last executing test programs: 6.896235413s ago: executing program 2 (id=831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x30) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {}, {}, 0x183639ee, 0x10001}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000019200)={'macsec0\x00', @local}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007ff00080900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000008b0c000400000000000000700008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) socket(0x2, 0x80805, 0x0) 6.505382383s ago: executing program 3 (id=833): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x30, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x400000, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 6.299321128s ago: executing program 3 (id=835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') 4.248899128s ago: executing program 3 (id=846): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) 4.146740705s ago: executing program 3 (id=847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0xfffffff, 0x4) 3.896766306s ago: executing program 3 (id=850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') 3.760444367s ago: executing program 0 (id=851): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fd6bd3823fedd2c01b17ff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a843fe07acbae2ab0b233d00", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 3.529582692s ago: executing program 0 (id=854): r0 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0xffffffffdfffffff, 0x3, 0x1000000, 0x999, 0x400, 0x803, {0x6, 0x8000000000000002, 0xfffffffffffffff8, 0xfe2b260, 0x8, 0x800000000000, 0x2, 0x4, 0x3, 0x4000, 0x7, 0x0, 0x0, 0x1, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.184059414s ago: executing program 2 (id=857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x202000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000001240)={0x401, 0xfffffffc, 0x1000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70ad2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) fanotify_init(0x10, 0x800) dup2(r8, r7) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r10, &(0x7f0000000380)='./cgroup\x00', r10, &(0x7f00000003c0)='./mnt\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4", 0x20}, {&(0x7f0000000440)="a51b5c51033729b183048a478bb2a497a5d553a2d1107c553f14", 0x1a}], 0x2}, 0x84) 2.914993382s ago: executing program 0 (id=860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 2.655429672s ago: executing program 0 (id=864): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 2.413586453s ago: executing program 0 (id=865): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 2.067324775s ago: executing program 0 (id=866): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000680)={0x2, 'virt_wifi0\x00', {0xff}, 0x2f97}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000031a00030014000200fc020000000000000000000000000001080017004e234e231400010020010000000000000000000000000001a4c42b01ab074afa174282d70aac6e59a46cf0d08b9535cba053165c969be9b1a9be48f3619e22cd926e14e2bdbd0dbc3388c54343ff6e8d0f8c81"], 0x4c}}, 0x40000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r9, 0x0, 0x1004000, 0x0, 0x0}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f00000002c0)={0x800}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0xc4, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x98, 0x8, "2a568c5c06f3dfe356c1595f2c6ce1a090b9dd3bf4f5373298041c836d6a6b52c8cec2b80c4ce251873ee7f5cf1a7417dc0eae7e340bb059560dd943dac8ee64fcfa0223a0e8e112066adf0c268195b2013c2dc9fdc108478d563729a88ee5e27b91fe0d34f55a1ba1e7d235dc3f748cf76580e8edf4a29f1bfd30f907c3456fe916e05f7499cfd3154fda1fea9cf619bac723d5"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x4048041}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)) socket$can_bcm(0x1d, 0x2, 0x2) 2.050259335s ago: executing program 3 (id=867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x30) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {}, {}, 0x183639ee, 0x10001}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000019200)={'macsec0\x00', @local}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007ff00080900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000008b0c000400000000000000700008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) socket(0x2, 0x80805, 0x0) 1.628120842s ago: executing program 4 (id=868): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000014c0)="1f3412540b07f3cdec99742adc4ef49b4b48c9f8cd2e1e4463e728e1988258dc652499740bfa6909abd4c6859d408c9b33961ca591aabb90932fed4560d718b8cfe1e69fd5345bd461231151c54dc84788a6a368de065fcebd0e52594de1d1157a16c990fc92c73cc2d71a0504e1090e07f8fdd2e01c08b70edf29da071fea53553e3ca545e58ffb93d1e0add7b9aaf538a2f24b0602127e6a04a10908352cdd606d1ff63516c002737c89ef8e1e4bf632538e6f5dae58124ced2cbc708926b824609bca395a26a36682e289daa73a465b33a4833d2f0e6108a7ef9b28d4377414c36637fb298120c60575bcbd3b5f2a63c43f90acc5b17d4d18911e1636ab1a5e00119c15f98e93b7da204d5328b50a8713914c033357678aa8e361b262eedba5e3ab971ff246d7e45dd67a432196fdb4408e021b68e270347ae8788dbfd9e5f7328b03b68a9e8b68af8a37007a955de171bd0e5cc8076f2cf18b56ef911d9539ef54902228ceedbb6af33268e0f53e65ea7fbc3ab395650323a4580872f11d01dfec58c84f4332acbc2459f530b54785c704ecf9644ca2b0e5cdffcc951ee9512555b2dda142b9f7ede07ffc1a9270e2784e423df923755ef9324b2da26eb2f1f14283b085552554b88c1981f5a310b1c71c81c476de14fc985ab7863807793fd43fda5dbe6c832dd36485e914fe0cfcdf32ee26d032c3d6d3aa9ba8e042c5aee734a95bbe8a5395cfed77e234c8b78dc67e82da2583b659fcc2bdf3b8c3e548b06268ab8eeac09c5f66d4b17886c26ba505ce5a8a70f9a2958fb62e49f93cadb2294b35c449c1d9c4e6d5ea5097ca40b84b7ca43a4b44c9a6bd708cd3ddb492f3c6c9165095f409a11b67a5e42c69de03e822be406d31d4e34c8cb5c1bc5b63ff5e8bb7a3bc403ac9a94299950d25b31e847d0283dfd662990285310de884296c66d9215538adc6c237934c94dca690f48d34b83d70ffc849462d61ce2f0d87ab094ad40436e64c79fe362d36b175aaefc3229fb93c64047e9293396b48f94fed6d6266537272e5dc453270312e3f1c312046dc6f3cd788cfdd6cba16f25f791bd56704e7d3a63f60c339baf4d675193d569257b4d0d740c28c5e0108eded172990b8dc01c9ea383b869d652efe1e19ec33a098b9f0f2688bfa8ea8e8ec9b85d1dc00f8dbab36fe17524cf28e745d01ed42d611e74196d96be2fd0c966af5ca5255607633ce031feaf3109841de65c82440cafc6db7209cec02cec993bfd24c899a07140518518faa5d8fad4cbf709bf20179f39914f1bb22423702727a05573e213b08a10e4886ecd002ffc66bcaf5e67ac3a129c4659e51182624692a1595e585af5c872a2c69bb7caf0d560d95f7066843fe6a693a0af1d107a91f53b35597478c72e2ebe82028d787c3eeb3cdc054da66c6b2f62258b3db11c78e1b7f6471e4fde81e2934c5684fda874d87d4d7c85d1261285c329f72acf0dc28a6c8675bc00717add9248fccdb0d53a5199fb434aa552fbb15c58293f30dd56ca73ef359c6915f053c1ec5cc11e4a2a7f4e87ab7c003d12a9e8209a9b3fb2d3553234436969d949b3ad766c7e2c531d44ef7bc49d43086f9ea27ffe1a7e6c95c2726152b8ceb58e72d547f03c0b34650552b785258f59285febae71f618cd9a6896c22c53d373e3c5bedb6a2f82d87993dbabda2bbc67653e5d8ee445d5cd6dd7bfdbebbb09113371dce06bab8bd0a50d208197d0743f0cab9ff0fb5473270c9b1709455921fe6bbaba404b4336b9cb74406d1da144a0f52b94d8123ae0895ac72dc3a262efbbbff60bce48f4627a5a334ab74f2a59c3b581ef17d0b95b0a8b75a0e80e1133216980ea8ab9ea9d9268d9e51b72b7e60c15311dda3226015799c9e688d229710a8a12efba2c7c6633e03abc370139fa3019cddc5eda338cbfa95066e034f1fc5eaa5d0dee2cce26eef04aa6c609bc8ed5264737b99f225e4cd1fc166214d02b1314fe42263867e0d15c77b401248cb25a549d996e07a91699b33ebdafd555350d03ebbfdd2396c541b4d038a5a659c4e1e80d23458999f04c3f18f070c120331f9445605c2e254f69eb4424321ff85adfecb57b9ba08898251ca231f92b4851c48081c49aa6d45f47e2f3a4d6296cf85b9faac66c646eb36de16bc9c45f3151ceb1e9a403a5225aece017668c3b5e9d0258064ff0dfdb66a90d0b9ca90f9a10223668487acf9baa307b54c5115e824119c80d219997da553f97a41f4e8ffb7f043ad3c32067aaa23032c6a5ebd67885dc39ec386af7dd98df259831035541187c22ad0a22d3d7dc0188269de37616280ee46d770508ebdbe9795cc12c820a2e09b2b89034875ff7889e6be769acca2316c461566b656935479bc066e99d9da2a2ae2689f62f15e3410901b6592be58257a6ec0c4a686349a896e7047c1f00230ea595738fc3b5ed1d911e94b51e1428a2be46c56e76ac91d52c6da576faeeade942c1fd7bd7bbbcfd2a6f69b71eaa918a146c203680bfa1e9b079c5d13a0cd0ec115e86309be7372cf1cd17a3f00b98c70d1f7898498affb8b49fe34247346fd08424e6ab9c6bbc0bb63d8d248973d91cddd65943df42b2b6cb926e1a7a7080bcc4724d6cdcde9410a3d8012cefc49c742fdfabe55b4823fcf7609a485eb63445d235ba816f5a57f312704f803dbf04ce0e01b4dadc2ed25777290e9bf4a937919fdef820ef968e44c36e6843d46816434ac092c25a88a7915284f4b9931dd4bd29a42b82e7cbad15725807681397ddbc607a756429bbc59c917ff1fb5b18443ca4b4ca39188f4249e34dbd1e38ade55955ed5f12b211f2bf19b770a98539273da0f06d0dc6678dee5cd06eda03ad490286dc2ff514ee45702be81f4f0c53a79565c44953dd55f156c9e92f6c2afefec8e944a40fca8c337645f23de8c4231b3d1c6d6ba6bd98e4dafcd8d2033aa2144c860fc097242480c8bde826a86cdb4859ae9260f0283e9aa5aa7068977772dc20679adeb1db803c758c7d9c606e41935e5dd3d35107a62514045dfcd596fbc88c5c22369a5cc60354feaf195f2a4dd14b26468c8476866f4dbc4c4a6d2e45c2ffaeb1689ffb34c615e8d2acf83f436c41170de10a7d0cc8ea67f870cb3218fa0e99621f135080aac2bdb36b5ca93c03f0597a9d493bf5bd5dc33f536801832728aa1bc9d314e478cb96b46a3f1856a79801e611d672b9aa912af1212d63a84ffbaef76bd266fbaf19beb3ba0c67a65fe72900d24f1b083f5e71e2413b249eab5e81721ea1b726fe984dde653e6c5e0da46e6cd467b5a7a9d484daa74bfcfcc5c973d1dbe2535f6e0138a25fccf1e89b570e737b9842e121bb3827af45430e656cc5ded8f1bfca184b1f704192a4485efd7eedcb7aa902bd3e32a4119c6bf708906dd66c2cdc075ee9b3f7a03419f6cc4ca142ddd2f608d1b9928bd392d2f36aaf218f9a6bc7393d3ae02a56c4ddaf029771fc1e356e9f5579fdfa0f8cbcdbb79c20c2f33c5290f9b04af230df81666edc4453e37e7da873bd330d33990bbdfa02020e5579780e5d2486c1cb58014924b707924ca979a3393c2a0ef83ea73ea9f258a4b87c6f2a4afd261fbab44b385579afda8a43ae04112171b62bdd943562c0619e650bfae0a4c0ce63edac5378db40035bab37210960d1d5faec9dec51a75381bd7f8679b866b38c05743c85143a76c9e0df9249d13dcae1a77c637a3aeb12333e78907698515d934766bba8fa93cb310f22a647b120e2343edc6c919301383212fd85f6ec88f320709ce5bf8724150dd97d29b5c0d25bc2860adae62e33524c71d9f20786c18fa1c934407e1b4d0941827fb29a61dee7ab48b1ce37b9cf7a2250ade9c5ab04e1e78a5a6dde502a156ff4140ad287b50e1e37c7d7cb59f2bafe7aee3034710d725c5c5c5de6ed0920588e82cc0fd75c1970c13ef9add438c368603247ee4fb9120ec6f73772038fb0f039bf25792804a2e596eaecdd4546fedbbeeddad448d6ded4ed12c509a825bc3afee79101b83e67f021dbff2f8aa1756bcd2ec02ba9c50796402a04f493e9b949a393f230145981a4bd32e7e4c51fe96e25b3469de8faec8eabb3d419da221423058d93a8b5e6d34fd4828b5a4449154d5fa0d9dd46496eb0996d48ba9f477f95167aa33d90b11dcdd7cc89e2855097f6d9bbc07923d21afe12530cc3717541c5c80a1ce32931f9a7511e874ee37812d81a743f8cb2acfe57fceb561686a73e57fdcb56fc72e947960916b654e6e097ebdc10f00231616905be7be1ce9796a3fdcc4de439063aaffe2fff2f41519c2aafe2fa5a054d023c33c7861c98b06bbabf86a5a0d743c9a70c1e53b41339afa073e37601c672d85f9526667c534c118b52cf3d5b8347f619dc08762e8303aa37ca80786faf5eecb539cb79dd384431a917b876a86354d5ef069e7ed1339e86325e022ff31c7b117f916f617e204a3ebfb3e879515aaf1a6ca2aa8948197c9a83a2981178744d76a5472d70e60425945c60e886d1d33e282f59ad27599a61f2d92d149cf45b94543d13420441ae1cfc1a78d67bf591b6eeb3b26a85cd47ae93a8804e5880a54486d5411e0cb771d2bea9220ac0cbe0ad94d12d34598cf927cee9514583b233757619c822eed64d890bfe615905d6b0d48d23ff0099520001e9e315d7ce456b0a95ec6922707d4a9e6addbd2fa584bbe424bd84e595cdc6682a9e0b5d706b5bec35b131667c32043d4f0f9497ee58897b70f6976cfe31c64607100630ff71dc90ca526628666d1b8c2402c65d5c78370b785d8668c527b17107aa0949f064e82c66e4a5fdd5f0d4b35f767c1d27a92b212e07168c5c4ec367491a6ea1c34d9a217def49c57f82f04f28d5829a391330b2b576d7131ca060a5ab00299fa8b27b9835be6f83a22bed841b4c7cc106dd18b515f8ea5639e906bdf66a403c1d09ee9ca37d6f664e9fa769b2c6be0dd201369c17c6a9c3a956fbbaf7fbf8d2d49e122a1c557a9a7d141c409763ffcbf8b152e49333e184bcc16b9e10f2c82d298efa92ef8b46420d5cd38553bfab1ff4b17e9d044d3d77b9bf50b2b142f8315f223768d28caa704bac546d96829bc6b47cee3533dbba582cd118e4c53aebb597e089fad486b5035eccc96cfa04dc541538880730b8826557a7bea7b6d3e5b0a761b54947ac251c755dd81d2bc730beead7a8a1d372f309a1e93a8453d369f21efe1c0370c32d7cf8af8ad4f29bd9abfd5695903b59f7cff3f2869a76e3660af9e8721d77ef4250f054e4a24eb2b890380c0751874c4cee54e5ba63c6794eacb423582a24b7685bd45a33456dba52b98d67b8f8f95617e8be580c31fd655ecf86564ebd415ef42ab9ad8c900768d48fa4b7dc3a4975f291e417761f19c4889cb05455a721a685f5d65aee67b899c93422cb35e946a1f5cc1f550b672dd3fe03a0a9f60572455b4a2f2b920f6bd34db8fd3fdfdc39ffb103fd44d41356e7d81f88e7f2544efbfea93e6a5a14e33693e18c58c5172ed3874e655edeb3400fdcaa9980331de399eaf2d29246298563f39b456345e9f6cc91bada3bb5f2bb2724b12a36b3ee5314e97f3ba6167983f87b584aa8699cfa08302bbebef581e4f8dcc91dd9e75fe2a1825e3d0f8eba9d3d40b28330e3ea7afe580778a1c5fc5c580cb8f520387e363d3a12ef39a909ea32867645ef4476213b33b49a97c17c5fdc5c2607279936e8431b876bae9735178fff97d2b708f434187210cb1a4327a020f88d32205001e8b8f994bdc", 0x1000}, {&(0x7f0000000000)="b96858", 0x3}], 0x2, 0x0, 0x0, 0x24008005}], 0x1, 0x24004001) 1.561413328s ago: executing program 4 (id=869): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) close_range(r0, r0, 0x0) 1.506114064s ago: executing program 2 (id=870): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}}, 0x4) 1.493316574s ago: executing program 4 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x2, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 1.35062234s ago: executing program 4 (id=872): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x6, 0x6}}}}]}, 0x48}}, 0x0) 1.226365462s ago: executing program 2 (id=873): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000d00)='//_:e\xa4/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\xa5\x94\x0e\x0et\x8d@\xdc\x03+\xcf\xbf\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x29}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 865.87024ms ago: executing program 1 (id=877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x40) 728.148362ms ago: executing program 2 (id=878): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x9, 0x4, 0xffffffff, 0x6, 0x20008, 0x7, 0x9, r1}, 0x20) 723.376776ms ago: executing program 4 (id=879): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff5000/0x4000)=nil, 0x4000}, 0x1}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000002, 0x0, 0xd}]}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r7 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x10}) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x1e, 0x4, 0x0) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r12 = dup3(r11, r10, 0x0) recvmmsg$unix(r12, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x4, 0x58ca2280, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r13, 0xffffffffffffffff, 0x0) 631.642661ms ago: executing program 1 (id=880): syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 598.367486ms ago: executing program 2 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x202000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000001240)={0x401, 0xfffffffc, 0x1000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70ad2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) fanotify_init(0x10, 0x800) dup2(r8, r7) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r10, &(0x7f0000000380)='./cgroup\x00', r10, &(0x7f00000003c0)='./mnt\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4", 0x20}, {&(0x7f0000000440)="a51b5c51033729b183048a478bb2a497a5d553a2d1107c553f14", 0x1a}], 0x2}, 0x84) 261.13779ms ago: executing program 1 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 0s ago: executing program 1 (id=883): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) kernel console output (not intermixed with test programs): 748578][ T6810] kAFS: unable to lookup cell 'ÿ' [ 137.859747][ T5939] usb 2-1: USB disconnect, device number 8 [ 138.085593][ T6817] netlink: 104 bytes leftover after parsing attributes in process `syz.0.266'. [ 138.726760][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.732898][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.745701][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.813388][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.813398][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.114158][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 139.127206][ T5939] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.157789][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.291687][ T5939] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.307146][ T5939] usb 2-1: config 0 has no interface number 0 [ 139.336276][ T5939] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 139.368244][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.394636][ T5939] usb 2-1: Product: syz [ 139.415522][ T5939] usb 2-1: Manufacturer: syz [ 139.431591][ T5939] usb 2-1: SerialNumber: syz [ 139.457656][ T5939] usb 2-1: config 0 descriptor?? [ 139.691224][ T5939] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 139.743689][ T5939] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.772238][ T5939] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 139.791945][ T6838] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.793047][ T5939] usb 2-1: media controller created [ 139.868312][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.969997][ T5939] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 139.980835][ T6841] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 140.015550][ T6841] netlink: 'syz.2.276': attribute type 2 has an invalid length. [ 140.036394][ T6841] netlink: 252 bytes leftover after parsing attributes in process `syz.2.276'. [ 140.053335][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.108292][ T5939] usb 2-1: USB disconnect, device number 9 [ 140.667523][ T6856] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 140.778618][ T6862] loop8: detected capacity change from 0 to 8 [ 140.818898][ T6860] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 140.837295][ T6862] Dev loop8: unable to read RDB block 8 [ 140.860534][ T6862] loop8: unable to read partition table [ 140.870171][ T6862] loop8: partition table beyond EOD, truncated [ 140.878081][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 140.894908][ T6862] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 140.899137][ T6860] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 141.138715][ T6870] netlink: 200 bytes leftover after parsing attributes in process `syz.4.284'. [ 141.173043][ T6864] team0 (unregistering): Port device team_slave_0 removed [ 141.203520][ T6864] team0 (unregistering): Port device team_slave_1 removed [ 141.249302][ T6856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.264436][ T6871] macvlan2: entered promiscuous mode [ 141.277827][ T6871] macvlan2: entered allmulticast mode [ 141.287605][ T6871] bond1: entered promiscuous mode [ 141.295827][ T6871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.298339][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 141.320636][ T6871] bond1: left promiscuous mode [ 141.357053][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.539699][ T6876] fido_id[6876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.636792][ T5909] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 144.901115][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.940492][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.005737][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.022757][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.048704][ T5909] usb 2-1: Product: syz [ 145.061324][ T5909] usb 2-1: Manufacturer: syz [ 145.066578][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.083854][ T5909] usb 2-1: SerialNumber: syz [ 145.228864][ T5894] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.261815][ T5894] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.272341][ T5894] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.281718][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.299145][ T6964] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 145.312943][ T5909] usb 2-1: 0:2 : does not exist [ 145.329349][ T5909] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 145.396608][ T5895] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.449578][ T5909] usb 2-1: USB disconnect, device number 10 [ 145.456121][ T5894] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.568286][ T5895] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.588592][ T5895] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.636246][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.655644][ T5895] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 145.690044][ T5894] usb 1-1: USB disconnect, device number 7 [ 145.698449][ T5895] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 145.716271][ T5895] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.732060][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.786960][ T5895] usb 3-1: Product: syz [ 145.794283][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.822436][ T5895] usb 3-1: Manufacturer: syz [ 145.850526][ T5895] cdc_wdm 3-1:1.0: skipping garbage [ 145.859734][ T5895] cdc_wdm 3-1:1.0: skipping garbage [ 145.910432][ T5895] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 145.921835][ T5895] cdc_wdm 3-1:1.0: Unknown control protocol [ 146.107699][ T6981] netlink: 104 bytes leftover after parsing attributes in process `syz.4.326'. [ 146.148393][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 146.427007][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.626665][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 146.654487][ T6991] loop5: detected capacity change from 0 to 4096 [ 146.742965][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.759647][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 146.813542][ T10] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 146.823754][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.848621][ T5939] usb 3-1: USB disconnect, device number 6 [ 146.906168][ T10] usb 4-1: Product: syz [ 146.921755][ T10] usb 4-1: Manufacturer: syz [ 146.944541][ T10] usb 4-1: SerialNumber: syz [ 146.975460][ T10] usb 4-1: config 0 descriptor?? [ 147.052342][ T10] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 147.426596][ T5909] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 147.648201][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.671512][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 147.701123][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.874263][ T5909] usb 2-1: config 0 descriptor?? [ 148.964225][ T5909] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 149.182654][ T5894] usb 2-1: USB disconnect, device number 11 [ 149.303227][ T7021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.946303][ T5909] usb 4-1: USB disconnect, device number 9 [ 149.956570][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.122573][ T5894] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 150.154416][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.200594][ T5894] usb 5-1: Product: syz [ 150.206733][ T5894] usb 5-1: Manufacturer: syz [ 150.211369][ T5894] usb 5-1: SerialNumber: syz [ 150.219012][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 150.229008][ T5894] usb 5-1: config 0 descriptor?? [ 150.266076][ T7039] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.347824][ T7043] erspan0: entered promiscuous mode [ 150.353565][ T7043] macvtap1: entered promiscuous mode [ 150.374166][ T7043] macvtap1: entered allmulticast mode [ 150.404058][ T7043] erspan0: entered allmulticast mode [ 150.409953][ T5909] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.462849][ T29] audit: type=1326 audit(1771651780.481:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadb3f9c629 code=0x0 [ 150.567444][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 150.590715][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.607854][ T5909] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 150.625213][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.652213][ T7046] erspan0: left allmulticast mode [ 150.667944][ T5894] usb 5-1: Firmware: major: 14, minor: 16, hardware type: UNKNOWN (232) [ 150.677503][ T7046] erspan0: left promiscuous mode [ 150.700308][ T5909] usb 4-1: config 0 descriptor?? [ 150.885660][ T5894] usb 5-1: Read permanent extended address 00:00:00:00:00:00:00:d1 from device [ 150.910018][ T5894] usb 5-1: atusb_probe: initialization failed, error = -524 [ 150.922505][ T5894] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 151.134139][ T5909] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 151.150668][ T5909] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 151.183202][ T5895] usb 5-1: USB disconnect, device number 6 [ 151.199973][ T5909] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 151.216574][ T5909] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 151.228683][ T5909] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 151.315396][ T5909] cm6533_jd 0003:0D8C:0022.0006: hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 151.442814][ T5909] usb 4-1: USB disconnect, device number 10 [ 151.521020][ T7057] fido_id[7057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 152.006195][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.355'. [ 152.200599][ T7070] batadv_slave_1: entered promiscuous mode [ 152.250003][ T7069] batadv_slave_1: left promiscuous mode [ 153.067654][ T7081] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 153.143107][ T7059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.666695][ T5939] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.829513][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.876608][ T5939] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 153.916644][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.953038][ T5939] usb 5-1: config 0 descriptor?? [ 154.592064][ T5939] usbhid 5-1:0.0: can't add hid device: -71 [ 154.600712][ T5939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 154.640961][ T5939] usb 5-1: USB disconnect, device number 7 [ 154.706938][ T1656] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.868427][ T1656] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.891737][ T1656] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.917979][ T1656] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.928967][ T1656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.957012][ T1656] usb 3-1: SerialNumber: syz [ 155.138059][ T5939] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.183502][ T1656] usb 3-1: 0:2 : does not exist [ 155.251781][ T1656] usb 3-1: USB disconnect, device number 7 [ 155.293037][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.308954][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 155.336596][ T5909] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 155.356111][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.380024][ T5939] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 155.389359][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.408441][ T5939] usb 5-1: config 0 descriptor?? [ 155.422941][ T5939] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 155.436131][ T5939] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 155.466990][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.516633][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 155.530571][ T5909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.556591][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.578403][ T5909] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 155.597943][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.606081][ T5909] usb 2-1: Product: syz [ 155.616553][ T5909] usb 2-1: Manufacturer: syz [ 155.621480][ T5909] usb 2-1: SerialNumber: syz [ 155.639164][ T5909] usb 2-1: config 0 descriptor?? [ 155.644165][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.675385][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.698094][ C0] ldusb 5-1:0.0: Ring buffer overflow, 2 bytes dropped [ 155.713314][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.723220][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.731657][ T10] usb 1-1: SerialNumber: syz [ 155.865484][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 155.875164][ T5909] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 155.957045][ T5909] imon:send_packet: packet tx failed (-71) [ 156.002299][ T5909] imon 2-1:0.0: panel buttons/knobs setup failed [ 156.010336][ T10] usb 1-1: 0:2 : does not exist [ 156.021333][ C0] ldusb 5-1:0.0: Ring buffer overflow, 2 bytes dropped [ 156.283014][ T10] usb 1-1: USB disconnect, device number 8 [ 156.316759][ T5909] rc_core: IR keymap rc-imon-pad not found [ 156.332818][ T5909] Registered IR keymap rc-empty [ 156.339842][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.345670][ T5909] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 156.418900][ T5909] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 156.450446][ T5909] imon:send_packet: packet tx failed (-71) [ 156.497802][ T5909] imon 2-1:0.0: remote input dev register failed [ 156.512353][ T5909] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 156.544036][ T5909] imon 2-1:0.0: unable to initialize intf0, err 0 [ 156.561693][ T5909] imon:imon_probe: failed to initialize context! [ 156.584614][ T5909] imon 2-1:0.0: unable to register, err -19 [ 156.611172][ T5909] usb 2-1: USB disconnect, device number 12 [ 156.991836][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 157.046590][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 157.313932][ T5887] usb 5-1: USB disconnect, device number 8 [ 157.347618][ T5887] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 157.386727][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 157.398976][ T5909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.424335][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.457571][ T5909] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 157.467129][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.478334][ T5909] usb 2-1: Product: syz [ 157.482530][ T5909] usb 2-1: Manufacturer: syz [ 157.487747][ T5909] usb 2-1: SerialNumber: syz [ 157.506882][ T5909] usb 2-1: config 0 descriptor?? [ 157.735216][ T7136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.748904][ T7136] Cannot find set identified by id 0 to match [ 157.921171][ T5909] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 158.721720][ T5909] rc_core: IR keymap rc-imon-pad not found [ 158.737473][ T5909] Registered IR keymap rc-empty [ 158.747226][ T5909] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 158.766149][ T5909] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 158.848341][ T5909] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 158.876743][ T5909] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 158.894664][ T5909] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:13> initialized [ 159.044007][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 159.044779][ T5939] usb 2-1: USB disconnect, device number 13 [ 159.332308][ T7151] netlink: 'syz.0.384': attribute type 4 has an invalid length. [ 159.346685][ T5909] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.364878][ T7151] netlink: 'syz.0.384': attribute type 4 has an invalid length. [ 159.436584][ T1656] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.483354][ T7157] netlink: 'syz.4.385': attribute type 10 has an invalid length. [ 159.503938][ T7157] team0: Port device dummy0 added [ 159.522437][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 159.531465][ T5909] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 159.553446][ T5909] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 159.567693][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 159.596572][ T5909] usb 3-1: Product: syz [ 159.613761][ T1656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.625582][ T5909] usb 3-1: Manufacturer: syz [ 159.631801][ T5909] usb 3-1: SerialNumber: syz [ 159.635745][ T1656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.645117][ T5909] usb 3-1: config 0 descriptor?? [ 159.656610][ T1656] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 159.657061][ T7145] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.673812][ T1656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.691061][ T1656] usb 4-1: config 0 descriptor?? [ 159.691973][ T5909] hub 3-1:0.0: bad descriptor, ignoring hub [ 159.736181][ T5909] hub 3-1:0.0: probe with driver hub failed with error -5 [ 160.132454][ T1656] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 160.317088][ T1656] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 160.398333][ T7145] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 160.413486][ T1656] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 160.620117][ T7145] usb 3-1: device firmware changed [ 160.628241][ T5939] usb 3-1: USB disconnect, device number 8 [ 160.756598][ T5880] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 160.778995][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 160.788335][ T5939] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.944462][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 160.956318][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 160.970119][ T5939] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 160.981041][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 160.993489][ T5880] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 161.009893][ T5939] usb 3-1: string descriptor 0 read error: -22 [ 161.028018][ T1656] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 161.042074][ T5939] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.089253][ T1656] usb 4-1: USB disconnect, device number 11 [ 161.101756][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.170349][ T5880] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 161.183293][ T5939] usb 3-1: config 0 descriptor?? [ 161.215956][ T7170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.226535][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.239075][ T5939] hub 3-1:0.0: bad descriptor, ignoring hub [ 161.245019][ T5939] hub 3-1:0.0: probe with driver hub failed with error -5 [ 161.262680][ T5880] usb 2-1: Product: syz [ 161.267132][ T5880] usb 2-1: Manufacturer: syz [ 161.271945][ T5880] usb 2-1: SerialNumber: syz [ 161.290286][ T5880] usb 2-1: config 0 descriptor?? [ 161.340650][ T7184] Cannot find set identified by id 0 to match [ 161.380444][ T7176] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 161.613641][ T7176] netlink: 56 bytes leftover after parsing attributes in process `syz.1.389'. [ 161.624091][ T7176] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 161.706938][ T5939] usb 3-1: USB disconnect, device number 9 [ 162.033467][ T7198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.044846][ T7198] Cannot find set identified by id 0 to match [ 162.106628][ T29] audit: type=1800 audit(1771651792.101:15): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.394" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=15469 res=0 errno=0 [ 162.195546][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 162.768859][ T7209] cgroup: fork rejected by pids controller in /syz2 [ 163.780365][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 164.019066][ T7327] netlink: 'syz.4.403': attribute type 10 has an invalid length. [ 164.214788][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.278431][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 164.359812][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 164.471025][ T5880] usb 2-1: USB disconnect, device number 14 [ 164.557123][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.759238][ T7336] batadv_slave_1: entered promiscuous mode [ 164.897668][ T7341] netlink: 'syz.3.407': attribute type 10 has an invalid length. [ 164.975635][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.991619][ T7344] netlink: 'syz.3.407': attribute type 10 has an invalid length. [ 165.009471][ T7344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.114573][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.125499][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.135172][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.144585][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.153676][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.206300][ T7341] bond0: (slave dummy0): Releasing backup interface [ 165.298781][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.461410][ T7334] batadv_slave_1: left promiscuous mode [ 165.830114][ T7361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.848547][ T7361] Cannot find set identified by id 0 to match [ 166.221242][ T49] bridge_slave_1: left allmulticast mode [ 166.239373][ T49] bridge_slave_1: left promiscuous mode [ 166.360071][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.392684][ T49] bridge_slave_0: left allmulticast mode [ 166.411867][ T49] bridge_slave_0: left promiscuous mode [ 166.468667][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.093413][ T49] bond1 (unregistering): (slave gretap1): Releasing active interface [ 167.206615][ T5827] Bluetooth: hci4: command tx timeout [ 167.341631][ T7394] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 167.375910][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.402548][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.431300][ T5939] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.443663][ T49] bond0 (unregistering): Released all slaves [ 167.534881][ T49] bond1 (unregistering): Released all slaves [ 167.604024][ T5939] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 167.621415][ T5909] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.640881][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.666749][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.711534][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 167.745184][ T5939] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 167.775278][ T5939] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 167.878094][ T7403] syz_tun: entered allmulticast mode [ 167.888532][ T5939] usb 5-1: Manufacturer: syz [ 167.898636][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.913136][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.923857][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.933691][ T5909] usb 1-1: Product: syz [ 167.946240][ T5909] usb 1-1: Manufacturer: syz [ 167.947312][ T5939] usb 5-1: config 0 descriptor?? [ 167.971944][ T5909] usb 1-1: SerialNumber: syz [ 167.994244][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 168.026023][ T5909] usb 1-1: config 0 descriptor?? [ 168.301752][ T5909] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 168.320338][ T7392] netlink: 56 bytes leftover after parsing attributes in process `syz.0.417'. [ 168.420000][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.424720][ T5939] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 168.566585][ T5939] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 168.992384][ T49] hsr_slave_0: left promiscuous mode [ 168.995579][ T5939] usb 5-1: USB disconnect, device number 9 [ 169.018575][ T7411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.046652][ T49] hsr_slave_1: left promiscuous mode [ 169.066051][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.089189][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 169.104313][ T7420] fido_id[7420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 169.130841][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.186517][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.205147][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.302300][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 169.325118][ T5827] Bluetooth: hci4: command tx timeout [ 169.400105][ T49] veth1_macvtap: left promiscuous mode [ 169.435697][ T49] veth0_macvtap: left promiscuous mode [ 169.462728][ T49] veth1_vlan: left promiscuous mode [ 169.488765][ T49] veth0_vlan: left promiscuous mode [ 169.607608][ T5909] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 169.788335][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 169.813390][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.837525][ T5909] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 169.884963][ T5909] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 169.914634][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.939771][ T5909] usb 4-1: Product: syz [ 169.950546][ T5909] usb 4-1: Manufacturer: syz [ 169.963331][ T5909] usb 4-1: SerialNumber: syz [ 169.996212][ T5909] usb 4-1: config 0 descriptor?? [ 170.249166][ T49] team0 (unregistering): Port device team_slave_1 removed [ 170.266976][ T49] team0 (unregistering): Port device team_slave_0 removed [ 170.357139][ T1656] usb 1-1: USB disconnect, device number 9 [ 170.441633][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 170.714105][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.758181][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.787130][ T7347] bridge_slave_0: entered allmulticast mode [ 170.813116][ T7347] bridge_slave_0: entered promiscuous mode [ 170.859263][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.897166][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.935275][ T7347] bridge_slave_1: entered allmulticast mode [ 170.962941][ T7347] bridge_slave_1: entered promiscuous mode [ 171.148339][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.220451][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.366024][ T7347] team0: Port device team_slave_0 added [ 171.377254][ T5827] Bluetooth: hci4: command tx timeout [ 171.401248][ T7347] team0: Port device team_slave_1 added [ 171.516626][ T5909] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 171.546231][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.568789][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.640920][ T7347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.673216][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.706585][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 171.714907][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.753617][ T5909] usb 5-1: config 0 has no interfaces? [ 171.760878][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.806124][ T5909] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 171.829902][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.851825][ T5909] usb 5-1: Product: syz [ 171.865448][ T5909] usb 5-1: Manufacturer: syz [ 171.873914][ T7347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.940730][ T5909] usb 5-1: SerialNumber: syz [ 172.114451][ T5909] usb 5-1: config 0 descriptor?? [ 172.170994][ T7474] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 172.376979][ T1656] usb 5-1: USB disconnect, device number 10 [ 172.381661][ T7347] hsr_slave_0: entered promiscuous mode [ 172.419409][ T7347] hsr_slave_1: entered promiscuous mode [ 172.438290][ T7347] debugfs: 'hsr0' already exists in 'hsr' [ 172.464136][ T7347] Cannot create hsr debugfs directory [ 172.551019][ T5939] usb 4-1: USB disconnect, device number 12 [ 172.777057][ T7489] netlink: 'syz.3.436': attribute type 4 has an invalid length. [ 173.076901][ T5909] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 173.313375][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.446645][ T5827] Bluetooth: hci4: command tx timeout [ 173.522384][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.540038][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.572134][ T5909] usb 2-1: Product: syz [ 173.602845][ T5909] usb 2-1: Manufacturer: syz [ 173.614037][ T5909] usb 2-1: SerialNumber: syz [ 173.666057][ T5909] usb 2-1: config 0 descriptor?? [ 173.676332][ T7506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.982792][ T5909] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 174.004201][ T7512] binder: 7510:7512 ioctl c0306201 2000000001c0 returned -14 [ 174.078717][ T7490] netlink: 56 bytes leftover after parsing attributes in process `syz.1.435'. [ 174.103149][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.722426][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 174.763801][ T7347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.862925][ T7347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.927164][ T7347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.003750][ T7347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.207133][ T7534] input: syz1 as /devices/virtual/input/input15 [ 175.443452][ T7347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.491466][ T7540] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 175.553033][ T7347] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.578922][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.586126][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.627204][ T7540] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 175.849385][ T7540] team0: Port device dummy0 removed [ 175.862276][ T7540] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 175.894624][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.901908][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.175021][ T7347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.319794][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 176.366187][ T7347] veth0_vlan: entered promiscuous mode [ 176.389132][ T7347] veth1_vlan: entered promiscuous mode [ 176.486259][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.448'. [ 176.500264][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.448'. [ 176.530887][ T7347] veth0_macvtap: entered promiscuous mode [ 176.549298][ T7563] bridge0: entered promiscuous mode [ 176.555612][ T7563] ip6gretap0: entered promiscuous mode [ 176.577004][ T5939] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 176.603512][ T7347] veth1_macvtap: entered promiscuous mode [ 176.786589][ T5894] usb 2-1: USB disconnect, device number 15 [ 176.816966][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 176.891072][ T7567] bridge0: port 3(veth1_to_team) entered blocking state [ 176.909464][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.923111][ T7567] bridge0: port 3(veth1_to_team) entered disabled state [ 176.958941][ T7567] veth1_to_team: entered allmulticast mode [ 176.991225][ T5939] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 177.015605][ T7567] veth1_to_team: entered promiscuous mode [ 177.054995][ T7347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.175412][ T5939] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 177.189435][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.198414][ T5939] usb 5-1: Product: syz [ 177.202653][ T5939] usb 5-1: Manufacturer: syz [ 177.227080][ T5939] usb 5-1: SerialNumber: syz [ 177.235281][ T7347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.270291][ T5939] usb 5-1: config 0 descriptor?? [ 177.331608][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.364974][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.425284][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.461598][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.565358][ T7582] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 177.859156][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.887079][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.058651][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.138898][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.798066][ T7601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.936535][ T7601] overlayfs: missing 'lowerdir' [ 179.758146][ T5887] usb 5-1: USB disconnect, device number 11 [ 180.339816][ T7610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.896549][ T5887] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 181.018071][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 181.072875][ T7639] bridge_slave_1: left allmulticast mode [ 181.095826][ T5887] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.165630][ T7639] bridge_slave_1: left promiscuous mode [ 181.171289][ T5887] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 181.248768][ T5887] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.290724][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.298072][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.331987][ T5887] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 181.357557][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.361694][ T7639] bridge_slave_0: left allmulticast mode [ 181.393892][ T7639] bridge_slave_0: left promiscuous mode [ 181.423776][ T5887] usb 3-1: config 0 descriptor?? [ 181.431260][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.461336][ T7631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.790215][ T7650] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 181.905023][ T7650] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 181.935142][ T5887] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 181.971277][ T7654] kvm: pic: non byte write [ 181.979227][ T7650] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 181.990871][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 182.006411][ T7661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.082135][ T7661] bond2: (slave gretap1): making interface the new active one [ 182.098972][ T7661] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 182.162087][ T7650] macvlan2: entered promiscuous mode [ 182.184004][ T1656] usb 3-1: USB disconnect, device number 10 [ 182.191436][ T7650] macvlan2: entered allmulticast mode [ 182.218965][ T7650] bond2: entered promiscuous mode [ 182.232094][ T7650] gretap1: entered promiscuous mode [ 182.242659][ T7650] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.259677][ T7650] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 182.286223][ T7650] bond2: left promiscuous mode [ 182.292199][ T7650] gretap1: left promiscuous mode [ 182.483670][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 182.787851][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 182.994094][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 183.309853][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.331308][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 183.382545][ T10] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 183.416531][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.435208][ T7686] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 183.448502][ T10] usb 2-1: Product: syz [ 183.476047][ T10] usb 2-1: Manufacturer: syz [ 183.490977][ T10] usb 2-1: SerialNumber: syz [ 183.623973][ T10] usb 2-1: config 0 descriptor?? [ 183.735396][ T7687] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.800852][ T7687] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 183.984004][ T7698] macvlan2: entered promiscuous mode [ 183.989582][ T7698] macvlan2: entered allmulticast mode [ 183.995690][ T7698] bond3: entered promiscuous mode [ 184.005151][ T7698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.033790][ T7698] bond3: left promiscuous mode [ 184.745096][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 185.056629][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.218352][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.229185][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.258210][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.305129][ T10] usb 4-1: config 0 descriptor?? [ 185.337348][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 185.741044][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 185.749224][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 185.760053][ T5894] usb 2-1: USB disconnect, device number 16 [ 185.767872][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 185.785546][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 185.820043][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.838402][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 185.853616][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 185.864053][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 186.724008][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 186.777648][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 186.807453][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 186.815956][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 186.855899][ T7744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.481'. [ 186.868935][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 187.086937][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 187.104144][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 187.125583][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 187.265329][ T10] pwc: Registered as video103. [ 187.302981][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 187.400407][ T10] usb 4-1: USB disconnect, device number 13 [ 187.970739][ T7759] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 188.014396][ T7756] netlink: 'syz.4.486': attribute type 13 has an invalid length. [ 188.061151][ T7763] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 188.085450][ T7763] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 188.764786][ T7771] macvlan2: entered promiscuous mode [ 188.772757][ T7771] macvlan2: entered allmulticast mode [ 188.786951][ T7771] bond4: entered promiscuous mode [ 188.809938][ T7771] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.964069][ T7771] bond4: left promiscuous mode [ 189.432048][ T7779] 0: reclassify loop, rule prio 0, protocol 700 [ 189.652679][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 189.862464][ T7788] syzkaller0: entered promiscuous mode [ 189.916841][ T7788] syzkaller0: entered allmulticast mode [ 189.958130][ T7789] syzkaller0: entered promiscuous mode [ 189.963656][ T7789] syzkaller0: entered allmulticast mode [ 190.021110][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.236603][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 190.255917][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.299391][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 190.331657][ T10] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 190.342083][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.350968][ T10] usb 1-1: Product: syz [ 190.355235][ T10] usb 1-1: Manufacturer: syz [ 190.359919][ T10] usb 1-1: SerialNumber: syz [ 190.432070][ T10] usb 1-1: config 0 descriptor?? [ 191.092734][ T7804] syzkaller0: entered promiscuous mode [ 191.103551][ T7804] syzkaller0: entered allmulticast mode [ 191.450396][ T7811] netlink: 'syz.4.501': attribute type 4 has an invalid length. [ 192.549941][ T7823] netlink: 56 bytes leftover after parsing attributes in process `syz.1.504'. [ 192.562999][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 192.984575][ T5939] usb 1-1: USB disconnect, device number 10 [ 193.346053][ T7829] syzkaller0: entered promiscuous mode [ 193.389466][ T7829] syzkaller0: entered allmulticast mode [ 193.763091][ T7840] syzkaller0: entered promiscuous mode [ 193.768757][ T7840] syzkaller0: entered allmulticast mode [ 193.801913][ T7843] netlink: 'syz.2.510': attribute type 13 has an invalid length. [ 194.334039][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340473][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.468814][ T7851] syzkaller0: entered promiscuous mode [ 194.488990][ T7851] syzkaller0: entered allmulticast mode [ 195.383844][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 195.656577][ T1656] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.818024][ T1656] usb 1-1: Using ep0 maxpacket: 32 [ 195.828153][ T1656] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.839795][ T1656] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 195.917321][ T1656] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 195.945189][ T1656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.957542][ T1656] usb 1-1: Product: syz [ 195.963512][ T1656] usb 1-1: Manufacturer: syz [ 195.971481][ T1656] usb 1-1: SerialNumber: syz [ 195.980202][ T1656] usb 1-1: config 0 descriptor?? [ 196.536577][ T5939] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 197.074876][ T5939] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.085177][ T5939] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.095392][ T5939] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.113504][ T5939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 197.123403][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.134800][ T5939] usb 2-1: Product: syz [ 197.139265][ T5939] usb 2-1: Manufacturer: syz [ 197.158059][ T5939] usb 2-1: SerialNumber: syz [ 197.187614][ T5939] hub 2-1:1.0: bad descriptor, ignoring hub [ 197.195029][ T5939] hub 2-1:1.0: probe with driver hub failed with error -5 [ 197.421884][ T5939] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 198.023795][ T7870] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 198.283504][ T5894] usb 1-1: USB disconnect, device number 11 [ 198.595839][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 198.629675][ T5894] usb 2-1: USB disconnect, device number 17 [ 198.660580][ T5894] usblp0: removed [ 199.284023][ T7910] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 199.284023][ T7910] program syz.3.525 not setting count and/or reply_len properly [ 199.844723][ T7916] netlink: 56 bytes leftover after parsing attributes in process `syz.4.527'. [ 199.857774][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 201.415216][ T7931] tipc: Started in network mode [ 201.456386][ T7931] tipc: Node identity 7eea22d5012d, cluster identity 4711 [ 201.515563][ T7931] tipc: Enabled bearer , priority 0 [ 201.552831][ T7932] syzkaller0: entered promiscuous mode [ 201.579291][ T7932] syzkaller0: entered allmulticast mode [ 201.609569][ T7931] tipc: Resetting bearer [ 201.730636][ T7930] tipc: Resetting bearer [ 201.813952][ T7930] tipc: Disabling bearer [ 202.276564][ T5939] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 202.384212][ T5894] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 202.446210][ T5939] usb 3-1: config 0 has no interfaces? [ 202.457982][ T5939] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 202.477062][ T5939] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.501536][ T5939] usb 3-1: Manufacturer: syz [ 202.522942][ T5939] usb 3-1: config 0 descriptor?? [ 202.558550][ T5894] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 202.567254][ T5894] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 202.577666][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.596218][ T5894] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.606057][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.615216][ T5894] usb 4-1: Product: syz [ 202.689588][ T7944] ip6gre1: entered promiscuous mode [ 202.790245][ T5894] usb 4-1: Manufacturer: syz [ 202.805592][ T5894] usb 4-1: SerialNumber: syz [ 203.117465][ T5894] usb 4-1: config 0 descriptor?? [ 203.130706][ T5894] hub 4-1:0.0: bad descriptor, ignoring hub [ 203.147202][ T5894] hub 4-1:0.0: probe with driver hub failed with error -5 [ 203.166579][ T7948] syzkaller0: entered promiscuous mode [ 203.172317][ T7948] syzkaller0: entered allmulticast mode [ 203.274537][ T5894] usb 4-1: selecting invalid altsetting 0 [ 203.405060][ T5894] usb 4-1: USB disconnect, device number 14 [ 203.665830][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.836175][ T7959] netlink: 'syz.4.539': attribute type 1 has an invalid length. [ 205.038411][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 205.102974][ T7959] bond1: (slave gretap1): making interface the new active one [ 205.171580][ T7959] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 205.185449][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 205.299461][ T7971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.306996][ T7971] IPv6: NLM_F_CREATE should be set when creating new route [ 205.362137][ T7972] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.263911][ T29] audit: type=1326 audit(1771651836.241:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff0939c629 code=0x0 [ 206.329116][ T7968] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 206.726927][ T5887] usb 3-1: USB disconnect, device number 11 [ 206.753877][ T7959] macvlan3: entered promiscuous mode [ 206.759455][ T7959] macvlan3: entered allmulticast mode [ 206.835094][ T7959] bond1: entered promiscuous mode [ 206.852602][ T7959] gretap1: entered promiscuous mode [ 206.860123][ T7959] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 206.891817][ T7959] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 206.960789][ T7959] bond1: left promiscuous mode [ 206.965710][ T7959] gretap1: left promiscuous mode [ 207.140481][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.148205][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.244896][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.259962][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.428881][ T34] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.450616][ T34] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.474945][ T34] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.505036][ T34] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.881827][ T8003] syzkaller0: entered promiscuous mode [ 207.888124][ T8003] syzkaller0: entered allmulticast mode [ 208.387286][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 208.531496][ T8012] xt_hashlimit: size too large, truncated to 1048576 [ 209.344144][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 209.892581][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 209.902040][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.005172][ T10] usb 2-1: config 0 descriptor?? [ 210.418741][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 210.755438][ T8037] netlink: 'syz.4.554': attribute type 27 has an invalid length. [ 210.907764][ T8019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.946106][ T8019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.014220][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.021987][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.492755][ T8037] wg1: left promiscuous mode [ 211.544751][ T8042] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.666039][ T8037] wg1: left allmulticast mode [ 211.863779][ T8049] netlink: 104 bytes leftover after parsing attributes in process `syz.3.556'. [ 211.970728][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.074378][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.096705][ T8042] usb 5-1: Using ep0 maxpacket: 16 [ 212.129346][ T8042] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.139100][ T8042] usb 5-1: config 0 has no interface number 0 [ 212.160475][ T8042] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 212.170791][ T8042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.180113][ T8042] usb 5-1: Product: syz [ 212.185683][ T8042] usb 5-1: Manufacturer: syz [ 212.468246][ T5887] usb 2-1: USB disconnect, device number 18 [ 212.497661][ T8042] usb 5-1: SerialNumber: syz [ 212.633412][ T8042] usb 5-1: config 0 descriptor?? [ 212.662203][ T8042] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 213.143746][ T8037] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 213.194638][ T8042] gspca_spca1528: reg_w err -110 [ 213.220143][ T8042] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 213.583290][ T8037] vxlan0: left promiscuous mode [ 213.588415][ T8037] vxlan0: left allmulticast mode [ 214.019222][ T34] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.028698][ T34] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.089258][ T34] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.143189][ T34] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.178053][ T34] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.199762][ T34] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.226219][ T34] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.239640][ T34] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.085090][ T5919] usb 5-1: USB disconnect, device number 12 [ 215.812955][ T8091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.737365][ T8098] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 217.721373][ T8115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.756619][ T8115] batadv_slave_0: entered promiscuous mode [ 217.846579][ T8041] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.936581][ T5919] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 218.028798][ T8041] usb 4-1: Using ep0 maxpacket: 16 [ 218.045080][ T8120] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 218.145039][ T8121] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 218.156182][ T8120] bond0: (slave dummy0): Releasing backup interface [ 218.171446][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 218.225389][ T8120] team0: Port device dummy0 added [ 218.243341][ T8041] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 218.273448][ T8041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.283131][ T8121] team0: Port device dummy0 removed [ 218.300914][ T8121] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 218.328503][ T8041] usb 4-1: Product: syz [ 218.356404][ T8041] usb 4-1: Manufacturer: syz [ 218.368998][ T8041] usb 4-1: SerialNumber: syz [ 218.394934][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.613337][ T8041] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 218.629267][ T8041] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 218.658482][ T8041] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 218.703956][ T8126] netlink: 104 bytes leftover after parsing attributes in process `syz.4.573'. [ 218.800291][ T5919] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 218.811265][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.825063][ T8041] usb 4-1: media controller created [ 218.935597][ T5919] usb 2-1: Product: syz [ 218.957618][ T5919] usb 2-1: Manufacturer: syz [ 218.991248][ T5919] usb 2-1: SerialNumber: syz [ 219.015686][ T8041] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.074202][ T5919] usb 2-1: config 0 descriptor?? [ 219.130499][ T5919] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench found [ 219.151989][ T5919] usb 2-1: selecting invalid altsetting 1 [ 219.265747][ T8041] zl10353_read_register: readreg error (reg=127, ret==-71) [ 219.341975][ T8041] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 219.443751][ T8041] usb 4-1: USB disconnect, device number 15 [ 219.472909][ T5919] snd_usb_variax 2-1:0.0: set_interface failed [ 219.605582][ T5919] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench now disconnected [ 219.650823][ T5919] snd_usb_variax 2-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 220.615406][ T29] audit: type=1326 audit(1771651850.331:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 220.921413][ T29] audit: type=1326 audit(1771651850.331:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 220.946598][ T29] audit: type=1326 audit(1771651850.331:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 220.993504][ T29] audit: type=1326 audit(1771651850.331:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 221.043252][ T29] audit: type=1326 audit(1771651850.331:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 221.119416][ T29] audit: type=1326 audit(1771651850.331:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 221.148512][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.264983][ T8148] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 221.281394][ T29] audit: type=1326 audit(1771651850.331:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 221.296567][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 221.356585][ T5887] usb 1-1: config 0 has no interfaces? [ 221.374637][ T5887] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.387696][ T29] audit: type=1326 audit(1771651850.331:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 221.410065][ T5887] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.418352][ T5887] usb 1-1: Manufacturer: syz [ 221.424606][ T5887] usb 1-1: config 0 descriptor?? [ 221.466386][ T8150] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 221.492352][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 221.518082][ T5956] usb 2-1: USB disconnect, device number 19 [ 221.537229][ T8150] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 221.580575][ T29] audit: type=1326 audit(1771651850.331:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 221.611196][ T29] audit: type=1326 audit(1771651850.331:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 221.741865][ T8148] bond1: (slave gretap1): making interface the new active one [ 221.752339][ T8148] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 221.888164][ T8156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.578'. [ 222.009740][ T8148] macvlan2: entered promiscuous mode [ 222.015316][ T8148] macvlan2: entered allmulticast mode [ 222.077936][ T8148] bond1: entered promiscuous mode [ 222.091484][ T8148] gretap1: entered promiscuous mode [ 222.114978][ T8148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.274107][ T8148] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 222.304207][ T8148] bond1: left promiscuous mode [ 222.322468][ T8148] gretap1: left promiscuous mode [ 223.301046][ T8169] xt_TCPMSS: Only works on TCP SYN packets [ 223.311288][ T5956] usb 1-1: USB disconnect, device number 12 [ 224.125362][ T8178] netlink: 'syz.3.583': attribute type 13 has an invalid length. [ 224.758605][ T8185] Cannot find set identified by id 0 to match [ 225.136564][ T5887] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 225.286710][ T5887] usb 2-1: device descriptor read/64, error -71 [ 225.552190][ T8202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.562479][ T8202] Cannot find set identified by id 0 to match [ 226.075022][ T5887] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 226.303556][ T5887] usb 2-1: device descriptor read/64, error -71 [ 226.436783][ T5887] usb usb2-port1: attempt power cycle [ 226.809628][ T8209] netlink: 104 bytes leftover after parsing attributes in process `syz.0.590'. [ 226.836647][ T5887] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 226.939583][ T5887] usb 2-1: device descriptor read/8, error -71 [ 227.206996][ T5887] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 227.260535][ T5887] usb 2-1: device descriptor read/8, error -71 [ 227.397420][ T5887] usb usb2-port1: unable to enumerate USB device [ 228.104181][ T5887] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 228.261990][ T8234] QAT: failed to copy from user. [ 228.421147][ T5887] usb 5-1: config 0 has no interfaces? [ 228.452716][ T5887] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 228.468696][ T5887] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.479352][ T5887] usb 5-1: Manufacturer: syz [ 228.485657][ T5887] usb 5-1: config 0 descriptor?? [ 229.307149][ T8241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.596'. [ 229.616944][ T5909] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 229.728078][ T8246] Cannot find set identified by id 0 to match [ 230.032542][ T5909] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 230.054870][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.091305][ T5909] usb 4-1: config 0 has no interfaces? [ 230.114014][ T5909] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 230.145297][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.178446][ T5909] usb 4-1: config 0 descriptor?? [ 230.466914][ T8255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.598'. [ 230.516689][ T5909] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 230.704823][ T5919] usb 5-1: USB disconnect, device number 13 [ 230.718296][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 230.765739][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 230.832390][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 230.887344][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.900794][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.919370][ T5909] usb 2-1: Product: syz [ 230.932716][ T5909] usb 2-1: Manufacturer: syz [ 230.952627][ T5909] usb 2-1: SerialNumber: syz [ 231.369579][ T5909] usb 2-1: config 0 descriptor?? [ 231.420096][ T8253] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 231.636623][ T5919] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 231.648731][ T8253] netlink: 56 bytes leftover after parsing attributes in process `syz.1.599'. [ 231.665087][ T8253] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 231.816916][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 231.876492][ T5919] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 231.953408][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 232.367521][ T5919] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 232.423953][ T5919] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 232.445637][ T5909] usb 4-1: USB disconnect, device number 16 [ 232.495222][ T5919] usb 5-1: config 127 has no interface number 0 [ 232.519472][ T5919] usb 5-1: config 127 interface 171 has no altsetting 0 [ 232.739081][ T8271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.752841][ T8271] Cannot find set identified by id 0 to match [ 232.989132][ T5919] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 232.998405][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.006701][ T5919] usb 5-1: Product: syz [ 233.015102][ T5919] usb 5-1: Manufacturer: syz [ 233.019787][ T5919] usb 5-1: SerialNumber: syz [ 233.193256][ T5956] usb 2-1: USB disconnect, device number 24 [ 233.769197][ T5956] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 233.927967][ T5956] usb 2-1: device descriptor read/64, error -71 [ 234.209578][ T5956] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 234.367996][ T5919] usb 5-1: USB disconnect, device number 14 [ 234.379769][ T5956] usb 2-1: device descriptor read/64, error -71 [ 234.534363][ T5956] usb usb2-port1: attempt power cycle [ 234.997836][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 235.006814][ T5956] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 235.059261][ T5956] usb 2-1: device descriptor read/8, error -71 [ 235.222652][ T8293] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 235.346571][ T5956] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 235.419825][ T5956] usb 2-1: device descriptor read/8, error -71 [ 235.657096][ T5956] usb usb2-port1: unable to enumerate USB device [ 235.690752][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 235.690771][ T29] audit: type=1326 audit(1771651865.311:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cb2b9c629 code=0x0 [ 235.896709][ T5887] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 236.090273][ T5887] usb 1-1: config 0 has no interfaces? [ 236.112963][ T5887] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 236.129749][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.189279][ T5887] usb 1-1: Product: syz [ 236.194094][ T5887] usb 1-1: Manufacturer: syz [ 236.224697][ T5887] usb 1-1: SerialNumber: syz [ 236.256264][ T5887] usb 1-1: config 0 descriptor?? [ 236.406564][ T5909] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 236.580535][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 236.598638][ T5909] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 236.619617][ T5909] usb 5-1: config 0 has no interface number 0 [ 236.634109][ T5909] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.650049][ T5909] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 236.678463][ T5909] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.702077][ T5909] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.726318][ T5909] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 236.813664][ T8306] Cannot find set identified by id 0 to match [ 236.832403][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.918156][ T5909] usb 5-1: config 0 descriptor?? [ 236.938578][ T8310] netlink: 84 bytes leftover after parsing attributes in process `syz.1.612'. [ 236.950701][ T5909] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 237.309252][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.320467][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.364045][ T8303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.412260][ T5919] usb 5-1: USB disconnect, device number 15 [ 237.567936][ T5919] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 237.976780][ T5909] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 238.163165][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 238.181569][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 238.212149][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 238.282610][ T8324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.294174][ T8324] Cannot find set identified by id 0 to match [ 238.306383][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.417939][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.426307][ T5909] usb 2-1: Product: syz [ 238.431038][ T5909] usb 2-1: Manufacturer: syz [ 238.436493][ T5909] usb 2-1: SerialNumber: syz [ 238.444680][ T5909] usb 2-1: config 0 descriptor?? [ 238.463088][ T8322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.689644][ T8322] netlink: 56 bytes leftover after parsing attributes in process `syz.1.614'. [ 238.699640][ T8322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.007561][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 239.129519][ T8041] usb 1-1: USB disconnect, device number 13 [ 239.532291][ T5919] IPVS: starting estimator thread 0... [ 239.916624][ T8343] IPVS: using max 32 ests per chain, 76800 per kthread [ 240.393723][ T5919] usb 2-1: USB disconnect, device number 29 [ 240.510860][ T8360] netlink: 'syz.4.621': attribute type 10 has an invalid length. [ 241.626813][ T8041] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 244.042849][ T5827] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 245.054120][ T8392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.527746][ T8401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.648289][ T8394] Cannot find set identified by id 0 to match [ 245.680117][ T8404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.630'. [ 246.916594][ T5919] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 246.946648][ T5956] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 247.068161][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 247.080217][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 247.096776][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 247.106493][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 247.132723][ T5956] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 247.146659][ T5956] usb 4-1: config 0 has no interface number 0 [ 247.163714][ T5956] usb 4-1: config 0 interface 12 has no altsetting 0 [ 247.191468][ T5956] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 247.200907][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.210479][ T5919] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 247.233135][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.246349][ T5956] usb 4-1: Product: syz [ 247.257937][ T5956] usb 4-1: Manufacturer: syz [ 247.265870][ T5919] usb 1-1: Product: syz [ 247.274743][ T5956] usb 4-1: SerialNumber: syz [ 247.280413][ T5919] usb 1-1: Manufacturer: syz [ 247.292813][ T5956] usb 4-1: config 0 descriptor?? [ 247.298191][ T5919] usb 1-1: SerialNumber: syz [ 247.318314][ T5919] usb 1-1: config 0 descriptor?? [ 247.332472][ T8417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 247.586800][ T8417] netlink: 56 bytes leftover after parsing attributes in process `syz.0.632'. [ 247.635124][ T8417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 247.780189][ T29] audit: type=1326 audit(1771651877.791:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 247.821317][ T29] audit: type=1326 audit(1771651877.791:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 247.903827][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 247.976475][ T29] audit: type=1326 audit(1771651877.791:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 248.076966][ T29] audit: type=1326 audit(1771651877.791:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 248.135004][ T29] audit: type=1326 audit(1771651877.791:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 248.157371][ T29] audit: type=1326 audit(1771651877.791:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 248.182029][ T29] audit: type=1326 audit(1771651877.801:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 248.220789][ T29] audit: type=1326 audit(1771651877.801:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 248.343852][ T29] audit: type=1326 audit(1771651877.801:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 248.419362][ T5956] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 248.429936][ T5956] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 248.443811][ T5956] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 248.484179][ T5956] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 248.513959][ T5956] usb 4-1: USB disconnect, device number 18 [ 248.643192][ T29] audit: type=1326 audit(1771651877.801:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50e519c629 code=0x7ffc0000 [ 249.353019][ T8443] tipc: Enabled bearer , priority 10 [ 249.364489][ T8443] tipc: Enabled bearer , priority 0 [ 249.489109][ T8041] usb 1-1: USB disconnect, device number 14 [ 249.607930][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.639'. [ 249.823730][ T8451] binder: BINDER_SET_CONTEXT_MGR already set [ 249.830758][ T8451] binder: 8447:8451 ioctl 4018620d 200000000040 returned -16 [ 250.547002][ T5956] tipc: Node number set to 2143757013 [ 250.700201][ T8456] netlink: 104 bytes leftover after parsing attributes in process `syz.2.642'. [ 251.950672][ T8470] netlink: 'syz.4.643': attribute type 2 has an invalid length. [ 252.108784][ T8472] trusted_key: encrypted_key: insufficient parameters specified [ 252.410951][ T8481] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 253.710064][ T8491] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 253.878519][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 253.890647][ T8493] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.928411][ T8493] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 254.072420][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 254.072440][ T29] audit: type=1326 audit(1771651884.071:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.4.649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e519c629 code=0x0 [ 254.161864][ T8501] macvlan2: entered promiscuous mode [ 254.176523][ T8501] macvlan2: entered allmulticast mode [ 254.465746][ T8501] bond2: entered promiscuous mode [ 254.492194][ T8501] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.733521][ T8501] bond2: left promiscuous mode [ 254.744854][ T8491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.856553][ T8042] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 255.499742][ T8042] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 255.546642][ T8042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 255.575632][ T8042] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 255.619556][ T8042] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 255.646628][ T8042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.663929][ T8042] usb 4-1: Product: syz [ 255.674002][ T8042] usb 4-1: Manufacturer: syz [ 255.679714][ T8042] usb 4-1: SerialNumber: syz [ 255.687448][ T8042] usb 4-1: config 0 descriptor?? [ 255.701844][ T8503] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.817040][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823447][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.886560][ T5956] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 255.929515][ T8500] netlink: 56 bytes leftover after parsing attributes in process `syz.3.650'. [ 255.946948][ T8500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.046508][ T5956] usb 1-1: Using ep0 maxpacket: 16 [ 256.054423][ T5956] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.064400][ T5956] usb 1-1: config 0 has no interface number 0 [ 256.146341][ T5956] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.182895][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 256.196166][ T5956] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.240609][ T5956] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 256.273234][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.312942][ T5956] usb 1-1: config 0 descriptor?? [ 256.557599][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 256.787962][ T10] usb 2-1: config 1 interface 0 altsetting 15 bulk endpoint 0x1 has invalid maxpacket 32 [ 256.841575][ T10] usb 2-1: config 1 interface 0 altsetting 15 bulk endpoint 0x82 has invalid maxpacket 8 [ 256.877713][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 256.900358][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 256.931677][ T10] usb 2-1: string descriptor 0 read error: -22 [ 256.941085][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 256.962992][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.019827][ T8526] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 257.030566][ T8526] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 257.286981][ T8042] usb 4-1: USB disconnect, device number 19 [ 257.398465][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 258.027131][ T5956] usbhid 1-1:0.1: can't add hid device: -71 [ 258.096546][ T5956] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 258.121591][ T8042] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 258.127046][ T5956] usb 1-1: USB disconnect, device number 15 [ 258.276546][ T8042] usb 4-1: Using ep0 maxpacket: 32 [ 258.280386][ T8042] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 258.280413][ T8042] usb 4-1: config 0 has no interface number 0 [ 258.280449][ T8042] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.284116][ T8042] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 258.284145][ T8042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.284164][ T8042] usb 4-1: Product: syz [ 258.284177][ T8042] usb 4-1: Manufacturer: syz [ 258.284191][ T8042] usb 4-1: SerialNumber: syz [ 258.287363][ T8042] usb 4-1: config 0 descriptor?? [ 258.292343][ T8042] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 258.292380][ T8042] em28xx 4-1:0.132: Video interface 132 found: [ 258.698620][ T8042] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 259.653700][ T10] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 15 proto 3 vid 0x0525 pid 0xA4A8 [ 259.749290][ T10] usb 2-1: USB disconnect, device number 30 [ 259.775397][ T10] usblp0: removed [ 259.915318][ T8550] netlink: 104 bytes leftover after parsing attributes in process `syz.1.660'. [ 260.017087][ T8042] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 260.046647][ T8042] em28xx 4-1:0.132: board has no eeprom [ 260.124520][ T8042] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 260.171416][ T8042] em28xx 4-1:0.132: analog set to bulk mode. [ 260.233981][ T5909] em28xx 4-1:0.132: Registering V4L2 extension [ 260.406283][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 260.419909][ T5909] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 260.437859][ T8554] program syz.0.661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.448361][ T5909] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 260.479051][ T5909] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 260.515245][ T5909] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 260.751906][ T5909] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 260.832476][ T9] usb 4-1: USB disconnect, device number 20 [ 260.848284][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 261.062150][ T5909] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 261.080971][ T5909] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 261.103660][ T5909] em28xx 4-1:0.132: No AC97 audio processor [ 261.148347][ T8575] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 261.159640][ T5909] usb 4-1: Decoder not found [ 261.164259][ T5909] em28xx 4-1:0.132: failed to create media graph [ 261.175486][ T5909] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 261.203365][ T5909] em28xx 4-1:0.132: Remote control support is not available for this card. [ 261.258564][ T8575] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 261.269106][ T9] em28xx 4-1:0.132: Closing input extension [ 261.271615][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 261.517953][ T8575] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 261.566811][ T9] em28xx 4-1:0.132: Freeing device [ 261.652867][ T8579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.811880][ T8581] macvlan2: entered promiscuous mode [ 261.818315][ T8581] macvlan2: entered allmulticast mode [ 261.841803][ T8581] bond1: entered promiscuous mode [ 261.857972][ T8581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.874647][ T8581] bond1: left promiscuous mode [ 261.946630][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 262.058491][ T8583] netlink: 'syz.4.666': attribute type 1 has an invalid length. [ 262.098217][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 262.112298][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 262.124264][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.152110][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 262.154402][ T8585] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.177324][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 262.185952][ T9] usb 4-1: Product: syz [ 262.192052][ T9] usb 4-1: Manufacturer: syz [ 262.198776][ T9] usb 4-1: SerialNumber: syz [ 262.218474][ T8585] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 262.223564][ T9] usb 4-1: config 0 descriptor?? [ 262.269494][ T9] usb 4-1: selecting invalid altsetting 0 [ 262.290731][ T8583] macvlan3: entered promiscuous mode [ 262.296205][ T8583] macvlan3: entered allmulticast mode [ 262.318645][ T8583] bond2: entered promiscuous mode [ 262.374797][ T8583] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 262.413053][ T8583] bond2: left promiscuous mode [ 262.682096][ T8592] random: crng reseeded on system resumption [ 262.802811][ T8596] Cannot find set identified by id 0 to match [ 263.998185][ T8603] netlink: 'syz.4.669': attribute type 2 has an invalid length. [ 264.491360][ T8042] usb 4-1: USB disconnect, device number 21 [ 264.897083][ T8617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.076535][ T8041] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 265.278385][ T8041] usb 5-1: Using ep0 maxpacket: 32 [ 265.367906][ T8041] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 265.397526][ T8041] usb 5-1: config 0 has no interface number 0 [ 265.502124][ T8041] usb 5-1: config 0 interface 184 has no altsetting 0 [ 265.577591][ T8041] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 266.012022][ T8041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.195982][ T8041] usb 5-1: Product: syz [ 266.206285][ T8041] usb 5-1: Manufacturer: syz [ 266.216555][ T8041] usb 5-1: SerialNumber: syz [ 266.251523][ T8041] usb 5-1: config 0 descriptor?? [ 266.602736][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 267.340104][ T8616] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 267.543450][ T8642] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 267.658474][ T8616] team0: Device gtp0 is of different type [ 268.428820][ T8654] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 268.496126][ T8654] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.633071][ T8654] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 268.823027][ T8658] bond2: (slave gretap1): making interface the new active one [ 268.834142][ T8658] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 268.999692][ T8041] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 269.012900][ T8041] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 269.085833][ T8041] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 269.109486][ T8041] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 269.158083][ T8041] usb 5-1: USB disconnect, device number 16 [ 269.165000][ T8659] syz_tun: left allmulticast mode [ 269.199638][ T8666] netlink: 104 bytes leftover after parsing attributes in process `syz.4.680'. [ 269.220994][ T8654] macvlan2: entered promiscuous mode [ 269.285726][ T8654] macvlan2: entered allmulticast mode [ 269.297866][ T8654] bond2: entered promiscuous mode [ 269.311572][ T8654] gretap1: entered promiscuous mode [ 269.322171][ T8654] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.337096][ T8654] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 269.401258][ T8654] bond2: left promiscuous mode [ 269.406242][ T8654] gretap1: left promiscuous mode [ 269.687852][ T8673] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.806537][ T8673] block device autoloading is deprecated and will be removed. [ 270.595594][ T8683] tipc: Failed to remove unknown binding: 66,1,1/0:2617196333/2617196335 [ 271.906515][ T5956] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 272.023160][ T8696] netlink: 104 bytes leftover after parsing attributes in process `syz.0.686'. [ 272.156489][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 272.184091][ T5956] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 272.198254][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.216478][ T5956] usb 3-1: config 0 has no interface number 0 [ 272.267231][ T5956] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 272.286649][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.294729][ T5956] usb 3-1: Product: syz [ 272.313255][ T5956] usb 3-1: Manufacturer: syz [ 272.330120][ T5956] usb 3-1: SerialNumber: syz [ 272.487289][ T5956] usb 3-1: config 0 descriptor?? [ 272.507121][ T5956] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 272.656615][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.766618][ T8703] Cannot find set identified by id 0 to match [ 272.819171][ T5956] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 272.912342][ T5956] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 272.926635][ T8706] kAFS: unable to lookup cell '(,' [ 273.079859][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.688'. [ 273.616583][ T8042] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 273.776649][ T8042] usb 4-1: Using ep0 maxpacket: 8 [ 273.788580][ T8042] usb 4-1: config index 0 descriptor too short (expected 57815, got 27) [ 273.797502][ T8042] usb 4-1: config 122 has too many interfaces: 104, using maximum allowed: 32 [ 273.812701][ T8042] usb 4-1: config 122 has an invalid descriptor of length 0, skipping remainder of the config [ 273.836320][ T8042] usb 4-1: config 122 has 0 interfaces, different from the descriptor's value: 104 [ 273.855996][ T8042] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 273.886602][ T8042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.134780][ T8709] IPv6: Can't replace route, no match found [ 274.152762][ T8714] IPVS: sh: FWM 3 0x00000003 - no destination available [ 274.181510][ T8042] IPVS: starting estimator thread 0... [ 274.276520][ T8718] IPVS: using max 57 ests per chain, 136800 per kthread [ 274.523151][ T8720] netlink: 'syz.1.692': attribute type 1 has an invalid length. [ 274.572201][ T5956] usb 3-1: USB disconnect, device number 12 [ 274.763765][ T8723] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 274.847209][ T8723] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 274.922960][ T8729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.053908][ T8720] bond2: (slave gretap1): making interface the new active one [ 275.090188][ T8720] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 275.218201][ T8730] macvlan2: entered promiscuous mode [ 275.236069][ T8730] macvlan2: entered allmulticast mode [ 275.261547][ T8730] bond2: entered promiscuous mode [ 275.280934][ T8730] gretap1: entered promiscuous mode [ 275.313759][ T8730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.341488][ T8730] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 275.502885][ T8730] bond2: left promiscuous mode [ 275.509103][ T8730] gretap1: left promiscuous mode [ 275.821413][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 275.862830][ T150] IPVS: stop unused estimator thread 0... [ 276.383257][ T9] usb 4-1: USB disconnect, device number 22 [ 276.721165][ T8753] netlink: 104 bytes leftover after parsing attributes in process `syz.3.698'. [ 277.608261][ T8748] veth3: entered allmulticast mode [ 277.618458][ T8762] loop8: detected capacity change from 0 to 8 [ 277.644315][ T8762] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 277.650066][ T8762] loop8: partition table partially beyond EOD, truncated [ 277.661272][ T8762] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 278.055421][ T8768] netlink: 'syz.4.700': attribute type 10 has an invalid length. [ 278.064086][ T8768] netlink: 'syz.4.700': attribute type 10 has an invalid length. [ 278.119042][ T8768] team0: Port device dummy0 removed [ 278.155934][ T8768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 279.479720][ T8780] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 279.632529][ T8782] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 279.714452][ T8782] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 280.073015][ T8794] netlink: 104 bytes leftover after parsing attributes in process `syz.1.706'. [ 280.546660][ T8796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.117542][ T5956] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.149272][ T5956] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.843792][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 281.871439][ T8819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.712'. [ 281.887819][ T8819] syz_tun: entered allmulticast mode [ 281.913120][ T8819] dvmrp6: entered allmulticast mode [ 282.486529][ T5956] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 282.689251][ T8831] netlink: 104 bytes leftover after parsing attributes in process `syz.4.716'. [ 282.746789][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 282.787049][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.820176][ T5956] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 282.913125][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.954779][ T5956] usb 4-1: Product: syz [ 282.959800][ T5956] usb 4-1: Manufacturer: syz [ 282.967043][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 282.989844][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 283.002473][ T5956] usb 4-1: SerialNumber: syz [ 283.014625][ T5956] usb 4-1: config 0 descriptor?? [ 283.020435][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 283.030309][ T5956] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 283.045383][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 283.055128][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 283.069000][ T9] usb 1-1: Product: syz [ 283.082377][ T9] usb 1-1: Manufacturer: syz [ 283.094371][ T9] usb 1-1: SerialNumber: syz [ 283.111117][ T9] usb 1-1: config 0 descriptor?? [ 283.132927][ T9] usb 1-1: selecting invalid altsetting 0 [ 283.159258][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.717'. [ 283.178218][ T29] audit: type=1326 audit(1771651913.161:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 283.220168][ T29] audit: type=1326 audit(1771651913.161:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 283.273942][ T5956] usb 4-1: USB disconnect, device number 23 [ 283.345115][ T29] audit: type=1326 audit(1771651913.161:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 283.376666][ T29] audit: type=1326 audit(1771651913.161:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 283.399351][ T29] audit: type=1326 audit(1771651913.161:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 283.424410][ T29] audit: type=1326 audit(1771651913.161:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 283.453795][ T29] audit: type=1326 audit(1771651913.161:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 283.476250][ T29] audit: type=1326 audit(1771651913.161:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 283.611753][ T9] usb 1-1: USB disconnect, device number 16 [ 283.791998][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.965349][ T29] audit: type=1326 audit(1771651913.161:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 284.036749][ T29] audit: type=1326 audit(1771651913.161:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff0939c629 code=0x7ffc0000 [ 284.603246][ T8852] fuse: Bad value for 'rootmode' [ 286.312331][ T5956] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 286.368510][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.425832][ T5956] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 286.949945][ T8879] netlink: 'syz.0.726': attribute type 1 has an invalid length. [ 287.149050][ T8881] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 287.167176][ T8881] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 287.269459][ T8886] netlink: 104 bytes leftover after parsing attributes in process `syz.1.727'. [ 287.448383][ T8879] macvlan2: entered promiscuous mode [ 287.453773][ T8879] macvlan2: entered allmulticast mode [ 287.473909][ T8879] bond3: entered promiscuous mode [ 287.490879][ T8879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.514992][ T8879] bond3: left promiscuous mode [ 288.320372][ T8907] veth0_to_team: Caught tx_queue_len zero misconfig [ 288.658223][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 289.932796][ T8921] netlink: 104 bytes leftover after parsing attributes in process `syz.4.734'. [ 290.763101][ T8934] xt_hashlimit: size too large, truncated to 1048576 [ 290.991200][ T8943] netlink: 'syz.1.739': attribute type 10 has an invalid length. [ 291.012858][ T8943] team0: Port device dummy0 added [ 291.651954][ T8944] netlink: 'syz.1.739': attribute type 10 has an invalid length. [ 291.947971][ T8944] team0: Port device dummy0 removed [ 291.995980][ T8944] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.354852][ T8945] binder: BINDER_SET_CONTEXT_MGR already set [ 292.360957][ T8945] binder: 8926:8945 ioctl 4018620d 200000000040 returned -16 [ 292.370739][ T8945] binder: 8926:8945 ioctl c0306201 200000000300 returned -11 [ 293.226129][ T8956] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 293.376518][ T5956] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 293.447064][ T8958] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 293.480236][ T8958] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 293.705830][ T8964] No such timeout policy "syz0" [ 293.856543][ T5956] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 293.886601][ T5956] usb 5-1: config 0 has no interface number 0 [ 293.923383][ T5956] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 293.971106][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.997029][ T5956] usb 5-1: Product: syz [ 294.019206][ T5956] usb 5-1: Manufacturer: syz [ 294.051470][ T5956] usb 5-1: SerialNumber: syz [ 294.078672][ T5956] usb 5-1: config 0 descriptor?? [ 295.191485][ T8979] syzkaller0: entered promiscuous mode [ 295.197148][ T8979] syzkaller0: entered allmulticast mode [ 295.238067][ T8042] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 295.450964][ T8042] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 295.499518][ T8042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 295.544719][ T8042] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 295.750490][ T8042] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.779535][ T8042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.812718][ T8042] usb 1-1: Product: syz [ 295.821794][ T8983] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.749'. [ 295.840229][ T8042] usb 1-1: Manufacturer: syz [ 295.853280][ T8042] usb 1-1: SerialNumber: syz [ 295.889461][ T8042] usb 1-1: config 0 descriptor?? [ 295.919405][ T8977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 296.188966][ T8977] netlink: 56 bytes leftover after parsing attributes in process `syz.0.746'. [ 296.289293][ T8989] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 296.523196][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 296.589015][ T5956] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 296.686807][ T5956] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 296.733281][ T5956] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 296.877853][ T8998] netlink: 104 bytes leftover after parsing attributes in process `syz.4.751'. [ 296.935880][ T5956] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 296.970249][ T5956] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 297.048528][ T5956] usb 5-1: USB disconnect, device number 17 [ 297.072328][ T5956] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 297.083549][ T5956] keyspan 5-1:0.133: device disconnected [ 297.459572][ T9008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.925068][ T9] usb 1-1: USB disconnect, device number 17 [ 298.106524][ T8042] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 298.600501][ T8042] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 298.625975][ T8042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.681003][ T8042] usb 4-1: config 0 has no interface number 0 [ 298.715177][ T8042] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 298.802036][ T8042] usb 4-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.871007][ T9015] loop5: detected capacity change from 0 to 4096 [ 299.004569][ T8042] usb 4-1: config 0 interface 113 has no altsetting 0 [ 299.232926][ T9021] netlink: 104 bytes leftover after parsing attributes in process `syz.1.755'. [ 299.303943][ T8042] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 299.380257][ T8042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.454736][ T8042] usb 4-1: Product: syz [ 299.493660][ T8042] usb 4-1: Manufacturer: syz [ 299.511074][ T8042] usb 4-1: SerialNumber: syz [ 299.529224][ T8042] usb 4-1: config 0 descriptor?? [ 299.596777][ T8042] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 300.245559][ T9029] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 300.273896][ T9029] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 300.325130][ T9031] syzkaller0: entered promiscuous mode [ 300.333774][ T9031] syzkaller0: entered allmulticast mode [ 300.930888][ T9044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.761'. [ 302.032165][ T5909] usb 4-1: USB disconnect, device number 24 [ 302.806592][ T8042] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 303.111176][ T9070] netlink: 104 bytes leftover after parsing attributes in process `syz.4.766'. [ 303.158432][ T8042] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 303.192647][ T8042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 303.486594][ T8042] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 303.499601][ T9072] Cannot find set identified by id 0 to match [ 303.775224][ T8042] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 303.835653][ T8042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.865237][ T8042] usb 4-1: Product: syz [ 303.882572][ T8042] usb 4-1: Manufacturer: syz [ 303.906491][ T8042] usb 4-1: SerialNumber: syz [ 303.977941][ T8042] usb 4-1: config 0 descriptor?? [ 304.134208][ T9082] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 304.217432][ T9061] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.241066][ T9084] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 304.336379][ T9084] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 304.382136][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 304.432951][ T9082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.466708][ T9061] netlink: 56 bytes leftover after parsing attributes in process `syz.3.764'. [ 304.527954][ T9087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.751334][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 305.239639][ T9103] netlink: 104 bytes leftover after parsing attributes in process `syz.1.775'. [ 305.476798][ T8042] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 305.716476][ T8042] usb 1-1: Using ep0 maxpacket: 16 [ 305.789257][ T8042] usb 1-1: config 0 has no interfaces? [ 305.936174][ T8042] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.959168][ T5956] usb 4-1: USB disconnect, device number 25 [ 306.081263][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 306.091093][ T9115] netlink: 'syz.3.780': attribute type 2 has an invalid length. [ 306.102076][ T8042] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 306.115846][ T8042] usb 1-1: Manufacturer: syz [ 306.175257][ T8042] usb 1-1: config 0 descriptor?? [ 306.183086][ T9117] netlink: 104 bytes leftover after parsing attributes in process `syz.2.779'. [ 306.309564][ T9121] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 306.332595][ T9121] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.478250][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.773'. [ 306.511092][ T9125] Cannot find set identified by id 0 to match [ 306.802294][ T9131] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 307.032256][ T9134] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 307.167603][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 307.200367][ T9134] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 307.258946][ T9131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.880947][ T9149] netlink: 104 bytes leftover after parsing attributes in process `syz.2.791'. [ 308.121608][ T8042] usb 1-1: USB disconnect, device number 18 [ 308.667672][ T9169] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 308.896094][ T9175] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 308.928771][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 308.960705][ T9175] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 309.087116][ T9169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.113728][ T9169] macvlan2: entered promiscuous mode [ 309.129301][ T9169] macvlan2: entered allmulticast mode [ 309.136023][ T9169] bond3: entered promiscuous mode [ 309.147147][ T9183] random: crng reseeded on system resumption [ 309.236032][ T9169] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.300956][ T9169] bond3: left promiscuous mode [ 309.348967][ T9186] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 309.478165][ T9188] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 309.529906][ T9188] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 309.551928][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 309.570460][ T9186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.584476][ T9186] macvlan2: entered promiscuous mode [ 309.591584][ T9186] macvlan2: entered allmulticast mode [ 309.598799][ T9186] bond5: entered promiscuous mode [ 309.604369][ T9186] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.615829][ T9186] bond5: left promiscuous mode [ 310.134098][ T9204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.169855][ T9203] netlink: 'syz.4.806': attribute type 10 has an invalid length. [ 310.198564][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 310.198582][ T29] audit: type=1326 audit(1771651940.131:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 310.227449][ T9205] netlink: 'syz.4.806': attribute type 10 has an invalid length. [ 310.252804][ T9203] bond0: (slave dummy0): Releasing backup interface [ 310.372091][ T9203] team0: Port device dummy0 added [ 310.434769][ T9205] team0: Port device dummy0 removed [ 310.477588][ T9205] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.486858][ T29] audit: type=1326 audit(1771651940.131:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 310.647497][ T29] audit: type=1326 audit(1771651940.131:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 310.703044][ T9211] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 310.899438][ T29] audit: type=1326 audit(1771651940.131:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 310.967016][ T29] audit: type=1326 audit(1771651940.131:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 310.991189][ T29] audit: type=1326 audit(1771651940.131:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 311.021862][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 311.060572][ T9213] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 311.082328][ T9213] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 311.092270][ T29] audit: type=1326 audit(1771651940.131:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 311.121699][ T29] audit: type=1326 audit(1771651940.131:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 311.200517][ T29] audit: type=1326 audit(1771651940.131:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 311.229357][ T9214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.265786][ T29] audit: type=1326 audit(1771651940.131:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b9c629 code=0x7ffc0000 [ 311.648824][ T9238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.677091][ T9238] overlayfs: missing 'lowerdir' [ 311.697222][ T9237] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 311.739675][ T9237] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 311.891718][ T9241] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.902432][ T9237] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 311.917254][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 311.930411][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.818'. [ 312.045120][ T9242] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.163674][ T9237] macvlan2: entered promiscuous mode [ 312.171167][ T9237] macvlan2: entered allmulticast mode [ 312.183292][ T9237] bond6: entered promiscuous mode [ 312.192093][ T9237] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.217189][ T9237] bond6: left promiscuous mode [ 312.378757][ T5956] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 312.558580][ T5956] usb 1-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 312.588192][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.605325][ T5956] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 312.630122][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.638630][ T5956] usb 1-1: Product: syz [ 312.642905][ T5956] usb 1-1: Manufacturer: syz [ 312.650519][ T5956] usb 1-1: SerialNumber: syz [ 312.664084][ T5956] usb 1-1: config 0 descriptor?? [ 312.899306][ T9246] netlink: 56 bytes leftover after parsing attributes in process `syz.0.819'. [ 312.912576][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 313.358696][ T9273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.832'. [ 313.837065][ T5919] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 314.167697][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 314.188801][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 314.236617][ T5919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 314.335104][ T5919] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 314.384437][ T9289] netlink: 'syz.4.837': attribute type 10 has an invalid length. [ 314.407890][ T9289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.430541][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.454511][ T9289] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 314.482354][ T5919] usb 3-1: Product: syz [ 314.514859][ T5919] usb 3-1: Manufacturer: syz [ 314.573797][ T5919] usb 3-1: SerialNumber: syz [ 314.649412][ T5919] usb 3-1: config 0 descriptor?? [ 314.818019][ T9276] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 314.957384][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 314.979772][ T9297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.001821][ T9297] overlayfs: missing 'lowerdir' [ 315.054201][ T9276] netlink: 56 bytes leftover after parsing attributes in process `syz.2.831'. [ 315.169557][ T9298] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 315.396241][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 315.560636][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.842'. [ 315.587339][ T5956] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 315.637639][ T5956] usb 1-1: USB disconnect, device number 19 [ 315.656774][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 316.098741][ T9312] TCP: TCP_TX_DELAY enabled [ 316.936781][ T8042] usb 3-1: USB disconnect, device number 13 [ 316.996208][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 317.171777][ T5902] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 317.213670][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.220558][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.249365][ T5902] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.625859][ T9354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.651315][ T9354] overlayfs: missing 'lowerdir' [ 318.656563][ T5919] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 318.848056][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 318.879278][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 318.937596][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 318.949540][ T9375] team0: Caught tx_queue_len zero misconfig [ 318.969262][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 318.986447][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.004636][ T5919] usb 4-1: Product: syz [ 319.014746][ T5919] usb 4-1: Manufacturer: syz [ 319.031070][ T9362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.079018][ T5919] usb 4-1: SerialNumber: syz [ 319.107546][ T5919] usb 4-1: config 0 descriptor?? [ 319.114050][ T9364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.184386][ T9381] loop5: detected capacity change from 0 to 7 [ 319.210795][ T9381] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 319.222872][ T9381] loop5: partition table partially beyond EOD, truncated [ 319.239050][ T9381] loop5: p1 size 4294377484 extends beyond EOD, truncated [ 319.265540][ T9385] team_slave_1: Caught tx_queue_len zero misconfig [ 319.331748][ T9364] netlink: 56 bytes leftover after parsing attributes in process `syz.3.867'. [ 319.342053][ T9364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.446633][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 319.579993][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 319.720473][ T5956] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 319.779996][ T5956] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 320.534670][ T105] [ 320.537015][ T105] ============================================ [ 320.543146][ T105] WARNING: possible recursive locking detected [ 320.549310][ T105] syzkaller #0 Tainted: G L [ 320.555290][ T105] -------------------------------------------- [ 320.561531][ T105] kworker/u8:5/105 is trying to acquire lock: [ 320.567765][ T105] ffff88807d802a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 320.577113][ T105] [ 320.577113][ T105] but task is already holding lock: [ 320.584562][ T105] ffff88807d802a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0xfe/0x340 [ 320.594153][ T105] [ 320.594153][ T105] other info that might help us debug this: [ 320.602211][ T105] Possible unsafe locking scenario: [ 320.602211][ T105] [ 320.609667][ T105] CPU0 [ 320.612944][ T105] ---- [ 320.616221][ T105] lock(k-sk_lock-AF_INET6); [ 320.620904][ T105] lock(k-sk_lock-AF_INET6); [ 320.625585][ T105] [ 320.625585][ T105] *** DEADLOCK *** [ 320.625585][ T105] [ 320.633719][ T105] May be due to missing lock nesting notation [ 320.633719][ T105] [ 320.642139][ T105] 3 locks held by kworker/u8:5/105: [ 320.647528][ T105] #0: ffff88805bb33148 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 320.659388][ T105] #1: ffffc900026d7c40 ((work_completion)(&cp->cp_down_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 320.671593][ T105] #2: ffff88807d802a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0xfe/0x340 [ 320.681713][ T105] [ 320.681713][ T105] stack backtrace: [ 320.687618][ T105] CPU: 0 UID: 0 PID: 105 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.687636][ T105] Tainted: [L]=SOFTLOCKUP [ 320.687640][ T105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.687648][ T105] Workqueue: krds_cp_wq#3/0 rds_shutdown_worker [ 320.687684][ T105] Call Trace: [ 320.687689][ T105] [ 320.687693][ T105] dump_stack_lvl+0xe8/0x150 [ 320.687710][ T105] print_deadlock_bug+0x279/0x290 [ 320.687725][ T105] __lock_acquire+0x253f/0x2cf0 [ 320.687739][ T105] ? unwind_next_frame+0xa5/0x23c0 [ 320.687755][ T105] lock_acquire+0xf0/0x2e0 [ 320.687765][ T105] ? inet6_getname+0x15d/0x650 [ 320.687775][ T105] ? irqentry_exit+0x59e/0x620 [ 320.687795][ T105] ? trace_irq_disable+0x3b/0x150 [ 320.687819][ T105] lock_sock_nested+0x48/0x100 [ 320.687833][ T105] ? inet6_getname+0x15d/0x650 [ 320.687842][ T105] inet6_getname+0x15d/0x650 [ 320.687852][ T105] rds_tcp_conn_slots_available+0x288/0x470 [ 320.687863][ T105] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 320.687876][ T105] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.687888][ T105] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 320.687898][ T105] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 320.687909][ T105] ? ret_from_fork_asm+0x1a/0x30 [ 320.687924][ T105] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 320.687937][ T105] rds_recv_incoming+0x9f6/0x12d0 [ 320.687949][ T105] ? __pfx_rds_recv_incoming+0x10/0x10 [ 320.687959][ T105] ? skb_copy_bits+0x7e5/0x8f0 [ 320.687973][ T105] rds_tcp_data_recv+0x7f1/0xa40 [ 320.687986][ T105] __tcp_read_sock+0x196/0x970 [ 320.687996][ T105] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 320.688006][ T105] rds_tcp_recv_path+0x200/0x340 [ 320.688015][ T105] ? __pfx_rds_tcp_recv_path+0x10/0x10 [ 320.688025][ T105] ? __local_bh_enable_ip+0xd0/0x130 [ 320.688038][ T105] ? lockdep_hardirqs_on+0x7a/0x110 [ 320.688050][ T105] ? __local_bh_enable_ip+0xd0/0x130 [ 320.688061][ T105] ? __pfx_tcp_shutdown+0x10/0x10 [ 320.688069][ T105] ? inet_shutdown+0x2b1/0x390 [ 320.688084][ T105] rds_tcp_conn_path_shutdown+0x295/0xac0 [ 320.688095][ T105] ? __pfx_rds_tcp_conn_path_shutdown+0x10/0x10 [ 320.688107][ T105] ? rds_conn_shutdown+0x229/0xab0 [ 320.688116][ T105] rds_conn_shutdown+0x4b8/0xab0 [ 320.688125][ T105] ? __pfx_rds_conn_shutdown+0x10/0x10 [ 320.688136][ T105] ? process_scheduled_works+0xa25/0x1830 [ 320.688148][ T105] ? process_scheduled_works+0xa25/0x1830 [ 320.688159][ T105] process_scheduled_works+0xb02/0x1830 [ 320.688174][ T105] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.688186][ T105] ? assign_work+0x3d5/0x5e0 [ 320.688197][ T105] worker_thread+0xa50/0xfc0 [ 320.688214][ T105] kthread+0x388/0x470 [ 320.688223][ T105] ? __pfx_worker_thread+0x10/0x10 [ 320.688234][ T105] ? __pfx_kthread+0x10/0x10 [ 320.688241][ T105] ret_from_fork+0x51e/0xb90 [ 320.688254][ T105] ? __pfx_ret_from_fork+0x10/0x10 [ 320.688265][ T105] ? __switch_to+0xc7d/0x1450 [ 320.688277][ T105] ? __pfx_kthread+0x10/0x10 [ 320.688292][ T105] ret_from_fork_asm+0x1a/0x30 [ 320.688323][ T105] [ 322.023308][ T8042] usb 4-1: USB disconnect, device number 26