last executing test programs: 4m3.871693657s ago: executing program 0 (id=3639): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0x6, 0x28, &(0x7f0000000240)=""/40, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x2, 0x4) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x6f) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) fsopen(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, 0x0, &(0x7f0000000180)=""/10, 0xa) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r6, r6, 0x0) unshare(0x2a020480) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 4m2.167504808s ago: executing program 0 (id=3647): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x6000, 0x3000, 0xd, 0xff, 0xff, 0x7, 0x5b, 0x9, 0x25, 0x6f, 0xc}, {0x5000, 0x4, 0x9, 0x8, 0x3, 0x5, 0x4, 0xa, 0x8, 0x6, 0x3, 0xe3}, {0x2000, 0xeeee8000, 0xa, 0x2, 0xc, 0xd4, 0x4e, 0x2, 0x1, 0x4, 0x21, 0x8}, {0xdddd0000, 0x4, 0xd, 0x7f, 0x0, 0xfe, 0x81, 0x1e, 0xff, 0xfd, 0x8, 0x8}, {0xd000, 0xdddd0000, 0xf, 0x3, 0xfd, 0x6, 0x1, 0x4, 0x8, 0x8, 0x4, 0xd}, {0x10000, 0x80a0000, 0x8, 0x69, 0x44, 0x4, 0x3, 0x9, 0x9, 0x3, 0x46, 0x3}, {0x2000, 0x100000, 0x3, 0xb3, 0xb, 0x2, 0xe3, 0x0, 0x48, 0x1, 0x0, 0xfa}, {0x5000, 0x4000, 0x8, 0x6, 0x7f, 0x3, 0x7, 0xc, 0x0, 0x8, 0x6, 0x5}, {0x0, 0x8}, {0x8000000, 0x8}, 0x2, 0x0, 0x100000, 0x20000, 0x5, 0x1801, 0xffff1000, [0x0, 0x6, 0x1c7, 0x6]}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000240)=0x3) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000000280)={0x9, 0x0, [{0x40000001, 0x200, 0x4, 0x7, 0x8e2, 0xf61f, 0x3}, {0x11, 0xb3b, 0x2, 0xa553, 0x7, 0x9, 0x2}, {0x40000001, 0x6, 0x4, 0x6, 0x5, 0x1, 0x401}, {0xc0000001, 0x2, 0x1, 0x4, 0x26, 0x8, 0x6}, {0x80000007, 0x4, 0x4, 0x6fb6a4ed, 0xff, 0x80000000, 0x35}, {0x7, 0x3, 0x0, 0x4, 0x2, 0x4, 0xc356}, {0xc0000000, 0x1, 0x2, 0x5, 0x4, 0x86a, 0xffff8001}, {0x40000001, 0x8, 0x1, 0x8, 0x8, 0x6, 0xfffffff8}, {0xc0000001, 0x8000, 0x6, 0x7e3, 0xe85b, 0x1e0, 0x5}]}) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000440)={0x5, 0x8, {r2}, {}, 0x0, 0xa000}) r4 = getpgrp(r3) r5 = syz_open_procfs(r4, &(0x7f0000000480)='net/llc/core\x00') ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000004c0), 0x400080) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2, 0x14, 0x5, 0x5, 0x6, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x7f, 0x0, 0x0, 0xff, 0x3505}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}]}, 0x30}}, 0x10048080) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f00000005c0)={0x1, 0x0, 'client0\x00', 0x80000000, "bbf7519bd00a2c93", "4d2f6677ed04a71cdbcf50ebafbfd19549940edbef9b13a4075dc90cb86e7699", 0x7, 0x1}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x10, r0}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000700)) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000740)=@gcm_128={{0x304}, "5b721024e8eb8e59", "97f459c974e86551a1ec30f1110487b0", "f45d7b5d", "c2e50ac53f6bd6ba"}, 0x28) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb91}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xd8005}, 0x4000892) r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000940), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000980)=@profile={'stack ', '/dev/ubi_ctrl\x00'}, 0x14) syz_io_uring_setup(0x3d71, &(0x7f00000009c0)={0x0, 0x5, 0x200, 0x3, 0x28d, 0x0, r5}, &(0x7f0000000a40), &(0x7f0000000a80)) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000ac0)=0xfffffb47) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000c00)={&(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000d40)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0], &(0x7f0000000d00)=[0x0], 0x9, 0x4, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000dc0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e00)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000e80)={&(0x7f0000000d80)=[r7, r8, 0x0], 0x3, r9, r10, 0x5, 0x2, 0x200, 0x9c, {0x5e543086, 0x2517, 0x626d, 0x9, 0x0, 0x80, 0xf, 0x4, 0x40, 0x5, 0x4, 0x8000, 0x5, 0x93, "3c2a0b45895f092b10a3f07f3b07a1ed5e67cdf189bfc54a1c6632896c01d5a3"}}) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x42000) fstat64(r6, &(0x7f0000001000)) syz_usb_connect(0x6, 0x2c5, &(0x7f0000001080)={{0x12, 0x1, 0x310, 0xc9, 0x43, 0xd7, 0x20, 0x54c, 0x2a5, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b3, 0x3, 0x4, 0x1, 0x10, 0x5, [{{0x9, 0x4, 0x1d, 0xcf, 0x1, 0xbe, 0xe5, 0x44, 0x3, [], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x8, 0x9}}]}}, {{0x9, 0x4, 0x1a, 0x0, 0xc, 0x25, 0x5d, 0x8, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0x3}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x3, 0x40, 0x8, 0x5d, 0xf5}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x2, 0x4, 0x4, 0x9, 0xcc}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x3, 0x0, 0xfffa, 0x2, 0xb7}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0xf5, "bf2a2c"}]}, @hid_hid={0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x6dd}}], [{{0x9, 0x5, 0x1, 0x7, 0x8, 0x16, 0x3, 0xfb}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x5, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1000}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x81, 0xfe}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x10, 0xff, 0x80, [@generic={0x3e, 0x2, "aba9d77864f795256a7aced244fe10b8a8cf4f987e7d0ec35f09e715263ebb8ca4b2b6cbcd967fd1f2d5c3baad5e24d51264d7e2cc8d50d69c87132f"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x8b, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x80, 0x8, 0x80, [@generic={0x2f, 0x7, "858b52103da646e916f8877e81df6ced4bed3a6576559a02b89062986b3299b34cbe08cf4c19d4f3c1126788e3"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x9, 0x0, 0x54}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x3, 0x8, 0xb}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x1, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0x18}]}}, {{0x9, 0x5, 0x80, 0x10, 0xff, 0xe4, 0x5, 0x91, [@generic={0x9f, 0x7, "2e79337eb197af35192b333a12d4d9764f6a55c9f65d7f23ecececf0c3eb6a2e90e98fe8aad3a2eb84715515e0b2bfb85a755ca629a2f5528a54b40b17679c633a7459e48679645093875406b293c8cec5208a6f311cbcab292b73f36338fddb8da3567a0e471b6af2d39828eddd8030bf29e745680eb48aabfee666b25b313a8472b971842f993069fb2547ab19f0bf62988436e713c9736bdb0cd258"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x80, 0x4, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x0, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x48, 0xe2, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6}, @generic={0x5c, 0xa, "7e2a0c02bfc7be41c659757710daeb476265c99780f8a957528f21ba3235502dd56fc6aba4edd1f5c0b1da9891b5f158e26a7a30298c831741775feb382a84c61ad6226fc4eaee2178f7eb21cb28b1cc3d3c021c0af06132e4b6"}]}}]}}, {{0x9, 0x4, 0xba, 0xfd, 0x0, 0x5c, 0xc7, 0x9f, 0x6, [@hid_hid={0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0x695}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "b39d5c"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5f, 0x6, 0x38, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @obex={0x5, 0x24, 0x15, 0x9b}]}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x300, 0x1, 0x2, 0x1e, 0x8, 0x2}, 0x21, &(0x7f00000013c0)={0x5, 0xf, 0x21, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x6, 0xc, 0x1ff, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x3, 0x3ff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x7, 0x3ff}]}, 0x3, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x426}}]}) 4m1.506804165s ago: executing program 0 (id=3648): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400"], 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m1.205060667s ago: executing program 0 (id=3650): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x4449c2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 4m0.066532947s ago: executing program 0 (id=3654): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x37a}], 0x1}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88e, &(0x7f00000010c0)={0x0, 0x1c2b, 0x200, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/73, 0x49}, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000380)={0x0, 0xfd, 0x6, &(0x7f0000000040)={0xf, "c6c1f7b51030c4a4c54bf2e474d312000000000000bc117b5452b3b94bce47509d"}}) 3m59.865111376s ago: executing program 0 (id=3656): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) close(r1) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 3m58.962388276s ago: executing program 32 (id=3656): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) close(r1) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 3.75158713s ago: executing program 4 (id=5758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) 3.516251126s ago: executing program 4 (id=5762): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010027bd7000060000000900020073797a32000000000800410073697700140033007465616d30"], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140c, 0x301, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 3.342123925s ago: executing program 4 (id=5765): socket$inet6(0xa, 0x1, 0x84) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000140), 0x4) 2.850270992s ago: executing program 5 (id=5777): r0 = add_key(&(0x7f00000010c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 2.697463959s ago: executing program 5 (id=5781): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000008000000050000008a6ce748", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="fe97a6d873f12f56a0f06c71e927cb376d4415b5787de2fa6ed787d66c810e3b2fe40b8e496515d2a633f4e88061d3ac13fb23ee2512c977937f66220142dbc02bffcd7dd3da58215b556fc7d31bf039403f7767804df8638e93bffa202f6a2ba80ba3"], 0x50) unshare(0x20000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="17000000000000001b000000020000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000040)) 2.395363392s ago: executing program 5 (id=5785): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x4, 0x1, 0x0, "9e3961c6a5efca2c7582768eb400"}) 2.335704954s ago: executing program 3 (id=5786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d36c66ecc053c543da2e2e", @ANYRES32=r0], 0x48) 2.188286209s ago: executing program 5 (id=5788): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @const={0x0, 0x0, 0x0, 0xb}, @restrict]}}, 0x0, 0x56}, 0x20) 2.09992393s ago: executing program 3 (id=5790): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) 2.005932438s ago: executing program 5 (id=5791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) 1.995437224s ago: executing program 2 (id=5792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x60, r1, 0x1, 0xfffffffc, 0x0, {}, [@WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.776302214s ago: executing program 4 (id=5793): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000d1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) 1.775873173s ago: executing program 2 (id=5794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000008050005000a000000050001400600000005000400000000000900020073797a310000000011"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x1000, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 1.679341768s ago: executing program 5 (id=5795): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "dad7815f"}, @local=@item_012={0x1, 0x2, 0x5, 'I'}, @global=@item_4={0x3, 0x1, 0x5, "46e04a48"}, @global=@item_012={0x2, 0x1, 0x1, "0087"}]}}, 0x0}, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, 0x0) 1.674310364s ago: executing program 4 (id=5796): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.620361179s ago: executing program 2 (id=5797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40002, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) 1.537563377s ago: executing program 2 (id=5798): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) 1.469867203s ago: executing program 2 (id=5799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) close(r5) openat$incfs(0xffffffffffffffff, 0x0, 0x8101, 0x100) pipe2(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00'], 0x24}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.364517302s ago: executing program 1 (id=5800): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlockall() 1.065647343s ago: executing program 1 (id=5801): prctl$PR_SET_DUMPABLE(0x4, 0x7) 885.227ms ago: executing program 1 (id=5802): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000280)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001"], 0x38}, 0x0) 612.429916ms ago: executing program 1 (id=5803): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000240)={0x8000, 0x4, 0x1}) 612.00964ms ago: executing program 3 (id=5804): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xc44, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 467.608357ms ago: executing program 3 (id=5805): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="10031200e0ff020002004788aa96a13bb100001100007fca1a00e3c264c44cb0e0c1468642c2eeac900acff57a305f", 0x2f, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0xa4}, 0x14) 395.324221ms ago: executing program 1 (id=5806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 288.488154ms ago: executing program 4 (id=5807): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 227.745039ms ago: executing program 3 (id=5808): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbb63cdec5908060001080006040001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 213.144075ms ago: executing program 1 (id=5809): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 303.103µs ago: executing program 3 (id=5810): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 2 (id=5811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 053.068175][T20119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.107823][T20119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.125787][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 1053.137727][ T5831] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1053.146861][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1053.154745][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.170983][ T5831] usb 6-1: config 0 descriptor?? [ 1053.190820][ T5831] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1053.272568][T20123] fuse: Unknown parameter 'usgr_id' [ 1053.665223][T20130] netlink: 'syz.5.4001': attribute type 13 has an invalid length. [ 1053.721692][ T5831] gspca_vc032x: reg_r err -110 [ 1053.739628][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.753556][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.761035][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.767865][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.774613][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.780443][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.787446][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.793324][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.808798][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.820420][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.835758][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.837495][ T10] usb 2-1: USB disconnect, device number 8 [ 1053.853004][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1053.863500][ T10] ftdi_sio 2-1:0.0: device disconnected [ 1053.869660][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.869677][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.869688][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.869698][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.869708][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.869717][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.869727][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.869736][ T5831] gspca_vc032x: Unknown sensor... [ 1053.869815][ T5831] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1053.994911][T20130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.002435][T20130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.101367][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4009'. [ 1054.183993][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1054.350670][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.357638][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.724058][ T5888] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1054.749681][T20130] tipc: Resetting bearer [ 1054.894482][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 1055.084950][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1055.096361][ T5888] usb 3-1: config 8 has an invalid interface number: 67 but max is 0 [ 1055.116418][ T5888] usb 3-1: config 8 has no interface number 0 [ 1055.123462][ T5888] usb 3-1: config 8 interface 67 has no altsetting 0 [ 1055.147742][ T5888] usb 3-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.f7 [ 1055.157141][T20130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.164982][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.173503][ T5888] usb 3-1: Product: syz [ 1055.179466][ T5888] usb 3-1: Manufacturer: syz [ 1055.195466][ T5888] usb 3-1: SerialNumber: syz [ 1055.206212][T20130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.223986][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1055.625384][ T3539] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.640343][ T3539] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.652343][ T3539] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.680223][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1055.698762][ T30] audit: type=1326 audit(1763359299.179:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.1.4013" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x0 [ 1055.750409][ T5909] usb 6-1: USB disconnect, device number 14 [ 1055.756928][ T3539] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.264000][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1056.326669][T20173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.349145][T20172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.358809][T20173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.513772][T20172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.303995][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1057.351002][ T5888] usb 3-1: active config #8 != 1 ?? [ 1057.402711][ T5888] usb 3-1: USB disconnect, device number 26 [ 1057.710458][T20189] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4023'. [ 1057.785881][T20181] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4021'. [ 1058.354016][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1058.925021][T20206] delete_channel: no stack [ 1059.044078][ T5831] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1059.214307][ T5831] usb 3-1: device descriptor read/64, error -71 [ 1059.362841][T20218] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4032'. [ 1059.383994][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1059.494147][ T5831] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1059.624078][ T5831] usb 3-1: device descriptor read/64, error -71 [ 1059.676103][T20232] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4036'. [ 1059.734423][ T5831] usb usb3-port1: attempt power cycle [ 1060.076831][ T5831] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1060.119515][ T5831] usb 3-1: device descriptor read/8, error -71 [ 1060.207232][ T24] hid-generic 0000:0003:0001.003F: unknown main item tag 0x0 [ 1060.216265][ T24] hid-generic 0000:0003:0001.003F: unknown main item tag 0x0 [ 1060.230865][ T24] hid-generic 0000:0003:0001.003F: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1060.375320][ T5831] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1060.417594][T20241] fido_id[20241]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1060.431434][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1060.450551][ T5831] usb 3-1: device descriptor read/8, error -71 [ 1060.553347][T20249] netlink: 'syz.5.4041': attribute type 6 has an invalid length. [ 1060.564907][ T5831] usb usb3-port1: unable to enumerate USB device [ 1060.574309][ T5909] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1060.753449][ T5909] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.764310][ T5909] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1060.773750][ T5909] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1060.825883][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.930230][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1060.954790][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1061.024007][ T5831] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1061.174290][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 1061.188357][ T5831] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1061.197814][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.267012][ T5831] usb 6-1: Product: syz [ 1061.274258][ T5831] usb 6-1: Manufacturer: syz [ 1061.279116][ T5831] usb 6-1: SerialNumber: syz [ 1061.319317][ T5831] usb 6-1: config 0 descriptor?? [ 1061.327903][ T5831] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1061.474009][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1061.987192][T20265] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1062.237341][ T5909] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1062.414025][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 1062.427849][ T5909] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1062.443805][ T5909] usb 3-1: config 0 has no interface number 0 [ 1062.454236][ T5831] gspca_sonixj: reg_r err -110 [ 1062.459314][ T5831] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1062.474139][ T5909] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1062.504062][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1062.534771][ T5909] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1062.584273][ T5909] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1062.610214][ T5909] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1062.621198][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1062.629890][ T5909] usb 3-1: Product: syz [ 1062.635802][ T5909] usb 3-1: SerialNumber: syz [ 1062.652174][ T5909] usb 3-1: config 0 descriptor?? [ 1062.659359][T20269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1062.672879][ T5909] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 1062.687624][ T5909] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input63 [ 1062.880707][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1063.122545][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1063.130366][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1063.138184][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1063.146590][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1063.153766][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1063.160979][ T5909] usb 3-1: USB disconnect, device number 31 [ 1063.167417][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1063.167445][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1063.193421][ T5909] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1063.309147][T15683] usb 4-1: USB disconnect, device number 23 [ 1063.434127][ T5831] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1063.544012][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1063.563332][T20293] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1063.608524][ T5831] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1063.617833][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.627768][ T5831] usb 2-1: Product: syz [ 1063.633513][ T5831] usb 2-1: Manufacturer: syz [ 1063.638925][ T5831] usb 2-1: SerialNumber: syz [ 1063.646805][ T5831] usb 2-1: config 0 descriptor?? [ 1063.684091][T15683] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1063.827677][T20304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.837430][T20304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.904186][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1063.924120][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1064.060879][T13690] usb 6-1: USB disconnect, device number 15 [ 1064.095455][ T5831] usb 2-1: Firmware: major: 0, minor: 13, hardware type: UNKNOWN (16) [ 1064.305329][T20287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4053'. [ 1064.395379][T20309] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4059'. [ 1064.585411][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1064.634364][T15683] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1064.666231][T15683] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1064.689500][T15683] usb 4-1: can't read configurations, error -71 [ 1065.174754][ T5831] usb 2-1: failed to fetch extended address, random address set [ 1065.224384][ T5831] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1065.272438][ T5831] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1065.624006][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1066.296367][ T5831] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1066.346752][ T24] usb 2-1: USB disconnect, device number 9 [ 1066.484482][T20331] sit0: entered promiscuous mode [ 1066.496628][T20331] netlink: 'syz.1.4063': attribute type 1 has an invalid length. [ 1066.514516][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 1066.524086][T15683] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1066.560876][T20331] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1066.660447][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1066.668239][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1066.717356][ T5831] usb 3-1: config 8 has an invalid interface number: 67 but max is 0 [ 1066.748074][ T5831] usb 3-1: config 8 has no interface number 0 [ 1066.781127][ T5831] usb 3-1: config 8 interface 67 has no altsetting 0 [ 1066.807496][ T5831] usb 3-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.f7 [ 1066.844027][T15683] usb 6-1: Using ep0 maxpacket: 8 [ 1066.864920][T15683] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1066.874303][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.884780][T15683] usb 6-1: config 8 has an invalid interface number: 67 but max is 0 [ 1066.893419][T15683] usb 6-1: config 8 has no interface number 0 [ 1066.899984][T15683] usb 6-1: config 8 interface 67 has no altsetting 0 [ 1066.911064][T15683] usb 6-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.f7 [ 1066.920713][T15683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.935831][T15683] usb 6-1: Product: syz [ 1066.950461][T15683] usb 6-1: Manufacturer: syz [ 1066.955410][ T5831] usb 3-1: Product: syz [ 1066.964318][T15683] usb 6-1: SerialNumber: syz [ 1066.977018][ T5831] usb 3-1: Manufacturer: syz [ 1066.991861][ T5831] usb 3-1: SerialNumber: syz [ 1067.663830][T20343] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1067.704013][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1068.398026][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 1068.407373][ T24] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1068.576187][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.590724][ T24] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1068.744043][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1068.755609][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.793513][ T24] usb 2-1: config 0 descriptor?? [ 1068.958249][ T5831] usb 3-1: active config #8 != 1 ?? [ 1069.015588][T20351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4069'. [ 1069.046636][ T5831] usb 3-1: USB disconnect, device number 32 [ 1069.208956][T15683] usb 6-1: active config #8 != 1 ?? [ 1069.325782][T15683] usb 6-1: USB disconnect, device number 16 [ 1069.547124][ T24] nintendo 0003:057E:200E.0040: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 1069.614394][T20361] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1069.711485][ T24] nintendo 0003:057E:200E.0040: Failed charging grip handshake [ 1069.733033][ T24] nintendo 0003:057E:200E.0040: Failed to initialize controller; ret=-110 [ 1069.768244][ T24] nintendo 0003:057E:200E.0040: probe - fail = -110 [ 1069.781215][ T24] nintendo 0003:057E:200E.0040: probe with driver nintendo failed with error -110 [ 1069.790594][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1069.820507][ T24] usb 2-1: USB disconnect, device number 10 [ 1069.855049][T20370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4073'. [ 1070.507950][T15683] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1070.584028][T20384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1070.824011][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1070.860882][T15683] usb 4-1: Using ep0 maxpacket: 8 [ 1070.904367][ T5909] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1070.924955][T15683] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1070.937529][T15683] usb 4-1: config 8 has an invalid interface number: 67 but max is 0 [ 1070.947492][T15683] usb 4-1: config 8 has no interface number 0 [ 1070.954293][T15683] usb 4-1: config 8 interface 67 has no altsetting 0 [ 1070.967249][T15683] usb 4-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.f7 [ 1071.006017][T15683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.094349][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 1071.102559][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.113872][T15683] usb 4-1: Product: syz [ 1071.127379][ T5909] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1071.136601][T15683] usb 4-1: Manufacturer: syz [ 1071.141247][T15683] usb 4-1: SerialNumber: syz [ 1071.162386][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.192887][ T5909] usb 2-1: config 0 descriptor?? [ 1071.627195][T20399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.735550][T20387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.745910][T20399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.805903][T20387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.864216][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1072.120669][T20407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.169471][T20407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.391435][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 1072.432324][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1072.552809][ T5909] usb 2-1: USB disconnect, device number 11 [ 1072.749790][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4084'. [ 1072.765843][T20412] libceph: resolve '0.0' (ret=-3): failed [ 1072.904029][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1073.226325][ T5888] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1073.456146][T20429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.498330][T20429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.517484][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 1073.526088][ T5888] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1073.534747][ T5888] usb 3-1: config 0 has no interface number 0 [ 1073.559538][ T5888] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1073.571544][ T5888] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1073.585878][ T5888] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1073.595329][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.603455][ T5888] usb 3-1: Product: syz [ 1073.609353][ T5888] usb 3-1: Manufacturer: syz [ 1073.614712][ T5888] usb 3-1: SerialNumber: syz [ 1073.675621][ T5888] usb 3-1: config 0 descriptor?? [ 1073.684933][T20420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.692396][T20420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.755890][T15683] usb 4-1: active config #8 != 1 ?? [ 1073.837519][T15683] usb 4-1: USB disconnect, device number 26 [ 1073.917623][T20420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.925664][T20420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.944111][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1074.663352][T20448] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 0, id = 0 [ 1074.984028][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1075.991658][T20459] fuse: Unknown parameter 'fd0x0000000000000004' [ 1076.024019][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1076.034252][ T5888] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1076.054073][ T5888] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1076.089034][ T5888] asix 3-1:0.251: probe with driver asix failed with error -71 [ 1076.149524][ T5888] usb 3-1: USB disconnect, device number 33 [ 1076.643752][T20468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1076.651873][T20468] IPv6: NLM_F_CREATE should be set when creating new route [ 1076.659209][T20468] IPv6: NLM_F_CREATE should be set when creating new route [ 1076.734164][ T24] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1076.897382][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1076.911300][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.930786][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1076.940304][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.972711][T20479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1077.048985][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'. [ 1077.063998][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1077.162075][ T24] usb 3-1: usb_control_msg returned -32 [ 1077.168011][ T24] usbtmc 3-1:16.0: can't read capabilities [ 1077.577803][T20493] bridge_slave_0: left allmulticast mode [ 1077.583523][T20493] bridge_slave_0: left promiscuous mode [ 1077.594112][T20493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.658831][T20499] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -32 [ 1077.689991][T20493] bridge_slave_1: left allmulticast mode [ 1077.696231][T20493] bridge_slave_1: left promiscuous mode [ 1077.703003][T20493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.749513][T20493] bond0: (slave bond_slave_0): Releasing backup interface [ 1077.774543][T20493] bond0: (slave bond_slave_1): Releasing backup interface [ 1077.801466][T20493] team0: Port device team_slave_0 removed [ 1077.819684][T20493] team0: Port device team_slave_1 removed [ 1077.828173][T20493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.842555][T20493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.848059][T20493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1078.104004][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1078.439687][ T5831] usb 3-1: USB disconnect, device number 34 [ 1078.505779][T20505] netlink: 'syz.1.4108': attribute type 10 has an invalid length. [ 1078.539760][T20505] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1078.565499][T20505] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1078.613256][T20505] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1079.144018][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1079.630498][T20517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1079.755127][T20517] kvm: emulating exchange as write [ 1080.014314][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1080.176674][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1080.185857][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1080.193247][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.278062][ T24] usb 2-1: config 0 descriptor?? [ 1080.295387][ T24] cp210x 2-1:0.0: cp210x converter detected [ 1080.334863][ T5910] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1080.498775][ T5910] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1080.508533][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.526311][ T5910] usb 3-1: Product: syz [ 1080.535642][ T5910] usb 3-1: Manufacturer: syz [ 1080.544479][ T5910] usb 3-1: SerialNumber: syz [ 1080.800348][T20537] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4118'. [ 1081.038108][ T5910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1081.069605][ T5910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1081.093503][ T5910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1081.124690][ T5910] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1081.224128][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1081.414442][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4121'. [ 1081.794826][ T5888] usb 3-1: USB disconnect, device number 35 [ 1082.164408][T13690] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1082.263992][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1082.324096][T13690] usb 6-1: device descriptor read/64, error -71 [ 1082.477443][ T24] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1082.528493][ T24] cp210x 2-1:0.0: querying part number failed [ 1082.556127][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1082.574184][T13690] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1082.589777][ T24] usb 2-1: USB disconnect, device number 12 [ 1082.602501][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1082.622131][ T24] cp210x 2-1:0.0: device disconnected [ 1082.718610][T13690] usb 6-1: device descriptor read/64, error -71 [ 1082.893720][ T30] audit: type=1326 audit(1763359326.279:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.2.4130" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 1083.050774][T20587] FAULT_INJECTION: forcing a failure. [ 1083.050774][T20587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.065386][T20587] CPU: 1 UID: 0 PID: 20587 Comm: syz.1.4132 Not tainted syzkaller #0 PREEMPT(full) [ 1083.065409][T20587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1083.065420][T20587] Call Trace: [ 1083.065428][T20587] [ 1083.065437][T20587] dump_stack_lvl+0x189/0x250 [ 1083.065465][T20587] ? __pfx____ratelimit+0x10/0x10 [ 1083.065489][T20587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1083.065516][T20587] ? __pfx__printk+0x10/0x10 [ 1083.065547][T20587] should_fail_ex+0x414/0x560 [ 1083.065577][T20587] _copy_to_user+0x31/0xb0 [ 1083.065602][T20587] simple_read_from_buffer+0xe1/0x170 [ 1083.065631][T20587] proc_fail_nth_read+0x1b3/0x220 [ 1083.065656][T20587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.065681][T20587] ? rw_verify_area+0x2a6/0x4d0 [ 1083.065703][T20587] ? __lock_acquire+0xab9/0xd20 [ 1083.065718][T20587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.065742][T20587] vfs_read+0x200/0xa30 [ 1083.065764][T20587] ? fdget_pos+0x247/0x320 [ 1083.065785][T20587] ? __pfx___mutex_lock+0x10/0x10 [ 1083.065809][T20587] ? __pfx_vfs_read+0x10/0x10 [ 1083.065833][T20587] ? __fget_files+0x2a/0x420 [ 1083.065854][T20587] ? __fget_files+0x3a0/0x420 [ 1083.065868][T20587] ? __fget_files+0x2a/0x420 [ 1083.065894][T20587] ksys_read+0x145/0x250 [ 1083.065914][T20587] ? exc_page_fault+0x82/0x100 [ 1083.065936][T20587] ? __pfx_ksys_read+0x10/0x10 [ 1083.065962][T20587] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1083.065987][T20587] ? lockdep_hardirqs_on+0x9c/0x150 [ 1083.066014][T20587] __do_fast_syscall_32+0xb6/0x2b0 [ 1083.066032][T20587] ? lockdep_hardirqs_on+0x9c/0x150 [ 1083.066060][T20587] do_fast_syscall_32+0x34/0x80 [ 1083.066076][T20587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1083.066097][T20587] RIP: 0023:0xf7f23539 [ 1083.066114][T20587] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1083.066130][T20587] RSP: 002b:00000000f53f5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1083.066157][T20587] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000f53f5620 [ 1083.066170][T20587] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 1083.066182][T20587] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1083.066194][T20587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1083.066205][T20587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1083.066235][T20587] [ 1083.313739][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1083.449902][T13690] usb usb6-port1: attempt power cycle [ 1083.836079][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4134'. [ 1083.889779][T13690] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1083.995248][T13690] usb 6-1: device descriptor read/8, error -71 [ 1084.304056][T13690] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1084.334877][T13690] usb 6-1: device descriptor read/8, error -71 [ 1084.344028][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1084.444335][T13690] usb usb6-port1: unable to enumerate USB device [ 1084.454372][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1084.594044][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1084.626590][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 1084.642909][ T5888] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.670244][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1084.748716][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.766760][ T24] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1084.792267][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1084.836343][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.854349][ T5888] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1084.908725][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.959483][ T5888] usb 2-1: config 0 descriptor?? [ 1085.384008][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1085.889733][T20618] sg_write: data in/out 97/10 bytes for SCSI command 0xfd-- guessing data in; [ 1085.889733][T20618] program syz.5.4141 not setting count and/or reply_len properly [ 1086.022865][T20624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4142'. [ 1086.184054][ T5831] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1086.390748][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 1086.401458][ T5831] usb 6-1: New USB device found, idVendor=05da, idProduct=00b6, bcdDevice=cd.b7 [ 1086.411172][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.423980][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1086.459574][ T5831] usb 6-1: Product: syz [ 1086.474098][ T5831] usb 6-1: Manufacturer: syz [ 1086.483156][ T5831] usb 6-1: SerialNumber: syz [ 1086.498306][ T5831] usb 6-1: config 0 descriptor?? [ 1086.518588][ T5831] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1086.737367][T20618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.749325][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1086.763296][T20618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.788709][T15683] usb 6-1: USB disconnect, device number 21 [ 1086.934117][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1086.943193][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 1086.956806][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.970199][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1086.999449][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1087.014759][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.025128][ T5888] usb 2-1: USB disconnect, device number 13 [ 1087.061879][ T10] usb 4-1: config 0 descriptor?? [ 1087.347887][T20641] netlink: 'syz.4.4149': attribute type 8 has an invalid length. [ 1087.463998][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1087.498724][ T10] mcp2221 0003:04D8:00DD.0041: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1087.554895][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1087.674565][ T5831] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1087.690440][ T10] usb 3-1: USB disconnect, device number 36 [ 1087.726719][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1087.731045][ T24] usb 4-1: USB disconnect, device number 27 [ 1087.747898][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1087.756006][ T5888] usb 2-1: can't read configurations, error -71 [ 1087.844100][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 1087.851109][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1087.870022][ T5831] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1087.883091][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.899756][ T5831] usb 6-1: config 0 descriptor?? [ 1087.920091][ T5831] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input64 [ 1088.079118][T20663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.090383][T20663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.170365][ T5184] bcm5974 6-1:0.0: could not read from device [ 1088.185420][ T5831] bcm5974 6-1:0.0: could not read from device [ 1088.196510][ T5184] bcm5974 6-1:0.0: could not read from device [ 1088.204553][ T5831] input: failed to attach handler mousedev to device input64, error: -5 [ 1088.217853][ T5184] bcm5974 6-1:0.0: could not read from device [ 1088.228056][ T5831] usb 6-1: USB disconnect, device number 22 [ 1088.229394][ T5184] bcm5974 6-1:0.0: could not read from device [ 1088.504057][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1089.543991][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1090.080514][T20724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.102083][T20724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.584002][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1090.656184][T20750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1090.692277][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4198'. [ 1090.732984][T20755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4200'. [ 1090.766606][T20757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.784524][T20757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.972909][T20765] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4203'. [ 1090.981677][T20761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.033811][T20761] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1091.060864][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4206'. [ 1091.074454][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4206'. [ 1091.083417][T20767] netlink: 'syz.1.4206': attribute type 14 has an invalid length. [ 1091.109354][T20767] netlink: 'syz.1.4206': attribute type 13 has an invalid length. [ 1091.412992][T20765] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1091.417718][T20778] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1091.437148][T20765] bond0 (unregistering): Released all slaves [ 1091.624010][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1092.454451][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1092.582363][T20834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.596338][T20834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.640930][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1092.654526][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1092.664002][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1092.684096][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1092.706990][ T24] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1092.716429][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.734425][ T24] usb 6-1: Product: syz [ 1092.738657][ T24] usb 6-1: Manufacturer: syz [ 1092.743282][ T24] usb 6-1: SerialNumber: syz [ 1092.782748][ T24] usb 6-1: config 0 descriptor?? [ 1092.791093][ T24] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 1093.007061][ T5888] usb 6-1: USB disconnect, device number 23 [ 1093.148931][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'. [ 1093.351164][T20866] netlink: 'syz.2.4251': attribute type 75 has an invalid length. [ 1093.462160][T20871] PM: Enabling pm_trace changes system date and time during resume. [ 1093.462160][T20871] PM: Correct system time has to be restored manually after resume. [ 1093.495506][T20873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4256'. [ 1093.657027][T20877] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1093.663591][T20877] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1093.678421][T20877] vhci_hcd vhci_hcd.0: Device attached [ 1093.704003][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1093.794775][T20879] vhci_hcd: connection closed [ 1093.798495][T11177] vhci_hcd: stop threads [ 1093.820433][T11177] vhci_hcd: release socket [ 1093.829568][T11177] vhci_hcd: disconnect device [ 1093.854298][T13690] vhci_hcd: vhci_device speed not set [ 1093.856623][T20891] netlink: 'syz.2.4264': attribute type 1 has an invalid length. [ 1094.744025][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1094.992391][T20941] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4286'. [ 1095.204842][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1095.260705][T20953] netlink: 'syz.4.4291': attribute type 5 has an invalid length. [ 1095.387788][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1095.406234][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1095.425149][ T10] usb 3-1: config 0 has no interface number 0 [ 1095.431930][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1095.473494][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1095.499295][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1095.509234][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1095.519363][ T10] usb 3-1: Product: syz [ 1095.523886][ T10] usb 3-1: SerialNumber: syz [ 1095.534668][ T10] usb 3-1: config 0 descriptor?? [ 1095.547615][ T10] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1095.557194][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input65 [ 1095.778616][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1095.793989][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1095.994881][ T10] usb 3-1: USB disconnect, device number 37 [ 1096.033501][ T10] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1096.183291][T20992] sctp: [Deprecated]: syz.4.4310 (pid 20992) Use of int in max_burst socket option. [ 1096.183291][T20992] Use struct sctp_assoc_value instead [ 1096.358024][T20997] netlink: 'syz.5.4313': attribute type 196 has an invalid length. [ 1096.823996][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1096.939444][T21032] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4330'. [ 1097.681824][T21070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4348'. [ 1097.812167][T21076] binder: 21075:21076 ioctl c018620c 80000080 returned -22 [ 1097.836559][T15683] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1097.864130][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1098.006936][T15683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.019163][T15683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.039452][T15683] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1098.059631][T15683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.086252][T15683] usb 6-1: config 0 descriptor?? [ 1098.150978][T21090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.162598][T21090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.521701][T15683] cp2112 0003:10C4:EA90.0042: unknown main item tag 0x0 [ 1098.548534][T15683] cp2112 0003:10C4:EA90.0042: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1098.712383][T15683] cp2112 0003:10C4:EA90.0042: error requesting version [ 1098.768432][T15683] cp2112 0003:10C4:EA90.0042: probe with driver cp2112 failed with error -71 [ 1098.799799][T15683] usb 6-1: USB disconnect, device number 24 [ 1098.904065][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1099.046305][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1099.664153][T15683] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1099.674065][ T5831] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1099.834037][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 1099.836445][T15683] usb 2-1: Using ep0 maxpacket: 16 [ 1099.841547][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1099.852880][T15683] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.854224][ T5831] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1099.865014][T15683] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1099.883384][ T5831] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.906824][ T5831] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1099.919549][T15683] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1099.926853][ T5831] usb 4-1: config 128 has no interface number 0 [ 1099.943828][ T5831] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1099.955228][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1099.957121][T15683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.975526][ T5831] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.009633][ T5831] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1100.011610][T15683] usb 2-1: config 0 descriptor?? [ 1100.046468][ T5831] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1100.059662][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.076078][ T5831] usb 4-1: Product: syz [ 1100.085877][ T5831] usb 4-1: Manufacturer: syz [ 1100.108879][ T5831] usb 4-1: SerialNumber: syz [ 1100.414308][ T5831] usb 4-1: USB disconnect, device number 28 [ 1100.468289][T15683] thrustmaster 0003:044F:B304.0043: item fetching failed at offset 5/7 [ 1100.493546][T15683] thrustmaster 0003:044F:B304.0043: parse failed [ 1100.503491][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1100.514281][T15683] thrustmaster 0003:044F:B304.0043: probe with driver thrustmaster failed with error -22 [ 1100.594554][T21174] sg_write: data in/out 262114/14 bytes for SCSI command 0x2-- guessing data in; [ 1100.594554][T21174] program syz.2.4395 not setting count and/or reply_len properly [ 1100.700455][T15683] usb 2-1: USB disconnect, device number 16 [ 1100.833848][ T5831] IPVS: starting estimator thread 0... [ 1100.924108][T21188] IPVS: using max 36 ests per chain, 86400 per kthread [ 1100.983992][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1101.135399][T21202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4409'. [ 1101.342281][T21207] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1101.538666][T21215] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1101.550131][T21215] ksmbd: Unknown IPC event: 3, ignore. [ 1101.713201][T21224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.744494][T21224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.876621][T21234] input: syz0 as /devices/virtual/input/input66 [ 1102.024011][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1102.507062][T21170] Bluetooth: hci3: command 0x0406 tx timeout [ 1102.658457][T21276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4444'. [ 1102.668392][T21276] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1102.677441][T21277] input: syz0 as /devices/virtual/input/input67 [ 1102.942648][T21287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.977279][T21287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.064083][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1103.314241][ T5831] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1103.484262][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 1103.491610][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.503600][ T5831] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1103.506721][T21301] batadv_slave_0: left promiscuous mode [ 1103.514862][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.523022][T21301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.535835][ T5831] usb 2-1: config 0 descriptor?? [ 1103.552265][T21301] xfrm0: left promiscuous mode [ 1103.557908][T21301] xfrm0: left allmulticast mode [ 1103.740541][ T1147] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.763491][ T1147] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.783093][ T1147] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.805510][ T1147] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.979786][ T5831] cypress 0003:04B4:07B1.0044: unknown main item tag 0x1 [ 1103.987504][ T5831] cypress 0003:04B4:07B1.0044: item fetching failed at offset 1/5 [ 1103.996925][ T5831] cypress 0003:04B4:07B1.0044: parse failed [ 1104.003228][ T5831] cypress 0003:04B4:07B1.0044: probe with driver cypress failed with error -22 [ 1104.104033][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1104.127923][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4462'. [ 1104.198424][ T5831] usb 2-1: USB disconnect, device number 17 [ 1104.714146][ T5888] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1104.884822][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 1104.892430][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1104.918882][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.940960][ T5888] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1104.960349][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.994434][ T5888] usb 6-1: config 0 descriptor?? [ 1105.144202][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1105.316141][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1105.437634][ T5888] pantherlord 0003:0E8F:0003.0045: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.5-1/input0 [ 1105.474195][ T5888] pantherlord 0003:0E8F:0003.0045: no output reports found [ 1105.487351][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1105.505994][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1105.524135][ T24] usb 3-1: config 0 has no interface number 0 [ 1105.535210][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1105.560443][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1105.570237][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1105.579841][ T24] usb 3-1: Product: syz [ 1105.589975][ T24] usb 3-1: SerialNumber: syz [ 1105.605560][ T24] usb 3-1: config 0 descriptor?? [ 1105.622849][ T24] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 1105.629991][ T10] usb 6-1: USB disconnect, device number 25 [ 1105.639257][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input68 [ 1105.828446][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1105.835038][T15683] usb 3-1: USB disconnect, device number 38 [ 1105.835434][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1105.855917][T15683] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1105.929949][T21374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.943458][T21374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.960368][T21374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.971819][T21374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.183991][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1106.501444][ T30] audit: type=1326 audit(1763359349.979:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.2.4496" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x0 [ 1106.599024][T21395] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1106.724052][T13690] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1106.792325][T21406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.836894][T21406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.884101][T13690] usb 2-1: Using ep0 maxpacket: 32 [ 1106.892753][T13690] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1106.903171][T13690] usb 2-1: config 0 has no interface number 0 [ 1106.912467][T13690] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1106.935410][T13690] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1106.951412][T13690] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1106.960812][T13690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.969732][T13690] usb 2-1: Product: syz [ 1106.974617][T13690] usb 2-1: Manufacturer: syz [ 1106.979234][T13690] usb 2-1: SerialNumber: syz [ 1106.988440][T13690] usb 2-1: config 0 descriptor?? [ 1107.190477][T21403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.199824][T21403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.224004][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1107.375134][T21425] netlink: 'syz.5.4512': attribute type 4 has an invalid length. [ 1107.409155][T13690] appletouch 2-1:0.85: Failed to request geyser raw mode [ 1107.417235][T13690] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1107.435534][T13690] usb 2-1: USB disconnect, device number 18 [ 1107.736559][T21440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4519'. [ 1107.888527][T21447] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1108.264015][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1108.481208][T21461] macvtap1: entered promiscuous mode [ 1108.510595][T21461] macvtap1: entered allmulticast mode [ 1108.855932][T21461] dummy0: entered promiscuous mode [ 1108.861161][T21461] dummy0: entered allmulticast mode [ 1109.010315][T21461] team0: Device macvtap1 failed to register rx_handler [ 1109.041501][T21471] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4532'. [ 1109.052703][T21461] dummy0: left allmulticast mode [ 1109.084358][T21461] dummy0: left promiscuous mode [ 1109.173227][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1109.304039][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1109.428145][T21486] pimreg: entered allmulticast mode [ 1109.494029][T13690] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1109.646386][T13690] usb 4-1: Using ep0 maxpacket: 16 [ 1109.666439][T13690] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1109.681698][T13690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.701284][T13690] usb 4-1: Product: syz [ 1109.712321][T13690] usb 4-1: Manufacturer: syz [ 1109.759699][T13690] usb 4-1: SerialNumber: syz [ 1109.776962][T13690] usb 4-1: config 0 descriptor?? [ 1109.824702][T13690] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1109.841239][T13690] usb 4-1: Detected FT232H [ 1109.986657][T13690] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1110.033384][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4554'. [ 1110.172060][T21523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.185627][T21523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.343991][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1110.446116][T13690] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1110.617388][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4565'. [ 1110.633499][T13690] usb 4-1: USB disconnect, device number 29 [ 1110.649239][T13690] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1110.683190][T13690] ftdi_sio 4-1:0.0: device disconnected [ 1111.384030][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1112.167216][T21585] lo: entered allmulticast mode [ 1112.423999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1112.782928][T21608] netlink: 494 bytes leftover after parsing attributes in process `syz.5.4595'. [ 1113.010716][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4600'. [ 1113.124506][T13690] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1113.154571][ T5831] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 1113.284394][T13690] usb 2-1: Using ep0 maxpacket: 16 [ 1113.294318][T21632] usb usb8: usbfs: process 21632 (syz.3.4607) did not claim interface 0 before use [ 1113.308239][T13690] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1113.319893][ T5831] usb 3-1: config 15 has an invalid interface number: 7 but max is 0 [ 1113.330310][T13690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.344048][ T5831] usb 3-1: config 15 has no interface number 0 [ 1113.354212][ T5831] usb 3-1: config 15 interface 7 altsetting 54 endpoint 0x8 is Bulk; changing to Interrupt [ 1113.364498][T13690] usb 2-1: Product: syz [ 1113.368674][T13690] usb 2-1: Manufacturer: syz [ 1113.373274][T13690] usb 2-1: SerialNumber: syz [ 1113.384017][ T5831] usb 3-1: config 15 interface 7 has no altsetting 0 [ 1113.393571][T13690] usb 2-1: config 0 descriptor?? [ 1113.403061][ T5831] usb 3-1: string descriptor 0 read error: -22 [ 1113.412494][ T5831] usb 3-1: New USB device found, idVendor=22b8, idProduct=7000, bcdDevice=60.09 [ 1113.423023][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.436092][T21614] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1113.474026][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1113.605670][T13690] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1113.613371][T13690] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1113.614339][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1113.656430][T13690] usb 3-1: USB disconnect, device number 39 [ 1113.819376][T15683] usb 2-1: USB disconnect, device number 19 [ 1113.825627][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1113.835965][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1113.847297][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1113.859418][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1113.879781][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1113.889487][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.898505][ T10] usb 6-1: Product: syz [ 1113.902944][ T10] usb 6-1: Manufacturer: syz [ 1113.908248][ T10] usb 6-1: SerialNumber: syz [ 1113.917138][ T10] usb 6-1: config 0 descriptor?? [ 1113.926426][ T10] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1113.938251][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1114.142999][T15683] usb 6-1: USB disconnect, device number 26 [ 1114.504056][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1114.708213][T21657] netlink: 664 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1114.868343][T13690] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1115.024045][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1115.035879][T13690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.087564][T13690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.112479][T13690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1115.127921][T13690] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1115.140200][T13690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.159098][T13690] usb 3-1: config 0 descriptor?? [ 1115.184217][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1115.191594][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.214110][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1115.244373][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.266038][ T24] usb 6-1: config 0 descriptor?? [ 1115.482496][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1115.544013][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1115.583853][T13690] plantronics 0003:047F:FFFF.0046: item 0 0 0 9 parsing failed [ 1115.604567][T13690] plantronics 0003:047F:FFFF.0046: parse failed [ 1115.621564][T13690] plantronics 0003:047F:FFFF.0046: probe with driver plantronics failed with error -22 [ 1115.718786][ T10] usb 6-1: USB disconnect, device number 27 [ 1115.791115][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.799975][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.912498][ T10] usb 3-1: USB disconnect, device number 40 [ 1116.130084][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1116.584030][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1116.814464][ T5831] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1116.989972][ T5831] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1117.003748][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1117.038372][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1117.077352][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1117.110824][ T5831] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1117.161048][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.182144][ T5831] usb 2-1: config 0 descriptor?? [ 1117.200208][T21702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1117.560576][T21751] netlink: 'syz.4.4661': attribute type 1 has an invalid length. [ 1117.628943][ T5831] plantronics 0003:047F:FFFF.0047: reserved main item tag 0xd [ 1117.636562][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1117.699995][ T5831] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1117.916782][ T5831] usb 2-1: USB disconnect, device number 20 [ 1118.310667][T21778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'. [ 1118.663988][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1119.060269][T21808] netlink: 'syz.2.4686': attribute type 1 has an invalid length. [ 1119.172273][T21808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.328107][T21812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.347266][T21812] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1119.380512][T21812] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 1119.460239][T21814] vlan0: entered allmulticast mode [ 1119.486891][T21829] netlink: 'syz.5.4694': attribute type 4 has an invalid length. [ 1119.494910][T21814] team0: entered allmulticast mode [ 1119.504065][T21814] team_slave_0: entered allmulticast mode [ 1119.520708][T21814] team_slave_1: entered allmulticast mode [ 1119.529407][T21814] bond0: (slave vlan0): Opening slave failed [ 1119.536969][T21829] netlink: 'syz.5.4694': attribute type 5 has an invalid length. [ 1119.552637][T21829] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1119.704126][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1119.798758][T21841] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1119.829339][T21847] fuse: Invalid uid '00000000000000000003' [ 1119.861002][T21841] bond1 (unregistering): Released all slaves [ 1120.524222][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1120.614143][ T5910] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1120.684095][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1120.709628][ T24] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1120.729059][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.744021][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1120.756445][ T24] usb 2-1: Product: syz [ 1120.760656][ T24] usb 2-1: Manufacturer: syz [ 1120.776551][ T24] usb 2-1: SerialNumber: syz [ 1120.784332][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1120.806980][ T24] usb 2-1: config 0 descriptor?? [ 1120.822555][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1120.837703][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1120.850410][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1120.858896][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.884234][ T5910] usb 4-1: config 0 descriptor?? [ 1120.885618][T21897] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1121.063087][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4729'. [ 1121.108749][ T5910] usb 4-1: USB disconnect, device number 30 [ 1121.257971][T21911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.270400][T21911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.497248][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4739'. [ 1121.507775][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4739'. [ 1121.674683][ T24] gspca_stk1135: reg_w 0x5 err -71 [ 1121.680930][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1121.703468][ T24] gspca_stk1135: Sensor write failed [ 1121.713733][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1121.721216][ T24] gspca_stk1135: Sensor write failed [ 1121.733583][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1121.742886][ T24] gspca_stk1135: Sensor read failed [ 1121.754424][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1121.762610][ T24] gspca_stk1135: Sensor read failed [ 1121.774235][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 1121.780906][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1121.787369][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1121.850165][ T24] gspca_stk1135: Sensor read failed [ 1121.862821][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1121.893547][ T24] gspca_stk1135: Sensor read failed [ 1121.909388][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1121.924873][ T24] gspca_stk1135: Sensor write failed [ 1121.930242][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1121.956096][ T24] gspca_stk1135: Sensor write failed [ 1121.964526][ T24] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1121.990127][ T24] usb 2-1: USB disconnect, device number 21 [ 1122.284278][ T5910] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1122.469781][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1122.500351][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.515843][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1122.537810][ T5910] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1122.554143][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.576742][ T5910] usb 6-1: config 0 descriptor?? [ 1122.680466][T21969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4758'. [ 1122.722535][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4758'. [ 1122.775006][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4760'. [ 1122.786315][T21973] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4760'. [ 1122.834021][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1122.993325][T21976] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1123.017806][ T5910] steelseries 0003:1038:1410.0048: not enough fields in HID_OUTPUT_REPORT 0 [ 1123.030811][T21976] bond1 (unregistering): Released all slaves [ 1123.206272][T21982] program syz.4.4764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1123.228285][ T5910] usb 6-1: USB disconnect, device number 28 [ 1123.863999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1124.284410][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1124.464403][ T24] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1124.464589][ T5888] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1124.483152][ T24] usb 2-1: config 0 has no interface number 0 [ 1124.497868][ T24] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1124.519294][ T24] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1124.533572][ T24] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1124.540761][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1124.580600][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.622011][ T24] usb 2-1: config 0 descriptor?? [ 1124.645625][ T24] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 1124.851044][ T24] usb 2-1: USB disconnect, device number 22 [ 1124.894442][ T5910] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1124.904026][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1124.917630][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1124.929251][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1124.962764][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1125.006774][ T5888] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1125.033110][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.062480][ T5888] usb 6-1: Product: syz [ 1125.085777][ T5888] usb 6-1: Manufacturer: syz [ 1125.090458][ T5888] usb 6-1: SerialNumber: syz [ 1125.104222][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 1125.110682][ T5888] usb 6-1: config 0 descriptor?? [ 1125.115816][ T5910] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1125.115846][ T5910] usb 4-1: config 0 has no interface number 0 [ 1125.118047][ T5910] usb 4-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 1125.166370][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.175705][ T5910] usb 4-1: Product: syz [ 1125.179955][ T5910] usb 4-1: Manufacturer: syz [ 1125.185724][ T5910] usb 4-1: SerialNumber: syz [ 1125.203105][ T5910] usb 4-1: config 0 descriptor?? [ 1125.214788][ T5910] usb-storage 4-1:0.107: USB Mass Storage device detected [ 1125.239049][ T5910] usb-storage 4-1:0.107: Quirks match for vid 04b8 pid 0602: 1 [ 1125.263339][ T30] audit: type=1326 audit(1763359368.739:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.2.4799" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x0 [ 1125.430017][ T5910] usb 4-1: USB disconnect, device number 31 [ 1125.516562][ T24] usb 6-1: USB disconnect, device number 29 [ 1125.848751][T22085] __nla_validate_parse: 1 callbacks suppressed [ 1125.848765][T22085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4809'. [ 1125.939006][T22087] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1125.946009][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1126.161388][T22093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.184608][T22093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.977909][T22114] netlink: 'syz.3.4831': attribute type 2 has an invalid length. [ 1126.993991][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1127.017789][T22114] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4831'. [ 1128.023993][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1128.886021][T21170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1128.899087][T21170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1128.909318][T21170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1128.926152][T21170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1128.954311][T21170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1129.063990][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1129.173309][ T5888] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1129.240531][ T5888] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1129.252513][T22011] syz_tun (unregistering): left allmulticast mode [ 1129.270205][T22011] syz_tun (unregistering): left promiscuous mode [ 1129.294477][T22011] bridge0: port 3(syz_tun) entered disabled state [ 1129.536953][T22196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 1129.589729][ T3539] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.738463][ T3539] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.867321][ T3539] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.004447][ T3539] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.113992][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1130.325448][T22184] chnl_net:caif_netlink_parms(): no params data found [ 1130.580972][ T3539] bridge_slave_1: left allmulticast mode [ 1130.605549][ T3539] bridge_slave_1: left promiscuous mode [ 1130.643153][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.746976][ T3539] : left allmulticast mode [ 1130.751536][ T3539] : left promiscuous mode [ 1130.772584][ T3539] bridge0: port 1() entered disabled state [ 1131.071496][ T5825] Bluetooth: hci4: command tx timeout [ 1131.155814][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1131.790830][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.828376][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.866024][ T3539] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1131.887130][ T3539] bond0 (unregistering): Released all slaves [ 1131.949750][T22239] kthread_run failed with err -4 [ 1131.995734][T22262] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1132.037455][T22262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1132.184006][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1132.228964][ T3539] IPVS: stopping backup sync thread 11942 ... [ 1132.358094][T22184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.372031][T22184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.410992][T22184] bridge_slave_0: entered allmulticast mode [ 1132.464329][T22184] bridge_slave_0: entered promiscuous mode [ 1132.644163][T22184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.684272][T22184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.710447][T22184] bridge_slave_1: entered allmulticast mode [ 1132.727707][T22184] bridge_slave_1: entered promiscuous mode [ 1132.976155][T22184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.092000][ T3539] hsr_slave_0: left promiscuous mode [ 1133.128487][ T3539] hsr_slave_1: left promiscuous mode [ 1133.157368][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.165156][ T5825] Bluetooth: hci4: command tx timeout [ 1133.197187][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.224017][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1133.265231][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.282962][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.388776][ T3539] veth1_macvtap: left promiscuous mode [ 1133.417783][ T3539] veth0_macvtap: left promiscuous mode [ 1133.423509][ T3539] veth1_vlan: left promiscuous mode [ 1133.459496][ T3539] veth0_vlan: left promiscuous mode [ 1133.577051][T22325] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4901'. [ 1134.263986][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1134.314005][ T5910] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1134.476398][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.490966][ T5910] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1134.516337][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.534091][ T5910] usb 3-1: Product: syz [ 1134.551215][ T5910] usb 3-1: Manufacturer: syz [ 1134.556721][ T5910] usb 3-1: SerialNumber: syz [ 1134.565418][ T5910] usb 3-1: config 0 descriptor?? [ 1134.629680][ T5910] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1134.684468][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1134.783447][ T5910] usb 3-1: USB disconnect, device number 41 [ 1134.981518][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 1135.060029][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 1135.099194][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1135.231718][ T5825] Bluetooth: hci4: command tx timeout [ 1135.314047][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1135.397234][T22375] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4919'. [ 1135.532479][ T3539] team0 (unregistering): Port device dummy0 removed [ 1135.767176][T22184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.777902][T22342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1135.916717][T22184] team0: Port device team_slave_0 added [ 1135.935115][T22184] team0: Port device team_slave_1 added [ 1135.967249][T22389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4923'. [ 1136.040293][T22184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.067249][T22184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.116325][T22184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.131116][T22184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.208034][T22184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.276830][T22184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.344018][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1136.472495][T22184] hsr_slave_0: entered promiscuous mode [ 1136.512206][T22184] hsr_slave_1: entered promiscuous mode [ 1136.519641][T22184] debugfs: 'hsr0' already exists in 'hsr' [ 1136.528887][T22184] Cannot create hsr debugfs directory [ 1136.574068][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1136.727127][ T3539] IPVS: stop unused estimator thread 0... [ 1136.744538][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1136.757991][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1136.781957][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1136.812336][ T10] usb 4-1: config 1 has no interface number 1 [ 1136.853140][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1136.886116][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1136.903874][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.935660][ T10] usb 4-1: Product: syz [ 1136.954396][ T10] usb 4-1: Manufacturer: syz [ 1136.959040][ T10] usb 4-1: SerialNumber: syz [ 1137.244824][ T10] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1137.266252][ T10] usb 4-1: 2:1 : sample bitwidth 104 in over sample bytes 6 [ 1137.273603][ T10] usb 4-1: 2:1 : unsupported sample bitwidth 104 in 6 bytes [ 1137.314601][ T5825] Bluetooth: hci4: command tx timeout [ 1137.359547][ T10] usb 4-1: USB disconnect, device number 32 [ 1137.384350][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1137.426828][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1137.966539][T22184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1138.024401][T22184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1138.050131][T22184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1138.097033][T22184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1138.424179][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1138.499500][T22184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.511900][T22506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4967'. [ 1138.565803][T22184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.600125][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.607430][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.689563][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.696817][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.900451][T22184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.017030][T22184] veth0_vlan: entered promiscuous mode [ 1139.047969][T22184] veth1_vlan: entered promiscuous mode [ 1139.093386][T22184] veth0_macvtap: entered promiscuous mode [ 1139.123129][T22184] veth1_macvtap: entered promiscuous mode [ 1139.167560][T22184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.194690][T22184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.217157][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1139.228581][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.238555][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.291751][T22539] program syz.3.4978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1139.313887][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.354654][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.405701][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1139.445031][ T24] usb 3-1: config 7 has an invalid interface number: 152 but max is 0 [ 1139.464315][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1139.492724][ T24] usb 3-1: config 7 has no interface number 0 [ 1139.516831][ T24] usb 3-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 1139.564062][ T24] usb 3-1: config 7 interface 152 altsetting 190 bulk endpoint 0x2 has invalid maxpacket 8 [ 1139.589807][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.599983][ T24] usb 3-1: config 7 interface 152 has no altsetting 0 [ 1139.623183][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.624698][ T24] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 1139.670495][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.690580][ T24] usb 3-1: Product: syz [ 1139.710837][ T24] usb 3-1: Manufacturer: syz [ 1139.715190][T22554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4983'. [ 1139.726397][ T24] usb 3-1: SerialNumber: syz [ 1139.732709][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.758955][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.767516][T22529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1139.810541][T22556] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1140.017955][ T24] usbtest 3-1:7.152: couldn't get endpoints, -71 [ 1140.035179][ T24] usbtest 3-1:7.152: probe with driver usbtest failed with error -71 [ 1140.084764][ T24] usb 3-1: USB disconnect, device number 42 [ 1140.278370][T22572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4988'. [ 1140.357268][T22572] tc_dump_action: action bad kind [ 1140.503989][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1141.179623][T22606] picdev_read: 1 callbacks suppressed [ 1141.179642][T22606] kvm: pic: non byte read [ 1141.191537][T22606] kvm: pic: non byte read [ 1141.197271][T22606] pic_ioport_write: 1 callbacks suppressed [ 1141.197287][T22606] kvm: pic: level sensitive irq not supported [ 1141.205190][T22606] kvm: pic: non byte read [ 1141.234487][T22606] kvm: pic: level sensitive irq not supported [ 1141.234553][T22606] kvm: pic: non byte read [ 1141.260109][T22606] kvm: pic: non byte read [ 1141.286708][T22606] kvm: pic: non byte read [ 1141.312638][T22606] kvm: pic: non byte read [ 1141.329264][T22606] kvm: pic: non byte read [ 1141.347757][T22606] kvm: pic: non byte read [ 1141.544111][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1141.574035][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1141.647540][T22631] program syz.1.5009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1141.756396][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.773987][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.824311][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1141.851663][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.887289][ T24] usb 6-1: config 0 descriptor?? [ 1142.328825][ T24] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0 [ 1142.352001][ T24] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0 [ 1142.362714][ T24] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0 [ 1142.396625][ T24] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0 [ 1142.417856][ T24] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0 [ 1142.454515][ T24] playstation 0003:054C:0DF2.004A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 1142.464040][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1142.555054][ T24] playstation 0003:054C:0DF2.004A: Invalid byte count transferred, expected 20 got 0 [ 1142.579910][ T24] playstation 0003:054C:0DF2.004A: Failed to retrieve DualSense pairing info: -22 [ 1142.589377][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1142.638983][ T24] playstation 0003:054C:0DF2.004A: Failed to get MAC address from DualSense [ 1142.646420][ T10] usb 4-1: config 0 has an invalid interface number: 187 but max is 0 [ 1142.651431][ T24] playstation 0003:054C:0DF2.004A: Failed to create dualsense. [ 1142.671311][ T10] usb 4-1: config 0 has no interface number 0 [ 1142.684078][ T10] usb 4-1: config 0 interface 187 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1142.719984][ T24] playstation 0003:054C:0DF2.004A: probe with driver playstation failed with error -22 [ 1142.770121][ T10] usb 4-1: New USB device found, idVendor=0846, idProduct=5f01, bcdDevice=dc.24 [ 1142.783208][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.793714][ T10] usb 4-1: Product: syz [ 1142.798326][ T10] usb 4-1: Manufacturer: syz [ 1142.802956][ T10] usb 4-1: SerialNumber: syz [ 1142.854551][ T24] usb 6-1: USB disconnect, device number 30 [ 1142.895737][ T10] usb 4-1: config 0 descriptor?? [ 1142.937783][T22664] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1142.958846][ T10] usb 4-1: Could not find all expected endpoints [ 1143.164435][ T24] usb 4-1: USB disconnect, device number 33 [ 1143.634002][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1144.180546][T22725] netlink: 'syz.2.5039': attribute type 21 has an invalid length. [ 1144.194405][T22725] netlink: 'syz.2.5039': attribute type 1 has an invalid length. [ 1144.230608][T22725] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1144.534042][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1144.663987][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1144.684127][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1144.691052][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1144.714518][ T10] usb 2-1: config 0 has no interface number 0 [ 1144.734252][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1144.765259][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1144.784033][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.802311][ T10] usb 2-1: Product: syz [ 1144.812446][ T10] usb 2-1: Manufacturer: syz [ 1144.822575][ T10] usb 2-1: SerialNumber: syz [ 1144.835699][ T10] usb 2-1: config 0 descriptor?? [ 1144.865951][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1144.893973][ T10] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1145.236348][T22743] netlink: 'syz.3.5050': attribute type 1 has an invalid length. [ 1145.255511][T22743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.262855][T22743] IPv6: NLM_F_CREATE should be set when creating new route [ 1145.270225][T22743] IPv6: NLM_F_CREATE should be set when creating new route [ 1145.444669][T22745] netlink: 'syz.3.5050': attribute type 1 has an invalid length. [ 1145.493677][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1145.534223][T22745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.704024][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1146.158229][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1146.170353][ T10] em28xx 2-1:0.89: board has no eeprom [ 1146.207318][T22761] netlink: 'syz.5.5057': attribute type 4 has an invalid length. [ 1146.244031][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1146.252477][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 1146.278141][T15683] em28xx 2-1:0.89: Registering V4L2 extension [ 1146.307457][ T10] usb 2-1: USB disconnect, device number 23 [ 1146.340783][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 1146.385755][T15683] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1146.403647][T15683] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1146.430731][T15683] em28xx 2-1:0.89: No AC97 audio processor [ 1146.466166][T15683] usb 2-1: Decoder not found [ 1146.470806][T15683] em28xx 2-1:0.89: failed to create media graph [ 1146.487762][T15683] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1146.520818][T15683] em28xx 2-1:0.89: Registering snapshot button... [ 1146.545361][T15683] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input72 [ 1146.607095][T15683] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1146.636873][ T10] em28xx 2-1:0.89: Closing input extension [ 1146.657150][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 1146.744045][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1146.766410][ T10] em28xx 2-1:0.89: Freeing device [ 1147.794114][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1147.801792][ T5910] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1147.964270][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 1147.982685][ T5910] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1148.010241][ T5910] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1148.028389][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.064846][ T5910] usb 4-1: Product: syz [ 1148.069155][ T5910] usb 4-1: Manufacturer: syz [ 1148.080716][ T5910] usb 4-1: SerialNumber: syz [ 1148.093871][ T5910] usb 4-1: config 0 descriptor?? [ 1148.121602][ T5910] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1148.146834][ T5910] usb 4-1: setting power ON [ 1148.158569][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 1148.192266][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1148.230965][ T5910] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1148.255921][ T5910] usb 4-1: media controller created [ 1148.299513][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1148.406079][ T5910] usb 4-1: selecting invalid altsetting 6 [ 1148.461691][ T5910] usb 4-1: digital interface selection failed (-22) [ 1148.498801][ T5910] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1148.524883][ T5910] usb 4-1: setting power OFF [ 1148.538197][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 1148.554035][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1148.570853][ T5910] (NULL device *): no alternate interface [ 1148.609257][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1148.633465][ T5910] usb 4-1: USB disconnect, device number 34 [ 1148.834024][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1149.285318][T22848] syzkaller1: entered promiscuous mode [ 1149.291025][T22848] syzkaller1: entered allmulticast mode [ 1149.485747][T22857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1149.635035][T22863] loop4: detected capacity change from 0 to 7 [ 1149.649075][ T5995] Dev loop4: unable to read RDB block 7 [ 1149.664943][ T5995] loop4: unable to read partition table [ 1149.672088][ T5995] loop4: partition table beyond EOD, truncated [ 1149.715653][T22863] Dev loop4: unable to read RDB block 7 [ 1149.737099][T22863] loop4: unable to read partition table [ 1149.765051][T22863] loop4: partition table beyond EOD, truncated [ 1149.791104][T22863] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1149.864005][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1149.943344][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 1149.980129][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 1150.032060][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5112'. [ 1150.033672][T22874] bond0: entered promiscuous mode [ 1150.059222][T22874] bond0: entered allmulticast mode [ 1150.073007][T22872] macvlan2: entered promiscuous mode [ 1150.094759][T22872] macvlan2: entered allmulticast mode [ 1150.115655][T22872] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1150.738470][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5125'. [ 1150.847310][T22918] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5127'. [ 1150.875787][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5127'. [ 1150.904080][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1151.104470][ T10] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 1151.278784][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1151.294219][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.344258][ T10] usb 3-1: config 0 descriptor?? [ 1151.359812][ T10] asix 3-1:0.0: probe with driver asix failed with error -22 [ 1151.598710][T22957] program syz.4.5146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1151.916807][T22970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5151'. [ 1151.943995][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1152.544197][ T5831] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1152.714698][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 1152.731963][ T5831] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1152.748005][ T5831] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1152.774302][ T5831] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1152.805237][ T5831] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1152.834845][ T5831] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1152.851078][ T5831] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1152.861659][ T5831] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1152.882008][ T5831] usb 6-1: Product: syz [ 1152.892160][ T5831] usb 6-1: Manufacturer: syz [ 1152.911533][ T5831] usb 6-1: SerialNumber: syz [ 1152.937091][ T5831] usb 6-1: config 0 descriptor?? [ 1152.953679][ T5831] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1152.973763][ T5831] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1152.984091][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1153.162661][T22993] ldusb 6-1:0.0: Write buffer overflow, 1 bytes dropped [ 1153.230920][ T5831] usb 6-1: USB disconnect, device number 31 [ 1153.231074][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1153.245876][T22993] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1153.253254][ T5831] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1153.751324][T23046] hsr0: entered promiscuous mode [ 1153.763751][T23046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5185'. [ 1153.788601][T23046] hsr_slave_0: left promiscuous mode [ 1153.806172][T23046] hsr_slave_1: left promiscuous mode [ 1153.877002][T23046] hsr0 (unregistering): left promiscuous mode [ 1153.965206][ T5831] usb 3-1: USB disconnect, device number 43 [ 1154.024083][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1154.174131][ T30] audit: type=1326 audit(1763359397.649:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.216740][ T30] audit: type=1326 audit(1763359397.659:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.239061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.294497][ T30] audit: type=1326 audit(1763359397.659:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.373328][ T30] audit: type=1326 audit(1763359397.659:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.457955][ T30] audit: type=1326 audit(1763359397.659:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.509985][ T30] audit: type=1326 audit(1763359397.659:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.562065][ T30] audit: type=1326 audit(1763359397.659:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.614355][ T30] audit: type=1326 audit(1763359397.659:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.663475][ T30] audit: type=1326 audit(1763359397.659:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.729472][ T30] audit: type=1326 audit(1763359397.659:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23053 comm="syz.1.5189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1154.814083][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1155.064064][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1155.556434][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1155.574777][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1155.584351][ T24] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 1155.592882][ T24] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1155.602862][ T24] usb 3-1: config 4 has no interface number 0 [ 1155.619301][ T24] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1155.629640][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.649045][ T24] usb 3-1: Product: syz [ 1155.658857][ T24] usb 3-1: Manufacturer: syz [ 1155.666658][ T24] usb 3-1: SerialNumber: syz [ 1155.869467][T23120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.888167][T23120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.929177][ T24] uvcvideo 3-1:4.147: Found Unit with invalid ID 0 [ 1155.938715][ T24] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1155.947093][ T24] uvcvideo 3-1:4.147: No valid video chain found. [ 1155.967332][ T24] usb 3-1: USB disconnect, device number 44 [ 1156.104056][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1157.143990][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1158.184090][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1158.824784][T23240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5274'. [ 1159.103677][T23249] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1159.223999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1159.360910][T23259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1159.429983][T23262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.438203][T23262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.445525][T23262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.684223][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1159.836061][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.851173][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1159.874067][ T5909] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1159.914377][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.952233][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1159.971620][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.010836][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.041490][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.066119][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1160.111946][ T5909] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1160.131506][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.132240][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1160.175077][ T5909] usb 3-1: config 0 descriptor?? [ 1160.233315][ T24] usb 2-1: USB disconnect, device number 24 [ 1160.264073][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1160.608655][ T5909] kovaplus 0003:1E7D:2D50.004B: unknown main item tag 0x0 [ 1160.630295][ T5909] kovaplus 0003:1E7D:2D50.004B: unknown main item tag 0x0 [ 1160.650228][ T5909] kovaplus 0003:1E7D:2D50.004B: unknown main item tag 0x0 [ 1160.660357][ T5909] kovaplus 0003:1E7D:2D50.004B: unknown main item tag 0x0 [ 1160.678088][ T5909] kovaplus 0003:1E7D:2D50.004B: unknown main item tag 0x0 [ 1160.697105][ T5909] kovaplus 0003:1E7D:2D50.004B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1160.907516][T23331] netlink: 'syz.1.5317': attribute type 1 has an invalid length. [ 1160.969649][T23331] bond1: (slave gretap1): making interface the new active one [ 1160.978223][T23331] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1160.998843][T23331] vlan2: entered allmulticast mode [ 1161.004299][T23331] bond1: entered allmulticast mode [ 1161.009533][T23331] gretap1: entered allmulticast mode [ 1161.017255][T23331] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1161.303988][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1161.489720][ T5909] kovaplus 0003:1E7D:2D50.004B: couldn't init struct kovaplus_device [ 1161.504330][ T5909] kovaplus 0003:1E7D:2D50.004B: couldn't install mouse [ 1161.517237][ T5909] kovaplus 0003:1E7D:2D50.004B: probe with driver kovaplus failed with error -71 [ 1161.544756][ T5909] usb 3-1: USB disconnect, device number 45 [ 1162.023314][ T5910] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1162.201290][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1162.218090][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.229121][ T5910] usb 2-1: config 0 descriptor?? [ 1162.246720][ T5910] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1162.276700][T23372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.295992][T23372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.308050][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5335'. [ 1162.344092][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1162.547106][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5343'. [ 1162.703422][T23395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1162.714763][T23395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1162.725509][T23395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1162.848078][T23399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5349'. [ 1163.043593][ T5910] gspca_stv06xx: I2C: Read error writing address: -71 [ 1163.120884][ T5910] usb 2-1: USB disconnect, device number 25 [ 1163.384321][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1163.859234][T23432] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5364'. [ 1163.914026][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1164.073989][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1164.104512][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1164.112747][ T24] usb 6-1: config 0 has no interface number 0 [ 1164.151794][ T24] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1164.186212][ T24] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1164.196473][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.218760][ T24] usb 6-1: Product: syz [ 1164.227952][ T24] usb 6-1: Manufacturer: syz [ 1164.232948][ T24] usb 6-1: SerialNumber: syz [ 1164.268787][ T24] usb 6-1: config 0 descriptor?? [ 1164.289631][ T24] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1164.324219][ T24] em28xx 6-1:0.132: Video interface 132 found: [ 1164.424091][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1164.688676][ T24] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 1164.800689][T23468] program syz.3.5380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1165.098178][ T24] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1165.177891][ T24] em28xx 6-1:0.132: board has no eeprom [ 1165.206770][T23480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5386'. [ 1165.375004][ T24] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1165.388889][ T24] em28xx 6-1:0.132: analog set to bulk mode. [ 1165.401508][ T5910] em28xx 6-1:0.132: Registering V4L2 extension [ 1165.463997][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1165.509655][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1165.532336][ T5909] usb 6-1: USB disconnect, device number 32 [ 1165.724525][ T5910] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1165.737251][ T5910] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1165.756713][ T5909] em28xx 6-1:0.132: Disconnecting em28xx [ 1165.904698][T23502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.930808][T23502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.964571][ T5910] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 1165.972250][ T5910] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1166.012824][ T5910] em28xx 6-1:0.132: No AC97 audio processor [ 1166.043190][ T5910] usb 6-1: Decoder not found [ 1166.049216][ T5910] em28xx 6-1:0.132: failed to create media graph [ 1166.057573][ T5910] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1166.069839][ T5910] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1166.087206][ T5909] em28xx 6-1:0.132: Closing input extension [ 1166.149697][ T5909] em28xx 6-1:0.132: Freeing device [ 1166.504008][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1167.254948][ T5910] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1167.544006][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1167.647087][ T5910] usb 2-1: config 2 has an invalid interface number: 117 but max is 0 [ 1167.662249][ T5910] usb 2-1: config 2 has no interface number 0 [ 1167.684299][ T5910] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=bb.f5 [ 1167.708745][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.739271][ T5910] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1167.764096][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 1167.769875][ T5910] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1167.804992][ T5910] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-19) [ 1167.959357][ T5909] usb 2-1: USB disconnect, device number 26 [ 1168.440401][T23589] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5430'. [ 1168.455085][T23589] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5430'. [ 1168.485159][T23589] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5430'. [ 1168.584000][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1168.790592][T23603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1169.624026][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1169.783007][T23648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.783386][T23648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.887982][T23655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5460'. [ 1170.094293][ T5910] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1170.244046][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 1170.251390][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.265931][ T5910] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1170.276221][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.295879][ T5910] usb 4-1: config 0 descriptor?? [ 1170.664000][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1170.723372][ T5910] creative-sb0540 0003:041E:3100.004C: unexpected long global item [ 1170.748668][ T5910] creative-sb0540 0003:041E:3100.004C: parse failed [ 1170.757457][T23696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5480'. [ 1170.781857][ T5910] creative-sb0540 0003:041E:3100.004C: probe with driver creative-sb0540 failed with error -22 [ 1170.922746][ T5910] usb 4-1: USB disconnect, device number 35 [ 1171.411611][T23707] input: syz0 as /devices/virtual/input/input74 [ 1171.704058][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1172.744170][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1173.336376][T23778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5517'. [ 1173.483301][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5520'. [ 1173.671758][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5525'. [ 1173.784010][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1173.838218][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1173.838237][ T30] audit: type=1326 audit(1763359417.319:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23801 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1173.938917][ T30] audit: type=1326 audit(1763359417.319:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23801 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1173.973118][ T30] audit: type=1326 audit(1763359417.319:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23801 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1174.029615][ T30] audit: type=1326 audit(1763359417.319:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23801 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1174.091741][ T30] audit: type=1326 audit(1763359417.319:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23801 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1174.823997][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1175.864092][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1175.931520][T23887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5566'. [ 1176.180090][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5569'. [ 1176.813340][T23922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1176.903993][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1177.240703][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.249702][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.474056][ T5910] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1177.624415][ T5909] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1177.636520][ T5910] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1177.649528][ T5910] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1177.664898][ T5910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1177.674787][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1177.682919][ T5910] usb 2-1: SerialNumber: syz [ 1177.703317][ T5910] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1177.805464][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.816492][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.828178][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 1177.840185][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.855115][ T5909] usb 3-1: config 0 descriptor?? [ 1177.908337][ T5910] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1177.944124][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1177.957311][ T5910] usb 2-1: USB disconnect, device number 27 [ 1178.292673][ T5909] logitech 0003:046D:C287.004D: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 1178.321887][ T5909] logitech 0003:046D:C287.004D: no inputs found [ 1178.401599][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5599'. [ 1178.486268][ T5909] usb 3-1: USB disconnect, device number 46 [ 1178.739122][T23987] netlink: 'syz.5.5606': attribute type 11 has an invalid length. [ 1178.984207][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1178.986061][T24003] netlink: 'syz.3.5613': attribute type 12 has an invalid length. [ 1179.010955][T24003] netlink: 'syz.3.5613': attribute type 29 has an invalid length. [ 1179.018937][T24003] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5613'. [ 1179.033395][T24003] netlink: 'syz.3.5613': attribute type 12 has an invalid length. [ 1179.042125][T24003] netlink: 'syz.3.5613': attribute type 29 has an invalid length. [ 1179.081585][T24003] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5613'. [ 1179.180360][T24006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5614'. [ 1180.023999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1180.085308][T24054] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 1180.753520][T24085] GUP no longer grows the stack in syz.1.5651 (24085): 80004000-8000a000 (80001000) [ 1180.773701][T24085] CPU: 1 UID: 0 PID: 24085 Comm: syz.1.5651 Not tainted syzkaller #0 PREEMPT(full) [ 1180.773727][T24085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1180.773740][T24085] Call Trace: [ 1180.773748][T24085] [ 1180.773757][T24085] dump_stack_lvl+0x189/0x250 [ 1180.773790][T24085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.773814][T24085] ? __pfx__printk+0x10/0x10 [ 1180.773830][T24085] ? find_vma+0xe7/0x160 [ 1180.773866][T24085] __get_user_pages+0x2470/0x2a00 [ 1180.773894][T24085] ? __pfx_aa_may_ptrace+0x10/0x10 [ 1180.773921][T24085] ? hook_ptrace_access_check+0xff/0x6c0 [ 1180.773957][T24085] __gup_longterm_locked+0xde4/0x1660 [ 1180.773996][T24085] ? __lock_acquire+0xab9/0xd20 [ 1180.774029][T24085] pin_user_pages_remote+0xd4/0x120 [ 1180.774056][T24085] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1180.774085][T24085] ? down_read+0x1ad/0x2e0 [ 1180.774106][T24085] process_vm_rw+0x593/0xaf0 [ 1180.774142][T24085] ? __pfx_process_vm_rw+0x10/0x10 [ 1180.774162][T24085] ? futex_wait+0x285/0x360 [ 1180.774234][T24085] ? rcu_is_watching+0x15/0xb0 [ 1180.774260][T24085] __ia32_sys_process_vm_writev+0xdf/0x100 [ 1180.774287][T24085] __do_fast_syscall_32+0xb6/0x2b0 [ 1180.774305][T24085] ? lockdep_hardirqs_on+0x9c/0x150 [ 1180.774333][T24085] do_fast_syscall_32+0x34/0x80 [ 1180.774350][T24085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1180.774371][T24085] RIP: 0023:0xf700d539 [ 1180.774387][T24085] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1180.774404][T24085] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 000000000000015c [ 1180.774423][T24085] RAX: ffffffffffffffda RBX: 0000000000000119 RCX: 0000000080001c80 [ 1180.774436][T24085] RDX: 0000000000000001 RSI: 0000000080001d80 RDI: 0000000000000001 [ 1180.774448][T24085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1180.774459][T24085] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1180.774469][T24085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1180.774499][T24085] [ 1181.027446][T24091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5655'. [ 1181.064043][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1181.098554][T24096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1181.435643][ T30] audit: type=1400 audit(1763359424.899:3030): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24104 comm="syz.4.5660" [ 1181.573462][T24096] hsr_slave_0 (unregistering): left promiscuous mode [ 1181.583352][T24110] netlink: 'syz.5.5662': attribute type 4 has an invalid length. [ 1181.625054][T24110] netlink: 'syz.5.5662': attribute type 4 has an invalid length. [ 1182.104010][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1182.595302][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5678'. [ 1182.711170][T24155] sctp: [Deprecated]: syz.2.5681 (pid 24155) Use of int in max_burst socket option deprecated. [ 1182.711170][T24155] Use struct sctp_assoc_value instead [ 1183.144001][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1183.935090][T24202] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5705'. [ 1183.953350][T24202] xt_time: unknown flags 0xf4 [ 1184.129692][T24212] netlink: 'syz.5.5710': attribute type 32 has an invalid length. [ 1184.138674][T24212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5710'. [ 1184.148303][T24212] netlink: 'syz.5.5710': attribute type 32 has an invalid length. [ 1184.183996][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1184.334122][ T5909] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1184.506709][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 1184.516777][ T5909] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1184.529668][ T5909] usb 2-1: config 0 has no interface number 0 [ 1184.546467][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.567510][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.578412][ T5909] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1184.587755][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.600697][ T5909] usb 2-1: config 0 descriptor?? [ 1184.772635][T24241] ptrace attach of "./syz-executor exec"[19000] was attempted by "./syz-executor exec"[24241] [ 1184.830058][T24243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5725'. [ 1185.223989][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1185.251030][ T5909] uclogic 0003:28BD:0094.004E: pen parameters not found [ 1185.264354][ T5909] uclogic 0003:28BD:0094.004E: interface is invalid, ignoring [ 1185.458164][ T5888] usb 2-1: USB disconnect, device number 28 [ 1185.554659][ T5909] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1185.716299][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.741007][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.752143][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1185.766995][ T5909] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1185.777518][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.805192][ T5909] usb 6-1: config 0 descriptor?? [ 1186.164329][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'. [ 1186.254693][ T5909] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1186.274008][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1186.499634][ T5909] usb 6-1: USB disconnect, device number 33 [ 1186.510403][T24317] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1186.524296][ T5888] IPVS: starting estimator thread 0... [ 1186.634834][T24323] IPVS: using max 31 ests per chain, 74400 per kthread [ 1187.202854][T24355] veth0_vlan: entered allmulticast mode [ 1187.225551][T24355] ªªªªª»: renamed from veth0_vlan [ 1187.304005][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1187.526716][T24364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5783'. [ 1188.009553][T24383] syzkaller1: entered promiscuous mode [ 1188.024774][T24383] syzkaller1: entered allmulticast mode [ 1188.344001][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1188.369432][T24394] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1188.574192][ T5910] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1188.784512][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.814917][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.844635][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1188.873246][ T5910] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1188.893468][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.936270][ T5910] usb 6-1: config 0 descriptor?? [ 1189.224276][T24394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.240339][T24394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.364962][T24394] bond0 (unregistering): Released all slaves [ 1189.380486][ T5910] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1189.393072][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1189.565655][ T5910] usb 6-1: USB disconnect, device number 34 [ 1189.585658][T24414] fido_id[24414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1190.056708][T24428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5810'. [ 1190.073329][T24428] ------------[ cut here ]------------ [ 1190.080301][T24428] WARNING: CPU: 0 PID: 24428 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 1190.091371][T24428] Modules linked in: [ 1190.096899][T24428] CPU: 0 UID: 0 PID: 24428 Comm: syz.3.5810 Not tainted syzkaller #0 PREEMPT(full) [ 1190.107339][T24428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1190.118961][T24428] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 1190.125867][T24428] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 14 8c 00 cc e8 82 c3 02 f7 90 0f 0b 90 eb e1 e8 77 c3 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 1190.146365][T24428] RSP: 0018:ffffc9000e5f6f40 EFLAGS: 00010287 [ 1190.153457][T24428] RAX: ffffffff8abd4069 RBX: ffff88805bfd8000 RCX: 0000000000080000 [ 1190.162780][T24428] RDX: ffffc900170be000 RSI: 000000000000316b RDI: 000000000000316c [ 1190.171284][T24428] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd3b83 [ 1190.179666][T24428] R10: dffffc0000000000 R11: ffffed100b7fb031 R12: 1ffff1100b7fb00a [ 1190.187862][T24428] R13: ffff88805a698e80 R14: 0000000000000001 R15: ffffffff8abd3b83 [ 1190.196028][T24428] FS: 0000000000000000(0000) GS:ffff88812613b000(0063) knlGS:00000000f5486b40 [ 1190.205171][T24428] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1190.212019][T24428] CR2: 00000000f53dcda4 CR3: 0000000050594000 CR4: 00000000003526f0 [ 1190.220079][T24428] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1190.228153][T24428] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1190.236493][T24428] Call Trace: [ 1190.240181][T24428] [ 1190.243143][T24428] rate_control_rate_init_all_links+0x109/0x1a0 [ 1190.249719][T24428] sta_apply_auth_flags+0x1c2/0x400 [ 1190.254999][T24428] sta_apply_parameters+0xe27/0x1570 [ 1190.260324][T24428] ieee80211_add_station+0x424/0x6a0 [ 1190.265954][T24428] rdev_add_station+0x108/0x290 [ 1190.270844][T24428] nl80211_new_station+0x1755/0x1b70 [ 1190.276242][T24428] ? __pfx_nl80211_new_station+0x10/0x10 [ 1190.281891][T24428] ? netdev_run_todo+0xe1d/0xea0 [ 1190.287071][T24428] ? nl80211_pre_doit+0x4f1/0x930 [ 1190.292136][T24428] genl_family_rcv_msg_doit+0x215/0x300 [ 1190.297960][T24428] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1190.304244][T24428] ? bpf_lsm_capable+0x9/0x20 [ 1190.308948][T24428] ? security_capable+0x7e/0x2e0 [ 1190.314013][T24428] genl_rcv_msg+0x60e/0x790 [ 1190.318551][T24428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1190.323600][T24428] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1190.329311][T24428] ? __pfx_nl80211_new_station+0x10/0x10 [ 1190.335062][T24428] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1190.340925][T24428] ? __asan_memcpy+0x40/0x70 [ 1190.346056][T24428] ? __pfx_ref_tracker_free+0x10/0x10 [ 1190.351465][T24428] netlink_rcv_skb+0x208/0x470 [ 1190.356535][T24428] ? __lock_acquire+0xab9/0xd20 [ 1190.361424][T24428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1190.366566][T24428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1190.371896][T24428] ? down_read+0x1ad/0x2e0 [ 1190.376380][T24428] genl_rcv+0x28/0x40 [ 1190.380380][T24428] netlink_unicast+0x82f/0x9e0 [ 1190.385423][T24428] ? __pfx_netlink_unicast+0x10/0x10 [ 1190.390738][T24428] ? netlink_sendmsg+0x642/0xb30 [ 1190.395717][T24428] ? skb_put+0x11b/0x210 [ 1190.399980][T24428] netlink_sendmsg+0x805/0xb30 [ 1190.404842][T24428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.410138][T24428] ? __import_iovec+0x5d4/0x7f0 [ 1190.415232][T24428] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1190.420194][T24428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1190.425847][T24428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.432113][T24428] __sock_sendmsg+0x21c/0x270 [ 1190.433998][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1190.436885][T24428] ____sys_sendmsg+0x505/0x830 [ 1190.449282][T24428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1190.454698][T24428] ? __pfx_futex_wake_mark+0x10/0x10 [ 1190.460006][T24428] ___sys_sendmsg+0x21f/0x2a0 [ 1190.464783][T24428] ? __pfx____sys_sendmsg+0x10/0x10 [ 1190.470038][T24428] ? __fget_files+0x2a/0x420 [ 1190.474893][T24428] ? __fget_files+0x3a0/0x420 [ 1190.479585][T24428] __sys_sendmsg+0x164/0x220 [ 1190.484259][T24428] ? __pfx___sys_sendmsg+0x10/0x10 [ 1190.489384][T24428] ? rcu_is_watching+0x15/0xb0 [ 1190.494203][T24428] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1190.500896][T24428] ? lockdep_hardirqs_on+0x9c/0x150 [ 1190.506421][T24428] __do_fast_syscall_32+0xb6/0x2b0 [ 1190.511557][T24428] ? lockdep_hardirqs_on+0x9c/0x150 [ 1190.516808][T24428] do_fast_syscall_32+0x34/0x80 [ 1190.521668][T24428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1190.528076][T24428] RIP: 0023:0xf7f97539 [ 1190.532156][T24428] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1190.552299][T24428] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1190.561000][T24428] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080001080 [ 1190.569070][T24428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1190.577292][T24428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1190.585407][T24428] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1190.593395][T24428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1190.601492][T24428] [ 1190.604847][T24428] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1190.612139][T24428] CPU: 0 UID: 0 PID: 24428 Comm: syz.3.5810 Not tainted syzkaller #0 PREEMPT(full) [ 1190.621585][T24428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1190.631645][T24428] Call Trace: [ 1190.634928][T24428] [ 1190.637863][T24428] dump_stack_lvl+0x99/0x250 [ 1190.642466][T24428] ? __asan_memcpy+0x40/0x70 [ 1190.647053][T24428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1190.652253][T24428] ? __pfx__printk+0x10/0x10 [ 1190.656841][T24428] vpanic+0x237/0x6d0 [ 1190.660829][T24428] ? __pfx_vpanic+0x10/0x10 [ 1190.665348][T24428] panic+0xb9/0xc0 [ 1190.669078][T24428] ? __pfx_panic+0x10/0x10 [ 1190.673512][T24428] __warn+0x31b/0x4b0 [ 1190.677486][T24428] ? rate_control_rate_init+0x64a/0x6e0 [ 1190.683028][T24428] ? rate_control_rate_init+0x64a/0x6e0 [ 1190.688570][T24428] report_bug+0x2be/0x4f0 [ 1190.692896][T24428] ? rate_control_rate_init+0x64a/0x6e0 [ 1190.698451][T24428] ? rate_control_rate_init+0x64a/0x6e0 [ 1190.703984][T24428] ? rate_control_rate_init+0x64c/0x6e0 [ 1190.709514][T24428] handle_bug+0x84/0x160 [ 1190.713762][T24428] exc_invalid_op+0x1a/0x50 [ 1190.718263][T24428] asm_exc_invalid_op+0x1a/0x20 [ 1190.723110][T24428] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 1190.729256][T24428] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 14 8c 00 cc e8 82 c3 02 f7 90 0f 0b 90 eb e1 e8 77 c3 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 1190.748948][T24428] RSP: 0018:ffffc9000e5f6f40 EFLAGS: 00010287 [ 1190.755019][T24428] RAX: ffffffff8abd4069 RBX: ffff88805bfd8000 RCX: 0000000000080000 [ 1190.762982][T24428] RDX: ffffc900170be000 RSI: 000000000000316b RDI: 000000000000316c [ 1190.770953][T24428] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd3b83 [ 1190.778920][T24428] R10: dffffc0000000000 R11: ffffed100b7fb031 R12: 1ffff1100b7fb00a [ 1190.786882][T24428] R13: ffff88805a698e80 R14: 0000000000000001 R15: ffffffff8abd3b83 [ 1190.794913][T24428] ? rate_control_rate_init+0x163/0x6e0 [ 1190.800456][T24428] ? rate_control_rate_init+0x163/0x6e0 [ 1190.805988][T24428] ? rate_control_rate_init+0x649/0x6e0 [ 1190.811544][T24428] rate_control_rate_init_all_links+0x109/0x1a0 [ 1190.817800][T24428] sta_apply_auth_flags+0x1c2/0x400 [ 1190.822995][T24428] sta_apply_parameters+0xe27/0x1570 [ 1190.828281][T24428] ieee80211_add_station+0x424/0x6a0 [ 1190.833587][T24428] rdev_add_station+0x108/0x290 [ 1190.838459][T24428] nl80211_new_station+0x1755/0x1b70 [ 1190.843757][T24428] ? __pfx_nl80211_new_station+0x10/0x10 [ 1190.849909][T24428] ? netdev_run_todo+0xe1d/0xea0 [ 1190.854865][T24428] ? nl80211_pre_doit+0x4f1/0x930 [ 1190.859909][T24428] genl_family_rcv_msg_doit+0x215/0x300 [ 1190.865456][T24428] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1190.871526][T24428] ? bpf_lsm_capable+0x9/0x20 [ 1190.876194][T24428] ? security_capable+0x7e/0x2e0 [ 1190.881127][T24428] genl_rcv_msg+0x60e/0x790 [ 1190.885641][T24428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1190.890682][T24428] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1190.896054][T24428] ? __pfx_nl80211_new_station+0x10/0x10 [ 1190.901676][T24428] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1190.907123][T24428] ? __asan_memcpy+0x40/0x70 [ 1190.911703][T24428] ? __pfx_ref_tracker_free+0x10/0x10 [ 1190.917073][T24428] netlink_rcv_skb+0x208/0x470 [ 1190.921831][T24428] ? __lock_acquire+0xab9/0xd20 [ 1190.926668][T24428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1190.931703][T24428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1190.937011][T24428] ? down_read+0x1ad/0x2e0 [ 1190.941433][T24428] genl_rcv+0x28/0x40 [ 1190.945407][T24428] netlink_unicast+0x82f/0x9e0 [ 1190.950171][T24428] ? __pfx_netlink_unicast+0x10/0x10 [ 1190.955470][T24428] ? netlink_sendmsg+0x642/0xb30 [ 1190.960395][T24428] ? skb_put+0x11b/0x210 [ 1190.964630][T24428] netlink_sendmsg+0x805/0xb30 [ 1190.969390][T24428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.974664][T24428] ? __import_iovec+0x5d4/0x7f0 [ 1190.979507][T24428] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1190.984433][T24428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1190.989701][T24428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.994972][T24428] __sock_sendmsg+0x21c/0x270 [ 1190.999642][T24428] ____sys_sendmsg+0x505/0x830 [ 1191.004400][T24428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1191.009673][T24428] ? __pfx_futex_wake_mark+0x10/0x10 [ 1191.014950][T24428] ___sys_sendmsg+0x21f/0x2a0 [ 1191.019620][T24428] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.024835][T24428] ? __fget_files+0x2a/0x420 [ 1191.029412][T24428] ? __fget_files+0x3a0/0x420 [ 1191.034082][T24428] __sys_sendmsg+0x164/0x220 [ 1191.038663][T24428] ? __pfx___sys_sendmsg+0x10/0x10 [ 1191.043769][T24428] ? rcu_is_watching+0x15/0xb0 [ 1191.048526][T24428] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1191.055194][T24428] ? lockdep_hardirqs_on+0x9c/0x150 [ 1191.060387][T24428] __do_fast_syscall_32+0xb6/0x2b0 [ 1191.065487][T24428] ? lockdep_hardirqs_on+0x9c/0x150 [ 1191.070686][T24428] do_fast_syscall_32+0x34/0x80 [ 1191.075526][T24428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1191.081844][T24428] RIP: 0023:0xf7f97539 [ 1191.085900][T24428] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1191.105493][T24428] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1191.113894][T24428] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080001080 [ 1191.121857][T24428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1191.129814][T24428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1191.137769][T24428] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1191.145727][T24428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1191.153698][T24428] [ 1191.157152][T24428] Kernel Offset: disabled [ 1191.161460][T24428] Rebooting in 86400 seconds..