ T30] audit: type=1326 audit(1751331959.069:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17497 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2af8e929 code=0x7ffc0000 [ 569.349670][T17502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.376902][ T30] audit: type=1326 audit(1751331959.069:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17497 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2af8e929 code=0x7ffc0000 [ 569.399372][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.422377][T17505] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 569.453903][ T30] audit: type=1326 audit(1751331959.089:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17497 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcf2af8e929 code=0x7ffc0000 [ 569.483985][ T30] audit: type=1326 audit(1751331959.109:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17497 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2af8e929 code=0x7ffc0000 [ 569.515702][ T30] audit: type=1326 audit(1751331959.109:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17497 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf2af8e929 code=0x7ffc0000 [ 569.542196][ T30] audit: type=1326 audit(1751331959.109:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17497 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2af8e929 code=0x7ffc0000 [ 569.564763][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.577620][ T30] audit: type=1326 audit(1751331959.109:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17497 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcf2af8e929 code=0x7ffc0000 [ 569.600164][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.612290][ T30] audit: type=1326 audit(1751331959.109:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17497 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2af8e929 code=0x7ffc0000 [ 569.635330][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.681900][ T5886] usb 3-1: USB disconnect, device number 86 [ 569.737730][ T5974] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 569.889379][T17538] FAULT_INJECTION: forcing a failure. [ 569.889379][T17538] name failslab, interval 1, probability 0, space 0, times 0 [ 569.897714][ T5974] usb 4-1: Using ep0 maxpacket: 16 [ 569.902942][T17538] CPU: 0 UID: 0 PID: 17538 Comm: syz.1.2298 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 569.902965][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.902976][T17538] Call Trace: [ 569.902984][T17538] [ 569.902992][T17538] dump_stack_lvl+0x189/0x250 [ 569.903021][T17538] ? __pfx____ratelimit+0x10/0x10 [ 569.903043][T17538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.903066][T17538] ? __pfx__printk+0x10/0x10 [ 569.903096][T17538] should_fail_ex+0x414/0x560 [ 569.903120][T17538] should_failslab+0xa8/0x100 [ 569.903139][T17538] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 569.903157][T17538] ? __alloc_skb+0x112/0x2d0 [ 569.903178][T17538] __alloc_skb+0x112/0x2d0 [ 569.903199][T17538] _sctp_make_chunk+0x5e/0x430 [ 569.903221][T17538] sctp_make_init+0x58b/0xd30 [ 569.903255][T17538] ? __pfx_sctp_make_init+0x10/0x10 [ 569.903279][T17538] ? arch_stack_walk+0xfc/0x150 [ 569.903307][T17538] ? stack_trace_save+0x9c/0xe0 [ 569.903327][T17538] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 569.903351][T17538] sctp_do_sm+0x1e7/0x5a20 [ 569.903371][T17538] ? __pfx_sctp_pname+0x10/0x10 [ 569.903393][T17538] ? kasan_save_track+0x3e/0x80 [ 569.903415][T17538] ? sctp_stream_init_ext+0x57/0x180 [ 569.903434][T17538] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 569.903451][T17538] ? sctp_sendmsg+0x1941/0x2810 [ 569.903466][T17538] ? __sock_sendmsg+0x19c/0x270 [ 569.903487][T17538] ? __sys_sendto+0x3bd/0x520 [ 569.903501][T17538] ? do_syscall_64+0xfa/0x3b0 [ 569.903522][T17538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.903540][T17538] ? __pfx_sctp_do_sm+0x10/0x10 [ 569.903599][T17538] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 569.903636][T17538] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 569.903660][T17538] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 569.903677][T17538] ? __asan_memcpy+0x40/0x70 [ 569.903704][T17538] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 569.903736][T17538] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 569.903756][T17538] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 569.903776][T17538] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 569.903794][T17538] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 569.903812][T17538] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 569.903830][T17538] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 569.903850][T17538] ? security_sctp_bind_connect+0x7e/0x2e0 [ 569.903870][T17538] sctp_sendmsg+0x1941/0x2810 [ 569.903900][T17538] ? __pfx_sctp_sendmsg+0x10/0x10 [ 569.903921][T17538] ? aa_sk_perm+0x81e/0x950 [ 569.903948][T17538] ? __pfx_aa_sk_perm+0x10/0x10 [ 569.903968][T17538] ? sock_rps_record_flow+0x19/0x410 [ 569.903994][T17538] ? inet_sendmsg+0x2f4/0x370 [ 569.904014][T17538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.904036][T17538] __sock_sendmsg+0x19c/0x270 [ 569.904060][T17538] __sys_sendto+0x3bd/0x520 [ 569.904080][T17538] ? __pfx___sys_sendto+0x10/0x10 [ 569.904094][T17538] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 569.904128][T17538] ? __fget_files+0x3a0/0x420 [ 569.904157][T17538] ? ksys_write+0x22a/0x250 [ 569.904174][T17538] ? __pfx_ksys_write+0x10/0x10 [ 569.904187][T17538] ? rcu_is_watching+0x15/0xb0 [ 569.904213][T17538] __x64_sys_sendto+0xde/0x100 [ 569.904233][T17538] do_syscall_64+0xfa/0x3b0 [ 569.904254][T17538] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.904274][T17538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.904290][T17538] ? clear_bhb_loop+0x60/0xb0 [ 569.904309][T17538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.904325][T17538] RIP: 0033:0x7f445418e929 [ 569.904341][T17538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.904355][T17538] RSP: 002b:00007f4454f3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 569.904373][T17538] RAX: ffffffffffffffda RBX: 00007f44543b5fa0 RCX: 00007f445418e929 [ 569.904385][T17538] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 569.904396][T17538] RBP: 00007f4454f3c090 R08: 0000200000000000 R09: 0000000000000010 [ 569.904406][T17538] R10: e61e2840a554b0d0 R11: 0000000000000246 R12: 0000000000000002 [ 569.904417][T17538] R13: 0000000000000000 R14: 00007f44543b5fa0 R15: 00007f44544dfa28 [ 569.904444][T17538] [ 570.330314][ T5974] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 570.339307][ T5974] usb 4-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 570.350161][ T5974] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 570.360908][ T5974] usb 4-1: config 1 has no interface number 1 [ 570.377507][ T5974] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 570.397264][ T5974] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 570.412862][ T5974] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 570.425229][ T5974] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 570.440376][ T5974] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.450121][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.462675][ T5974] usb 4-1: Product: syz [ 570.472824][ T5974] usb 4-1: Manufacturer: syz [ 570.478198][ T5974] usb 4-1: SerialNumber: syz [ 570.713814][ T5974] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 570.743469][ T5974] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 570.803895][ T5974] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 570.861751][T17564] netlink: 'syz.4.2304': attribute type 9 has an invalid length. [ 570.869770][T17564] netlink: 212160 bytes leftover after parsing attributes in process `syz.4.2304'. [ 571.006946][ T5974] usb 4-1: USB disconnect, device number 96 [ 571.731352][T17602] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2307'. [ 571.739420][T17604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2308'. [ 571.927256][ T5974] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 572.100100][ T5974] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 572.127605][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 572.140805][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 572.151935][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 572.178178][ T5974] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 572.187791][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.196149][ T5974] usb 1-1: Product: syz [ 572.204751][ T5974] usb 1-1: Manufacturer: syz [ 572.211756][ T5974] usb 1-1: SerialNumber: syz [ 572.233655][ T5974] usb 1-1: config 0 descriptor?? [ 572.243615][ T5974] iguanair 1-1:0.0: failed to get version [ 572.250538][ T5974] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 572.657429][ T5836] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 572.920856][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 572.970175][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 573.017799][ T5925] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 573.027127][ T5836] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 573.036629][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.117379][ T5836] usb 3-1: Product: syz [ 573.121614][ T5836] usb 3-1: Manufacturer: syz [ 573.126278][ T5836] usb 3-1: SerialNumber: syz [ 573.154906][ T5836] usb 3-1: config 0 descriptor?? [ 573.167882][ T5836] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 573.177564][ T5836] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 573.267570][ T5924] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 573.413437][ T5925] usb 2-1: config 0 has no interfaces? [ 573.476608][ T5925] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 573.544382][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.654787][ T5925] usb 2-1: Product: syz [ 573.673471][ T5924] usb 5-1: config 0 has no interfaces? [ 573.789765][ T5836] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 573.807671][ T5925] usb 2-1: Manufacturer: syz [ 573.846198][ T5924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 573.903038][ T5925] usb 2-1: SerialNumber: syz [ 573.911522][T17690] xt_hashlimit: size too large, truncated to 1048576 [ 574.063430][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.077579][ T5925] usb 2-1: config 0 descriptor?? [ 574.102521][ T5924] usb 5-1: Product: syz [ 574.162155][ T5924] usb 5-1: Manufacturer: syz [ 574.175625][ T5924] usb 5-1: SerialNumber: syz [ 574.189815][ T5924] usb 5-1: config 0 descriptor?? [ 574.467824][T17657] binder: BINDER_SET_CONTEXT_MGR already set [ 574.474057][T17657] binder: 17646:17657 ioctl 4018620d 2000000001c0 returned -16 [ 574.605473][ T5836] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 574.722148][ T5974] usb 1-1: USB disconnect, device number 89 [ 574.749890][ T5836] em28xx 3-1:0.0: board has no eeprom [ 574.918268][ T5836] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 574.930915][ T5836] em28xx 3-1:0.0: dvb set to bulk mode. [ 574.955353][ T24] em28xx 3-1:0.0: Binding DVB extension [ 574.983992][ T5836] usb 3-1: USB disconnect, device number 87 [ 575.129257][ T5924] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 575.155094][ T5836] em28xx 3-1:0.0: Disconnecting em28xx [ 575.283222][ T24] em28xx 3-1:0.0: Registering input extension [ 575.290463][ T5836] em28xx 3-1:0.0: Closing input extension [ 575.305486][ T5924] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 575.321386][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.347846][ T5836] em28xx 3-1:0.0: Freeing device [ 575.372098][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 201, changing to 11 [ 575.423904][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 575.557342][ T5924] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 575.577236][ T977] usb 2-1: USB disconnect, device number 99 [ 575.612768][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.663369][ T5924] usb 4-1: config 0 descriptor?? [ 575.727474][ T5836] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 576.018744][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 576.030084][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 576.545873][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 576.601150][ T5836] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 576.631425][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.678767][ T5836] usb 3-1: Product: syz [ 576.706035][ T5836] usb 3-1: Manufacturer: syz [ 576.751916][ T5836] usb 3-1: SerialNumber: syz [ 576.782820][ T5886] usb 5-1: USB disconnect, device number 110 [ 576.825158][ T5836] usb 3-1: config 0 descriptor?? [ 576.875813][T17761] loop6: detected capacity change from 0 to 7 [ 576.897926][T17761] Dev loop6: unable to read RDB block 7 [ 576.908824][ T5836] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 576.927274][T17761] loop6: unable to read partition table [ 576.942246][ T5836] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 576.946817][T17761] loop6: partition table beyond EOD, truncated [ 576.974461][T17761] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 577.858584][ T5836] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 577.877540][ T5836] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 578.023270][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 578.044211][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 578.086745][ T5924] usb 4-1: USB disconnect, device number 97 [ 578.284759][T17811] ip6gretap0: entered promiscuous mode [ 578.302195][T17811] macsec1: entered allmulticast mode [ 578.316825][T17811] ip6gretap0: entered allmulticast mode [ 578.465062][T17826] vlan0: entered promiscuous mode [ 578.499972][ T5836] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 578.524282][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 578.541158][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 578.607251][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 578.746340][T17838] xt_CT: No such helper "snmp" [ 578.798362][ T24] usb 4-1: config 0 has no interfaces? [ 578.851516][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 578.877383][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.885487][ T24] usb 4-1: Product: syz [ 578.915123][T17847] erspan0: entered promiscuous mode [ 578.917535][ T24] usb 4-1: Manufacturer: syz [ 578.925037][ T24] usb 4-1: SerialNumber: syz [ 578.940236][T17847] erspan0: left promiscuous mode [ 578.952947][ T24] usb 4-1: config 0 descriptor?? [ 578.982329][ T5845] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 579.232306][ T5836] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 579.287325][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 579.413362][ T5924] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 579.467713][T17871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.763017][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 579.806844][ T5836] usb 3-1: USB disconnect, device number 88 [ 579.820927][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 579.893819][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.915451][ T5924] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 579.961352][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.159883][ T5924] usb 1-1: Product: syz [ 580.164110][ T5924] usb 1-1: Manufacturer: syz [ 580.202779][ T5924] usb 1-1: SerialNumber: syz [ 580.392909][ T5924] usb 1-1: config 0 descriptor?? [ 580.431055][ T5924] usb 1-1: bad CDC descriptors [ 580.445809][ T5924] usb 1-1: unsupported MDLM descriptors [ 581.403769][ T5836] usb 4-1: USB disconnect, device number 98 [ 581.989317][ T5836] usb 1-1: USB disconnect, device number 90 [ 582.097088][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'. [ 582.145423][T17947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.404635][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 582.429964][T17958] netlink: 'syz.1.2343': attribute type 9 has an invalid length. [ 582.456536][T17958] macvlan2: entered allmulticast mode [ 582.479120][T17958] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 582.517495][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2343'. [ 582.876078][T17993] loop2: detected capacity change from 0 to 7 [ 582.899901][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'. [ 582.926294][T17993] Dev loop2: unable to read RDB block 7 [ 582.958630][T17993] loop2: unable to read partition table [ 582.977937][T17993] loop2: partition table beyond EOD, truncated [ 583.010158][T17993] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 583.336613][T18017] vti0: entered promiscuous mode [ 583.369072][T18017] vti0: entered allmulticast mode [ 583.378663][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 583.407289][ T977] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 583.605186][ T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.619814][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.697007][ T977] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 583.809417][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 583.851432][ T977] usb 2-1: SerialNumber: syz [ 584.086471][ T977] usb 2-1: 0:2 : does not exist [ 584.182210][T18044] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 584.189582][ T977] usb 2-1: USB disconnect, device number 100 [ 584.297315][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 584.920736][ T24] usb 3-1: config 0 has no interfaces? [ 584.936787][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 584.948630][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.968894][ T24] usb 3-1: Product: syz [ 584.973372][ T24] usb 3-1: Manufacturer: syz [ 584.981961][ T24] usb 3-1: SerialNumber: syz [ 585.007944][ T977] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 585.022078][ T24] usb 3-1: config 0 descriptor?? [ 585.117329][ T43] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 585.170129][ T977] usb 5-1: device descriptor read/64, error -71 [ 585.288219][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 585.298563][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.350696][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.377256][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 585.400315][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.443924][ T977] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 585.444894][ T43] usb 2-1: config 0 descriptor?? [ 585.488509][ T43] hub 2-1:0.0: USB hub found [ 585.624506][ T977] usb 5-1: device descriptor read/64, error -71 [ 585.737811][ T977] usb usb5-port1: attempt power cycle [ 585.939532][T18110] netlink: 'syz.3.2363': attribute type 21 has an invalid length. [ 585.941508][T18111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.104144][T18111] input: syz0 as /devices/virtual/input/input49 [ 586.107783][ T977] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 586.164427][ T977] usb 5-1: device descriptor read/8, error -71 [ 586.428932][ T977] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 586.478578][ T977] usb 5-1: device descriptor read/8, error -71 [ 586.533051][T18143] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 586.597948][ T977] usb usb5-port1: unable to enumerate USB device [ 586.711380][T18143] bond5: entered promiscuous mode [ 586.805435][T18143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.000459][ T24] usb 3-1: USB disconnect, device number 89 [ 587.093090][T18188] xt_hashlimit: size too large, truncated to 1048576 [ 587.154000][T18190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.175011][T18190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.454442][T18214] xt_TCPMSS: Only works on TCP SYN packets [ 589.497047][ T24] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 589.574703][ T24] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 589.647902][ T43] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 589.696075][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 589.737410][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 589.821417][ T43] usb 2-1: USB disconnect, device number 101 [ 590.287401][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 590.528905][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.557424][ T24] usb 4-1: config 0 has no interfaces? [ 590.587303][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 590.656255][T18270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.684227][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.702586][ T24] usb 4-1: config 0 descriptor?? [ 591.136401][T18292] ip6t_srh: unknown srh invflags 7863 [ 591.146898][T18292] fuse: Unknown parameter 'fd0x000000000000000b' [ 591.285252][T18298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.302469][T18298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.437400][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 591.597993][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 591.611670][ T24] usb 1-1: config 8 has an invalid interface number: 203 but max is 0 [ 591.631295][ T24] usb 1-1: config 8 has no interface number 0 [ 591.643217][ T24] usb 1-1: config 8 interface 203 has no altsetting 0 [ 591.689680][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 591.692891][T18308] macvlan4: entered allmulticast mode [ 591.700956][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.766257][ T24] usb 1-1: Product: syz [ 591.773485][ T24] usb 1-1: Manufacturer: syz [ 591.781291][ T24] usb 1-1: SerialNumber: syz [ 592.271592][T18323] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2384'. [ 592.956017][ T5974] usb 4-1: USB disconnect, device number 99 [ 593.037311][ T43] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 593.200136][ T43] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 593.210935][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.222566][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.239551][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 593.256002][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.275136][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.301110][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 593.328984][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.901286][ T24] port100 1-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 593.912757][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.931670][ T24] usb 1-1: USB disconnect, device number 91 [ 593.940708][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 593.966055][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.996004][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.014440][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.189756][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.198952][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.209997][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.218200][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.227516][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.240346][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.248944][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.259440][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.271029][T18343] delete_channel: no stack [ 594.279930][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.288717][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.298177][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.354811][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.396569][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 594.414749][ T43] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 594.435774][ T43] usb 2-1: Product: syz [ 594.444612][ T43] usb 2-1: Manufacturer: syz [ 594.451030][ T43] usb 2-1: SerialNumber: syz [ 594.463211][ T43] usb 2-1: config 0 descriptor?? [ 594.477815][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 594.493548][ T43] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 594.637311][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 594.655845][ T24] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 594.678148][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.686664][ T24] usb 1-1: Product: syz [ 594.694751][ T24] usb 1-1: Manufacturer: syz [ 594.783747][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 594.791158][ T24] usb 1-1: SerialNumber: syz [ 594.858018][ T24] usb 1-1: config 0 descriptor?? [ 594.874050][ T5886] usb 2-1: USB disconnect, device number 102 [ 594.885328][ T5886] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 594.920658][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 594.942191][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 595.240320][ T24] usb 1-1: USB disconnect, device number 92 [ 596.458283][T18433] FAULT_INJECTION: forcing a failure. [ 596.458283][T18433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.537537][T18433] CPU: 1 UID: 0 PID: 18433 Comm: syz.0.2398 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 596.537562][T18433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.537572][T18433] Call Trace: [ 596.537581][T18433] [ 596.537589][T18433] dump_stack_lvl+0x189/0x250 [ 596.537618][T18433] ? __pfx____ratelimit+0x10/0x10 [ 596.537638][T18433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.537660][T18433] ? __pfx__printk+0x10/0x10 [ 596.537679][T18433] ? __might_fault+0xb0/0x130 [ 596.537708][T18433] should_fail_ex+0x414/0x560 [ 596.537734][T18433] _copy_from_user+0x2d/0xb0 [ 596.537752][T18433] kstrtouint_from_user+0xc4/0x170 [ 596.537777][T18433] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 596.537817][T18433] proc_fail_nth_write+0x88/0x240 [ 596.537837][T18433] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 596.537863][T18433] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 596.537885][T18433] vfs_write+0x27e/0xa90 [ 596.537919][T18433] ? __pfx_vfs_write+0x10/0x10 [ 596.537945][T18433] ? __fget_files+0x2a/0x420 [ 596.537969][T18433] ? __fget_files+0x3a0/0x420 [ 596.537986][T18433] ? __fget_files+0x2a/0x420 [ 596.538013][T18433] ksys_write+0x145/0x250 [ 596.538031][T18433] ? __pfx_ksys_write+0x10/0x10 [ 596.538045][T18433] ? rcu_is_watching+0x15/0xb0 [ 596.538075][T18433] ? do_syscall_64+0xbe/0x3b0 [ 596.538101][T18433] do_syscall_64+0xfa/0x3b0 [ 596.538122][T18433] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.538144][T18433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.538161][T18433] ? clear_bhb_loop+0x60/0xb0 [ 596.538182][T18433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.538198][T18433] RIP: 0033:0x7ff944f8d3df [ 596.538215][T18433] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 596.538231][T18433] RSP: 002b:00007ff945e04030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 596.538250][T18433] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff944f8d3df [ 596.538269][T18433] RDX: 0000000000000001 RSI: 00007ff945e040a0 RDI: 0000000000000004 [ 596.538280][T18433] RBP: 00007ff945e04090 R08: 0000000000000000 R09: 0000000000000010 [ 596.538291][T18433] R10: e61e2840a554b0d0 R11: 0000000000000293 R12: 0000000000000002 [ 596.538303][T18433] R13: 0000000000000000 R14: 00007ff9451b5fa0 R15: 00007ff9452dfa28 [ 596.538333][T18433] [ 597.125050][T18441] vlan2: entered promiscuous mode [ 597.227722][T18441] team0: entered promiscuous mode [ 597.338178][T18454] loop6: detected capacity change from 0 to 63 [ 597.390152][T18454] buffer_io_error: 3 callbacks suppressed [ 597.390180][T18454] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.471954][T18454] Buffer I/O error on dev loop6, logical block 1, async page read [ 597.507645][T18454] Buffer I/O error on dev loop6, logical block 2, async page read [ 597.546457][T18454] Buffer I/O error on dev loop6, logical block 3, async page read [ 597.596714][T18454] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.649829][T18454] Buffer I/O error on dev loop6, logical block 1, async page read [ 597.697695][T18454] Buffer I/O error on dev loop6, logical block 2, async page read [ 597.725745][T18454] Buffer I/O error on dev loop6, logical block 3, async page read [ 597.752948][T11433] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.763980][T11433] Buffer I/O error on dev loop6, logical block 1, async page read [ 597.773886][T18476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2408'. [ 597.797392][ T5886] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 597.947266][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 597.954968][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 597.968387][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 597.982790][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.016692][ T5886] usb 1-1: Product: syz [ 598.027270][ T5886] usb 1-1: Manufacturer: syz [ 598.034386][ T5886] usb 1-1: SerialNumber: syz [ 598.044372][ T5886] usb 1-1: config 0 descriptor?? [ 598.057080][ T5886] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 598.068914][ T5886] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 598.173086][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2410'. [ 598.589577][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 598.666018][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.674776][ T5886] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 598.678174][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.497493][ T5886] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 599.507369][ T5886] em28xx 1-1:0.0: board has no eeprom [ 599.599393][ T5886] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 599.608088][ T5886] em28xx 1-1:0.0: dvb set to bulk mode. [ 599.613986][ T977] em28xx 1-1:0.0: Binding DVB extension [ 599.629653][ T5886] usb 1-1: USB disconnect, device number 93 [ 599.638338][ T5886] em28xx 1-1:0.0: Disconnecting em28xx [ 599.756466][ T977] em28xx 1-1:0.0: Registering input extension [ 599.765346][ T5886] em28xx 1-1:0.0: Closing input extension [ 599.838387][ T5886] em28xx 1-1:0.0: Freeing device [ 600.438207][T18544] bond4: (slave gretap2): Releasing active interface [ 600.470679][T18556] netlink: 'syz.0.2416': attribute type 2 has an invalid length. [ 600.533910][T18560] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2417'. [ 600.596407][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 600.831098][T18566] vlan0: entered promiscuous mode [ 600.875546][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.907244][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.924022][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 600.936294][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 600.960070][ T24] usb 4-1: SerialNumber: syz [ 601.598817][ T24] usb 4-1: 0:2 : does not exist [ 601.677753][ T24] usb 4-1: USB disconnect, device number 100 [ 601.732543][T11433] udevd[11433]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.892240][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 602.919761][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 603.068865][T18639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2432'. [ 603.142074][T18640] ip6t_srh: unknown srh invflags 7863 [ 603.151415][T18640] fuse: Unknown parameter 'fd0x000000000000000c' [ 603.667595][ T5886] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 603.833224][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 603.842017][ T5886] usb 3-1: no configurations [ 603.846821][ T5886] usb 3-1: can't read configurations, error -22 [ 603.997109][ T5886] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 604.175618][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 604.265598][ T5886] usb 3-1: no configurations [ 604.270355][ T5886] usb 3-1: can't read configurations, error -22 [ 604.370646][ T5886] usb usb3-port1: attempt power cycle [ 604.927590][ T5886] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 604.970460][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 604.981424][ T5886] usb 3-1: no configurations [ 604.989883][ T5886] usb 3-1: can't read configurations, error -22 [ 605.138781][ T5886] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 605.171198][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 605.181718][ T5886] usb 3-1: no configurations [ 605.189854][ T5886] usb 3-1: can't read configurations, error -22 [ 605.203618][ T5886] usb usb3-port1: unable to enumerate USB device [ 605.390944][T18676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2438'. [ 605.597934][T18681] netlink: 'syz.4.2440': attribute type 4 has an invalid length. [ 605.772301][T18691] netlink: 'syz.4.2442': attribute type 10 has an invalid length. [ 605.840558][T18691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.881136][T18691] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 606.270133][T18711] ip6t_srh: unknown srh invflags 7863 [ 606.278581][T18711] fuse: Unknown parameter 'fd0x000000000000000c' [ 606.317417][ T5886] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 606.491047][ T5886] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 606.506115][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.561335][ T5886] usb 3-1: config 0 has no interface number 0 [ 606.578815][ T5886] usb 3-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 606.619988][ T5886] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 606.629518][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.647375][ T5886] usb 3-1: Product: syz [ 606.652519][ T5886] usb 3-1: Manufacturer: syz [ 606.657325][ T5886] usb 3-1: SerialNumber: syz [ 606.673556][ T5886] usb 3-1: config 0 descriptor?? [ 607.108372][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.115481][ T5886] usb 3-1: MIDIStreaming interface descriptor not found [ 607.197587][T18731] xt_bpf: check failed: parse error [ 607.287551][ T5886] usb 3-1: USB disconnect, device number 94 [ 607.466273][ T7140] udevd[7140]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.512307][T18754] loop2: detected capacity change from 0 to 7 [ 607.562067][T18754] Dev loop2: unable to read RDB block 7 [ 607.573750][T18754] loop2: unable to read partition table [ 607.582058][T18754] loop2: partition table beyond EOD, truncated [ 607.606321][T18754] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 607.930324][T18785] xt_TCPMSS: Only works on TCP SYN packets [ 608.017473][ T43] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 608.097373][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 608.132430][ T5845] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 608.187299][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 608.199661][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 608.221771][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.243476][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 608.262250][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.289206][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 608.300433][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 608.314199][ T24] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 608.324026][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.337589][ T24] usb 3-1: config 0 descriptor?? [ 608.343172][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.352847][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.361765][ T43] usb 4-1: Product: syz [ 608.373327][ T43] usb 4-1: Manufacturer: syz [ 608.379073][ T43] usb 4-1: SerialNumber: syz [ 608.387321][ T5836] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 608.487301][ T5886] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 608.567409][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 608.574859][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.589697][ T5836] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 608.599058][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.607267][ T5836] usb 5-1: Product: syz [ 608.611567][ T5836] usb 5-1: Manufacturer: syz [ 608.616212][ T5836] usb 5-1: SerialNumber: syz [ 608.625600][ T5836] usb 5-1: config 0 descriptor?? [ 608.637030][ T5836] usb 5-1: bad CDC descriptors [ 608.645806][ T5836] usb 5-1: unsupported MDLM descriptors [ 608.647295][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 608.687637][ T5886] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 608.706286][ T5886] usb 1-1: config 0 has no interface number 0 [ 608.713197][ T5886] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 608.735425][ T5886] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 608.757488][ T5886] usb 1-1: config 0 interface 255 has no altsetting 0 [ 608.769747][ T5886] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 608.784324][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.791362][ T24] thrustmaster 0003:044F:B320.001E: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.2-1/input0 [ 608.803060][ T5886] usb 1-1: Product: syz [ 608.817367][ T24] thrustmaster 0003:044F:B320.001E: no inputs found [ 608.825319][ T5886] usb 1-1: Manufacturer: syz [ 608.835420][ T5886] usb 1-1: SerialNumber: syz [ 608.844480][ T24] usb 5-1: USB disconnect, device number 115 [ 608.855111][ T5886] usb 1-1: config 0 descriptor?? [ 609.031414][ T5836] usb 3-1: USB disconnect, device number 95 [ 609.199048][T18837] netlink: 'syz.1.2464': attribute type 29 has an invalid length. [ 609.228264][T18837] netlink: 'syz.1.2464': attribute type 29 has an invalid length. [ 609.315466][ T43] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 609.327386][ T43] cdc_ncm 4-1:1.0: bind() failure [ 609.337132][ T43] usb 4-1: USB disconnect, device number 101 [ 609.601680][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2466'. [ 609.977447][ T5886] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 610.102562][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 610.137547][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 610.162628][ T5886] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 610.180103][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 610.195109][ T5886] usb 3-1: Product: syz [ 610.207939][ T5886] usb 3-1: Manufacturer: syz [ 610.212765][ T5886] usb 3-1: SerialNumber: syz [ 610.226338][ T5886] usb 3-1: config 0 descriptor?? [ 610.632565][ T5845] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 610.857493][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 610.867733][ T977] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 611.009130][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.028888][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 611.044330][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 611.058462][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 611.067028][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.077226][ T24] usb 2-1: Product: syz [ 611.081481][ T24] usb 2-1: Manufacturer: syz [ 611.093174][ T977] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 611.103649][ T24] usb 2-1: SerialNumber: syz [ 611.111061][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.119837][ T977] usb 5-1: Product: syz [ 611.124711][ T977] usb 5-1: Manufacturer: syz [ 611.130209][ T977] usb 5-1: SerialNumber: syz [ 611.141345][ T977] usb 5-1: config 0 descriptor?? [ 611.150401][ T977] usb 5-1: bad CDC descriptors [ 611.155912][ T977] usb 5-1: unsupported MDLM descriptors [ 611.251370][ T24] usb 1-1: USB disconnect, device number 94 [ 611.353500][ T977] usb 5-1: USB disconnect, device number 116 [ 611.646514][T18952] xt_CT: No such helper "snmp" [ 611.978984][T18954] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2476'. [ 612.024562][ T30] audit: type=1326 audit(1751332001.749:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.115350][ T30] audit: type=1326 audit(1751332001.749:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.143715][ T30] audit: type=1326 audit(1751332001.749:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.221068][ T30] audit: type=1326 audit(1751332001.749:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.319118][T18972] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2481'. [ 612.328583][ T5886] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 612.384092][ T30] audit: type=1326 audit(1751332001.749:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.473045][ T30] audit: type=1326 audit(1751332001.749:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f445418d290 code=0x7ffc0000 [ 612.509534][T18975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.529524][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 612.552231][ T5886] usb 1-1: config 0 has no interfaces? [ 612.562206][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 612.571755][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.587608][ T5886] usb 1-1: Product: syz [ 612.597256][ T5886] usb 1-1: Manufacturer: syz [ 612.613160][ T30] audit: type=1326 audit(1751332001.749:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.710746][ T5886] usb 1-1: SerialNumber: syz [ 612.718950][ T30] audit: type=1326 audit(1751332001.749:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.742936][ T5886] usb 1-1: config 0 descriptor?? [ 612.755207][ T30] audit: type=1326 audit(1751332001.749:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.867532][ T30] audit: type=1326 audit(1751332001.749:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445418e929 code=0x7ffc0000 [ 612.933044][ T43] usb 3-1: USB disconnect, device number 96 [ 613.030271][T18960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.115812][T18960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.166743][ T24] usb 1-1: USB disconnect, device number 95 [ 613.309554][ T43] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 613.344187][ T43] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 613.687456][ T24] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 613.829601][ T43] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 613.857303][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 613.876587][ T24] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 613.893559][ T24] usb 1-1: config 0 has no interface number 0 [ 613.921065][ T24] usb 1-1: config 0 interface 237 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 613.937850][ T1165] usb 2-1: USB disconnect, device number 103 [ 613.996723][ T24] usb 1-1: config 0 interface 237 has no altsetting 0 [ 614.010931][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 614.114974][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 614.145833][ T24] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=2a.b3 [ 614.168514][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.176602][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 614.192370][ T24] usb 1-1: Product: syz [ 614.196581][ T24] usb 1-1: Manufacturer: syz [ 614.207554][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.234237][ T24] usb 1-1: SerialNumber: syz [ 614.250246][ T24] usb 1-1: config 0 descriptor?? [ 614.255413][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.266388][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.276472][ T24] em28xx 1-1:0.237: New device syz syz @ 480 Mbps (eb1a:e303, interface 237, class 237) [ 614.295352][ T24] em28xx 1-1:0.237: Video interface 237 found: [ 614.303597][ T43] usb 4-1: config 0 descriptor?? [ 614.309824][T19018] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 614.553986][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 614.563268][T19043] netlink: 'syz.4.2491': attribute type 9 has an invalid length. [ 614.580071][T19043] macvlan1: entered allmulticast mode [ 614.596286][T19043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2491'. [ 614.816214][ T43] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 614.892498][ T24] em28xx 1-1:0.237: chip ID is em2710/2820 [ 615.142779][ T5924] usb 4-1: USB disconnect, device number 102 [ 615.213737][ T24] em28xx 1-1:0.237: reading from i2c device at 0xa0 failed (error=-5) [ 615.247679][ T5886] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 615.249670][ T24] em28xx 1-1:0.237: board has no eeprom [ 615.317841][ T24] em28xx 1-1:0.237: Identified as Kaiomy TVnPC U2 (card=63) [ 615.327312][ T24] em28xx 1-1:0.237: analog set to bulk mode. [ 615.334847][ T43] em28xx 1-1:0.237: Registering V4L2 extension [ 615.376262][ T24] usb 1-1: USB disconnect, device number 96 [ 615.403579][ T24] em28xx 1-1:0.237: Disconnecting em28xx [ 615.420569][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 615.446234][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 615.457679][ T977] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 615.493002][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 615.523781][ T5886] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 615.544063][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.565830][ T43] i2c i2c-2: Invalid 7-bit I2C address 0x00 [ 615.575906][ T5886] usb 2-1: config 0 descriptor?? [ 615.598897][T19075] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 615.614635][ T5886] gspca_main: spca561-2.14.0 probing abcd:cdee [ 615.637841][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 615.645400][ T977] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 615.662295][ T977] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.683555][ T977] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 615.716868][ T43] tuner: 2-0061: Tuner -1 found with type(s) Radio TV. [ 615.719510][ T977] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.742752][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.755149][ T977] usb 5-1: Product: syz [ 615.785095][ T977] usb 5-1: Manufacturer: syz [ 615.794960][ T977] usb 5-1: SerialNumber: syz [ 615.812932][ T43] DVB: Unable to find symbol xc2028_attach() [ 615.819366][ T5886] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 615.820405][ T5886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.835745][ T43] tuner: 2-0061: Tuner has no way to set tv freq [ 615.844268][ T43] em28xx 1-1:0.237: Config register raw data: 0xffffffed [ 615.854105][ T43] em28xx 1-1:0.237: AC97 chip type couldn't be determined [ 615.856760][ T5886] usb 2-1: MIDIStreaming interface descriptor not found [ 615.862036][ T43] em28xx 1-1:0.237: No AC97 audio processor [ 615.879008][ T43] tuner: 2-0061: Tuner has no way to set tv freq [ 615.893157][ T43] videodev: could not get a free minor [ 615.907816][ T43] em28xx 1-1:0.237: can't register radio device [ 616.042156][ T43] em28xx 1-1:0.237: V4L2 device video103 deregistered [ 616.092393][ T5886] usb 2-1: USB disconnect, device number 104 [ 616.132025][ T43] em28xx 1-1:0.237: Registering input extension [ 616.177523][ T24] em28xx 1-1:0.237: Closing input extension [ 616.222021][ T24] em28xx 1-1:0.237: Freeing device [ 616.291402][ T977] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 616.565598][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2500'. [ 616.577369][ T24] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 616.851200][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.917733][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 616.953288][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 616.977215][ T24] usb 1-1: Product: syz [ 616.981435][ T24] usb 1-1: Manufacturer: syz [ 617.006472][ T24] usb 1-1: SerialNumber: syz [ 617.102063][ T977] usb 5-1: current rate 9338573 is different from the runtime rate 9338507 [ 617.313166][T19101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.328011][T19101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.527737][ T977] usb 5-1: USB disconnect, device number 117 [ 617.911156][T19228] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2499'. [ 617.928486][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 617.928504][ T30] audit: type=1326 audit(1751332007.669:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.121007][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2503'. [ 618.213058][ T30] audit: type=1326 audit(1751332007.669:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.266234][ T30] audit: type=1326 audit(1751332007.679:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.359004][ T30] audit: type=1326 audit(1751332007.679:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff944f8d290 code=0x7ffc0000 [ 618.430351][ T30] audit: type=1326 audit(1751332007.679:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.533834][ T30] audit: type=1326 audit(1751332007.679:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.629639][ T30] audit: type=1326 audit(1751332007.679:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.693619][ T30] audit: type=1326 audit(1751332007.679:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.726239][T19250] loop2: detected capacity change from 0 to 7 [ 618.902865][T19250] Dev loop2: unable to read RDB block 7 [ 618.908702][T19250] loop2: AHDI p2 [ 618.913116][ T30] audit: type=1326 audit(1751332007.679:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.913183][T19250] loop2: partition table partially beyond EOD, [ 618.936014][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.961695][ T30] audit: type=1326 audit(1751332007.689:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19119 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 618.988043][T19250] truncated [ 619.436653][T19267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2511'. [ 619.506184][ T5925] usb 1-1: USB disconnect, device number 97 [ 619.682136][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 620.087275][ T5925] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 620.397693][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 620.540801][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 620.553720][ T5925] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 620.603209][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 620.621771][ T5925] usb 3-1: can't read configurations, error -61 [ 620.851449][ T5925] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 621.217292][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 621.223651][ T5925] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 621.234982][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 621.243026][ T5925] usb 3-1: can't read configurations, error -61 [ 621.255816][ T5925] usb usb3-port1: attempt power cycle [ 621.349022][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2523'. [ 621.378383][ T43] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 621.507888][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 621.557493][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 621.565613][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.579815][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.597297][ T5925] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 621.597421][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 621.614124][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.628954][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 621.633016][ T43] usb 4-1: config 0 descriptor?? [ 621.639018][ T5925] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 621.662615][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 621.673766][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.687929][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 621.692375][T19347] vlan0: entered promiscuous mode [ 621.697878][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 621.708731][ T5925] usb 3-1: can't read configurations, error -61 [ 621.713326][ T24] usb 2-1: Product: syz [ 621.722472][ T24] usb 2-1: Manufacturer: syz [ 621.728003][ T24] usb 2-1: SerialNumber: syz [ 621.847406][ T5925] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 621.868066][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 621.874081][ T5925] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 621.884186][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 621.892162][ T5925] usb 3-1: can't read configurations, error -61 [ 621.899388][ T5925] usb usb3-port1: unable to enumerate USB device [ 622.049958][ T43] magicmouse 0003:05AC:0265.0021: unknown main item tag 0x0 [ 622.058041][ T43] magicmouse 0003:05AC:0265.0021: unknown main item tag 0x0 [ 622.065375][ T43] magicmouse 0003:05AC:0265.0021: unknown main item tag 0x0 [ 622.073064][ T43] magicmouse 0003:05AC:0265.0021: unknown main item tag 0x0 [ 622.080564][ T43] magicmouse 0003:05AC:0265.0021: unknown main item tag 0x0 [ 622.088495][ T43] magicmouse 0003:05AC:0265.0021: unknown main item tag 0x0 [ 622.095802][ T43] magicmouse 0003:05AC:0265.0021: unknown main item tag 0x0 [ 622.105762][ T43] magicmouse 0003:05AC:0265.0021: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 622.117923][ T43] magicmouse 0003:05AC:0265.0021: magicmouse input not registered [ 622.130462][ T43] magicmouse 0003:05AC:0265.0021: probe with driver magicmouse failed with error -12 [ 622.240269][T19367] FAULT_INJECTION: forcing a failure. [ 622.240269][T19367] name failslab, interval 1, probability 0, space 0, times 0 [ 622.253553][T19367] CPU: 1 UID: 0 PID: 19367 Comm: syz.4.2528 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 622.253577][T19367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.253588][T19367] Call Trace: [ 622.253595][T19367] [ 622.253601][T19367] dump_stack_lvl+0x189/0x250 [ 622.253621][T19367] ? __pfx____ratelimit+0x10/0x10 [ 622.253636][T19367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.253651][T19367] ? __pfx__printk+0x10/0x10 [ 622.253666][T19367] ? __pfx___might_resched+0x10/0x10 [ 622.253686][T19367] should_fail_ex+0x414/0x560 [ 622.253701][T19367] should_failslab+0xa8/0x100 [ 622.253712][T19367] kmem_cache_alloc_noprof+0x73/0x3c0 [ 622.253728][T19367] ? copy_utsname+0x11c/0x420 [ 622.253742][T19367] copy_utsname+0x11c/0x420 [ 622.253755][T19367] create_new_namespaces+0x180/0x720 [ 622.253770][T19367] ? bpf_lsm_capable+0x9/0x20 [ 622.253780][T19367] ? security_capable+0x7e/0x2e0 [ 622.253797][T19367] unshare_nsproxy_namespaces+0x11c/0x170 [ 622.253812][T19367] ksys_unshare+0x4c8/0x8c0 [ 622.253826][T19367] ? __pfx_ksys_unshare+0x10/0x10 [ 622.253836][T19367] ? __pfx_ksys_write+0x10/0x10 [ 622.253844][T19367] ? rcu_is_watching+0x15/0xb0 [ 622.253863][T19367] __x64_sys_unshare+0x38/0x50 [ 622.253873][T19367] do_syscall_64+0xfa/0x3b0 [ 622.253887][T19367] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.253899][T19367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.253909][T19367] ? clear_bhb_loop+0x60/0xb0 [ 622.253920][T19367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.253930][T19367] RIP: 0033:0x7fe321d8e929 [ 622.253940][T19367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.253948][T19367] RSP: 002b:00007fe322cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 622.253959][T19367] RAX: ffffffffffffffda RBX: 00007fe321fb5fa0 RCX: 00007fe321d8e929 [ 622.253966][T19367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 622.253973][T19367] RBP: 00007fe322cbb090 R08: 0000000000000000 R09: 0000000000000000 [ 622.253979][T19367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.253984][T19367] R13: 0000000000000000 R14: 00007fe321fb5fa0 R15: 00007fe3220dfa28 [ 622.253999][T19367] [ 622.480876][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.501391][ T5925] usb 4-1: USB disconnect, device number 103 [ 622.728752][T19380] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2522'. [ 622.809776][T19382] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2529'. [ 623.122649][T19392] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2531'. [ 623.242565][T19400] FAULT_INJECTION: forcing a failure. [ 623.242565][T19400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.281528][T19400] CPU: 1 UID: 0 PID: 19400 Comm: syz.3.2533 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 623.281551][T19400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 623.281562][T19400] Call Trace: [ 623.281570][T19400] [ 623.281578][T19400] dump_stack_lvl+0x189/0x250 [ 623.281605][T19400] ? __pfx____ratelimit+0x10/0x10 [ 623.281626][T19400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.281646][T19400] ? __pfx__printk+0x10/0x10 [ 623.281663][T19400] ? __might_fault+0xb0/0x130 [ 623.281690][T19400] should_fail_ex+0x414/0x560 [ 623.281712][T19400] _copy_from_user+0x2d/0xb0 [ 623.281727][T19400] __sys_sendto+0x25c/0x520 [ 623.281745][T19400] ? __pfx___sys_sendto+0x10/0x10 [ 623.281759][T19400] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 623.281791][T19400] ? __fget_files+0x3a0/0x420 [ 623.281817][T19400] ? ksys_write+0x22a/0x250 [ 623.281833][T19400] ? __pfx_ksys_write+0x10/0x10 [ 623.281845][T19400] ? rcu_is_watching+0x15/0xb0 [ 623.281873][T19400] __x64_sys_sendto+0xde/0x100 [ 623.281892][T19400] do_syscall_64+0xfa/0x3b0 [ 623.281912][T19400] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.281931][T19400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.281948][T19400] ? clear_bhb_loop+0x60/0xb0 [ 623.281967][T19400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.281983][T19400] RIP: 0033:0x7fcf2af8e929 [ 623.281998][T19400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.282011][T19400] RSP: 002b:00007fcf2be2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 623.282029][T19400] RAX: ffffffffffffffda RBX: 00007fcf2b1b5fa0 RCX: 00007fcf2af8e929 [ 623.282041][T19400] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000004 [ 623.282051][T19400] RBP: 00007fcf2be2b090 R08: 0000200000000200 R09: 0000000000000014 [ 623.282063][T19400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.282073][T19400] R13: 0000000000000000 R14: 00007fcf2b1b5fa0 R15: 00007fcf2b2dfa28 [ 623.282096][T19400] [ 623.492478][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.828923][T19395] delete_channel: no stack [ 623.833639][T19395] delete_channel: no stack [ 623.868427][T19410] vlan3: entered promiscuous mode [ 624.227762][T19425] tipc: Started in network mode [ 624.233427][T19425] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 624.242732][T19425] tipc: Enabled bearer , priority 10 [ 624.265183][T19425] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2539'. [ 624.275246][T19425] tipc: Resetting bearer [ 624.461770][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.470026][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.573000][T19425] tipc: Disabling bearer [ 624.709911][T19443] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2541'. [ 624.807499][ T43] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 625.097343][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 625.105788][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 625.118326][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 80, changing to 10 [ 625.135444][ T43] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 625.149882][ T43] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 625.214188][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.225939][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.236427][ T43] usb 1-1: Product: syz [ 625.323371][ T43] usb 1-1: Manufacturer: Ќ [ 625.328021][ T43] usb 1-1: SerialNumber: syz [ 625.535917][ T5886] usb 2-1: USB disconnect, device number 105 [ 625.550474][T19407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2536'. [ 625.644425][ T43] cdc_ncm 1-1:1.0: bind() failure [ 625.783020][ T43] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 625.814539][ T43] cdc_ncm 1-1:1.1: bind() failure [ 625.856179][ T43] usb 1-1: USB disconnect, device number 98 [ 626.017778][ T5886] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 626.054012][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2544'. [ 626.067670][T19497] netlink: 'syz.4.2544': attribute type 9 has an invalid length. [ 626.153408][T19497] macvlan2: entered allmulticast mode [ 626.200352][ T5886] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 626.218201][ T5886] usb 2-1: config 0 has no interface number 0 [ 626.234725][ T5886] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 626.258369][ T5886] usb 2-1: config 0 interface 128 has no altsetting 0 [ 626.281981][T19497] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2544'. [ 626.297628][ T5886] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 626.312615][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.327229][ T5886] usb 2-1: Product: syz [ 626.346962][ T5886] usb 2-1: Manufacturer: syz [ 626.352159][ T5886] usb 2-1: SerialNumber: syz [ 626.378951][ T5886] usb 2-1: config 0 descriptor?? [ 626.392759][ T5886] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 626.414556][ T5886] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 626.446929][ T5886] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 626.597684][ T43] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 626.820484][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 626.863358][ T43] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 626.872703][ T43] usb 3-1: can't read configurations, error -22 [ 626.928991][ T1165] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 626.944044][T19534] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 626.944044][T19534] The task syz.4.2550 (19534) triggered the difference, watch for misbehavior. [ 627.097396][ T43] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 627.154161][ T5886] usb 2-1: USB disconnect, device number 106 [ 627.186278][ T1165] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.215875][ T1165] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 627.230570][ T1165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 627.257594][ T1165] usb 1-1: Product: syz [ 627.272093][ T1165] usb 1-1: Manufacturer: syz [ 627.281841][ T1165] usb 1-1: SerialNumber: syz [ 627.287473][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 627.294674][ T43] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 627.303989][ T43] usb 3-1: can't read configurations, error -22 [ 627.324752][ T43] usb usb3-port1: attempt power cycle [ 627.348560][T19548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2552'. [ 627.694376][ T43] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 627.733584][T19569] vlan0: entered allmulticast mode [ 627.739266][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 627.756211][ T43] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 627.764395][ T5886] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 627.765291][ T1165] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 627.814307][ T43] usb 3-1: can't read configurations, error -22 [ 627.940385][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 627.948276][ T43] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 627.957604][ T5886] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 627.966259][ T5886] usb 4-1: config 0 has no interface number 0 [ 627.977542][ T1165] usb 2-1: Using ep0 maxpacket: 16 [ 627.991142][ T5886] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 627.992066][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 628.010502][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.047915][ T5886] usb 4-1: Product: syz [ 628.052171][ T5886] usb 4-1: Manufacturer: syz [ 628.052256][ T43] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 628.057126][ T5886] usb 4-1: SerialNumber: syz [ 628.075852][ T5886] usb 4-1: config 0 descriptor?? [ 628.096341][T19587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.105408][T19587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.145896][ T43] usb 3-1: can't read configurations, error -22 [ 628.156978][ T43] usb usb3-port1: unable to enumerate USB device [ 628.185685][ T5886] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 628.218923][T19600] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.2549'. [ 628.239991][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 628.253563][ T30] audit: type=1326 audit(1751332017.989:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.413862][T12236] usb 4-1: Failed to submit usb control message: -71 [ 628.429354][T12236] usb 4-1: unable to send the bmi data to the device: -71 [ 628.433603][ T5886] usb 4-1: USB disconnect, device number 104 [ 628.436840][ T30] audit: type=1326 audit(1751332017.989:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.480279][T12236] usb 4-1: unable to get target info from device [ 628.494526][T12236] usb 4-1: could not get target info (-71) [ 628.511263][T12236] usb 4-1: could not probe fw (-71) [ 628.533062][ T30] audit: type=1326 audit(1751332017.989:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.547285][ T977] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 628.556250][ T30] audit: type=1326 audit(1751332017.989:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff944f8d290 code=0x7ffc0000 [ 628.586341][ T30] audit: type=1326 audit(1751332017.989:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.643314][ T30] audit: type=1326 audit(1751332017.989:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.671509][ T30] audit: type=1326 audit(1751332017.989:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.716861][ T30] audit: type=1326 audit(1751332017.999:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.761228][ T30] audit: type=1326 audit(1751332017.999:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.787460][ T30] audit: type=1326 audit(1751332017.999:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.0.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 628.838972][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 628.855208][ T977] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 628.864614][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.874128][ T977] usb 5-1: Product: syz [ 628.879368][ T977] usb 5-1: Manufacturer: syz [ 628.884607][ T977] usb 5-1: SerialNumber: syz [ 628.954375][ T977] usb 5-1: config 0 descriptor?? [ 628.966362][ T977] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 628.975221][ T977] usb 5-1: setting power ON [ 628.980716][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 629.004443][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.015631][ T977] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 629.031728][ T977] usb 5-1: media controller created [ 629.072940][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.143293][ T977] usb 5-1: selecting invalid altsetting 6 [ 629.197036][ T977] usb 5-1: digital interface selection failed (-22) [ 629.207986][ T977] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 629.222164][ T977] usb 5-1: setting power OFF [ 629.227127][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 629.237039][ T977] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 629.250975][ T977] (NULL device *): no alternate interface [ 629.306055][ T977] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 629.352316][ T977] usb 5-1: USB disconnect, device number 118 [ 630.285082][ T24] usb 1-1: USB disconnect, device number 99 [ 630.434874][ T1165] usb 2-1: unable to get BOS descriptor or descriptor too short [ 630.452842][ T1165] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 630.537256][ T1165] usb 2-1: can't read configurations, error -71 [ 630.742197][T19673] xt_bpf: check failed: parse error [ 631.474873][T19721] vlan0: entered promiscuous mode [ 631.843790][T19739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.993874][T19743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2574'. [ 632.078204][T19739] input: syz0 as /devices/virtual/input/input54 [ 632.263949][T19749] bond0: (slave batadv0): Releasing backup interface [ 632.896722][T19788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2585'. [ 633.337337][ T977] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 633.517071][ T977] usb 1-1: config 0 has no interfaces? [ 633.546057][ T977] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 633.564880][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.648714][ T977] usb 1-1: Product: syz [ 633.654338][ T977] usb 1-1: Manufacturer: syz [ 633.684110][ T977] usb 1-1: SerialNumber: syz [ 633.786417][ T977] usb 1-1: config 0 descriptor?? [ 634.017867][ T1165] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 634.108707][T19799] netlink: 'syz.0.2584': attribute type 7 has an invalid length. [ 634.131355][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2593'. [ 634.152569][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 634.152585][ T30] audit: type=1326 audit(1751332023.869:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.243488][T19835] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2595'. [ 634.329184][ T1165] usb 2-1: device descriptor read/64, error -71 [ 634.339421][T19836] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 634.385409][ T30] audit: type=1326 audit(1751332023.869:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.437464][ T30] audit: type=1326 audit(1751332023.869:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.522519][ T30] audit: type=1326 audit(1751332023.879:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.581269][ T30] audit: type=1326 audit(1751332023.879:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.609156][ T1165] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 634.641743][ T30] audit: type=1326 audit(1751332023.879:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.668183][T19838] netlink: 'syz.3.2596': attribute type 2 has an invalid length. [ 634.686622][ T30] audit: type=1326 audit(1751332023.879:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.712348][ T30] audit: type=1326 audit(1751332023.879:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.758617][ T30] audit: type=1326 audit(1751332023.879:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.787272][ T1165] usb 2-1: device descriptor read/64, error -71 [ 634.814595][ T30] audit: type=1326 audit(1751332023.879:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19789 comm="syz.0.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944f8e929 code=0x7ffc0000 [ 634.897686][ T1165] usb usb2-port1: attempt power cycle [ 634.947268][ T43] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 635.112007][ T43] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 635.121384][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.130061][ T43] usb 5-1: Product: syz [ 635.134432][ T43] usb 5-1: Manufacturer: syz [ 635.156318][ T43] usb 5-1: SerialNumber: syz [ 635.196561][ T43] usb 5-1: config 0 descriptor?? [ 635.247330][ T1165] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 635.256558][ T43] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 119 [ 635.326414][T19861] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 635.333431][T19861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 635.349239][ T1165] usb 2-1: device descriptor read/8, error -71 [ 635.373103][T19861] vhci_hcd vhci_hcd.0: Device attached [ 635.454943][ T43] (null): failure setting delay to 10us [ 635.466524][ T43] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 635.499344][ T43] usb 5-1: USB disconnect, device number 119 [ 635.592488][ T5886] vhci_hcd: vhci_device speed not set [ 635.601652][ T1165] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 635.628017][ T1165] usb 2-1: device descriptor read/8, error -71 [ 635.652444][T19873] tipc: Enabling of bearer rejected, failed to enable media [ 635.662986][ T5886] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 635.738028][ T1165] usb usb2-port1: unable to enumerate USB device [ 635.842872][T19874] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2601'. [ 635.941523][ T1165] usb 1-1: USB disconnect, device number 100 [ 636.003042][T19883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2604'. [ 636.221654][T19862] vhci_hcd: connection reset by peer [ 636.248250][T12240] vhci_hcd: stop threads [ 636.253775][T12240] vhci_hcd: release socket [ 636.336825][T12240] vhci_hcd: disconnect device [ 636.505698][T19901] netlink: 'syz.0.2610': attribute type 10 has an invalid length. [ 636.555407][T19901] netlink: 'syz.0.2610': attribute type 63 has an invalid length. [ 636.567573][T19901] lo: left promiscuous mode [ 636.589071][T19901] netlink: 'syz.0.2610': attribute type 63 has an invalid length. [ 636.641213][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 637.133637][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 637.680940][T19917] netlink: 'syz.1.2612': attribute type 8 has an invalid length. [ 637.698367][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 637.726970][T19917] bridge0: entered allmulticast mode [ 638.224501][T19940] netlink: 'syz.0.2618': attribute type 17 has an invalid length. [ 639.147866][T19977] vlan0: entered promiscuous mode [ 639.404857][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 639.404873][ T30] audit: type=1326 audit(1751332029.179:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.486577][ T30] audit: type=1326 audit(1751332029.179:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.560602][ T30] audit: type=1326 audit(1751332029.219:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.590216][ T30] audit: type=1326 audit(1751332029.219:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.685715][ T30] audit: type=1326 audit(1751332029.219:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.708992][ T30] audit: type=1326 audit(1751332029.219:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.732616][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.740226][ T30] audit: type=1326 audit(1751332029.219:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.783308][ T30] audit: type=1326 audit(1751332029.219:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.783354][ T30] audit: type=1326 audit(1751332029.219:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.783392][ T30] audit: type=1326 audit(1751332029.219:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe321d8e929 code=0x7ffc0000 [ 639.997576][ T5925] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 640.042234][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 640.247238][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 640.294143][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.341334][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.447246][ T5925] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 640.474732][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.504402][ T5925] usb 5-1: config 0 descriptor?? [ 640.769416][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 640.777652][ T5886] vhci_hcd: vhci_device speed not set [ 640.816265][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 640.872603][ T5925] usb 5-1: USB disconnect, device number 120 [ 641.310453][T20062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 641.340454][T20064] vlan3: entered promiscuous mode [ 641.465468][T20062] input: syz0 as /devices/virtual/input/input56 [ 642.044503][T20109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 642.237404][ T5925] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 642.488773][ T5925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.523101][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.555089][ T5925] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 642.564823][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 642.587700][ T5925] usb 5-1: SerialNumber: syz [ 642.842858][T20133] binder: 20132:20133 ioctl c018620b 0 returned -14 [ 642.845526][ T5925] usb 5-1: 0:2 : does not exist [ 642.928287][ T5925] usb 5-1: USB disconnect, device number 121 [ 642.996077][T11433] udevd[11433]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.487826][ T43] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 646.627612][ T5925] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 646.657386][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 646.664617][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 646.697258][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 646.729244][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 646.758397][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.781766][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 646.799144][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.801180][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.817610][ T5925] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 646.841440][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.880851][ T5925] usb 3-1: config 0 descriptor?? [ 646.900898][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 647.057351][ T43] usb 5-1: GET_CAPABILITIES returned 0 [ 647.257425][ T43] usbtmc 5-1:16.0: can't read capabilities [ 647.293334][ T43] usb 5-1: USB disconnect, device number 122 [ 647.312767][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 647.337486][ T5925] pwc: recv_control_msg error -32 req 02 val 2700 [ 647.369571][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00 [ 647.567417][ T977] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 647.597481][ T5925] pwc: recv_control_msg error -32 req 04 val 1300 [ 647.635137][ T5925] pwc: recv_control_msg error -32 req 04 val 1400 [ 647.665771][ T5925] pwc: recv_control_msg error -32 req 02 val 2000 [ 647.696322][ T5925] pwc: recv_control_msg error -32 req 02 val 2100 [ 647.705297][ T5925] pwc: recv_control_msg error -32 req 04 val 1500 [ 647.714331][ T5925] pwc: recv_control_msg error -32 req 02 val 2500 [ 647.722703][ T5925] pwc: recv_control_msg error -32 req 02 val 2400 [ 647.794713][ T977] usb 2-1: config index 0 descriptor too short (expected 255, got 77) [ 647.941054][ T5925] pwc: recv_control_msg error -71 req 02 val 2900 [ 647.964066][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.991021][ T977] usb 2-1: config 0 has no interfaces? [ 647.998697][ T5925] pwc: recv_control_msg error -71 req 02 val 2800 [ 648.008079][ T5925] pwc: recv_control_msg error -71 req 04 val 1100 [ 648.185916][ T5925] pwc: recv_control_msg error -71 req 04 val 1200 [ 648.206350][ T977] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 648.216065][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.236557][ T977] usb 2-1: Product: syz [ 648.242083][ T5925] pwc: Registered as video103. [ 648.252066][ T977] usb 2-1: Manufacturer: syz [ 648.261998][ T977] usb 2-1: SerialNumber: syz [ 648.270345][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 648.291993][ T977] usb 2-1: config 0 descriptor?? [ 648.321094][ T5925] usb 3-1: USB disconnect, device number 105 [ 648.546254][T20247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2676'. [ 649.178593][ T5925] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 649.339222][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 649.362872][ T5925] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.392321][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.400056][ T5925] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 649.411697][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.434133][ T5925] usb 3-1: config 0 descriptor?? [ 649.881144][ T5925] logitech-djreceiver 0003:046D:C71B.0022: hidraw0: USB HID v0.05 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input0 [ 649.921143][T20322] kvm: apic: phys broadcast and lowest prio [ 650.220587][ T5925] usb 2-1: USB disconnect, device number 113 [ 650.264349][ T977] usb 3-1: USB disconnect, device number 106 [ 650.400609][T20346] veth0: entered promiscuous mode [ 650.467701][T20345] veth0: left promiscuous mode [ 651.459348][T20374] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 651.641244][T20406] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.662853][T20406] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.687123][T20406] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.696502][T20406] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.714511][T20406] bond9: (slave geneve2): making interface the new active one [ 651.726034][T20406] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 651.784694][T20374] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 652.058686][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'. [ 652.427261][ T5836] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 652.773714][ T5836] usb 5-1: config 9 has an invalid interface number: 81 but max is 0 [ 652.781919][ T5836] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 652.797193][ T5836] usb 5-1: config 9 has no interface number 0 [ 652.803422][ T5836] usb 5-1: config 9 interface 81 has no altsetting 0 [ 652.847731][ T5836] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 652.857005][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.875594][ T5836] usb 5-1: Product: syz [ 652.885693][ T5836] usb 5-1: Manufacturer: syz [ 652.895809][ T5836] usb 5-1: SerialNumber: syz [ 652.982379][T20450] binder: 20443:20450 ioctl c0306201 0 returned -14 [ 653.141573][ T5836] usbserial_generic 5-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 653.257327][ T5836] usbserial_generic 5-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 653.277313][ T5836] usbserial_generic 5-1:9.81: device has no bulk endpoints [ 653.303272][ T5836] usb 5-1: USB disconnect, device number 123 [ 654.117576][ T5836] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 654.427417][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 654.445206][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.461773][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.487660][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 654.518696][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 654.544851][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.562931][ T5836] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 654.578393][ T5836] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 654.607043][ T5836] usb 4-1: Manufacturer: syz [ 654.634959][ T5836] usb 4-1: config 0 descriptor?? [ 655.107273][ T5836] rc_core: IR keymap rc-hauppauge not found [ 655.167686][ T5836] Registered IR keymap rc-empty [ 655.173079][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.234600][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.287894][ T5836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 655.329988][ T5836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input58 [ 655.381550][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.430482][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.461641][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.487375][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.507423][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.547748][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.587336][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.627369][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.659959][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.697392][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.730089][ T5836] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 655.782945][ T5836] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 655.825364][ T5836] usb 4-1: USB disconnect, device number 105 [ 655.956229][T20533] sctp: [Deprecated]: syz.4.2719 (pid 20533) Use of int in maxseg socket option. [ 655.956229][T20533] Use struct sctp_assoc_value instead [ 656.467341][ T5836] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 656.643431][ T5836] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 656.657025][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.679877][ T5836] usb 2-1: Product: syz [ 656.693349][ T5836] usb 2-1: Manufacturer: syz [ 656.706370][ T5836] usb 2-1: SerialNumber: syz [ 656.734408][ T5836] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 656.770441][ T1165] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 657.214098][ T5836] usb 2-1: USB disconnect, device number 114 [ 658.206806][ T1165] usb 2-1: Service connection timeout for: 256 [ 658.363791][ T1165] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 658.407935][ T1165] ath9k_htc: Failed to initialize the device [ 658.427734][ T5836] usb 2-1: ath9k_htc: USB layer deinitialized [ 658.890245][ T5836] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 659.152315][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.170323][ T5836] usb 2-1: config 0 has no interfaces? [ 659.186590][ T5836] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 659.247445][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.269973][ T5836] usb 2-1: Product: syz [ 659.310625][ T5836] usb 2-1: Manufacturer: syz [ 659.337920][ T5836] usb 2-1: SerialNumber: syz [ 659.366675][ T5836] usb 2-1: config 0 descriptor?? [ 659.926398][ C1] sd 0:0:1:0: [sda] tag#3304 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 659.936949][ C1] sd 0:0:1:0: [sda] tag#3304 CDB: Read(6) 08 00 9f d1 fe de [ 660.939294][ T5836] usb 2-1: USB disconnect, device number 115 [ 663.765943][T20698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 664.185685][T20701] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 664.283792][T20701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.394190][T20735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.479091][T20735] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 664.576916][T20735] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 664.646858][T20701] macvlan0: entered promiscuous mode [ 664.652818][T20701] macvlan0: entered allmulticast mode [ 664.658940][T20701] bond4: entered promiscuous mode [ 664.667671][T20701] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 664.749581][ T977] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 664.762286][T20701] bond4: left promiscuous mode [ 664.919026][ T977] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 664.939743][ T977] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 664.968085][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 664.997470][ T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 665.035871][ T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 665.061828][ T977] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 665.071697][ T977] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 665.087278][ T977] usb 2-1: Product: syz [ 665.091496][ T977] usb 2-1: Manufacturer: syz [ 665.124970][ T977] cdc_wdm 2-1:1.0: skipping garbage [ 665.137217][ T977] cdc_wdm 2-1:1.0: skipping garbage [ 665.150103][ T977] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 665.166362][ T977] cdc_wdm 2-1:1.0: Unknown control protocol [ 665.247347][ T5836] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 665.342629][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 665.349297][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 665.357063][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 665.363714][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 665.370079][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 665.376708][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 665.383129][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 665.389764][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 665.396539][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 665.403174][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 665.409736][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 665.416448][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 665.423009][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 665.423656][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 665.437711][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 665.444406][ T977] usb 2-1: USB disconnect, device number 116 [ 665.445445][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 665.450953][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 665.450977][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 665.450994][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 665.487350][ T5836] usb 4-1: config 5 has an invalid interface number: 89 but max is 0 [ 665.497241][ T5836] usb 4-1: config 5 has no interface number 0 [ 665.503396][ T5836] usb 4-1: config 5 interface 89 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 665.513726][ T5836] usb 4-1: config 5 interface 89 has no altsetting 0 [ 665.523077][ T5836] usb 4-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=b9.2f [ 665.545090][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.553552][ T5836] usb 4-1: Product: syz [ 665.567462][ T5836] usb 4-1: Manufacturer: syz [ 665.572329][ T5836] usb 4-1: SerialNumber: syz [ 665.590297][T20760] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 666.120542][ T5836] HFC-S_USB 4-1:5.89: probe with driver HFC-S_USB failed with error -5 [ 666.132321][ T5836] usb 4-1: USB disconnect, device number 106 [ 668.414454][T20834] trusted_key: encrypted_key: keyword 'ne' not recognized [ 668.436191][T20833] netlink: 'syz.0.2766': attribute type 10 has an invalid length. [ 668.495631][T20833] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 668.645905][ T12] ------------[ cut here ]------------ [ 668.652236][ T12] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 668.673813][ T12] WARNING: CPU: 1 PID: 12 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 668.684404][ T12] Modules linked in: [ 668.688953][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 668.699852][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 668.710228][ T12] Workqueue: bond0 bond_mii_monitor [ 668.715574][ T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 668.721904][ T12] Code: 7c fe ff ff e8 de 24 69 f8 c6 05 d4 db 33 06 01 90 48 c7 c7 80 c0 92 8c 48 c7 c6 f8 96 9c 8d ba 48 00 00 00 e8 4e cd 2c f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 668.741683][ T12] RSP: 0018:ffffc90000117670 EFLAGS: 00010246 [ 668.747913][ T12] RAX: eaca212c473aa300 RBX: ffff888022354000 RCX: ffff88801d2ada00 [ 668.755913][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 668.764150][ T12] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 668.772306][ T12] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 1ffff1100446a85d [ 668.780370][ T12] R13: dffffc0000000000 R14: ffffffff8ca13ea8 R15: 0000000000000000 [ 668.788527][ T12] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 668.797625][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.804235][ T12] CR2: 00007fe322c78f98 CR3: 000000004c3c2000 CR4: 00000000003526f0 [ 668.812283][ T12] Call Trace: [ 668.815587][ T12] [ 668.818656][ T12] ? ethtool_op_get_link+0xd/0x70 [ 668.823719][ T12] ethtool_op_get_link+0x15/0x70 [ 668.829001][ T12] bond_check_dev_link+0x447/0x6c0 [ 668.834142][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 668.840094][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 668.846551][ T12] bond_mii_monitor+0x428/0x2e00 [ 668.851617][ T12] ? __lock_acquire+0xab9/0xd20 [ 668.856527][ T12] ? bond_mii_monitor+0x153/0x2e00 [ 668.861886][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 668.867320][ T12] ? register_lock_class+0x51/0x320 [ 668.872562][ T12] ? __lock_acquire+0xab9/0xd20 [ 668.877508][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 668.883262][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.888527][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 668.894284][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 668.900113][ T12] process_scheduled_works+0xade/0x17b0 [ 668.905723][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.911812][ T12] worker_thread+0x8a0/0xda0 [ 668.916548][ T12] kthread+0x70e/0x8a0 [ 668.920704][ T12] ? __pfx_worker_thread+0x10/0x10 [ 668.925959][ T12] ? __pfx_kthread+0x10/0x10 [ 668.930656][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.935883][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.941289][ T12] ? __pfx_kthread+0x10/0x10 [ 668.945921][ T12] ret_from_fork+0x3fc/0x770 [ 668.950593][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 668.955824][ T12] ? __switch_to_asm+0x39/0x70 [ 668.960694][ T12] ? __switch_to_asm+0x33/0x70 [ 668.965499][ T12] ? __pfx_kthread+0x10/0x10 [ 668.970836][ T12] ret_from_fork_asm+0x1a/0x30 [ 668.975662][ T12] [ 668.978744][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 668.986045][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 668.996304][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 669.006474][ T12] Workqueue: bond0 bond_mii_monitor [ 669.011887][ T12] Call Trace: [ 669.015182][ T12] [ 669.018299][ T12] dump_stack_lvl+0x99/0x250 [ 669.023372][ T12] ? __asan_memcpy+0x40/0x70 [ 669.028003][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.033484][ T12] ? __pfx__printk+0x10/0x10 [ 669.038109][ T12] panic+0x2db/0x790 [ 669.042212][ T12] ? __pfx_panic+0x10/0x10 [ 669.046666][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 669.051640][ T12] __warn+0x31b/0x4b0 [ 669.055658][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 669.061062][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 669.066456][ T12] report_bug+0x2be/0x4f0 [ 669.070889][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 669.076256][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 669.081631][ T12] ? __linkwatch_sync_dev+0x305/0x350 [ 669.087002][ T12] handle_bug+0x84/0x160 [ 669.091239][ T12] exc_invalid_op+0x1a/0x50 [ 669.095732][ T12] asm_exc_invalid_op+0x1a/0x20 [ 669.100571][ T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 669.106551][ T12] Code: 7c fe ff ff e8 de 24 69 f8 c6 05 d4 db 33 06 01 90 48 c7 c7 80 c0 92 8c 48 c7 c6 f8 96 9c 8d ba 48 00 00 00 e8 4e cd 2c f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 669.126243][ T12] RSP: 0018:ffffc90000117670 EFLAGS: 00010246 [ 669.132392][ T12] RAX: eaca212c473aa300 RBX: ffff888022354000 RCX: ffff88801d2ada00 [ 669.140403][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 669.148367][ T12] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 669.156467][ T12] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 1ffff1100446a85d [ 669.164437][ T12] R13: dffffc0000000000 R14: ffffffff8ca13ea8 R15: 0000000000000000 [ 669.172697][ T12] ? ethtool_op_get_link+0xd/0x70 [ 669.177854][ T12] ethtool_op_get_link+0x15/0x70 [ 669.182993][ T12] bond_check_dev_link+0x447/0x6c0 [ 669.188134][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 669.194848][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 669.201466][ T12] bond_mii_monitor+0x428/0x2e00 [ 669.206405][ T12] ? __lock_acquire+0xab9/0xd20 [ 669.211262][ T12] ? bond_mii_monitor+0x153/0x2e00 [ 669.216465][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 669.221835][ T12] ? register_lock_class+0x51/0x320 [ 669.227046][ T12] ? __lock_acquire+0xab9/0xd20 [ 669.232247][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 669.237968][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 669.243166][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 669.249683][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 669.255414][ T12] process_scheduled_works+0xade/0x17b0 [ 669.260984][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.266976][ T12] worker_thread+0x8a0/0xda0 [ 669.271679][ T12] kthread+0x70e/0x8a0 [ 669.275741][ T12] ? __pfx_worker_thread+0x10/0x10 [ 669.280846][ T12] ? __pfx_kthread+0x10/0x10 [ 669.285439][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 669.290632][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.295822][ T12] ? __pfx_kthread+0x10/0x10 [ 669.300510][ T12] ret_from_fork+0x3fc/0x770 [ 669.305567][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 669.310801][ T12] ? __switch_to_asm+0x39/0x70 [ 669.315621][ T12] ? __switch_to_asm+0x33/0x70 [ 669.320476][ T12] ? __pfx_kthread+0x10/0x10 [ 669.325073][ T12] ret_from_fork_asm+0x1a/0x30 [ 669.330044][ T12] [ 669.333753][ T12] Kernel Offset: disabled [ 669.338800][ T12] Rebooting in 86400 seconds..