last executing test programs: 4.484102626s ago: executing program 4 (id=2320): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0xd3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) 4.346590027s ago: executing program 4 (id=2323): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1}, 0x7}], 0x1, 0x0, 0x0) 3.976139009s ago: executing program 3 (id=2331): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@broadcast, @random="385946601e7a", @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x4, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x3, 0x8, 0x28, 0x65, 0x0, 0x7, 0x6, 0x0, @multicast1, @remote}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x5, 0x0, 0x5}}}}}}}, 0x0) 3.665221843s ago: executing program 3 (id=2335): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 3.398399278s ago: executing program 2 (id=2339): socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 3.282161587s ago: executing program 4 (id=2340): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062"], 0x4c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.179714988s ago: executing program 0 (id=2342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7ffffffe, 0x20000006}]}}}}}}}, 0x0) 3.136286391s ago: executing program 3 (id=2343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080)) 2.97258229s ago: executing program 0 (id=2345): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xc0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 2.829023238s ago: executing program 4 (id=2346): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001400010126bd7000fbdbdf250a2019ca", @ANYRES32, @ANYBLOB="0300000000000000000000000000000000000001140002"], 0x40}, 0x1, 0x0, 0x0, 0x44051}, 0x8004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.750359014s ago: executing program 2 (id=2347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0xa, 0xe204, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.664449865s ago: executing program 1 (id=2348): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.597185752s ago: executing program 4 (id=2349): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.593361374s ago: executing program 0 (id=2350): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.505240228s ago: executing program 3 (id=2351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) 2.493930929s ago: executing program 2 (id=2352): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) 2.301216512s ago: executing program 3 (id=2353): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.263663805s ago: executing program 0 (id=2354): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000084) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @time={0x80, 0x1}, 0x7, {0x2, 0xbb}, 0x3d, 0x2, 0x6}) 2.020421586s ago: executing program 1 (id=2355): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0xd, 0xd, "103ff69833418b8f8da7176cd7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.727509061s ago: executing program 3 (id=2356): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x54, 0x5}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x9, "e5d2074e"}, @global=@item_012={0x1, 0x1, 0x5, "05"}]}}, 0x0}, 0x0) 1.639258099s ago: executing program 2 (id=2357): syz_emit_ethernet(0x8d, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa37000000000000655853f60e206fd9d705291954c92e8de590aa187757feb8896aad7bb79c810000000049282bb20bc0fdf4b087037b0a3e00f99e59a9c7f880ab72b2c2556d3af149a4633d386f5094027041bd1e195521a1944f4ccba26d8bdf08aab5a2b730d2c58421b9adc54f8a6d6b83d3a02d6bfbd9008a217285e8a565946a10d6286e00e22ab1ac743dfb0bf0"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 953.180669ms ago: executing program 2 (id=2358): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) 831.869795ms ago: executing program 1 (id=2359): r0 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4}) r1 = eventfd2(0x6, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000340)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/6, 0x6}], &(0x7f00000002c0)=[0x7]}, 0x20) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000002}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x0, 0x1}, 0x20) 499.615961ms ago: executing program 1 (id=2360): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f00000001c0)="8bf4", 0x2, 0x24004074, 0x0, 0x0) close(0x3) 447.518461ms ago: executing program 0 (id=2361): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x78}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 279.264411ms ago: executing program 4 (id=2362): lseek(0xffffffffffffffff, 0x75, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4148, 0x0) 161.195748ms ago: executing program 1 (id=2363): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 98.372567ms ago: executing program 0 (id=2364): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 80.825967ms ago: executing program 2 (id=2365): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x1304, &(0x7f0000000580)={0x0, 0x0, 0x800, 0x40000000, 0x8000021a}, &(0x7f0000000600)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0xffff0000, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 0s ago: executing program 1 (id=2366): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x19101204, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x20, 0x4}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r0, &(0x7f0000004200)="5c6db8bf44c8ee7245f8e224c9af35b8b81666bec364e08fc57bd42d1450a0df9820d196188841149a425103c3f0dc6a981aa123adc0c3a31b13dbbddef9469c3ab008669c8f98b01007ae504f204c9b9c3dd18b5ab45c32bac2a4756e3b9a9c232d0fa1240e8a3a371c254aa1bb0bc4de5261de2ea9406f8d3ba445224dd3d42d618e9524b6ea51833a0a0427bc5b7d856c37af86ee858b6ab382fb33ecd59b6ad4313367baa92f75474bc1e9005882608f29d68ab73b80c02782bbc89151090abb13d806f20b7d3a474c7d785cdde2f9ab237c34fb3cae8678cf349f339ca74927aa91300d1485893752a73f0aa96bccb3b29aacd91be679ee0b546811e3447f6d85f3d98e1a9b99921f7a8ccdf8fa8bfee49c939a8eb183bf85be2be3853ec04c532e13bc56e1fc5e3408d799d1d6169efe2710bbf7e1d288ab0171d97c1542b290b15875ad4d7c8e3c03aee964c5f7edfebf2cb5aaa990dbdf9148e48e9020fc3b8aea9472cbe0476db2631b693d7ed93b7e2e22bc05714fb8995b11ff6c47fefa0fec4dfcb5c6151bcd678402afa811db96e42a262fb74b2cb33660fe01b1bfa76b10ca642e8da643b5567ab4a55476e329cf68fba30c117c23f25e0824e75f2a7aace3c229cacf2f76f19fd29b515ea074eeca94937dfd5365bc844780a50d1dbc7611fafb518783a26bff651f3107f8a252ab69c83e7f4c56f7c12477b001004885131af439dc10876c5c731cd26a9c44bd55e938263f2b5e636caa800e6748fc0eee6830747de7e2b15f2603ca16648326c9aab0d21159be2bbf3f0a0f34e55f0ca011c77a35bba5f5c4d926c6d9717e6ad303a1be22f5d3472f1cc033b0ad42871b28efa172ffa9417d9c46a687baffeecb243747b475810204fb015d5070530670365647c2527c89387c9787e822a8d0aff018c9a2d2fac7ad203c60b17877267dc43736659c7c0282fc9b3f834a01206dfd1ff0311bb2f1f017d8d2641708375aa232bf325b1edffd22e676493e5824ed534f646f1451c3c573fffddff4c52ad81c18ce87027b211701cdecddbca4aafc9d65aed382b78e419bcff3623b605dfbdbde0f894036574f438506d9b5bd00c193db1bbb97d819bd667dd7e643a236c9d2237f73bca3ba404ea32c31e37cf84a9defa843b186154d076f2b74a895913b4e33e725b899c8d52b0cbdc1cf923927868bb5858a24b7d90958944ccc4b0c846e9c34dd9c82a1402aa8bf184d40dd16ccabaf26312b8dc7bb5c93f9b6cebc45ad20967bbc4c1ad3da11a05c77800efe5208dff3c3c455064ebe4a189a7a1e7dfd6ca606a580e32b73172a5e70a42cd0266a1216f7e46063121c977a0d35969338dd675ee37fcd5a2d95b10de2462af45f148178ccb630de6a69e571582aa521a219647f3d7bd5c6741c11d876d9ef5108d363fb3b38db2019b38c9449cd6f0f2a2b0bf288d93243e6f046d78c0bc9589ee8ef8bad33945f742ae4315462a1c2ea5eab4a318978eb59b8dc785b316dca5c4f21d3d8782802c0f4b14aed5a8ef246ee772ce61d867b6c39772316fa41fa038cb3347bb05aed4cdbebf00a54a5541bc067c50cf7812af5dcc330908aa0f6bc95db603cffee4bc0380f07145b2f464740289708e28ab3cb8573f77ddc9767f57f32ef3ae80c5adeea4686bb842120c5cc3e9b98b9892f2c1497bc96054e211fbb8f9cd9edb0ffeca6c8d8a1f8c054c0c7dd11bf3961fda9b8a4527afb00baca8092dcdfe683c95c8be62161e9b7614ba6d6d3f455efac76f252071929da95396cbc377a0429f603d5cd894f9c56ca883e39ff7710bad7bb5836d796693a6c2e1b5d26a479ca491bb9545edfc4656c8a5e1b4baa8c31b645eb742289794ff4124fcdbf9cf54eecea5698d13e860a89e22bd7234efa9029cfadd16eee98562c57f5c1fae4755f214b609bb38473f61cd81316f46ad2009d7253b5a0ae0a16382f377cfe9e26b5e7a8cdc307d2c753731a3c089803f7403cefec69f3840ca6cc36f084da1d1e309123f6fa1b8c0e18e69adda4eb8803bd37669cac1518f5aba8ab7b51c9bf4f929288c1606407a389bdbd54992b1e7a2edba8abbe15197f0e8c0070ee0e3c4c001d5a3cb25b213641addb60fc4e29faba5edbfce75ea270e809692b999a984a5c3d6bc00bec8237a7d702e07262b85d309c0d2e343d2e7c6c7d349b5431e4d873cdf452d3430d2cfc7349957941a572d4f7dfcdc637a409b8c5800bd6e702da6a9c202b5dcd4d2f9af10e77cf0b3b72bcc308fb2e0eaa2dd8125d4626125b2a1aaadd5c411a3b5ea7805862e74ad316b84512913728be4dcc9405c89ec328fe3274c85785090350cd0096db82ae8816110ea084461e394092b0c33b10e1102cf90131a036574d13ffecbbad1c6af8a49a9cca9a1a1016cd081b734e12209be2f00a13518cb66aefa89a465299b4d62b0cc6ee13b7b3d37148c556cd2907f7f1c7ffcba3cd343037b99d362c0d4f3637355598482182a3e3c391add5a8c63253217a8852037ca1f1d159c693917c4b50695d1d43d506d535eed02d4511ad146a46d51d8599a44e3f0de6c7f3dc725927293b3083c6ef28215b6b046b57dfcb3df187e08f723376f627c5d35dcaaf490f6468bf98d5857eab01f7615197469e221602d5021334d78476cad69bb5898cc49d5fd4ff66ef16ec23ba56f32013494f59b578603c7a0e825245e04f649b1ea4d602fc64395584a543ca75dc9a5f5fdba156c9ae020e25efa34056e17da701df57c6e5fd664d9e840ceae12e8a437cf29c80635ec8f23bc180f679ffe412de84762822553253c4b9431bb4835b31b8cd6b49b5db7daa37df1715fb4651032515215923c19de8c13e509f3814d1f9d839f56dbb34f4369b988e6b3c2826718582e6b30249b36784457b8e161b2dbd9ac67e4406c801eb1f54447bd19d3320ea606a642f5938f4c68480bac127ef2a9b54e287162c6a2492980964d43005f27716992ef2a19a5fb5ae9dffc7b3d02c67a73f0176edcc13b3fa187e2cfca6c82b7695e3f728d657410481e9146c15f72eff98953ea2c59e9420a5e93a61ca081523baf6d5a3bd09c73d1c4353571e6fd691609a0bf7934800b17d5627bc03adbb89f64b3326f01d4a83972498b9c9c7348e0bec50a1f0a9cd4d6b7b241148bbe3d2f58c8e818c5481939af59584c8a79b518c044bf3dff0933c42e4c76d7a5612d4f74bdf04d1a963bcfccab0be24bddcaeff8f476c138726f194bb2a00810cc1aaa159e156d450698532c6fc6e234d3ba4572cdfc2e1afd003e8a68c6d58bd7cd55c681a9b48faa52a11b1603607fd8e682c7f22b7e7cf772662d1a97acf38af0e075629b73a7df6374698902280f51d3c518607649359301b7cd0055c454cf4a249a2cb45c33ea9ba32714cb26991cd24974feb48ddf0de6e1f583ac9180491eebff08ba9549240964507aa9b8548d63400ef03f0a11e06687e3bf92032e07d11f301a9dea8bf02a1d0d18ccc4e475bc8a1c04e6dc04d42558c19776c9c3f674b7b27a6a79410bd169dc5309c718535f25547d16fd1f0ef9f3770f891e901fd1ff6cfcec1d07a4ff318e33a901b7c6538c49b8b35e64e51649b539095bb8b0a7a330b79289b9dcaa3e4313b8e5e49fefd6c214f5a55b9624809a8ee1fc355a1005e9a4894463ce088d054ef4248d568b4b4747e16e19afdcb40320b83f8a5e64fa77c1e5bccb8c8505f573e64afc46e4aa696c166e061ee7cba2c4c926c335da181cd151e80c116cae2fb150b25463714f78e1d9ce3f75e941b9dd57b0ca28593a9180aad70cc1b79d301df51f583292386c85560d95a84b8acdf359d3c1fa78be39eeecaa4714b6e0fbe3d6f0dfef3300c0b80d6da4e872d1765b583f4259e9dcc23aa63d9d645715425afb60f62ddfb6c2018e1085e19d33a58bb06402f8ffc30728b25c6f060c630970a03897c49fdd17326f67dd3270b7d0f2f6eb78c9aafbc5bc023eeb015cc7c34f0680def1a166783ac6ad268eb361e08428449421cf489fba2dbafd74cfc3d9f2db6c65fa62d04aa8d2785da79226d97c16a985baa60ff93784fbf4456f995f0f02f40d453e5dfefe932e3f2aa5d0b8a58c071716e0fa388ed96b649e62142b6686dc8a11b947c11296596892270467bd3dd789b0bb212ccd0f17ce8f27e4b6c7caf89a592317ab0808fddd092ca513d01b6925a5bf912eb028223d48dc83e141b82bc02a03cd3d75143148409b99f63181f14c14936ecb76b8753b74564c98feec7baa0509cebf8ca6d7349f45fdae5f3404f16638feb33622d43cd58de022ab73de3078e3dff7b51ceb58074f8dc09db7eb512d43b700ac880713106a2e6f3a18da7743b95460d2b417b907f89fb4fa5b3097e34713b5a6a73cc9f76836d353116b8c37f9cfdd36b5ea2d4cd9206a828dde7fd936ffb8ac95f9d10a9f24d2586acba4b4f86f0581884d0ae958e8e4618b70a706edb31f2e3434f1992f0ca30d55ec582a7364e16f5d632afd8955360b0b1433155d008fb270a00945463a351ffcc825febb32f31289caa453852d689d12b73f8ef38c73b1760f0cc4c4cf79dd06de9f0fbddc6270982433a9f6fc3531f41c9f31698cbf074353b7318245674df25c19a54f34ef664dc546f310865a9e1e34be4c4d7654158a4c7f802a13e10822f60f6a2462ddafd079f8f3b679d409ac53cd7389a487f522c1d3cae8b5d928dcfa354afa15f1b6da256b6a25ac795a9b0ef8570a7b55eef339f9463bae1b656e5e2987b65e3c67f30632c65a71b7738bb9302c1501023cae931cae04aa13516e0cf81ad4fcabcaeb80fb3dd25263e8e949bd462b60a9dc3ebedbbe4b497d0ca61f92664f7d6d4ce921a9b15cf8ff7e79cbd6baface0dc3e7bb0acd2452d15cb490cee915564814ae74f578ee954948040a1d544caa218630b8e54a243dd2e4a439de20893c1b5d2ceaad7ee8e02910db115c2a4c93f561dd8d3083910de2cc1e8e2e58793a9f4560bbe5ee45ea02a5158c0cc4c67bf1fe8e1c447ed7c75e1586a88dd153e87e5d036745ac253de40c6158abcf0b531305d21dc2c577a7bb8c256c8dd140b729ac367b027f64def76b1a291ec8a9c59caa3c15a9b1a6ceab55d64513f225c9f80cc627d94f33e9fd4f7a5fc4628669846f3c3febb0b68d2d3b51cc2223fc0cc61f27f69a5c2bc537cb3cbf3bebd1d5a933c1fe91555c318c7cb3608d66aa8c436de3e7b6c45df033d84d4e02e97a05240479b31911f8205c10ea0603c08ac7f4c3ae0507e3ed9ee56f2b246a05d8ddf2ee0e7f7f84adc0eda403b8bf05c3523bb9c34b924e33154b30bbd3986a4f821e73cc7b9bed8f0d333bdf8f3e0352d5088ab9e8d708fdd041938b6908ed1fe569f12c187af9ff7d4b7ab7f7c98e7bb9227fc9ac406460dcb637816dd7a9faeb006859ab6dc3bb3a15b7b9c1bcd9af98c4ade75dffbe6cffedac94b4dc2ce9c723ce6e0d992bea7f7318ca48015cb98a8481616879df724945b7f36314f2204579c9e8c5541964d93523923a9a86c99f1f4fabc883f1e8e0fbc1831204fe14c571fa3601c39c83693d68c701c58c178babb797e1f07b3697ed2df2726955a23676c5b937b66d271abc897393bfa3d7ca2a2218d18d049356cab30c8df0f0436dc33f3f028498ee6f09ad41d701a9c6fdc10eea767d2e6a689f09dd87a025458df7a1803940d553612bdfd0b57b1a675ae3ee269d9cf1eb0defc5af1cba23cd8e9f2aa8e1a11d8b84eae2efb151c30df98aafb762294fcf34ae7c93f77f2508aabae6b0cd7924d6df098f14fa94cff60c372aa4fd90dfa1486a9948b7b478e82d2711ed351f18d5dbf28ec7814265d3f894d9ff87aa06b3f1e0819626e3621865e559e6d6e2e98ee1dd3147215378e148c53be869fb729c0aab39e626bc361ce08052f2202853f37b26521960083dd44aa3fb9e7dc89902ff1f95bd1b525c9faddd51da0d416e713c51ec6fb8dff1fad95c22cc15a956f67d4ff0b0eaf5a3ec4e2e25a7ac2c99e126dec1c5bc3cf2a9bf0114abc85add005f0973538e5d277b37a976c9db12422f6357cdcb88629380d12b856d455f068a3dd7f1018bf46d5ea478fe9250aff005c3b34df2295ee1f8950376e48f1c0b046f80a0af05c6c6b89073099dd3030ac6ecafbc96dd8a53db66ba5927c8b6e552d60ab0e823cd294816b9e300e3b4b9c324722fc0b24939b15276200f0d2a891a01e47d88c6fe8de08bf05e587b30dc767d9e20f5f703a9a9a9d3bd03db32f315994d8c4c420c63d14ae4330fa394013a45cc581395cf70d3f43e80115f2016008830028ef3373c0c42483d1788ed4ba1cd3710f276a5e6edf10657215c468716749f76de800e49bbe3aea04c20fede8a98a7da878a7a04e39816a217908d285b6438d3bfea81aefcdfc0d4a12f219845d760cf0f7b0a08ef0319a9e200730f6011d5c1236dbee9693a18e1f28f7785f5f335a76aa30251a43e359722113797880fc2fe15b85636924a65f387c59306e037f84ba214a4745fd1ec5b72056baffb3e7b39d2c5238b85cb4f7ea1176ea446d4fbe1948f72313c538e40e8645a34273d8a92056c09b3463086c0892d97fe19ae27afdf491a750d560e91be806a675ce1daba4c823a83e24c424e438e86487512b0ebfe9a930d80d10bb3869e0b162bc5207805e20306f783d1690b24a11c37c4c18f913d925ecd37d5e8ce4cc34afd2e0435c568f3a5e6982208ef82812f971a37a38ad925c29df133b086f573fb08d24018009381c65243c81865e990cb6f4279c82487556d1dea51c7a9a6bc64e3a7236ef44bc1fe3579f36fa9c2b56cd4f7abeb6688dffe7262aa9d427cbd9d3da22fdf988181d427606b3830e1225c43506aaffe74b1c99a20a79d7ebf7f19c0cb5a4a6b056c723fe8447fec5320e10d409d81b4109d149d11bfaccd55805d46a784ebf76832b03365b260498d67d118b659959674ecaa625c075d792990a18bfca13276cbf8c71bead0527d153ac39f1598b00d128cfb6c06096b865a48695968c76abf131cc2ce331a3574e9142b1528ffb99207d6708fbe825f4997150f74b2f59df61ecbc354c43b7fa26810804ec861075b6eb67ff228a495ea3a66b42f3aae38edd0a58de623b0b4948b23f40c67f265f508c39455457af424a821dde2e82fb579f1be665f849038a59abd13963fedaa8568db48ccc5784d2b9d7165a8f5f68a65ff30ba760cdcbf70da836fa4ce3f482b0cca559401e20a3500a1f6fd7271f2e5d5d580d9052aa08c81c918fbc14e59aa7cdb2da5ad972dd9166c12d391a0a921a1d214c98667ee3c44eb86507c4eff9ef9c9d6fe78fcd4817124ffd0eba47f4decab7ef4c84f9f131c2080e9843843472b3058a908465257d8c535f21a4f7b7520ae12b6bb84ba72f50e8f4e454a6bea215459164c8402a9df2d3b68afbb0515abcb1cb1168f1b8ce1853ead9c62d4e70093d9295355e9ffecdf7d621972ad8995e2a8cc3476f8146082ebc6d026acd370ee365ee1e747429f914fc93ceff847f81fcb1826be8618d5b46992a467c0e31c407bae356d5e8568e5aa31aa65b313891ec1e0fece67dfacbd087fd0a981539bc1ceaba9bd63a4e4c59c31f4b2bfebbcc31ca95c2a47f3d5dc0149673aa68a3b32f36b2accd45748e6bcb02f3032957c7b10a7990d40f09e83411a7f7d1731f19054776413aa5af9d21928704be77110cdf14759b12dc5b3cd68404b8ba2e40fb6359fac65ce5e8225f15c33ce9358b39d7030ed8822a588c9d2768f9c038c12454b247668520ff3524536d32141d42ce197bed8bccd8001a045f1b235517a02562d68b873f8352d93012b5edee9a0efd7bfc3f9b5d30f3aa06e830ad97fc016815eaec5900d426cd9dc448e4ad5cff033ac7979275c3056cab668b8e672001e789f89aa86081d3dd5392c98426ddfbedfa54fd9b4ffc6a5e92462a2a1c111da0900ea8584b8a23660ec431e1987520929a7e26c6e51eec8e8d1f4345ab7b8bf51286224405ef025a3bee9692ca49848a19277fb63726f045c8cecadd9c5ab70b547d61fe628de61f42c4700f9e30662bc165154139484ee5986d767c876e44b7651f33963e63e67bacadac24e6178c9808f3aca5cf25017ab21c2aa9d691023d1331dd81b614911abad642738cdb55e270ec18c549496fb89a2c175c2b03b9e03d000abbd4e3ea5018121a621833e25814af5b847971465be7c8563a21604d13870b80a5c1dbbd460a278d2765ea06e29380a3380130250fc28119efa3507244959f8fd7bc13b5d92236623be0c1dcb3b29b608b602f9926c82d58f6d297e73880908a5c3b4dc96135b4de5503b670472c535617da919252227cc69cafcf8404f8899c9b3b0f18008a20ed43ca2afc88a794f20aa5924a48f4663512a0fb0e8c44fc7e559f8eb44ae9e275260fd5eba329646a487b5d59b6a640ce0825d8ed83157c01ec7b8795a7a8b7b9a17b433b7581fae2d7167cc0a78f4321568c8acbbbcfbba079ea43b46d46b4102ed32e59b3488dc2b190bffcc62b62ce13e6abf55b2ae62e536bf9e6904b2231d6d43d1098f4b39c1d972f20c1d41dcad491592f45b20f76b8696194a571aa053f6fac99241795e402cf1a675a6e73214e60260e5a95dae62859006549622fb42d0ce51e8bc0832a5bb0bd2eb9383e5ab75381e63e893e22a00fb308ca397e1a4691e0946235bf2be78d2ef8d04a65617651041e853219ad56ec005f30166b6074f8aed3becb8f1c125e407bc46715af5563cc128680413c528b79709edabdea5cf09be909e04297cd510aed4791130c91382c757bb2d2bdb5d29fc3677ad822667e466b88023c42e70a681622c6ecfd641d06384dfca43fe7c618d6fc9526d5eca01114e4e34f72d7a0da887c3b1092ac888a39ad31a98b243f76de3e8a9b726d444dd7b6c13f28679bb9de7efec19fb84418f475b8274adb807eabcd6f8041b1ec1df138395fb445dd6bdc46c29b53dcd172eaad56f4179a1661342131b1e6ad29b6087e47aea03071c8b90075798be030c5c55c8cca3eff3f9a0d46cb52a172eb35d9fbeee5c29b11550fef938fb93ca6dff41b6eb565edc24a7503f8d88dc76058e7b206d551ae86110f21b2305a03c46af3695e5a67d925131a9efac9519017407fc521e0cd9d81259f38cb33b4bdf3d8d469996a9ed31b1b6c22fc6f680f47a874a2cf08ea974765f1e6e34174d136024a63119ed77df62368a043b42fc78f198edfe1eeaee5791161cb62cb3976e7af9d59e161a412655524715eb137a181742e63119bf10682982d857f58a3974631d0ed32c22ba4ef31608636b8631afc7f8e75709aff605741253a1090d7ce3bb8d9c1f3d9d99e8891d822fbd2ca270a2a26323b18a5a75a13275f8300c4cd591f11326576010b2958590423a6505f1d415eba0f28e8d52e605ce264962732cb1b7b8c0b649d2cfda6fa809a98cf29e840040bb052b834082aa5e4761926eded6eb37c8dedfeaaafec5b7251665d66e9e3f6b3ec88b6179653cd53dd5581a411fe7e08034481dc5089efd8b7e679459e873a0a29c5512c0114ecb6885ee6ba14662ea7bb7d5fd798a695085143b56d7f0ac015f22eb136be72e8d0b6f30a9293a1a00f211e413a5ee9b03c884d272912d1b87d9b792ff61c539db5856b426fcef7f0e035ce50c4a545ffa85ea1bf21deb1b9d22974a9360c05532772331c802135cd8b19b081c6782e3dbb61e67c77df509dbc1166b17978100e14338d7e52b244d857dcc63de41e3951b1fbf56d081a30d5d2728dde9dc407d758c5c25f947811b716e259046953d92dcb63a6471450bd53b4ebbfa97a98d9ecbd1ced74a09bd3ee5a00c8edcf963c4cd6955dc74fa4f5edfb2b2d1e707368edd1ecdd478e2cae40827d2b87f5b2a49a99a67ec86dd9ebfa6ceec6e09231607982677022202492a2a9c08eb214767717e48e16254612fc19357d0d2be6e8a8c84738ac477ad772741e705a07d74ad810e39a088322d21266c2f0eebbc35ffd227b6f3c0a1a02e73b51e73a4c4a1188759925ee7b8a174299bfe920669829972be2ead372f6232914cb7101f2a05a75a697dba2fbab9ab014af79c895fbd8d9f9a0869a5c64267da97e1eb57817cf9d826cc56a2f00c7e0a7eaf2cecdbf7d4cbed10a9e8db33aeb1d08959e31cdcf248e0d1028dd5c14068727b1e1ba5baa78143d5b3a7482cd297f468ec45e310c70fce88fe6157ecbc1062973a67047e2bd9ccfd6592a206fb52852712d3848c8cc6c10773c3d64cf8a6950ab6600b6550e86fe2fceb19488547705d18bf2dd392ce0131a36990b61289e53fb78c3ba3f1b5b8efdb40412b5c679a6227bb8dad2441a19ae9613305ecd2561a726719e2a172ced381cad9520511b6a0671cb0c4d4ed6d961e982a8a23cf1641639664e5ffd3efef70ba890f146e9553c49f7ff3fbe9f7d269f40f101e43f07f92337b01242455d8ae6348e4d3abf35cdbb02f3e5881581edaec46e35dffa44f84eac946a6c5307d808d9fdf8b7c1ddb8439273057cf41d72cac06c64f3bd477d3fd43ed3224b01412da9fe91e191a0d832a8328ae8337523d7b254d26ae690ad403dd7421a852f760e39c7c2a319e3f0b08a8e80346f97c54462455144889ae04fcafd50a02532d3d7d0b57586a14ba9afcf549082d9e9a576e30152db0962c57a068ab726e9fd018fd735de4f839e1be94859f78bf2f0ebc504a808a2c1a4d341ec2b43c01506f6f5243fdf9e50a38c2f1c2343c5b1d26c008987801bbe0a30e604fd6cc6d13d4a8409a63b44e5b1f3c94edcc576e2cd151d52bb8c0a7b6662682fe0a80706d7296d1a18647503af6101fa81892226e0660d0807a1b4fcb024887e61f1080485bef8c9c6557030e27e4599be1ce00579f55493f13f9177abfe1fdcbc0a305fdef0e5c1e49578be2f486fdf2fb37aba27a33cd843afa6910b686d2e800c8388ba10803cd9d17be9054625570c74c4874a9aa50e01a76a8d0cb1be7007db3f057a3653f79c306e4d1e38121d9a22dfad355bb033e5bcfcae522d640b7acda5c0352419f9b02bd122982623ac12fbb30e79e4160da2f6e579f6448b302a17935bc94916e5735e31f432d10c89b5f8b0d08d423359f4ca48eefb098ce67231cac4e0a11d9411dcf721909523c43d2a4ddaec74e38f6bcfda98e129b6848df82005e0821930078105b09ee21a430224c321b46d3c9e79e689d7abd6d2a02599b5105efc13a22959bd1e0321f095ccb0c7e1666e40a16b0346d5471be493f8bc5bdffd849ee4843729e7b3f4f51f1b7aaaad857e30d6c2c9d57fb8527f20f172f9d8440ed8cb267d6fdb5ec76b61140822057668d4ee72b8ccc0e153f2b9c278c8cc5f5373a306b86948464f44317584cf5c7845f7c05c90edb5ca5d0d50f1bd6ee0ee6204afc5c74d9d8685d5969562001be40dd700", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x8001, 0xcd, 0x0, {0xfffffffffffffffe, 0x80, 0x10, 0x7ff, 0xf, 0x2, 0xf79c000, 0x8, 0x20b, 0x6000, 0x578, 0x0, r2, 0x80000003, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.082102][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.082118][ T5846] usb 5-1: Product: syz [ 107.082130][ T5846] usb 5-1: Manufacturer: syz [ 107.082142][ T5846] usb 5-1: SerialNumber: syz [ 107.159721][ T5846] hub 5-1:1.0: bad descriptor, ignoring hub [ 107.159758][ T5846] hub 5-1:1.0: probe with driver hub failed with error -5 [ 107.415794][ T5846] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 107.489570][ T5924] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.654456][ T5924] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.654484][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.675884][ T5924] usb 1-1: config 0 descriptor?? [ 107.731109][ T5924] cp210x 1-1:0.0: cp210x converter detected [ 108.112087][ T5924] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 108.117709][ T6011] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 108.152527][ T5924] usb 1-1: cp210x converter now attached to ttyUSB0 [ 108.259976][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.329668][ T9] usb 1-1: USB disconnect, device number 2 [ 108.367244][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.409575][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 108.413029][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.413057][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.413092][ T5898] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 108.413112][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.441734][ T5898] usb 3-1: config 0 descriptor?? [ 108.529895][ T9] cp210x 1-1:0.0: device disconnected [ 108.751539][ T993] usb 5-1: USB disconnect, device number 2 [ 108.774810][ T993] usblp0: removed [ 109.110218][ T5898] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 109.542903][ T6015] usb 3-1: USB disconnect, device number 3 [ 110.430944][ T5924] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.613117][ T5924] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 110.613145][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.613163][ T5924] usb 1-1: Product: syz [ 110.613175][ T5924] usb 1-1: Manufacturer: syz [ 110.613187][ T5924] usb 1-1: SerialNumber: syz [ 110.626083][ T5924] usb 1-1: config 0 descriptor?? [ 111.066573][ T6071] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.076702][ T5924] usb 1-1: Firmware: major: 213, minor: 124, hardware type: UNKNOWN (48) [ 111.303887][ T5924] usb 1-1: Read permanent extended address 78:d9:cf:80:c4:56:f3:e4 from device [ 111.303909][ T5924] usb 1-1: atusb_probe: initialization failed, error = -524 [ 111.304989][ T5924] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 111.399603][ T986] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.438733][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 111.439283][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 111.452413][ T6080] Zero length message leads to an empty skb [ 111.522223][ T9] usb 1-1: USB disconnect, device number 3 [ 111.560124][ T986] usb 2-1: Using ep0 maxpacket: 16 [ 111.562493][ T986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.562537][ T986] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 111.562557][ T986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.632919][ T986] usb 2-1: config 0 descriptor?? [ 111.729612][ T6015] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.914942][ T6015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.914966][ T6015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.917161][ T6015] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.917397][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 111.917416][ T6015] usb 3-1: SerialNumber: syz [ 111.924255][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 112.092605][ T986] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 112.092645][ T986] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 112.092670][ T986] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 112.092694][ T986] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 112.092774][ T986] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 112.136679][ T986] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 112.302019][ T6015] usb 3-1: 0:2 : does not exist [ 112.358735][ T986] usb 2-1: USB disconnect, device number 2 [ 112.390667][ T6097] capability: warning: `syz.0.58' uses deprecated v2 capabilities in a way that may be insecure [ 112.473503][ T6015] usb 3-1: USB disconnect, device number 4 [ 112.729079][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.079545][ T5924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.231121][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 113.232523][ T5924] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 113.234041][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.239585][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.275810][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.292664][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.297764][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.320860][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.326862][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.345686][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.364610][ T5924] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 113.364637][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 113.364654][ T5924] usb 1-1: SerialNumber: syz [ 113.394180][ T5924] usb 1-1: config 0 descriptor?? [ 113.485557][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 113.649741][ T5191] bcm5974 1-1:0.0: could not read from device [ 113.878666][ T5924] usb 1-1: USB disconnect, device number 4 [ 114.285177][ T6117] netlink: 'syz.2.66': attribute type 12 has an invalid length. [ 115.099052][ T6131] netlink: 104 bytes leftover after parsing attributes in process `syz.1.72'. [ 116.827640][ T37] audit: type=1804 audit(1756429097.281:2): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.86" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=9064 res=1 errno=0 [ 117.900365][ T6198] netlink: 176 bytes leftover after parsing attributes in process `syz.1.94'. [ 118.659885][ T6215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.031961][ T6224] process 'syz.3.104' launched './file1' with NULL argv: empty string added [ 120.031521][ T6249] syz_tun: entered promiscuous mode [ 120.033345][ T6249] batadv_slave_0: entered promiscuous mode [ 120.035072][ T6249] hsr1: entered allmulticast mode [ 120.035089][ T6249] syz_tun: entered allmulticast mode [ 120.035109][ T6249] batadv_slave_0: entered allmulticast mode [ 122.449575][ T986] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.614202][ T986] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.614230][ T986] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.640214][ T986] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.640241][ T986] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.640259][ T986] usb 4-1: Product: syz [ 122.640271][ T986] usb 4-1: Manufacturer: syz [ 122.640283][ T986] usb 4-1: SerialNumber: syz [ 122.691147][ T986] usb 4-1: config 0 descriptor?? [ 122.724671][ T986] usb 4-1: selecting invalid altsetting 0 [ 123.093763][ T5924] usb 4-1: USB disconnect, device number 2 [ 123.449539][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.603034][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.603062][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.603082][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.603119][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.603138][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.672657][ T31] usb 3-1: config 0 descriptor?? [ 124.250862][ T6013] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.270124][ T31] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 124.399476][ T6013] usb 5-1: Using ep0 maxpacket: 16 [ 124.405369][ T6013] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 124.405395][ T6013] usb 5-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 124.405410][ T6013] usb 5-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 124.408726][ T6013] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 124.408751][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.408763][ T6013] usb 5-1: Product: syz [ 124.408770][ T6013] usb 5-1: Manufacturer: syz [ 124.408776][ T6013] usb 5-1: SerialNumber: syz [ 125.024542][ T6013] usb 5-1: USB disconnect, device number 3 [ 125.068544][ C0] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (ktimers/0) [ 125.276540][ T6013] usb 3-1: USB disconnect, device number 5 [ 125.517529][ T6343] syz.1.147 uses obsolete (PF_INET,SOCK_PACKET) [ 129.523434][ T6418] netlink: 67 bytes leftover after parsing attributes in process `syz.2.177'. [ 130.279648][ T5898] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.433495][ T5898] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 130.433521][ T5898] usb 1-1: config 0 has no interface number 0 [ 130.433574][ T5898] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 130.433595][ T5898] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.436046][ T5898] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 130.436072][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.436087][ T5898] usb 1-1: Product: syz [ 130.436100][ T5898] usb 1-1: Manufacturer: syz [ 130.436112][ T5898] usb 1-1: SerialNumber: syz [ 130.516248][ T5898] usb 1-1: config 0 descriptor?? [ 130.517028][ T6439] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.537572][ T5898] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 130.569808][ T5898] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 130.727975][ T6449] netlink: 204 bytes leftover after parsing attributes in process `syz.2.191'. [ 131.004555][ T6015] usb 1-1: USB disconnect, device number 5 [ 131.048029][ T6015] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 131.062627][ T6015] cyberjack 1-1:0.69: device disconnected [ 131.064620][ T6451] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 131.212982][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.352630][ T6455] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 131.675816][ T6468] Bluetooth: MGMT ver 1.23 [ 131.675854][ T6468] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 132.230691][ T6478] veth1_to_bond: entered allmulticast mode [ 132.230787][ T6480] veth1_to_bond: entered promiscuous mode [ 132.233594][ T6477] veth1_to_bond: left promiscuous mode [ 132.233919][ T6477] veth1_to_bond: left allmulticast mode [ 132.448373][ T6492] io-wq is not configured for unbound workers [ 132.779477][ T5898] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.842252][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.842349][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.939492][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 132.941777][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.941829][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.941853][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.941871][ T5898] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 132.941891][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.943386][ T5898] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 132.943408][ T5898] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 132.943425][ T5898] usb 2-1: Manufacturer: syz [ 132.958763][ T5898] usb 2-1: config 0 descriptor?? [ 133.074021][ T6513] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.329526][ T5898] rc_core: IR keymap rc-hauppauge not found [ 133.329545][ T5898] Registered IR keymap rc-empty [ 133.330318][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.359578][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.381624][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 133.385084][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 133.401316][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.430677][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.450666][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.470335][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.503946][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.519562][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.540152][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.559603][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.579579][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.599618][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.691396][ T5898] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 133.691486][ T5898] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 133.759784][ T5898] usb 2-1: USB disconnect, device number 3 [ 133.807250][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.807285][ T6535] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 133.807297][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.807551][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.807568][ T6535] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 133.807579][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 134.201187][ T44] libceph: connect (1)[c::]:6789 error -101 [ 134.201832][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 134.472564][ T44] libceph: connect (1)[c::]:6789 error -101 [ 134.473591][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 134.629599][ T6015] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.749472][ T986] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.779551][ T6015] usb 3-1: Using ep0 maxpacket: 16 [ 134.783757][ T6015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.783785][ T6015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.783803][ T6015] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.783840][ T6015] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 134.783859][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.848205][ T6015] usb 3-1: config 0 descriptor?? [ 134.870918][ T6544] ceph: No mds server is up or the cluster is laggy [ 134.929096][ T986] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 134.929175][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.929195][ T986] usb 2-1: Product: syz [ 134.929207][ T986] usb 2-1: Manufacturer: syz [ 134.929219][ T986] usb 2-1: SerialNumber: syz [ 134.998899][ T986] usb 2-1: config 0 descriptor?? [ 135.298308][ T6015] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 135.298346][ T6015] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 135.298642][ T6015] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 135.298668][ T6015] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 135.298693][ T6015] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 135.350322][ T6015] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 135.454075][ T6015] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 135.454433][ T6015] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 135.467323][ T6561] random: crng reseeded on system resumption [ 135.848836][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 135.864526][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 135.884512][ T6013] usb 3-1: USB disconnect, device number 6 [ 135.915477][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 136.050706][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.056532][ T986] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 136.229451][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 136.234837][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.234892][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 136.234971][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.269599][ T986] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 136.269625][ T986] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 136.270278][ T986] asix 2-1:0.0: probe with driver asix failed with error -71 [ 136.323239][ T986] usb 2-1: USB disconnect, device number 4 [ 136.339548][ T10] usb 4-1: config 0 descriptor?? [ 136.366316][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 136.712858][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 136.801116][ T6595] veth1_macvtap: left promiscuous mode [ 137.581092][ T10] gspca_vc032x: reg_w err -71 [ 137.581187][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 137.610641][ T10] usb 4-1: USB disconnect, device number 3 [ 137.647993][ T6601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.734068][ T6614] input: syz0 as /devices/virtual/input/input9 [ 137.753548][ T6616] input: syz0 as /devices/virtual/input/input10 [ 139.045667][ T6659] mkiss: ax0: crc mode is auto. [ 139.712223][ T6685] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 139.763931][ T6690] netlink: 'syz.0.279': attribute type 4 has an invalid length. [ 139.763950][ T6690] netlink: 152 bytes leftover after parsing attributes in process `syz.0.279'. [ 139.833499][ T5924] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.863144][ C0] Illegal XDP return value 16128 on prog (id 47) dev bond_slave_1, expect packet loss! [ 139.881611][ T6693] netlink: 9 bytes leftover after parsing attributes in process `syz.4.281'. [ 139.933808][ T6695] netlink: 5 bytes leftover after parsing attributes in process `syz.4.281'. [ 139.989540][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 139.997006][ T5924] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 139.997032][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.997049][ T5924] usb 4-1: Product: syz [ 139.997060][ T5924] usb 4-1: Manufacturer: syz [ 139.997072][ T5924] usb 4-1: SerialNumber: syz [ 140.011131][ T5924] usb 4-1: config 0 descriptor?? [ 140.042558][ T5924] as10x_usb: device has been detected [ 140.043588][ T5924] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 140.227800][ T5924] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 140.306917][ T6690] : renamed from bond0 (while UP) [ 140.317391][ T5924] as10x_usb: error during firmware upload part1 [ 140.318096][ T5924] Registered device Abilis Systems DVB-Titan [ 140.324618][ T5924] usb 4-1: USB disconnect, device number 4 [ 140.391260][ T5924] Unregistered device Abilis Systems DVB-Titan [ 140.395492][ T5924] as10x_usb: device has been disconnected [ 140.417474][ T6693] gretap0: entered promiscuous mode [ 140.419521][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.421040][ T31] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.421067][ T31] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 140.441791][ T6695] 0{X: renamed from gretap0 [ 140.461988][ T6695] 0{X: left promiscuous mode [ 140.462015][ T6695] 0{X: entered allmulticast mode [ 140.486385][ T6695] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 140.541329][ T1700] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.699774][ T1700] usb 3-1: Using ep0 maxpacket: 16 [ 140.701653][ T1700] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 140.701681][ T1700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.704288][ T1700] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.704312][ T1700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.704329][ T1700] usb 3-1: Product: syz [ 140.704341][ T1700] usb 3-1: Manufacturer: syz [ 140.704353][ T1700] usb 3-1: SerialNumber: syz [ 140.778568][ T1700] usb 3-1: config 0 descriptor?? [ 140.894376][ T1700] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.894407][ T1700] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 141.180836][ T5924] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.344548][ T5924] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.344575][ T5924] usb 1-1: config 0 has no interface number 0 [ 141.357238][ T5924] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.357265][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.357281][ T5924] usb 1-1: Product: syz [ 141.357293][ T5924] usb 1-1: Manufacturer: syz [ 141.357357][ T5924] usb 1-1: SerialNumber: syz [ 141.427345][ T1700] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 141.432126][ T1700] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 141.434448][ T5924] usb 1-1: config 0 descriptor?? [ 141.459576][ T993] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.611375][ T993] usb 5-1: Using ep0 maxpacket: 8 [ 141.616958][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 141.616990][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.617008][ T993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.617029][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 141.617047][ T993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 141.617084][ T993] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 141.617103][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.635799][ T1700] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 141.635877][ T1700] em28xx 3-1:0.0: No AC97 audio processor [ 141.691294][ T5924] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 141.722195][ T1700] usb 3-1: USB disconnect, device number 7 [ 141.724509][ T1700] em28xx 3-1:0.0: Disconnecting em28xx [ 141.740630][ T5924] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.741040][ T5924] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 141.741089][ T5924] usb 1-1: media controller created [ 141.801082][ T993] usb 5-1: config 0 descriptor?? [ 141.847803][ T1700] em28xx 3-1:0.0: Freeing device [ 141.853298][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.200586][ T5924] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 142.418231][ T5924] usb 1-1: USB disconnect, device number 6 [ 142.428298][ T6747] vlan2: entered allmulticast mode [ 142.428317][ T6747] dummy0: entered allmulticast mode [ 142.651849][ T6756] input: syz0 as /devices/virtual/input/input11 [ 142.660468][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.660792][ T31] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 142.660810][ T31] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 143.727262][ T6792] tipc: Started in network mode [ 143.727290][ T6792] tipc: Node identity 0edc99b350cc, cluster identity 4711 [ 143.728917][ T6792] tipc: Enabled bearer , priority 0 [ 143.927428][ T6792] tipc: Disabling bearer [ 143.959540][ T1700] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.121907][ T1700] usb 3-1: Using ep0 maxpacket: 32 [ 144.124571][ T1700] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 144.124595][ T1700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.140762][ T1700] usb 3-1: config 0 descriptor?? [ 144.178342][ T1700] gspca_main: sunplus-2.14.0 probing 041e:400b [ 144.899637][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.902628][ T31] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 144.902650][ T31] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 145.184558][ T1700] gspca_sunplus: reg_w_riv err -71 [ 145.184668][ T1700] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 145.194217][ T1700] usb 3-1: USB disconnect, device number 8 [ 145.369237][ T6829] input: syz1 as /devices/virtual/input/input12 [ 146.294649][ T6853] netlink: 'syz.4.330': attribute type 3 has an invalid length. [ 146.717186][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 147.300438][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.319481][ T31] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 147.319506][ T31] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 147.362164][ T6881] veth3: entered promiscuous mode [ 148.115743][ T6913] netlink: 116 bytes leftover after parsing attributes in process `syz.4.352'. [ 148.902400][ T6950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.941419][ T986] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.076020][ T37] audit: type=1326 audit(1756429129.581:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb539ebe9 code=0x7fc00000 [ 149.104156][ T986] usb 1-1: Using ep0 maxpacket: 8 [ 149.122316][ T986] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 149.122344][ T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.122361][ T986] usb 1-1: Product: syz [ 149.122373][ T986] usb 1-1: Manufacturer: syz [ 149.122393][ T986] usb 1-1: SerialNumber: syz [ 149.162924][ T986] usb 1-1: config 0 descriptor?? [ 149.191023][ T986] gspca_main: se401-2.14.0 probing 047d:5003 [ 149.559970][ T6013] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.578118][ T6964] netlink: 51 bytes leftover after parsing attributes in process `syz.4.372'. [ 149.602721][ T986] gspca_se401: ExtraFeatures: 64 [ 149.602736][ T986] gspca_se401: Too many frame sizes [ 149.699520][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.699751][ T31] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 149.699767][ T31] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 149.719487][ T6013] usb 4-1: Using ep0 maxpacket: 16 [ 149.737183][ T6013] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.737205][ T6013] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.768656][ T6013] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.768682][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.768699][ T6013] usb 4-1: Product: syz [ 149.768709][ T6013] usb 4-1: Manufacturer: syz [ 149.768720][ T6013] usb 4-1: SerialNumber: syz [ 149.843642][ T986] usb 1-1: USB disconnect, device number 7 [ 150.005879][ T6013] usb 4-1: 0:2 : does not exist [ 150.016957][ T6013] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 150.056892][ T6013] usb 4-1: USB disconnect, device number 5 [ 150.285513][ T6981] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 151.679972][ T37] audit: type=1326 audit(1756429132.171:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.3.392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1937e9ebe9 code=0x0 [ 151.821023][ T5155] Bluetooth: hci5: urb ffff8880286c2300 submission failed (90) [ 151.828638][ T993] usb 5-1: USB disconnect, device number 4 [ 151.989555][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.139648][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 152.146029][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.146080][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 152.146102][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.158500][ T9] usb 3-1: config 0 descriptor?? [ 152.198261][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 152.231015][ T993] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.380224][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 152.386636][ T993] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 152.386662][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.427471][ T993] usb 5-1: config 0 descriptor?? [ 152.648134][ T993] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 152.664715][ T44] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 152.664759][ T44] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 152.664824][ T44] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 152.715187][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.717461][ T5191] bcm5974 3-1:0.0: could not read from device [ 152.722924][ T993] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 152.722978][ T993] usb 5-1: media controller created [ 152.760021][ T44] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 152.799325][ T9] usb 3-1: USB disconnect, device number 9 [ 152.800281][ T5191] bcm5974 3-1:0.0: could not read from device [ 152.832144][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.877710][ T993] az6027: usb out operation failed. (-71) [ 152.883006][ T993] az6027: usb out operation failed. (-71) [ 152.883023][ T993] stb0899_attach: Driver disabled by Kconfig [ 152.883031][ T993] az6027: no front-end attached [ 152.883031][ T993] [ 152.883435][ T993] az6027: usb out operation failed. (-71) [ 152.883459][ T993] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 152.886370][ T993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 152.998743][ T993] dvb-usb: schedule remote query interval to 400 msecs. [ 152.998765][ T993] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 153.013946][ T993] usb 5-1: USB disconnect, device number 5 [ 153.164045][ T993] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 153.369529][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.519594][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 153.527053][ T44] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 153.527080][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.527097][ T44] usb 4-1: Product: syz [ 153.527109][ T44] usb 4-1: Manufacturer: syz [ 153.527122][ T44] usb 4-1: SerialNumber: syz [ 153.570311][ T44] usb 4-1: config 0 descriptor?? [ 153.585067][ T44] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 153.739585][ T993] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.826488][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 153.877187][ T7046] : entered promiscuous mode [ 153.890715][ T993] usb 5-1: Using ep0 maxpacket: 8 [ 153.897152][ T993] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 153.897178][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.897195][ T993] usb 5-1: Product: syz [ 153.897208][ T993] usb 5-1: Manufacturer: syz [ 153.897220][ T993] usb 5-1: SerialNumber: syz [ 153.903511][ T993] usb 5-1: config 0 descriptor?? [ 154.122390][ T993] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 154.799540][ T44] gspca_sonixj: reg_w1 err -71 [ 154.799640][ T44] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 154.833128][ T44] usb 4-1: USB disconnect, device number 6 [ 154.983396][ T5905] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.137930][ T993] gspca_sunplus: reg_w_riv err -71 [ 155.138021][ T993] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 155.143523][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 155.145984][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.146006][ T5905] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.146079][ T993] usb 5-1: USB disconnect, device number 6 [ 155.173008][ T5905] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 155.173034][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.173051][ T5905] usb 2-1: Product: syz [ 155.173063][ T5905] usb 2-1: Manufacturer: syz [ 155.173075][ T5905] usb 2-1: SerialNumber: syz [ 155.222321][ T5905] usb 2-1: config 0 descriptor?? [ 155.857799][ T993] usb 2-1: USB disconnect, device number 5 [ 156.631356][ T7088] netlink: 64 bytes leftover after parsing attributes in process `syz.1.426'. [ 158.336440][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 158.336479][ T7145] netlink: 'syz.2.458': attribute type 3 has an invalid length. [ 158.336490][ T7145] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 158.336501][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 158.391158][ T7148] netlink: 67 bytes leftover after parsing attributes in process `syz.3.448'. [ 158.425332][ T7147] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.718563][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 159.031178][ T7170] netlink: 204 bytes leftover after parsing attributes in process `syz.4.459'. [ 159.306749][ T44] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.306988][ T44] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.307226][ T44] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.307459][ T44] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.307475][ T44] rtc rtc0: __rtc_set_alarm: err=-22 [ 159.469616][ T993] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 159.628034][ T993] usb 1-1: config 0 has no interfaces? [ 159.628069][ T993] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 159.628090][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.659163][ T993] usb 1-1: config 0 descriptor?? [ 159.904441][ T6013] usb 1-1: USB disconnect, device number 8 [ 161.143282][ T37] audit: type=1326 audit(1756429141.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.2.478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef0a4febe9 code=0x0 [ 161.547294][ T7225] debugfs: 'ttyS3' already exists in 'caif_serial' [ 162.809478][ T6013] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.959569][ T6013] usb 1-1: Using ep0 maxpacket: 32 [ 162.962204][ T6013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.962232][ T6013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.962270][ T6013] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.962290][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.994102][ T6013] usb 1-1: config 0 descriptor?? [ 163.022197][ T6013] hub 1-1:0.0: USB hub found [ 163.203238][ T6013] hub 1-1:0.0: 1 port detected [ 163.428795][ T6013] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 163.428819][ T6013] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 163.496389][ T6013] usbhid 1-1:0.0: can't add hid device: -71 [ 163.496512][ T6013] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 163.539232][ T6013] usb 1-1: USB disconnect, device number 9 [ 163.643471][ T7258] netlink: 'syz.4.493': attribute type 29 has an invalid length. [ 163.644230][ T7258] netlink: 'syz.4.493': attribute type 29 has an invalid length. [ 163.644924][ T7258] netlink: 500 bytes leftover after parsing attributes in process `syz.4.493'. [ 164.326054][ T7282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.249516][ T44] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 165.348229][ T7306] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 165.348254][ T7306] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 165.368425][ T7309] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 165.406825][ T44] usb 4-1: config 0 has no interfaces? [ 165.406860][ T44] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 165.406880][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.458388][ T44] usb 4-1: config 0 descriptor?? [ 165.673612][ T44] usb 4-1: USB disconnect, device number 7 [ 166.513663][ T37] audit: type=1326 audit(1756429147.021:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.513783][ T37] audit: type=1326 audit(1756429147.021:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.514434][ T37] audit: type=1326 audit(1756429147.021:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.514786][ T37] audit: type=1326 audit(1756429147.021:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.514911][ T37] audit: type=1326 audit(1756429147.021:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.515493][ T37] audit: type=1326 audit(1756429147.021:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.517116][ T37] audit: type=1326 audit(1756429147.021:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.517377][ T37] audit: type=1326 audit(1756429147.021:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.530988][ T37] audit: type=1326 audit(1756429147.041:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 166.531034][ T37] audit: type=1326 audit(1756429147.041:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7ffc0000 [ 167.182486][ T7355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.275276][ T7399] netlink: 51 bytes leftover after parsing attributes in process `syz.2.554'. [ 168.315275][ T7403] tipc: Started in network mode [ 168.315300][ T7403] tipc: Node identity ac1414aa, cluster identity 4711 [ 168.316712][ T6013] IPVS: starting estimator thread 0... [ 168.318783][ T7403] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.338720][ T7403] tipc: Enabled bearer , priority 10 [ 168.429800][ T7404] IPVS: using max 7 ests per chain, 16800 per kthread [ 168.452579][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.589505][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.739471][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.879518][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.019485][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.159650][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.300706][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.442712][ T1700] tipc: Node number set to 2886997162 [ 169.579575][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.849586][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.909484][ T6013] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 170.059532][ T6013] usb 5-1: Using ep0 maxpacket: 16 [ 170.063526][ T6013] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.063548][ T6013] usb 5-1: config 0 has no interface number 0 [ 170.071081][ T6013] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 170.071109][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.071126][ T6013] usb 5-1: Product: syz [ 170.071138][ T6013] usb 5-1: Manufacturer: syz [ 170.071151][ T6013] usb 5-1: SerialNumber: syz [ 170.080592][ T6013] usb 5-1: config 0 descriptor?? [ 170.110115][ T6013] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 170.491787][ T7453] netlink: 'syz.0.587': attribute type 1 has an invalid length. [ 170.491808][ T7453] netlink: 'syz.0.587': attribute type 4 has an invalid length. [ 170.491819][ T7453] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.587'. [ 171.320316][ T6013] gspca_spca1528: reg_w err -71 [ 171.320426][ T6013] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 171.343703][ T6013] usb 5-1: USB disconnect, device number 7 [ 173.389393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.549461][ C1] net_ratelimit: 3 callbacks suppressed [ 173.549483][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.761710][ T7503] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 173.984602][ T7503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.103642][ T7508] bond2: (slave ip6gretap1): making interface the new active one [ 174.105989][ T7508] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 174.579476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.025908][ T7536] netlink: 51 bytes leftover after parsing attributes in process `syz.3.608'. [ 175.619506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.989448][ T5924] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.142507][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 176.145290][ T5924] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.145319][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.145351][ T5924] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 176.145371][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.209632][ T5924] usb 4-1: config 0 descriptor?? [ 176.659469][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 176.710097][ T5924] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 177.093519][ T44] usb 4-1: USB disconnect, device number 8 [ 177.699476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.739511][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 179.231052][ T7631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.237045][ T7633] netlink: 'syz.3.652': attribute type 12 has an invalid length. [ 179.237064][ T7633] netlink: 'syz.3.652': attribute type 29 has an invalid length. [ 179.237075][ T7633] netlink: 148 bytes leftover after parsing attributes in process `syz.3.652'. [ 179.237116][ T7633] netlink: 'syz.3.652': attribute type 2 has an invalid length. [ 179.237128][ T7633] netlink: 'syz.3.652': attribute type 3 has an invalid length. [ 179.237138][ T7633] netlink: 3 bytes leftover after parsing attributes in process `syz.3.652'. [ 179.789526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.240624][ T5905] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.413848][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 180.416781][ T5905] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.416806][ T5905] usb 1-1: config 0 has no interface number 0 [ 180.416876][ T5905] usb 1-1: config 0 interface 184 has no altsetting 0 [ 180.421824][ T5905] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.421849][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.421866][ T5905] usb 1-1: Product: syz [ 180.421878][ T5905] usb 1-1: Manufacturer: syz [ 180.421890][ T5905] usb 1-1: SerialNumber: syz [ 180.484448][ T5905] usb 1-1: config 0 descriptor?? [ 180.488752][ T5905] smsc75xx v1.0.0 [ 180.829583][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 181.720519][ T5905] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 181.720553][ T5905] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 181.721107][ T5905] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 181.721128][ T5905] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 181.721145][ T5905] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 181.721163][ T5905] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 181.721817][ T5905] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 181.809687][ T5905] usb 1-1: USB disconnect, device number 10 [ 181.859492][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.136155][ T7689] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 182.348611][ T7689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.424072][ T7691] bond1: (slave ip6gretap1): making interface the new active one [ 182.425656][ T7691] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 182.649518][ T5905] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.809455][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 182.811945][ T5905] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.811973][ T5905] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.812004][ T5905] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 182.812022][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.813493][ T7705] 9pnet_fd: Insufficient options for proto=fd [ 182.867506][ T5905] usb 1-1: config 0 descriptor?? [ 182.909562][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.162719][ T7715] netlink: 'syz.2.685': attribute type 2 has an invalid length. [ 183.162741][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 183.326692][ T5905] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 183.738979][ T5905] usb 1-1: USB disconnect, device number 11 [ 183.939455][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.993715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.994861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 184.128238][ T7739] tipc: Started in network mode [ 184.134040][ T7739] tipc: Node identity c, cluster identity 4711 [ 184.134050][ T7739] tipc: Node number set to 12 [ 184.989473][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.551301][ T7780] input: syz0 as /devices/virtual/input/input16 [ 185.582668][ T7777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.595103][ T7777] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 186.019502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.174543][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 186.174558][ T37] audit: type=1326 audit(1756429166.671:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.1.721" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3eb539ebe9 code=0x0 [ 186.749398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.059603][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.252416][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 187.671949][ T7835] netlink: 104 bytes leftover after parsing attributes in process `syz.2.747'. [ 188.099446][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.623119][ T7859] syzkaller1: entered promiscuous mode [ 188.623147][ T7859] syzkaller1: entered allmulticast mode [ 189.140770][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.189439][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.219971][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.571097][ T7949] IPv4: Oversized IP packet from 172.20.20.24 [ 191.575297][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 191.575871][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 191.821595][ T44] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 191.973362][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 191.973394][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 191.973433][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 191.973453][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.999781][ T44] usb 4-1: config 0 descriptor?? [ 192.027709][ T7952] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.259477][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.538172][ T44] logitech 0003:046D:C298.0009: unknown main item tag 0x4 [ 192.538205][ T44] logitech 0003:046D:C298.0009: unknown main item tag 0x0 [ 192.538230][ T44] logitech 0003:046D:C298.0009: unknown main item tag 0x0 [ 192.538253][ T44] logitech 0003:046D:C298.0009: unbalanced collection at end of report description [ 192.543568][ T44] logitech 0003:046D:C298.0009: parse failed [ 192.543674][ T44] logitech 0003:046D:C298.0009: probe with driver logitech failed with error -22 [ 192.730083][ T44] usb 4-1: USB disconnect, device number 9 [ 193.293822][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'. [ 193.296742][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'. [ 193.299568][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 193.899465][ T6013] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 194.049432][ T6013] usb 4-1: Using ep0 maxpacket: 16 [ 194.051877][ T6013] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 194.051899][ T6013] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.051916][ T6013] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.055081][ T6013] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.055105][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.055122][ T6013] usb 4-1: Product: syz [ 194.055133][ T6013] usb 4-1: Manufacturer: syz [ 194.055144][ T6013] usb 4-1: SerialNumber: syz [ 194.275377][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.275452][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.339619][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.570660][ T6013] usb 4-1: 0:2 : does not exist [ 194.615515][ T8036] netlink: 'syz.0.831': attribute type 4 has an invalid length. [ 195.302962][ T8053] pim6reg: entered allmulticast mode [ 195.319978][ T8053] pim6reg: left allmulticast mode [ 195.379552][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.409515][ T44] usb 4-1: USB disconnect, device number 10 [ 195.468044][ T8056] fuse: Bad value for 'fd' [ 196.419592][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.420171][ T8080] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 197.459524][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.539589][ T6013] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 197.692064][ T6013] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.692096][ T6013] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.692134][ T6013] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.692153][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.745365][ T8109] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.754856][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.870'. [ 197.755103][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.870'. [ 197.778766][ T6013] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.963679][ T9] usb 1-1: USB disconnect, device number 12 [ 198.509463][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.845901][ T8138] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 198.921562][ T8138] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 199.380053][ T8149] netlink: 'syz.4.881': attribute type 9 has an invalid length. [ 199.380072][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 199.431897][ T8149] netlink: 'syz.4.881': attribute type 9 has an invalid length. [ 199.431919][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 199.432028][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.432520][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.432559][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.432589][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.539640][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 200.292029][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 200.579490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.578661][ T37] audit: type=1326 audit(1756429438.081:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4b61ade9 code=0x7ffc0000 [ 201.602092][ T37] audit: type=1326 audit(1756429438.081:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4b61ade9 code=0x7ffc0000 [ 201.603837][ T37] audit: type=1326 audit(1756429438.111:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4b61ade9 code=0x7ffc0000 [ 201.604652][ T37] audit: type=1326 audit(1756429438.111:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4b61ade9 code=0x7ffc0000 [ 201.605218][ T37] audit: type=1326 audit(1756429438.111:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4b67ebe9 code=0x7ffc0000 [ 201.606817][ T37] audit: type=1326 audit(1756429438.111:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4b61ade9 code=0x7ffc0000 [ 201.607604][ T37] audit: type=1326 audit(1756429438.111:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4b61ade9 code=0x7ffc0000 [ 201.608247][ T37] audit: type=1326 audit(1756429438.111:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4b61ade9 code=0x7ffc0000 [ 201.619442][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.701254][ T1700] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.702524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.749456][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 201.769981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 201.806011][ T8197] syz.1.900 (8197) used greatest stack depth: 18584 bytes left [ 201.806779][ T37] audit: type=1326 audit(1756429438.111:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4b61ade9 code=0x7ffc0000 [ 201.807367][ T37] audit: type=1326 audit(1756429438.311:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4b67ebe9 code=0x7ffc0000 [ 201.891735][ T1700] usb 5-1: Using ep0 maxpacket: 8 [ 201.893832][ T1700] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.893872][ T1700] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 201.893885][ T1700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 201.893897][ T1700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 201.893907][ T1700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.898906][ T1700] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 201.898921][ T1700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 201.898930][ T1700] usb 5-1: Product: syz [ 201.898937][ T1700] usb 5-1: Manufacturer: syz [ 201.898944][ T1700] usb 5-1: SerialNumber: syz [ 201.979365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 201.998082][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 202.006454][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 202.006481][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.034400][ T1700] usb 5-1: config 0 descriptor?? [ 202.080863][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 202.080877][ T10] pvrusb2: ********** [ 202.080880][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 202.080886][ T10] pvrusb2: Important functionality might not be entirely working. [ 202.080890][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 202.080895][ T10] pvrusb2: ********** [ 202.266241][ T2369] pvrusb2: Invalid write control endpoint [ 202.284371][ T1700] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 202.284387][ T1700] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 202.517364][ T8205] pvrusb2: Killing an I2C read to 1 that has wlen too large (desired=102 limit=60) [ 202.519530][ T1700] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 202.519559][ T1700] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 202.519576][ T1700] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 202.549611][ T10] usb 4-1: USB disconnect, device number 11 [ 202.622431][ T2369] pvrusb2: Invalid write control endpoint [ 202.622446][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 202.622454][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 202.622462][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 202.622470][ T2369] pvrusb2: Device being rendered inoperable [ 202.659449][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.681743][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 202.681807][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 202.709863][ T1700] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 202.725798][ T2369] pvrusb2: Attached sub-driver cx25840 [ 202.725825][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 202.725835][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 202.973222][ T8213] netlink: 5 bytes leftover after parsing attributes in process `syz.1.908'. [ 202.976113][ T8213] 0{X: renamed from gretap0 (while UP) [ 203.012114][ T8213] 0{X: entered allmulticast mode [ 203.012612][ T8213] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 203.317014][ T1700] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 203.317380][ T1700] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 203.339199][ T1700] usb 5-1: USB disconnect, device number 8 [ 203.347524][ T8223] warning: `syz.3.911' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.475658][ T8230] syzkaller1: entered promiscuous mode [ 203.475696][ T8230] syzkaller1: entered allmulticast mode [ 203.699451][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.739437][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.779442][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.726077][ T9] delete_channel: no stack [ 206.819479][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.618627][ T8334] netlink: 'syz.2.960': attribute type 2 has an invalid length. [ 207.618647][ T8334] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 207.618747][ T8334] netlink: 'syz.2.960': attribute type 8 has an invalid length. [ 207.618760][ T8334] netlink: 44 bytes leftover after parsing attributes in process `syz.2.960'. [ 207.859569][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.547778][ T8369] tls_set_device_offload_rx: netdev not found [ 208.626730][ T37] kauditd_printk_skb: 328 callbacks suppressed [ 208.626747][ T37] audit: type=1326 audit(1756429445.131:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7fc00000 [ 208.706507][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 208.899448][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.249495][ T37] audit: type=1326 audit(1756429445.751:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dc397ebe9 code=0x7fc00000 [ 209.516598][ T8400] fuse: Bad value for 'fd' [ 209.533958][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 209.609501][ T8398] hsr_slave_0: left promiscuous mode [ 209.664789][ T8398] hsr_slave_1: left promiscuous mode [ 209.819641][ T8407] tipc: Started in network mode [ 209.819657][ T8407] tipc: Node identity , cluster identity 4711 [ 209.819669][ T8407] tipc: Failed to obtain node identity [ 209.819697][ T8407] tipc: Enabling of bearer rejected, failed to enable media [ 209.939551][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.059460][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.232099][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 210.232144][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.232166][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.232184][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 210.233765][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 210.233790][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 210.233807][ T9] usb 1-1: Manufacturer: syz [ 210.315027][ T9] usb 1-1: config 0 descriptor?? [ 210.799406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.799548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.799737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.894213][ T9] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 210.904955][ T9] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 210.979449][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.402700][ T9] usb 1-1: USB disconnect, device number 13 [ 211.543481][ T8451] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 211.891367][ T8459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.928854][ T8459] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 212.019454][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.257353][ T8441] kexec: Could not allocate control_code_buffer [ 212.585386][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1018'. [ 213.059453][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.108376][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 214.099429][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.139445][ T5905] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 214.301744][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.301773][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.301793][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.301832][ T5905] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.301852][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.328808][ T5905] usb 5-1: config 0 descriptor?? [ 214.494392][ T8520] gretap0: entered promiscuous mode [ 214.802716][ T5905] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 215.139441][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.933624][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 215.933678][ T8552] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 215.933690][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 216.180300][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.790360][ T8566] dummy0: entered promiscuous mode [ 216.790604][ T8566] macsec0: entered promiscuous mode [ 216.790837][ T8566] macsec0: entered allmulticast mode [ 216.790850][ T8566] dummy0: entered allmulticast mode [ 216.827537][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 216.838332][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 216.867504][ T8566] dummy0: left allmulticast mode [ 216.880653][ T8566] dummy0: left promiscuous mode [ 216.999431][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 217.002098][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.002124][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.002161][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.002181][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.007685][ T10] usb 1-1: config 0 descriptor?? [ 217.036211][ T5905] usb 5-1: USB disconnect, device number 9 [ 217.076560][ T10] hub 1-1:0.0: USB hub found [ 217.219581][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.236418][ T10] hub 1-1:0.0: 1 port detected [ 217.599573][ T8587] veth1_to_bridge: entered promiscuous mode [ 217.604601][ T8587] veth1_to_bridge: left promiscuous mode [ 217.846308][ T10] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 217.848358][ T31] usb 1-1: USB disconnect, device number 14 [ 217.871058][ T10] usb 1-1: Failed to suspend device, error -19 [ 218.020341][ T8600] No source specified [ 218.035470][ T8598] netlink: 'syz.3.1074': attribute type 11 has an invalid length. [ 218.221970][ T8605] veth0: entered promiscuous mode [ 218.261641][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.269855][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 218.832599][ T8612] sit0: entered allmulticast mode [ 219.124213][ T8623] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1085'. [ 219.299697][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.879600][ T44] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.048370][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 220.051231][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.051258][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.051277][ T44] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.051300][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.051330][ T44] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 220.051350][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.067080][ T44] usb 5-1: config 0 descriptor?? [ 220.304930][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 220.305049][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 220.324733][ T44] usb 5-1: USB disconnect, device number 10 [ 220.339536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 221.379467][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.213076][ T8697] capability: warning: `syz.2.1118' uses 32-bit capabilities (legacy support in use) [ 222.419580][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.459439][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.799502][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.357763][ T8762] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.1144'. [ 224.500318][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.645186][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 225.028569][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 225.028636][ T8781] netlink: 'syz.4.1151': attribute type 15 has an invalid length. [ 225.028649][ T8781] netlink: 'syz.4.1151': attribute type 18 has an invalid length. [ 225.539430][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.335255][ T8831] overlayfs: failed to verify upper (216/file1, ino=1133, err=-116) [ 226.335296][ T8831] overlayfs: failed to verify index dir 'upper' xattr [ 226.335303][ T8831] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 226.579434][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.987456][ T8855] Process accounting resumed [ 227.134000][ T8861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1186'. [ 227.274427][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 227.619428][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.659421][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.699449][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.544199][ T8903] loop2: detected capacity change from 0 to 7 [ 230.609641][ T8903] Dev loop2: unable to read RDB block 7 [ 230.609755][ T8903] loop2: AHDI p1 p2 p3 [ 230.609786][ T8903] loop2: partition table partially beyond EOD, truncated [ 230.610020][ T8903] loop2: p3 start 335544320 is beyond EOD, truncated [ 230.679269][ T8909] 9pnet_fd: Insufficient options for proto=fd [ 230.739439][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.366706][ T8937] openvswitch: netlink: Multiple metadata blocks provided [ 231.779725][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.819541][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.442641][ T9002] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 233.582256][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.710264][ T9008] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 233.726246][ T9008] bond0: (slave batadv1): making interface the new active one [ 233.735550][ T9008] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 233.859427][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.221467][ T9023] mmap: syz.1.1255 (9023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 234.899402][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.423379][ T9047] : entered promiscuous mode [ 235.939430][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.081951][ T9062] netlink: 'syz.0.1272': attribute type 19 has an invalid length. [ 236.081972][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 236.133364][ T1346] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.133730][ T1346] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.133768][ T1346] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.133802][ T1346] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.134096][ T9062] netlink: 'syz.0.1272': attribute type 19 has an invalid length. [ 236.134111][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 236.979466][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.227094][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 238.019478][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.533719][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036896400: rx timeout, send abort [ 238.537143][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bbe0000: rx timeout, send abort [ 238.537358][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888036896400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.539112][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bbe0000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.770660][ T9122] 9pnet_fd: Insufficient options for proto=fd [ 238.771326][ T9119] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 238.780065][ T9121] netlink: 'syz.3.1297': attribute type 13 has an invalid length. [ 238.780083][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 238.835966][ T9121] netlink: 'syz.3.1297': attribute type 13 has an invalid length. [ 238.835987][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 238.839239][ T1467] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.840983][ T1467] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.841041][ T1467] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.841073][ T1467] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.059435][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.422621][ T9137] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 239.422621][ T9137] Q [ 239.442960][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 239.447129][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 239.557648][ T9142] loop6: detected capacity change from 0 to 7 [ 239.575968][ T9142] Dev loop6: unable to read RDB block 7 [ 239.576014][ T9142] loop6: unable to read partition table [ 239.576247][ T9142] loop6: partition table beyond EOD, truncated [ 239.576263][ T9142] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 239.996640][ T37] audit: type=1326 audit(1756429476.501:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.1.1315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eb539ebe9 code=0x0 [ 240.099423][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.139453][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.345828][ T9188] overlayfs: failed lookup in lower (newroot/260, name='file1', err=-40): overlapping layers [ 241.618944][ T9196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.179422][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.855525][ T9195] syz.4.1331 (9195): drop_caches: 2 [ 243.114441][ T9223] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1341'. [ 243.132759][ T9226] 9pnet_fd: Insufficient options for proto=fd [ 243.221239][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.259501][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.299427][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.400104][ T9285] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 245.581122][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 245.581142][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 246.314480][ T993] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 246.339544][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.444739][ T9321] fuse: Bad value for 'fd' [ 246.476534][ T9317] bridge0: entered promiscuous mode [ 246.484718][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 246.487211][ T993] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 246.487233][ T993] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.487250][ T993] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.487267][ T993] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.487284][ T993] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.487301][ T993] usb 5-1: config 0 has no interface number 0 [ 246.487350][ T993] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 246.487373][ T993] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 246.487392][ T993] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.487427][ T993] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.487450][ T993] usb 5-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 246.487486][ T993] usb 5-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 246.487509][ T993] usb 5-1: config 0 interface 125 has no altsetting 0 [ 246.487524][ T993] usb 5-1: config 0 interface 125 has no altsetting 2 [ 246.511329][ T9317] batman_adv: batadv0: Adding interface: macsec1 [ 246.511343][ T9317] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.511373][ T9317] batman_adv: batadv0: Interface activated: macsec1 [ 246.547486][ T993] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 246.547512][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.547530][ T993] usb 5-1: Product: syz [ 246.547542][ T993] usb 5-1: Manufacturer: syz [ 246.547555][ T993] usb 5-1: SerialNumber: syz [ 246.702779][ T993] usb 5-1: config 0 descriptor?? [ 246.719208][ T993] usb 5-1: selecting invalid altsetting 2 [ 246.734561][ T9325] netlink: 'syz.2.1386': attribute type 22 has an invalid length. [ 246.734579][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 246.843145][ T9325] netlink: 'syz.2.1386': attribute type 22 has an invalid length. [ 246.843166][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 246.852646][ T1346] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.853814][ T1346] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.853855][ T1346] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.853895][ T1346] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.920407][ C0] usb 5-1: async_complete: urb error -71 [ 246.920630][ C0] usb 5-1: async_complete: urb error -71 [ 246.920734][ C0] usb 5-1: async_complete: urb error -71 [ 246.920836][ C0] usb 5-1: async_complete: urb error -71 [ 246.952051][ T993] get_1284_register: usb error -71 [ 246.952191][ T993] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 246.980509][ T993] usb 5-1: USB disconnect, device number 11 [ 247.379724][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.622845][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 247.622880][ T9349] netlink: 'syz.4.1395': attribute type 30 has an invalid length. [ 247.881397][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 247.881433][ T9349] netlink: 'syz.4.1395': attribute type 30 has an invalid length. [ 248.081811][ T9361] Bluetooth: hci0: invalid len left 7, exp >= 52 [ 248.419575][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.421591][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.459534][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.766553][ T9417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 250.460255][ T37] audit: type=1326 audit(1756429486.971:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7fc00000 [ 250.499428][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.115261][ T37] audit: type=1326 audit(1756429487.611:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9426 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7fc00000 [ 251.539789][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.549445][ T5905] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 252.579429][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.709412][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 252.711746][ T5905] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 252.711771][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.745353][ T5905] usb 5-1: config 0 descriptor?? [ 252.773653][ T5905] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 253.619419][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.995979][ T5905] gspca_sonixj: reg_w1 err -71 [ 254.009561][ T5905] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 254.019185][ T5905] usb 5-1: USB disconnect, device number 12 [ 254.468711][ T37] audit: type=1400 audit(1756429490.971:362): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="w" requested=x pid=9499 comm="syz.3.1461" name="fd" dev="proc" ino=23875 [ 254.659408][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.704390][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.706497][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.706568][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.734051][ T9534] syz.3.1473 (9534): drop_caches: 4 [ 256.191613][ T9551] netlink: 'syz.1.1480': attribute type 12 has an invalid length. [ 256.191634][ T9551] netlink: 'syz.1.1480': attribute type 29 has an invalid length. [ 256.191646][ T9551] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1480'. [ 256.191670][ T9551] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1480'. [ 256.739476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.556008][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'. [ 257.779421][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.407860][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 258.819483][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.946657][ T9614] binder: 9613:9614 ioctl c0306201 0 returned -14 [ 258.947060][ T9614] binder: 9613:9614 ioctl c018620c 200000000280 returned -1 [ 259.859410][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.246187][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'. [ 260.709469][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 260.860335][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 260.863256][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 260.866168][ T9638] team0: Port device team_slave_0 removed [ 260.866771][ T9] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 260.866797][ T9] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.866820][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 260.881678][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 260.881703][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.881719][ T9] usb 4-1: Product: syz [ 260.881731][ T9] usb 4-1: Manufacturer: syz [ 260.881744][ T9] usb 4-1: SerialNumber: syz [ 260.899421][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.918612][ T9644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.161862][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.166324][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.225351][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input17 [ 261.234579][ T5191] bcm5974 4-1:1.0: could not read from device [ 261.246484][ T9653] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 261.246507][ T9653] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 261.292525][ T9] usb 4-1: USB disconnect, device number 12 [ 261.574341][ T9660] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1529'. [ 261.789988][ T9670] pim6reg1: entered promiscuous mode [ 261.790015][ T9670] pim6reg1: entered allmulticast mode [ 261.939427][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.585304][ T37] audit: type=1326 audit(1756429499.091:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz.2.1545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef0a4febe9 code=0x0 [ 262.841938][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c1d6800: rx timeout, send abort [ 262.842094][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c1d7000: rx timeout, send abort [ 262.842280][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c1d6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 262.842427][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c1d7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 262.909925][ T9707] netlink: 'syz.0.1559': attribute type 4 has an invalid length. [ 262.979435][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.370703][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 263.923182][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 264.019542][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.059473][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.418823][ T9784] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 265.832875][ T993] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 266.049411][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 266.066153][ T993] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 266.066178][ T993] usb 5-1: config 6 has no interface number 0 [ 266.066225][ T993] usb 5-1: config 6 interface 43 altsetting 170 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 266.066248][ T993] usb 5-1: config 6 interface 43 has no altsetting 0 [ 266.068284][ T993] usb 5-1: string descriptor 0 read error: -71 [ 266.068419][ T993] usb 5-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 266.068440][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.099565][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.140578][ T993] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 266.140602][ T993] usb 5-1: no configuration chosen from 1 choice [ 266.165298][ T993] usb 5-1: USB disconnect, device number 13 [ 267.139493][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.220863][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 267.407539][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.407569][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.407588][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.407627][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.407646][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.491902][ T10] usb 4-1: config 0 descriptor?? [ 267.926002][ T10] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 268.179528][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.453367][ T44] usb 4-1: USB disconnect, device number 13 [ 269.152479][ T37] audit: type=1326 audit(1756429505.661:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.3.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1937e9ebe9 code=0x7ffc0000 [ 269.152528][ T37] audit: type=1326 audit(1756429505.661:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.3.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1937e9ebe9 code=0x7ffc0000 [ 269.157682][ T37] audit: type=1326 audit(1756429505.661:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.3.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1937e9ebe9 code=0x7ffc0000 [ 269.157844][ T37] audit: type=1326 audit(1756429505.661:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.3.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1937e9ebe9 code=0x7ffc0000 [ 269.157962][ T37] audit: type=1326 audit(1756429505.661:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.3.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1937e9ebe9 code=0x7ffc0000 [ 269.158395][ T37] audit: type=1326 audit(1756429505.661:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.3.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f1937e9ebe9 code=0x7ffc0000 [ 269.158522][ T37] audit: type=1326 audit(1756429505.661:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.3.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1937e9ebe9 code=0x7ffc0000 [ 269.158673][ T37] audit: type=1326 audit(1756429505.661:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.3.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1937e9ebe9 code=0x7ffc0000 [ 269.219517][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.642486][ T9906] tls_set_device_offload: netdev not found [ 270.261145][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.286454][ T9910] kexec: Could not allocate control_code_buffer [ 271.299491][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.339514][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.359566][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.514745][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.514775][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.514795][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.514833][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.514853][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.572371][ T10] usb 4-1: config 0 descriptor?? [ 273.043093][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 273.259440][ T993] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 273.379492][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.409464][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 273.418432][ T993] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 273.418459][ T993] usb 5-1: config 0 has no interface number 0 [ 273.418514][ T993] usb 5-1: config 0 interface 184 has no altsetting 0 [ 273.446507][ T993] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 273.446532][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.446550][ T993] usb 5-1: Product: syz [ 273.446562][ T993] usb 5-1: Manufacturer: syz [ 273.446574][ T993] usb 5-1: SerialNumber: syz [ 273.494144][ T993] usb 5-1: config 0 descriptor?? [ 273.497835][ T993] smsc75xx v1.0.0 [ 273.856667][ T5905] usb 4-1: USB disconnect, device number 14 [ 274.133239][ T993] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 274.133266][ T993] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 274.419792][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.537104][ T993] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 274.537132][ T993] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 274.537150][ T993] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 274.537399][ T993] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 274.551176][ T993] usb 5-1: USB disconnect, device number 14 [ 274.976655][T10032] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1690'. [ 275.464801][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.491959][ T993] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 275.670341][ T993] usb 4-1: Using ep0 maxpacket: 32 [ 275.725312][ T993] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.725340][ T993] usb 4-1: config 0 has no interface number 0 [ 275.769056][ T993] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 275.769091][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.769109][ T993] usb 4-1: Product: syz [ 275.769121][ T993] usb 4-1: Manufacturer: syz [ 275.769133][ T993] usb 4-1: SerialNumber: syz [ 275.834788][ T993] usb 4-1: config 0 descriptor?? [ 275.851637][ T993] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 275.851675][ T993] usb 4-1: selecting invalid altsetting 1 [ 275.851689][ T993] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 275.858631][ T993] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 275.859180][ T993] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 275.859228][ T993] usb 4-1: media controller created [ 275.954642][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.499573][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.072947][T10079] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 277.188701][T10079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.306708][T10045] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 277.309050][ T993] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 277.350812][T10081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.351273][T10081] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 277.359673][T10081] bond1: (slave vcan1): Error -95 calling set_mac_address [ 277.408641][ T993] usb 4-1: USB disconnect, device number 15 [ 277.549594][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.655078][T10090] ======================================================= [ 277.655078][T10090] WARNING: The mand mount option has been deprecated and [ 277.655078][T10090] and is ignored by this kernel. Remove the mand [ 277.655078][T10090] option from the mount to silence this warning. [ 277.655078][T10090] ======================================================= [ 277.729568][T10093] overlayfs: failed to clone lowerpath [ 278.579511][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.086381][T10140] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 279.619548][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.829090][T10160] ipvlan2: entered promiscuous mode [ 280.251054][T10170] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 280.659672][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.699503][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.799466][ T5905] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 281.959430][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 281.962014][ T5905] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 281.962069][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.962089][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.962111][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.962131][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.962170][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 281.962190][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.204552][ T5905] usb 5-1: GET_CAPABILITIES returned 0 [ 282.204599][ T5905] usbtmc 5-1:16.0: can't read capabilities [ 282.468557][ T993] usb 5-1: USB disconnect, device number 15 [ 282.688109][T10253] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1781'. [ 282.739495][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.779485][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.477679][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 284.829490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.284486][T10294] netlink: 'syz.4.1799': attribute type 1 has an invalid length. [ 285.482515][T10294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.539766][T10297] bond2: (slave geneve2): making interface the new active one [ 285.544007][T10297] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 285.859531][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.414562][T10322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.899442][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.287990][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'. [ 287.939512][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.197482][T10373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.618089][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 288.645026][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.909225][T10393] syzkaller1: entered promiscuous mode [ 288.909255][T10393] syzkaller1: entered allmulticast mode [ 288.979662][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.029412][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.562695][T10449] batadv_slave_1: entered promiscuous mode [ 290.563807][T10445] batadv_slave_1: left promiscuous mode [ 291.059396][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 291.430337][T10473] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 291.702761][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 291.704732][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 292.099405][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.629537][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 292.629721][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'. [ 293.140376][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.251953][T10531] loop2: detected capacity change from 0 to 7 [ 293.412557][T10531] Dev loop2: unable to read RDB block 7 [ 293.412615][T10531] loop2: unable to read partition table [ 293.412839][T10531] loop2: partition table beyond EOD, truncated [ 293.412856][T10531] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 294.189385][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.512482][T10559] trusted_key: syz.1.1908 sent an empty control message without MSG_MORE. [ 295.145216][ T37] audit: type=1804 audit(1756429531.651:372): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1912" name="bus" dev="ramfs" ino=29144 res=1 errno=0 [ 295.224381][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.482105][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.597399][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.259468][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.640684][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 296.791353][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 296.793816][ T10] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 296.793840][ T10] usb 4-1: config 0 has no interface number 0 [ 296.793890][ T10] usb 4-1: config 0 interface 89 has no altsetting 0 [ 296.815648][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 296.815677][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.815694][ T10] usb 4-1: Product: syz [ 296.815706][ T10] usb 4-1: Manufacturer: syz [ 296.815718][ T10] usb 4-1: SerialNumber: syz [ 296.831210][ T10] usb 4-1: config 0 descriptor?? [ 296.845952][ T10] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 296.845983][ T10] em28xx 4-1:0.89: Video interface 89 found: bulk [ 297.309438][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.478544][ T10] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 297.664153][T10620] uprobe: syz.1.1935:10620 failed to unregister, leaking uprobe [ 297.911771][ T10] em28xx 4-1:0.89: AC97 command still being executed: not handled properly! [ 298.082736][ T10] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 298.082781][ T10] em28xx 4-1:0.89: board has no eeprom [ 298.149451][ T10] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 298.149490][ T10] em28xx 4-1:0.89: analog set to bulk mode. [ 298.152495][ T9] em28xx 4-1:0.89: Registering V4L2 extension [ 298.169208][ T10] usb 4-1: USB disconnect, device number 16 [ 298.173535][ T10] em28xx 4-1:0.89: Disconnecting em28xx [ 298.339404][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.342471][ T9] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 298.342493][ T9] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 298.342505][ T9] em28xx 4-1:0.89: No AC97 audio processor [ 298.393272][ T9] usb 4-1: Decoder not found [ 298.393290][ T9] em28xx 4-1:0.89: failed to create media graph [ 298.393343][ T9] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 298.454416][ T9] em28xx 4-1:0.89: Registering snapshot button... [ 298.465547][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input21 [ 298.488234][ T9] em28xx 4-1:0.89: Remote control support is not available for this card. [ 298.489137][ T10] em28xx 4-1:0.89: Closing input extension [ 298.497420][ T10] em28xx 4-1:0.89: Deregistering snapshot button [ 298.824517][ T10] em28xx 4-1:0.89: Freeing device [ 299.379612][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.017247][T10683] binder: 10681:10683 unknown command 0 [ 300.017268][T10683] binder: 10681:10683 ioctl c0306201 200000000640 returned -22 [ 300.306026][ T37] audit: type=1326 audit(1756429536.811:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.0.1951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a4b67ebe9 code=0x0 [ 300.419412][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.496556][T10693] syz.1.1964 (10693) used greatest stack depth: 18168 bytes left [ 301.459552][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.499395][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.149923][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 303.212456][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 303.270347][T10771] netlink: 'syz.3.2000': attribute type 10 has an invalid length. [ 303.408615][T10771] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 303.539398][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.589509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.488419][ T37] audit: type=1326 audit(1756429541.981:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10824 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc397ebe9 code=0x7fc00000 [ 305.619402][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.341254][ T37] audit: type=1326 audit(1756429542.851:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10824 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dc391ade9 code=0x7fc00000 [ 306.446232][T10846] loop2: detected capacity change from 0 to 7 [ 306.472075][T10846] Dev loop2: unable to read RDB block 7 [ 306.472135][T10846] loop2: unable to read partition table [ 306.472398][T10846] loop2: partition table beyond EOD, truncated [ 306.472414][T10846] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 306.659439][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.911916][T10857] syzkaller1: entered promiscuous mode [ 306.911943][T10857] syzkaller1: entered allmulticast mode [ 307.007668][T10864] fuse: root generation should be zero [ 307.230356][T10868] netlink: 'syz.4.2036': attribute type 10 has an invalid length. [ 307.230380][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2036'. [ 307.231275][T10870] netlink: 'syz.1.2038': attribute type 58 has an invalid length. [ 307.330641][T10868] dummy0: entered promiscuous mode [ 307.333902][T10868] bridge0: port 3(dummy0) entered blocking state [ 307.334114][T10868] bridge0: port 3(dummy0) entered disabled state [ 307.334239][T10868] dummy0: entered allmulticast mode [ 307.336618][T10868] bridge0: port 3(dummy0) entered blocking state [ 307.336709][T10868] bridge0: port 3(dummy0) entered forwarding state [ 307.699511][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.951143][T10891] sctp: [Deprecated]: syz.2.2048 (pid 10891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.951143][T10891] Use struct sctp_sack_info instead [ 308.675298][T10913] bridge0: port 3(syz_tun) entered blocking state [ 308.677739][T10913] bridge0: port 3(syz_tun) entered disabled state [ 308.677961][T10913] syz_tun: entered allmulticast mode [ 308.684668][T10913] syz_tun: entered promiscuous mode [ 308.695601][T10913] bridge0: port 3(syz_tun) entered blocking state [ 308.695778][T10913] bridge0: port 3(syz_tun) entered forwarding state [ 308.739417][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.199086][T10926] netlink: 'syz.1.2061': attribute type 1 has an invalid length. [ 309.429249][T10926] bond3: (slave bridge1): making interface the new active one [ 309.454298][T10926] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 309.673721][T10940] 9pnet_fd: Insufficient options for proto=fd [ 309.779419][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.819413][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.859521][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.944053][T11002] overlayfs: failed to clone upperpath [ 312.899403][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.178120][T11023] netlink: 'syz.0.2097': attribute type 10 has an invalid length. [ 313.221021][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.222055][T11023] bridge_slave_1: left allmulticast mode [ 313.222081][T11023] bridge_slave_1: left promiscuous mode [ 313.222360][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.318124][T11023] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 313.608548][T11037] veth0: entered promiscuous mode [ 313.614812][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 313.783571][T11045] netlink: 'syz.1.2107': attribute type 10 has an invalid length. [ 313.939391][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.976824][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.185178][T11042] bridge_slave_0: left allmulticast mode [ 314.185210][T11042] bridge_slave_0: left promiscuous mode [ 314.185631][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.282122][T11042] bridge_slave_1: left allmulticast mode [ 314.282153][T11042] bridge_slave_1: left promiscuous mode [ 314.282388][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.410502][T11042] bond0: (slave bond_slave_0): Releasing backup interface [ 314.551002][T11042] bond0: (slave bond_slave_1): Releasing backup interface [ 314.765752][T11042] team0: Port device team_slave_0 removed [ 314.869438][T11078] overlayfs: failed to clone upperpath [ 314.889055][T11042] team0: Port device team_slave_1 removed [ 314.900653][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.900686][T11042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.970325][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.970358][T11042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.979422][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.180311][T11042] bond1: (slave ip6gretap1): Releasing active interface [ 315.319884][T11042] bond3: (slave bridge1): Releasing active interface [ 315.506275][T11045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.508383][T11045] team0: Port device bond0 added [ 316.019387][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.799425][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 316.959404][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 316.962223][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.962251][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.962287][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 316.962307][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.972546][ T10] usb 4-1: config 0 descriptor?? [ 317.059381][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 317.145920][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.148516][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.421858][ T10] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 317.677947][ T10] usb 4-1: USB disconnect, device number 17 [ 317.737507][T11143] netlink: 'syz.1.2149': attribute type 15 has an invalid length. [ 317.875907][T11147] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 318.023334][T11156] openvswitch: netlink: IPv4 tun info is not correct [ 318.099543][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 318.158881][T11161] overlayfs: failed to clone upperpath [ 318.223129][T11163] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2159'. [ 318.240928][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 318.656682][T11183] tipc: Failed to remove unknown binding: 66,1,1/0:2080200973/2080200975 [ 318.656720][T11183] tipc: Failed to remove unknown binding: 66,1,1/0:2080200973/2080200975 [ 319.139393][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.270863][T11207] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2178'. [ 319.539037][T11218] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 319.629540][ T1700] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 319.718393][T11218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.798416][ T1700] usb 4-1: Using ep0 maxpacket: 16 [ 319.809843][ T1700] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 319.809871][ T1700] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 319.809895][ T1700] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 319.809919][ T1700] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.815207][ T1700] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 319.815234][ T1700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.815251][ T1700] usb 4-1: Product: syz [ 319.815263][ T1700] usb 4-1: Manufacturer: syz [ 319.815359][ T1700] usb 4-1: SerialNumber: syz [ 319.900235][ T1700] usb 4-1: config 0 descriptor?? [ 320.160340][ T1700] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 320.189394][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.407254][ T9] usb 4-1: USB disconnect, device number 18 [ 320.415310][T11212] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 320.442389][ T5191] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 320.642171][T11234] netlink: 'syz.2.2187': attribute type 2 has an invalid length. [ 320.642192][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'. [ 321.229380][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 321.916509][T11261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 322.032857][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 322.077875][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 322.096410][ T67] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.111466][ T67] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.111512][ T67] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.111546][ T67] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.265978][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 322.316022][T11271] bridge0: entered allmulticast mode [ 322.352816][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 322.352909][T11271] dummy0: left allmulticast mode [ 322.353176][T11271] bridge0: port 3(dummy0) entered disabled state [ 322.476624][T11271] bridge_slave_1: left allmulticast mode [ 322.476655][T11271] bridge_slave_1: left promiscuous mode [ 322.477854][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.555460][T11271] bridge_slave_0: left allmulticast mode [ 322.555490][T11271] bridge_slave_0: left promiscuous mode [ 322.555745][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.684248][T11271] bridge0 (unregistering): left allmulticast mode [ 322.789851][T11277] tipc: Cannot configure node identity twice [ 322.955250][T11283] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 323.021670][T11279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2206'. [ 323.021915][T11281] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 323.021930][T11281] netlink: 'syz.0.2207': attribute type 2 has an invalid length. [ 323.021942][T11281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2207'. [ 323.074062][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 323.084420][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 323.299651][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 323.376965][T11297] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 323.376988][T11297] netlink: 'syz.0.2215': attribute type 4 has an invalid length. [ 323.377000][T11297] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2215'. [ 323.515817][T11301] loop2: detected capacity change from 0 to 7 [ 323.530918][T11301] Dev loop2: unable to read RDB block 7 [ 323.530968][T11301] loop2: unable to read partition table [ 323.531184][T11301] loop2: partition table beyond EOD, truncated [ 323.531202][T11301] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 324.339387][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.379482][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.419390][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.488537][T11394] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 327.140913][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2268'. [ 327.459516][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 328.329469][ T1700] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 328.481759][ T1700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.484088][ T1700] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.484114][ T1700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.484132][ T1700] usb 5-1: Product: syz [ 328.484144][ T1700] usb 5-1: Manufacturer: syz [ 328.484157][ T1700] usb 5-1: SerialNumber: syz [ 328.499624][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.095692][ T1700] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 329.095916][ T1700] cdc_ncm 5-1:1.0: bind() failure [ 329.136049][ T1700] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 329.136095][ T1700] cdc_ncm 5-1:1.1: bind() failure [ 329.172313][ T1700] usb 5-1: USB disconnect, device number 16 [ 329.539456][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.662315][ T37] audit: type=1800 audit(1756429566.151:376): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2299" name="nullb0" dev="tmpfs" ino=2869 res=0 errno=0 [ 330.121998][T11514] syzkaller1: entered promiscuous mode [ 330.122026][T11514] syzkaller1: entered allmulticast mode [ 330.588675][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 330.928557][T11525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2308'. [ 331.255523][T11535] tipc: Failed to remove unknown binding: 66,3,3/2886997162:4098205702/4098205703 [ 331.619513][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 331.696956][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2318'. [ 331.757766][T11547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.169203][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 332.659368][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 333.701132][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 333.849148][T11619] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2350'. [ 334.095718][T11624] overlayfs: failed to clone upperpath [ 334.739392][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.489455][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 335.639515][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 335.644780][ T9] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.644810][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 335.644843][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 335.644863][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.693711][ T9] usb 4-1: config 0 descriptor?? [ 335.789384][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 336.214024][T11650] overlayfs: failed to clone upperpath [ 336.319870][ T9] usb 4-1: USB disconnect, device number 19 [ 336.340824][ C0] ------------[ cut here ]------------ [ 336.340846][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 336.340884][ C0] Modules linked in: [ 336.340921][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 336.340947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.340964][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 336.340985][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 336.341003][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 336.341021][ C0] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 336.341037][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 336.341050][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 336.341064][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000007 [ 336.341079][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888029267268 [ 336.341094][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 336.341113][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.341128][ C0] CR2: 000000110c40a0b3 CR3: 000000002746e000 CR4: 00000000003526f0 [ 336.341147][ C0] Call Trace: [ 336.341155][ C0] [ 336.341182][ C0] ? __pfx_est_timer+0x10/0x10 [ 336.341221][ C0] call_timer_fn+0x17b/0x5f0 [ 336.341250][ C0] ? __pfx_est_timer+0x10/0x10 [ 336.341272][ C0] ? call_timer_fn+0xbe/0x5f0 [ 336.341299][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 336.341338][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.341365][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.341389][ C0] ? __pfx_est_timer+0x10/0x10 [ 336.341415][ C0] __run_timer_base+0x648/0x970 [ 336.341458][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 336.341506][ C0] run_timer_softirq+0xb7/0x180 [ 336.341533][ C0] handle_softirqs+0x22c/0x710 [ 336.341573][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 336.341613][ C0] run_ktimerd+0xcf/0x190 [ 336.341642][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 336.341668][ C0] ? schedule+0x91/0x360 [ 336.341708][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 336.341733][ C0] smpboot_thread_fn+0x542/0xa60 [ 336.341762][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 336.341800][ C0] kthread+0x711/0x8a0 [ 336.341835][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 336.341861][ C0] ? __pfx_kthread+0x10/0x10 [ 336.341898][ C0] ? __pfx_kthread+0x10/0x10 [ 336.341929][ C0] ret_from_fork+0x3fc/0x770 [ 336.341960][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 336.341995][ C0] ? __switch_to_asm+0x39/0x70 [ 336.342015][ C0] ? __switch_to_asm+0x33/0x70 [ 336.342034][ C0] ? __pfx_kthread+0x10/0x10 [ 336.342066][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.342106][ C0] [ 336.342116][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 336.342132][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 336.342155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.342166][ C0] Call Trace: [ 336.342174][ C0] [ 336.342183][ C0] dump_stack_lvl+0x99/0x250 [ 336.342213][ C0] ? __asan_memcpy+0x40/0x70 [ 336.342237][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.342267][ C0] ? __pfx__printk+0x10/0x10 [ 336.342307][ C0] vpanic+0x281/0x750 [ 336.342337][ C0] ? __pfx__printk+0x10/0x10 [ 336.342358][ C0] ? __pfx_vpanic+0x10/0x10 [ 336.342384][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 336.342425][ C0] panic+0xb9/0xc0 [ 336.342453][ C0] ? __pfx_panic+0x10/0x10 [ 336.342501][ C0] __warn+0x31b/0x4b0 [ 336.342528][ C0] ? est_timer+0x6dc/0x9f0 [ 336.342554][ C0] ? est_timer+0x6dc/0x9f0 [ 336.342576][ C0] report_bug+0x2be/0x4f0 [ 336.342601][ C0] ? est_timer+0x6dc/0x9f0 [ 336.342624][ C0] ? est_timer+0x6dc/0x9f0 [ 336.342646][ C0] ? est_timer+0x6de/0x9f0 [ 336.342667][ C0] handle_bug+0x84/0x160 [ 336.342704][ C0] exc_invalid_op+0x1a/0x50 [ 336.342733][ C0] asm_exc_invalid_op+0x1a/0x20 [ 336.342754][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 336.342777][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 336.342796][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 336.342814][ C0] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 336.342831][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 336.342845][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 336.342860][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000007 [ 336.342875][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888029267268 [ 336.342901][ C0] ? est_timer+0x6db/0x9f0 [ 336.342949][ C0] ? __pfx_est_timer+0x10/0x10 [ 336.342986][ C0] call_timer_fn+0x17b/0x5f0 [ 336.343013][ C0] ? __pfx_est_timer+0x10/0x10 [ 336.343034][ C0] ? call_timer_fn+0xbe/0x5f0 [ 336.343061][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 336.343100][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.343126][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.343150][ C0] ? __pfx_est_timer+0x10/0x10 [ 336.343176][ C0] __run_timer_base+0x648/0x970 [ 336.343221][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 336.343265][ C0] run_timer_softirq+0xb7/0x180 [ 336.343292][ C0] handle_softirqs+0x22c/0x710 [ 336.343330][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 336.343370][ C0] run_ktimerd+0xcf/0x190 [ 336.343398][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 336.343424][ C0] ? schedule+0x91/0x360 [ 336.343459][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 336.343483][ C0] smpboot_thread_fn+0x542/0xa60 [ 336.343511][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 336.343548][ C0] kthread+0x711/0x8a0 [ 336.343582][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 336.343608][ C0] ? __pfx_kthread+0x10/0x10 [ 336.343646][ C0] ? __pfx_kthread+0x10/0x10 [ 336.343678][ C0] ret_from_fork+0x3fc/0x770 [ 336.343715][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 336.343750][ C0] ? __switch_to_asm+0x39/0x70 [ 336.343769][ C0] ? __switch_to_asm+0x33/0x70 [ 336.343788][ C0] ? __pfx_kthread+0x10/0x10 [ 336.343820][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.343862][ C0] [ 336.344130][ C0] Kernel Offset: disabled